{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,19]],"date-time":"2025-12-19T09:29:09Z","timestamp":1766136549051,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":43,"publisher":"ACM","license":[{"start":{"date-parts":[[2014,11,5]],"date-time":"2014-11-05T00:00:00Z","timestamp":1415145600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2014,11,5]]},"DOI":"10.1145\/2663716.2663745","type":"proceedings-article","created":{"date-parts":[[2014,11,11]],"date-time":"2014-11-11T13:40:05Z","timestamp":1415713205000},"page":"173-180","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":27,"title":["OS Fingerprinting and Tethering Detection in Mobile Networks"],"prefix":"10.1145","author":[{"given":"Yi-Chao","family":"Chen","sequence":"first","affiliation":[{"name":"UT Austin, Austin, TX, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yong","family":"Liao","sequence":"additional","affiliation":[{"name":"Narus, Inc., Sunnyvale, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mario","family":"Baldi","sequence":"additional","affiliation":[{"name":"Narus, Inc., Sunnyvale, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sung-Ju","family":"Lee","sequence":"additional","affiliation":[{"name":"Narus, Inc., Sunnyvale, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lili","family":"Qiu","sequence":"additional","affiliation":[{"name":"UT Austin, Austin, TX, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2014,11,5]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"MyWi.smallhttp:\/\/intelliborn.com\/mywi.html.  MyWi.smallhttp:\/\/intelliborn.com\/mywi.html."},{"key":"e_1_3_2_1_2_1","unstructured":"Nmap Security Scanner.smallhttp:\/\/nmap.org\/.  Nmap Security Scanner.smallhttp:\/\/nmap.org\/."},{"key":"e_1_3_2_1_3_1","unstructured":"ntpd(8) - Linux man page.smallhttp:\/\/linux.die.net\/man\/8\/ntpd.  ntpd(8) - Linux man page.smallhttp:\/\/linux.die.net\/man\/8\/ntpd."},{"key":"e_1_3_2_1_4_1","unstructured":"PdaNet http:\/\/pdanet.co\/.  PdaNet http:\/\/pdanet.co\/."},{"key":"e_1_3_2_1_5_1","unstructured":"Snacktime: A Perl Solution for Remote OS Fingerprinting.smallhttp:\/\/www.planb-security.net\/wp\/snacktime.html.  Snacktime: A Perl Solution for Remote OS Fingerprinting.smallhttp:\/\/www.planb-security.net\/wp\/snacktime.html."},{"key":"e_1_3_2_1_6_1","unstructured":"British Internet provider drops online tracking plans 2009. http:\/\/goo.gl\/FHtct2.  British Internet provider drops online tracking plans 2009. http:\/\/goo.gl\/FHtct2."},{"key":"e_1_3_2_1_7_1","volume-title":"Mar.","author":"CRAWDAD","year":"2009","unstructured":"CRAWDAD data set umd\/sigcomm2008. Downloaded fromsmallhttp:\/\/crawdad.org\/umd\/sigcomm2008\/ , Mar. 2009 . CRAWDAD data set umd\/sigcomm2008. Downloaded fromsmallhttp:\/\/crawdad.org\/umd\/sigcomm2008\/, Mar. 2009."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516674"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637243"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24668-8_16"},{"issue":"1","key":"e_1_3_2_1_11_1","article-title":"Application Presence Information based Source Address Transition Detection for Edge Network Security and Management","volume":"7","author":"Bi J.","year":"2007","unstructured":"J. Bi and J. Wu . Application Presence Information based Source Address Transition Detection for Edge Network Security and Management . IJCSNS International Journal of Computer Science and Network Security , 7 ( 1 ), Jan. 2007 . J. Bi and J. Wu. Application Presence Information based Source Address Transition Detection for Edge Network Security and Management. IJCSNS International Journal of Computer Science and Network Security, 7(1), Jan. 2007.","journal-title":"IJCSNS International Journal of Computer Science and Network Security"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1409944.1409959"},{"key":"e_1_3_2_1_13_1","volume-title":"Proc. of NordSec","author":"Bursztein E.","year":"2007","unstructured":"E. Bursztein . Time has something to tell us about network address translation . In Proc. of NordSec , 2007 . E. Bursztein. Time has something to tell us about network address translation. In Proc. of NordSec, 2007."