{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T10:23:51Z","timestamp":1781087031261,"version":"3.54.1"},"publisher-location":"New York, NY","reference-count":43,"publisher":"Springer New York","isbn-type":[{"value":"9781493965991","type":"print"},{"value":"9781493966011","type":"electronic"}],"license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1007\/978-1-4939-6601-1_7","type":"book-chapter","created":{"date-parts":[[2016,10,25]],"date-time":"2016-10-25T10:40:41Z","timestamp":1477392041000},"page":"115-139","source":"Crossref","is-referenced-by-count":1,"title":["Operating System Fingerprinting"],"prefix":"10.1007","author":[{"given":"Jonathan","family":"Gurary","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ye","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Riccardo","family":"Bettati","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yong","family":"Guan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2016,10,26]]},"reference":[{"key":"7_CR1","doi-asserted-by":"crossref","unstructured":"Anagnostakis, K.G., Greenwald, M., Ryger, R.S.: Cing: measuring network-internal delays using only existing infrastructure. In: INFOCOM 2003. Twenty-Second Annual Joint Conference of the IEEE Computer and Communications. IEEE Societies, vol.\u00a03, pp. 2112\u20132121. IEEE (2003)","DOI":"10.1109\/INFCOM.2003.1209232"},{"key":"7_CR2","doi-asserted-by":"crossref","unstructured":"Arackaparambil, C., Bratus, S., Shubina, A., Kotz, D.: On the reliability of wireless fingerprinting using clock skews. In: Proceedings of the Third ACM Conference on Wireless Network Security, pp. 169\u2013174. ACM (2010)","DOI":"10.1145\/1741866.1741894"},{"key":"7_CR3","unstructured":"Arkin, O.: Icmp usage in scanning. Black Hat Briefings (2000)"},{"key":"7_CR4","unstructured":"Armitage, G.J.: Inferring the extent of network address port translation at public\/private internet boundaries. In: Centre for Advanced Internet Architectures, Swinburne University of Technology, Melbourne, Australia, Tech. Rep. A 20712 (2002)"},{"issue":"3","key":"7_CR5","doi-asserted-by":"crossref","first-page":"197","DOI":"10.1007\/s11416-008-0107-z","volume":"6","author":"P Auffret","year":"2010","unstructured":"Auffret, P.: Sinfp, unification of active and passive operating system fingerprinting. J. Comput. Virol. 6(3), 197\u2013205 (2010)","journal-title":"J. Comput. Virol."},{"key":"7_CR6","doi-asserted-by":"crossref","unstructured":"Beverly, R.: A robust classifier for passive tcp\/ip fingerprinting. In: Passive and Active Network Measurement, pp. 158\u2013167. Springer (2004)","DOI":"10.1007\/978-3-540-24668-8_16"},{"key":"7_CR7","doi-asserted-by":"crossref","unstructured":"Biryukov, A., Pustogarov, I., Weinmann, R.P.: Trawling for tor hidden services: detection, measurement, deanonymization. In: Proceedings of IEEE Symposium on Security and Privacy (2013)","DOI":"10.1109\/SP.2013.15"},{"key":"7_CR8","doi-asserted-by":"publisher","unstructured":"Bissias, G., Liberatore, M., Jensen, D., Levine, B.: Privacy vulnerabilities in encrypted http streams. In: Danezis, G., Martin, D. (eds.) Privacy Enhancing Technologies, Lecture Notes in Computer Science, vol. 3856, pp. 1\u201311. Springer, Berlin, Heidelberg (2006). doi: 10.1007\/11767831_1","DOI":"10.1007\/11767831_1"},{"key":"7_CR9","doi-asserted-by":"crossref","unstructured":"Cai, X., Zhang, X., Joshi, B., Johnson, R.: Touching from a distance: website fingerprinting attacks and defenses. In: Proceedings of the 19th ACM Conference on Computer and Communications Security (CCS 2012) (2012)","DOI":"10.1145\/2382196.2382260"},{"key":"7_CR10","unstructured":"Charts, M.: Wifi mobile phone traffic grows. http:\/\/www.marketingcharts.com\/wp\/direct\/wifi-mobile-phone-traffic-grows-19604\/ (2011)"},{"key":"7_CR11","doi-asserted-by":"publisher","unstructured":"Chen, X., Jin, R., Suh, K., Wang, B., Wei, W.: Network performance of smart mobile handhelds in a university campus wifi network. In: Proceedings of the 2012 ACM Conference on Internet Measurement Conference, pp. 315\u2013328. ACM, New York, NY, USA (2012). doi: 10.1145\/2398776.2398809","DOI":"10.1145\/2398776.2398809"},{"key":"7_CR12","unstructured":"Durumeric, Z., Wustrow, E., Halderman, J.A.: