Matches in SemOpenAlex for { <https://semopenalex.org/work/W4283695260> ?p ?o ?g. }
Showing items 1 to 73 of
73
with 100 items per page.
- W4283695260 abstract "Active measurements can be used to collect server characteristics on a large scale. This kind of metadata can help discovering hidden relations and commonalities among server deployments offering new possibilities to cluster and classify them. As an example, identifying a previously-unknown cybercriminal infrastructures can be a valuable source for cyber-threat intelligence. We propose herein an active measurement-based methodology for acquiring Transport Layer Security (TLS) metadata from servers and leverage it for their fingerprinting. Our fingerprints capture the characteristic behavior of the TLS stack primarily caused by the implementation, configuration, and hardware support of the underlying server. Using an empirical optimization strategy that maximizes information gain from every handshake to minimize measurement costs, we generated 10 general-purpose Client Hellos used as scanning probes to create a large database of TLS configurations used for classifying servers. We fingerprinted 28 million servers from the Alexa and Majestic toplists and two Command and Control (C2) blocklists over a period of 30 weeks with weekly snapshots as foundation for two long-term case studies: classification of Content Delivery Network and C2 servers. The proposed methodology shows a precision of more than 99 % and enables a stable identification of new servers over time. This study describes a new opportunity for active measurements to provide valuable insights into the Internet that can be used in security-relevant use cases." @default.
- W4283695260 created "2022-06-30" @default.
- W4283695260 creator A5001748768 @default.
- W4283695260 creator A5005401301 @default.
- W4283695260 creator A5009418849 @default.
- W4283695260 creator A5009659193 @default.
- W4283695260 creator A5049611799 @default.
- W4283695260 creator A5060144977 @default.
- W4283695260 creator A5070952651 @default.
- W4283695260 date "2022-06-27" @default.
- W4283695260 modified "2023-09-27" @default.
- W4283695260 title "Active TLS Stack Fingerprinting: Characterizing TLS Server Deployments at Scale" @default.
- W4283695260 doi "https://doi.org/10.48550/arxiv.2206.13230" @default.
- W4283695260 hasPublicationYear "2022" @default.
- W4283695260 type Work @default.
- W4283695260 citedByCount "0" @default.
- W4283695260 crossrefType "posted-content" @default.
- W4283695260 hasAuthorship W4283695260A5001748768 @default.
- W4283695260 hasAuthorship W4283695260A5005401301 @default.
- W4283695260 hasAuthorship W4283695260A5009418849 @default.
- W4283695260 hasAuthorship W4283695260A5009659193 @default.
- W4283695260 hasAuthorship W4283695260A5049611799 @default.
- W4283695260 hasAuthorship W4283695260A5060144977 @default.
- W4283695260 hasAuthorship W4283695260A5070952651 @default.
- W4283695260 hasBestOaLocation W42836952601 @default.
- W4283695260 hasConcept C110875604 @default.
- W4283695260 hasConcept C111919701 @default.
- W4283695260 hasConcept C116834253 @default.
- W4283695260 hasConcept C148176105 @default.
- W4283695260 hasConcept C153083717 @default.
- W4283695260 hasConcept C154945302 @default.
- W4283695260 hasConcept C165696696 @default.
- W4283695260 hasConcept C2778000800 @default.
- W4283695260 hasConcept C2779960059 @default.
- W4283695260 hasConcept C31258907 @default.
- W4283695260 hasConcept C38652104 @default.
- W4283695260 hasConcept C41008148 @default.
- W4283695260 hasConcept C59822182 @default.
- W4283695260 hasConcept C86803240 @default.
- W4283695260 hasConcept C93518851 @default.
- W4283695260 hasConcept C93996380 @default.
- W4283695260 hasConceptScore W4283695260C110875604 @default.
- W4283695260 hasConceptScore W4283695260C111919701 @default.
- W4283695260 hasConceptScore W4283695260C116834253 @default.
- W4283695260 hasConceptScore W4283695260C148176105 @default.
- W4283695260 hasConceptScore W4283695260C153083717 @default.
- W4283695260 hasConceptScore W4283695260C154945302 @default.
- W4283695260 hasConceptScore W4283695260C165696696 @default.
- W4283695260 hasConceptScore W4283695260C2778000800 @default.
- W4283695260 hasConceptScore W4283695260C2779960059 @default.
- W4283695260 hasConceptScore W4283695260C31258907 @default.
- W4283695260 hasConceptScore W4283695260C38652104 @default.
- W4283695260 hasConceptScore W4283695260C41008148 @default.
- W4283695260 hasConceptScore W4283695260C59822182 @default.
- W4283695260 hasConceptScore W4283695260C86803240 @default.
- W4283695260 hasConceptScore W4283695260C93518851 @default.
- W4283695260 hasConceptScore W4283695260C93996380 @default.
- W4283695260 hasLocation W42836952601 @default.
- W4283695260 hasOpenAccess W4283695260 @default.
- W4283695260 hasPrimaryLocation W42836952601 @default.
- W4283695260 hasRelatedWork W1975344666 @default.
- W4283695260 hasRelatedWork W2068376601 @default.
- W4283695260 hasRelatedWork W2113393700 @default.
- W4283695260 hasRelatedWork W2122338753 @default.
- W4283695260 hasRelatedWork W2169004886 @default.
- W4283695260 hasRelatedWork W2324414032 @default.
- W4283695260 hasRelatedWork W2612638001 @default.
- W4283695260 hasRelatedWork W2930055604 @default.
- W4283695260 hasRelatedWork W3031287267 @default.
- W4283695260 hasRelatedWork W3168478071 @default.
- W4283695260 isParatext "false" @default.
- W4283695260 isRetracted "false" @default.
- W4283695260 workType "article" @default.