},{"key":"e_1_3_2_1_14_1","volume-title":"May","author":"Chandra R.","year":"2007","unstructured":"R. Chandra , V. Padmanabhan , and M. Zhang . CRAWDAD data set microsoft\/osdi2006 (v. 2007-05--23). Downloaded fromsmall http:\/\/crawdad.org\/microsoft\/osdi2006\/ , May 2007 . R. Chandra, V. Padmanabhan, and M. Zhang. CRAWDAD data set microsoft\/osdi2006 (v. 2007-05--23). Downloaded fromsmall http:\/\/crawdad.org\/microsoft\/osdi2006\/, May 2007."},{"key":"e_1_3_2_1_15_1","unstructured":"CRAWDAD.smallhttp:\/\/crawdad.cs.dartmouth.edu.  CRAWDAD.smallhttp:\/\/crawdad.cs.dartmouth.edu."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5555\/1881151.1881152"},{"key":"e_1_3_2_1_17_1","volume-title":"Browser Fingerprinting. Master's thesis","author":"Flood E.","year":"2012","unstructured":"E. Flood and J. Karlsson . Browser Fingerprinting. Master's thesis , University of Gothenburg , May 2012 . E. Flood and J. Karlsson. Browser Fingerprinting. Master's thesis, University of Gothenburg, May 2012."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1002\/nem.751"},{"key":"e_1_3_2_1_19_1","volume-title":"Proc. of USENIX WOOT","author":"Greenwald L. G.","year":"2007","unstructured":"L. G. Greenwald and T. J. Thomas . Toward undetected operating system fingerprinting . In Proc. of USENIX WOOT , 2007 . L. G. Greenwald and T. J. Thomas. Toward undetected operating system fingerprinting. In Proc. of USENIX WOOT, 2007."},{"key":"e_1_3_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1400097.1400105"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1656274.1656278"},{"key":"e_1_3_2_1_22_1","volume-title":"The NewReno modification to TCP's fast recovery algorithm","author":"Henderson T.","year":"2012","unstructured":"T. Henderson , S. Floyd , A. Gurtov , and Y. Nishida . The NewReno modification to TCP's fast recovery algorithm , 2012 . RFC 6582:smallhttp:\/\/tools.ietf.org\/html\/rfc6582. T. Henderson, S. Floyd, A. Gurtov, and Y. Nishida. The NewReno modification to TCP's fast recovery algorithm, 2012. RFC 6582:smallhttp:\/\/tools.ietf.org\/html\/rfc6582."},{"key":"e_1_3_2_1_23_1","volume-title":"Gartner: Device shipments break 2.4b units","author":"Lunden Ingrid","year":"2014","unstructured":"Ingrid Lunden . Gartner: Device shipments break 2.4b units in 2014 , tablets to overtake PC sales in 2015. http:\/\/goo.gl\/1kUHwm. Ingrid Lunden. Gartner: Device shipments break 2.4b units in 2014, tablets to overtake PC sales in 2015. http:\/\/goo.gl\/1kUHwm."},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/SAINT.2011.83"},{"key":"e_1_3_2_1_25_1","volume-title":"TCP extensions for high performance","author":"Jacobson V.","year":"1992","unstructured":"V. Jacobson , R. Braden , and D. Borman . TCP extensions for high performance , 1992 . RFC 1323:smallhttp:\/\/tools.ietf.org\/html\/rfc1323. V. Jacobson, R. Braden, and D. Borman. TCP extensions for high performance, 1992. RFC 1323:smallhttp:\/\/tools.ietf.org\/html\/rfc1323."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2004.1354571"},{"key":"e_1_3_2_1_27_1","volume-title":"Firewall Fingerprinting. In Proc. of IEEE INFOCOM","author":"Khakpour A.","year":"2012","unstructured":"A. Khakpour , J. Hulst , Z. Ge , A. Liu , D. Pei , and J. Wang . Firewall Fingerprinting. In Proc. of IEEE INFOCOM , 2012 . A. Khakpour, J. Hulst, Z. Ge, A. Liu, D. Pei, and J. Wang. Firewall Fingerprinting. In Proc. of IEEE INFOCOM, 2012."