Zmap. http:\/\/zmap.io\/"},{"key":"7_CR13","doi-asserted-by":"crossref","unstructured":"Engebretson, P.: The basics of hacking and penetration testing: ethical hacking and penetration testing made easy. Syngress the basics (2011)","DOI":"10.1016\/B978-1-59749-655-1.00001-5"},{"key":"7_CR14","unstructured":"Gayle, D.: This is a secure line: the groundbreaking encryption app that will scrample your calls and messages. http:\/\/www.dailymail.co.uk\/sciencetech\/article-2274597\/How-foil-eavesdroppers-The-smartphone-encryption-app-promises-make-communications-private-again.html (2013)"},{"key":"7_CR15","doi-asserted-by":"crossref","unstructured":"Gong, X., Borisov, N., Kiyavash, N., Schear, N.: Website detection using remote traffic analysis. In: Proceedings of the 12th Privacy Enhancing Technologies Symposium (PETS 2012). Springer (2012)","DOI":"10.1007\/978-3-642-31680-7_4"},{"key":"7_CR16","unstructured":"Greenemeier, L.: Cloud warriors: U.S. army intelligence to arm field ops with hardened network and smartphones. http:\/\/www.scientificamerican.com\/article.cfm?id=us-army-intelligence-cloud-smartphone (2013)"},{"key":"7_CR17","unstructured":"Grimes, S.: App to provide military-level encryption for smartphones. http:\/\/www.ksl.com\/?nid=1014&sid=22513938 (2012)"},{"key":"7_CR18","doi-asserted-by":"crossref","unstructured":"Herrmann, D., Wendolsky, R., Federrath, H.: Website fingerprinting: attacking popular privacy enhancing technologies with the multinomial na\u00efve-bayes classifier. In: Proceedings of the 2009 ACM Workshop on Cloud Computing Security, pp. 31\u201342 (2009). http:\/\/doi.acm.org\/10.1145\/1655008.1655013","DOI":"10.1145\/1655008.1655013"},{"key":"7_CR19","doi-asserted-by":"publisher","unstructured":"Huang, J., Xu, Q., Tiwana, B., Mao, Z.M., Zhang, M., Bahl, P.: Anatomizing application performance differences on smartphones. In: Proceedings of the 8th International Conference on Mobile Systems, Applications, and Services, MobiSys \u201910, pp. 165\u2013178 (2010). doi: 10.1145\/1814433.1814452","DOI":"10.1145\/1814433.1814452"},{"key":"7_CR20","unstructured":"InfoBlox: Infoblox dhcp fingerprinting. https:\/\/www.infoblox.com\/sites\/infobloxcom\/files\/resources\/infoblox-note-dhcp-fingerprinting.pdf\/"},{"key":"7_CR21","unstructured":"Johnson, K.: Windows 8 forensics: journey through the impact of the recovery artifacts in windows 8. MS thesis, Lowa State University (2013)"},{"issue":"2","key":"7_CR22","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1109\/TDSC.2005.26","volume":"2","author":"T Kohno","year":"2005","unstructured":"Kohno, T., Broido, A., Claffy, K.C.: Remote physical device fingerprinting. IEEE Trans. Dependable Secur. Comput. 2(2), 93\u2013108 (2005)","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"7_CR23","unstructured":"Kollmann, E.: Chatter on the wire: a look at extensive network traffic and what it can mean to network security. http:\/\/chatteronthewire.org\/download\/OS%20Fingerprint.pdf (2005)"},{"key":"7_CR24","unstructured":"Kramer, J.: Droidspotter: a forensic tool for android location data collection and analysis. MS thesis, Lowa State University (2013)"},{"key":"7_CR25","doi-asserted-by":"crossref","unstructured":"Liberatore, M., Levine, B.N.: Inferring the source of encrypted HTTP connections. In: Proceedings of the 13th ACM Conference on Computer and Communications Security, pp. 255\u2013263 (2006)","DOI":"10.1145\/1180405.1180437"},{"key":"7_CR26","doi-asserted-by":"crossref","unstructured":"Murdoch, S.J.: Hot or not: revealing hidden services by their clock skew. In: Proceedings of CCS 2006 (2006)","DOI":"10.1145\/1180405.1180410"},{"key":"7_CR27","unstructured":"Netresec.com: Passive os fingerprinting. http:\/\/www.netresec.com\/?page=Blog&month=2011-11&post=Passive-OS-Fingerprinting (2011)"},{"key":"7_CR28","unstructured":"Nmap.org: Nmap network scanning. http:\/\/nmap.org\/book\/osdetect.html"},{"key":"7_CR29","volume-title":"Signals & Systems","author":"AV Oppenheim","year":"1996","unstructured":"Oppenheim, A.V., Willsky, A.S., Nawab, S.H.: Signals & Systems, 2nd edn. Prentice-Hall Inc., Upper Saddle River, NJ, USA (1996)","edition":"2"},{"key":"7_CR30","doi-asserted-by":"crossref","unstructured":"\u00d8verlier, L., Syverson, P.: Locating hidden servers. In: Proceedings