{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,26]],"date-time":"2026-08-26T23:02:59Z","timestamp":1787785379210,"version":"build-2784847793"},"publisher-location":"Cham","reference-count":34,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783319584683","type":"print"},{"value":"9783319584690","type":"electronic"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1007\/978-3-319-58469-0_16","type":"book-chapter","created":{"date-parts":[[2017,5,3]],"date-time":"2017-05-03T11:34:53Z","timestamp":1493811293000},"page":"233-247","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":18,"title":["Towards Automated Classification of Firmware Images and Identification of Embedded Devices"],"prefix":"10.1007","author":[{"given":"Andrei","family":"Costin","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Apostolis","family":"Zarras","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Aur\u00e9lien","family":"Francillon","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2017,5,4]]},"reference":[{"key":"16_CR1","unstructured":"BlindElephant Web-App Fingerprint. http:\/\/blindelephant.sourceforge.net"},{"key":"16_CR2","unstructured":"WhatWeb. http:\/\/morningstarsecurity.com\/research\/whatweb"},{"issue":"3","key":"16_CR3","first-page":"1","volume":"2","author":"P Alvarez","year":"2004","unstructured":"Alvarez, P.: Using Extended File Information (EXIF) file headers in digital evidence analysis. Int. J. Digital Evid. 2(3), 1\u20135 (2004)","journal-title":"Int. J. Digital Evid."},{"key":"16_CR4","unstructured":"Anquetil, N., Lethbridge, T.: Extracting concepts from file names: a new file clustering criterion. In: International Conference on Software Engineering (1998)"},{"key":"16_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"178","DOI":"10.1007\/978-3-540-74320-0_10","volume-title":"Recent Advances in Intrusion Detection","author":"M Bailey","year":"2007","unstructured":"Bailey, M., Oberheide, J., Andersen, J., Mao, Z.M., Jahanian, F., Nazario, J.: Automated classification and analysis of internet malware. In: Kruegel, C., Lippmann, R., Clark, A. (eds.) RAID 2007. LNCS, vol. 4637, pp. 178\u2013197. Springer, Heidelberg (2007). doi:10.1007\/978-3-540-74320-0_10"},{"key":"16_CR6","doi-asserted-by":"crossref","unstructured":"Bates, A., Leonard, R., Pruse, H., Lowd, D., Butler, K.: Leveraging USB to establish host identity using commodity devices. In: ISOC Network and Distributed System Security Symposium (NDSS) (2014)","DOI":"10.14722\/ndss.2014.23238"},{"key":"16_CR7","unstructured":"Bishop, C.M.: Pattern Recognition and Machine Learning. Machine Learning (2006)"},{"issue":"1","key":"16_CR8","doi-asserted-by":"publisher","first-page":"245","DOI":"10.1016\/S0004-3702(97)00063-5","volume":"97","author":"AL Blum","year":"1997","unstructured":"Blum, A.L., Langley, P.: Selection of relevant features and examples in machine learning. Artif. Intell. 97(1), 245\u2013271 (1997)","journal-title":"Artif. Intell."},{"key":"16_CR9","unstructured":"Bongard, D.: Fingerprinting web application platforms by variations in PNG implementations. Blackhat (2014)"},{"key":"16_CR10","doi-asserted-by":"crossref","unstructured":"Le Boudec, J.-Y.: Performance Evaluation of Computer and Communication Systems. EPFL Press (2011)","DOI":"10.1201\/b16328"},{"key":"16_CR11","doi-asserted-by":"crossref","unstructured":"Chen, D.D., Egele, M., Woo, M., Brumley, D.: Towards automated dynamic analysis for linux-based embedded firmware. In: ISOC Network and Distributed System Security Symposium (NDSS) (2016)","DOI":"10.14722\/ndss.2016.23415"},{"key":"16_CR12","unstructured":"Costin, A., Zaddach, J., Francillon, A., Balzarotti, D.: A large-scale analysis of the security of embedded firmwares. In: USENIX Security Symposium (2014)"},{"key":"16_CR13","doi-asserted-by":"crossref","unstructured":"Costin, A., Zarras, A., Francillon, A.: Automated dynamic firmware analysis at scale: a case study on embedded web interfaces. In: ACM Symposium on Information, Computer and Communications Security (ASIACCS) (2016)","DOI":"10.1145\/2897845.2897900"},{"key":"16_CR14","doi-asserted-by":"crossref","unstructured":"Desmond, L.C.C., Yuan, C.C., Pheng, T.C., Lee, R.S.: Identifying unique devices through wireless fingerprinting. In: Wireless Network Security (2008)","DOI":"10.1145\/1352533.1352542"},{"issue":"10","key":"16_CR15","doi-asserted-by":"publisher","first-page":"78","DOI":"10.1145\/2347736.2347755","volume":"55","author":"P Domingos","year":"2012","unstructured":"Domingos, P.: A few useful things to know about machine learning. Commun. ACM 55(10), 78\u201387 (2012)","journal-title":"Commun. ACM"},{"key":"16_CR16","unstructured":"Intel. Rise of the Embedded Internet (2009)"},{"issue":"2","key":"16_CR17","doi-asserted-by":"publisher","first-page":"92","DOI":"10.1109\/MIC.2009.33","volume":"13","author":"M Karakaya","year":"2009","unstructured":"Karakaya, M., Korpeoglu, I., Ulusoy, \u00d6.: Free riding in peer-to-peer networks. IEEE Internet Comput. 13(2), 92\u201398 (2009)","journal-title":"IEEE Internet Comput."