},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.18"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.5555\/1987510.1987514"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.5555\/1740954.1741074"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.1999.749287"},{"key":"e_1_3_2_1_32_1","unstructured":"NetMarketShare. Operating system market share. http:\/\/www.netmarketshare.com\/operating-system-market-share.aspx.  NetMarketShare. Operating system market share. http:\/\/www.netmarketshare.com\/operating-system-market-share.aspx."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/383059.383083"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/1287853.1287866"},{"key":"e_1_3_2_1_35_1","unstructured":"P. Phaal. Detecting NAT devices using sflow.smallhttp:\/\/www.sflow.org\/detectNAT\/.  P. Phaal. Detecting NAT devices using sflow.smallhttp:\/\/www.sflow.org\/detectNAT\/."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/2185448.2185468"},{"key":"e_1_3_2_1_37_1","first-page":"239","volume":"222","author":"Straka K.","year":"2006","unstructured":"K. Straka and G. Manes . Passive Detection of NAT Routers and Client Counting. Advances in Digital Forensics II , 222 : 239 -- 246 , 2006 . K. Straka and G. Manes. Passive Detection of NAT Routers and Client Counting. Advances in Digital Forensics II, 222:239--246, 2006.","journal-title":"Passive Detection of NAT Routers and Client Counting. Advances in Digital Forensics II"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2006.188"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2011.6006048"},{"key":"e_1_3_2_1_40_1","volume-title":"Long Distance Networks. In Proc. of IEEE INFOCOM","author":"Xu L.","year":"2004","unstructured":"L. Xu , K. Harfoush , and I. Rhee . Binary Increase Congestion Control for Fast , Long Distance Networks. In Proc. of IEEE INFOCOM , 2004 . L. Xu, K. Harfoush, and I. Rhee. Binary Increase Congestion Control for Fast, Long Distance Networks. In Proc. of IEEE INFOCOM, 2004."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2011.27"},{"key":"e_1_3_2_1_42_1","volume-title":"Proc. of NDSS","author":"Yen T.-F.","year":"2012","unstructured":"T.-F. Yen , Y. Xie , F. Yu , R. P. Yu , and M. Abadi . Host fingerprinting and tracking on the web: Privacy and security implications . In Proc. of NDSS , 2012 . T.-F. Yen, Y. Xie, F. Yu, R. P. Yu, and M. Abadi. Host fingerprinting and tracking on the web: Privacy and security implications. In Proc. of NDSS, 2012."},{"key":"e_1_3_2_1_43_1","unstructured":"M. Zalewski. P0f.smallhttp:\/\/lcamtuf.coredump.cx\/p0f3\/.  M. Zalewski. P0f.smallhttp:\/\/lcamtuf.coredump.cx\/p0f3\/."}],"event":{"name":"IMC '14: Internet Measurement Conference","sponsor":["SIGMETRICS ACM Special Interest Group on Measurement and Evaluation","SIGCOMM ACM Special Interest Group on Data Communication","USENIX Assoc USENIX Assoc"],"location":"Vancouver BC Canada","acronym":"IMC '14"},"container-title":["Proceedings of the 2014 Conference on Internet Measurement Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2663716.2663745","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2663716.2663745","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T06:56:18Z","timestamp":1750229778000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2663716.2663745"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,11,5]]},"references-count":43,"alternative-id":["10.1145\/2663716.2663745","10.1145\/2663716"],"URL":"https:\/\/doi.org\/10.1145\/2663716.2663745","relation":{},"subject":[],"published":{"date-parts":[[2014,11,5]]},"assertion":[{"value":"2014-11-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}