of the 2006 IEEE Symposium on Security and Privacy. IEEE CS (2006)","DOI":"10.1109\/SP.2006.24"},{"key":"7_CR31","doi-asserted-by":"crossref","unstructured":"Panchenko, A., Niessen, L., Zinnen, A., Engel, T.: Website fingerprinting in onion routing based anonymization networks. In: Proceedings of the Workshop on Privacy in the Electronic Society (WPES 2011). ACM (2011)","DOI":"10.1145\/2046556.2046570"},{"key":"7_CR32","unstructured":"Project, H.: Know your enemy: passive fingerprinting. http:\/\/old.honeynet.org\/papers\/finger\/ (2002)"},{"key":"7_CR33","doi-asserted-by":"publisher","unstructured":"Ruffing, N., Zhu, Y., Libertini, R., Guan, Y., Bettati, R.: Smartphone reconnaissance: operating system identification. In: 2016 13th IEEE Annual Consumer Communications Networking Conference (CCNC), pp. 1086\u20131091 (2016). doi: 10.1109\/CCNC.2016.7444941","DOI":"10.1109\/CCNC.2016.7444941"},{"key":"7_CR34","doi-asserted-by":"crossref","unstructured":"Sanders, C.: Practical Packet Analysis: Using Wireshark to Solve Real-World Network Problems. No Starch Press (2011)","DOI":"10.1016\/S1353-4858(11)70082-4"},{"key":"7_CR35","unstructured":"Smart, M., Malan, G.R., Jahanian, F.: Defeating tcp\/ip stack fingerprinting. In: Proceedings of the 9th Conference on USENIX Security Symposium, SSYM\u201900, vol. 9, pp. 17\u201317. USENIX Association, Berkeley, CA, USA (2000). http:\/\/dl.acm.org\/citation.cfm?id=1251306.1251323"},{"key":"7_CR36","doi-asserted-by":"crossref","unstructured":"Taleck, G.: Ambiguity resolution via passive os fingerprinting. In: Recent Advances in Intrusion Detection, pp. 192\u2013206. Springer (2003)","DOI":"10.1007\/978-3-540-45248-5_11"},{"key":"7_CR37","doi-asserted-by":"publisher","unstructured":"Tzagkarakis, G., Papadopouli, M., Tsakalides, P.: Singular spectrum analysis of traffic workload in a large-scale wireless lan. In: Proceedings of the 10th ACM Symposium on Modeling, Analysis, and Simulation of Wireless and Mobile Systems, MSWiM \u201907, pp. 99\u2013108. ACM, New York, NY, USA (2007). doi: 10.1145\/1298126.1298146","DOI":"10.1145\/1298126.1298146"},{"issue":"3","key":"7_CR38","doi-asserted-by":"publisher","first-page":"434","DOI":"10.1109\/TDSC.2010.35","volume":"8","author":"X Wang","year":"2011","unstructured":"Wang, X., Reeves, D.: Robust correlation of encrypted attack traffic through stepping stones by flow watermarking. IEEE Trans. Dependable Secur. Comput. 8(3), 434\u2013449 (2011). doi: 10.1109\/TDSC.2010.35","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"7_CR39","unstructured":"Wood, P.: Disco: the passive ip discovery tool. http:\/\/www.altmode.com\/disco\/"},{"key":"7_CR40","unstructured":"Wright, C.V., Monrose, F., Masson, G.M.: On inferring application protocol behaviors in encrypted network traffic. J. Mach. Learn. Res. 7, 2745\u20132769 (2006). http:\/\/dl.acm.org\/citation.cfm?id=1248547.1248647"},{"key":"7_CR41","unstructured":"Zander, S., Murdoch, S.J.: An improved clock-skew measurement technique for revealing hidden services. In: Proceedings of the 17th USENIX Security Symposium (2008)"},{"key":"7_CR42","doi-asserted-by":"publisher","unstructured":"Zhang, F., He, W., Liu, X., Bridges, P.G.: Inferring users\u2019 online activities through traffic analysis. In: Proceedings of the Fourth ACM Conference on Wireless Network Security, WiSec \u201911, pp. 59\u201370. ACM, New York, NY, USA (2011). doi: 10.1145\/1998412.1998425","DOI":"10.1145\/1998412.1998425"},{"key":"7_CR43","doi-asserted-by":"publisher","unstructured":"Zhu, Y., Lu, Y., Vikram, A.: On privacy of encrypted speech communications. IEEE Trans. Dependable Secur. Comput. 9(4), 470\u2013481 (2012). doi: 10.1109\/TDSC.2011.56","DOI":"10.1109\/TDSC.2011.56"}],"container-title":["Digital Fingerprinting"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-1-4939-6601-1_7","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,15]],"date-time":"2019-09-15T00:39:54Z","timestamp":1568507994000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-1-4939-6601-1_7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016]]},"ISBN":["9781493965991","9781493966011"],"references-count":43,"URL":"https:\/\/doi.org\/10.1007\/978-1-4939-6601-1_7","relation":{},"subject":[],"published":{"date-parts":[[2016]]}}}