This work deals with the identification of a remote computer by monitoring TCP timestamps of the tracked device. It is possible to determine computer's clock skew from these timestamps as the clock skew is unique for every device. We are able to differentiate devices even though they have changed location, network address or connection type. Passive data capturing ensures that the identification process is invisible to the fingerprinted computer. It is necessary that the network communication of fingerprinted computer is visible to the observing device. We are able to utilise only TCP traffic with timestamps enabled.
| Identifer | oai:union.ndltd.org:nusl.cz/oai:invenio.nusl.cz:236480 |
| Date | January 2012 |
| Creators | Jirásek, Jakub |
| Contributors | Grégr, Matěj, Polčák, Libor |
| Publisher | Vysoké učení technické v Brně. Fakulta informačních technologií |
| Source Sets | Czech ETDs |
| Language | Czech |
| Detected Language | English |
| Type | info:eu-repo/semantics/masterThesis |
| Rights | info:eu-repo/semantics/restrictedAccess |
Page generated in 0.0017 seconds