Speaker: Yves Vanaubel
Title : Network Fingerprinting: TTL-Based Router Signatures
Fingerprinting networking equipment has many potential applications and benefits in network management and security. More generally, it is useful for the understanding of network structures and their behaviors. In this paper, we describe a simple fingerprinting mechanism based on the initial TTL values used by routers to reply to various probing messages. We show that main classes obtained using this simple mechanism are meaningful to distinguish routers platforms. Besides, it comes at a very low additional cost compared to standard active topology discovery measurements. As a proof of concept, we apply our method to gain more insight on the behavior of MPLS routers and to, thus, more accurately quantify their visible/invisible deployment.
Yves received his degree in Computer Science Engineering from the Université de Liège (Belgium) in 2012. He is now a PhD Student in the RUN team (Research Unit in Networking) in the Université de Liège. His research interest is Internet topology discovery, in particular how to improve our vision of the topology and how to reveal hidden MPLS information.
Date: 20th November, 2013.
Time: 14.00-15.00 hrs
Venue: QMUL Maths:1.03