},{"key":"16_CR18","doi-asserted-by":"crossref","unstructured":"Klein, L.A., Sensor, D.F.: A Tool for Information Assessment and Decision Making. SPIE Press Bellingham (2004)","DOI":"10.1117\/3.563340"},{"issue":"2","key":"16_CR19","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1109\/TDSC.2005.26","volume":"2","author":"T Kohno","year":"2005","unstructured":"Kohno, T., Broido, A., Claffy, K.C.: Remote physical device fingerprinting. IEEE Trans. Dependable Secure Comput. 2(2), 93\u2013108 (2005)","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"16_CR20","doi-asserted-by":"publisher","first-page":"91","DOI":"10.1016\/j.diin.2006.06.015","volume":"3","author":"J Kornblum","year":"2006","unstructured":"Kornblum, J.: Identifying almost identical files using context triggered piecewise hashing. Digital Invest. 3, 91\u201397 (2006)","journal-title":"Digital Invest."},{"key":"16_CR21","doi-asserted-by":"crossref","unstructured":"Li, F., Lai, A., Ddl, D.: Evidence of advanced persistent threat: a case study of malware for political espionage. In: International Conference on Malicious and Unwanted Software (MALWARE) (2011)","DOI":"10.1109\/MALWARE.2011.6112333"},{"key":"16_CR22","unstructured":"Niemietz, M., Schwenk, J., Network, owning your home: router security revisited. In: Web 2.0 Security and Privacy (W2SP) (2015)"},{"key":"16_CR23","unstructured":"Pa, Y.M.P., Suzuki, S., Yoshioka, K., Matsumoto, T., Kasama, T., Rossow, C.: IoTPOT: analysing the rise of IoT compromises. In: USENIX Workshop on Offensive Technologies (WOOT) (2015)"},{"key":"16_CR24","unstructured":"Postscapes. Internet of Things Market Forecast (2014)"},{"key":"16_CR25","unstructured":"Proofpoint Inc., Home Routers Under Attack via Malvertising on Windows, Android Devices. https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/home-routers-under-attack-malvertising-windows-android-devices"},{"key":"16_CR26","unstructured":"Rieck, K., Holz, T., Willems, C., D\u00fcssel, P., Laskov, P.: Learning and classification of malware behavior. In: Detection of Intrusions and Malware, and Vulnerability Assessment (DIMVA) (2008)"},{"key":"16_CR27","doi-asserted-by":"crossref","unstructured":"Sahs, J., Khan, L.: A machine learning approach to android malware detection. In: European Intelligence and Security Informatics Conference (2012)","DOI":"10.1109\/EISIC.2012.34"},{"key":"16_CR28","doi-asserted-by":"crossref","unstructured":"Samarasinghe, N., Mannan, M., Paper, S.: TLS ecosystems in networked devices vs. web servers. In: International Conference on Financial Cryptography and Data Security (FC) (2017)","DOI":"10.1007\/978-3-319-70972-7_30"},{"key":"16_CR29","unstructured":"Shah, S.: HTTP Fingerprinting Advanced Assessment Techniques. Blackhat (2003)"},{"key":"16_CR30","doi-asserted-by":"crossref","unstructured":"Shalev-Shwartz, S., Ben-David, S.: Understanding Machine Learning: From Theory to Algorithms. Cambridge University Press (2014)","DOI":"10.1017\/CBO9781107298019"},{"key":"16_CR31","unstructured":"Stringhini, G., Egele, M., Zarras, A., Holz, T., Kruegel, C., Vigna, G.: B@bel: Leveraging Email Delivery for Spam Mitigation. In: USENIX Security (2012)"},{"key":"16_CR32","doi-asserted-by":"crossref","unstructured":"Tian, R., Batten, L.M., Versteeg, S.: Function length as a tool for malware classification. In: Conference on Malicious and Unwanted Software (2008)","DOI":"10.1109\/MALWARE.2008.4690860"},{"key":"16_CR33","unstructured":"Wappalyzer. Identify Technology on Websites. https:\/\/wappalyzer.com"},{"key":"16_CR34","doi-asserted-by":"crossref","unstructured":"Zarras, A., Papadogiannakis, A., Gawlik, R., Holz, T.: Automated generation of models for fast and precise detection of HTTP-based malware. In: International Conference on Privacy, Security and Trust (PST) (2014)","DOI":"10.1109\/PST.2014.6890946"}],"container-title":["IFIP Advances in Information and Communication Technology","ICT Systems Security and Privacy Protection"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-58469-0_16","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,8,23]],"date-time":"2023-08-23T11:38:18Z","timestamp":1692790698000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-58469-0_16"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9783319584683","9783319584690"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-58469-0_16","relation":{},"ISSN":["1868-4238","1868-422X"],"issn-type":[{"value":"1868-4238","type":"print"},{"value":"1868-422X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017]]},"assertion":[{"value":"4 May 2017","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"SEC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on ICT Systems Security and Privacy Protection","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Rome","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Italy","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2017","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 May 2017","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"31 May 2017","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"32","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"sec2017","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/ifipsec.org\/2017\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}