{"id":"https://openalex.org/W3130073992","doi":"https://doi.org/10.1109/jiot.2020.3024293","title":"A Machine-Learning-Based Tool for Passive OS Fingerprinting With TCP Variant as a Novel Feature","display_name":"A Machine-Learning-Based Tool for Passive OS Fingerprinting With TCP Variant as a Novel Feature","publication_year":2020,"publication_date":"2020-09-15","ids":{"openalex":"https://openalex.org/W3130073992","doi":"https://doi.org/10.1109/jiot.2020.3024293","mag":"3130073992"},"language":"en","primary_location":{"id":"doi:10.1109/jiot.2020.3024293","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2020.3024293","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://hdl.handle.net/10852/85151","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082635229","display_name":"Desta Haileselassie Hagos","orcid":"https://orcid.org/0000-0002-2014-2749"},"institutions":[{"id":"https://openalex.org/I184531372","display_name":"OsloMet \u2013 Oslo Metropolitan University","ror":"https://ror.org/04q12yn84","country_code":"NO","type":"education","lineage":["https://openalex.org/I184531372"]},{"id":"https://openalex.org/I184942183","display_name":"University of Oslo","ror":"https://ror.org/01xtthb56","country_code":"NO","type":"education","lineage":["https://openalex.org/I184942183"]}],"countries":["NO"],"is_corresponding":true,"raw_author_name":"Desta Haileselassie Hagos","raw_affiliation_strings":["Autonomous System and Network (ASN) Research Group, Oslo Metropolitan University, Oslo, Norway","Autonomous Systems and Sensor Technologies Research Group, University of Oslo, Oslo, Norway"],"affiliations":[{"raw_affiliation_string":"Autonomous System and Network (ASN) Research Group, Oslo Metropolitan University, Oslo, Norway","institution_ids":["https://openalex.org/I184531372"]},{"raw_affiliation_string":"Autonomous Systems and Sensor Technologies Research Group, University of Oslo, Oslo, Norway","institution_ids":["https://openalex.org/I184942183"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032770006","display_name":"Anis Yazidi","orcid":"https://orcid.org/0000-0001-7591-1659"},"institutions":[{"id":"https://openalex.org/I184531372","display_name":"OsloMet \u2013 Oslo Metropolitan University","ror":"https://ror.org/04q12yn84","country_code":"NO","type":"education","lineage":["https://openalex.org/I184531372"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Anis Yazidi","raw_affiliation_strings":["Autonomous System and Network Research Group, Oslo Metropolitan University, Oslo, Norway"],"affiliations":[{"raw_affiliation_string":"Autonomous System and Network Research Group, Oslo Metropolitan University, Oslo, Norway","institution_ids":["https://openalex.org/I184531372"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091880887","display_name":"\u00d8ivind Kure","orcid":"https://orcid.org/0000-0001-6299-0204"},"institutions":[{"id":"https://openalex.org/I184942183","display_name":"University of Oslo","ror":"https://ror.org/01xtthb56","country_code":"NO","type":"education","lineage":["https://openalex.org/I184942183"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Oivind Kure","raw_affiliation_strings":["Autonomous Systems and Sensor Technologies Research Group, University of Oslo, Oslo, Norway"],"affiliations":[{"raw_affiliation_string":"Autonomous Systems and Sensor Technologies Research Group, University of Oslo, Oslo, Norway","institution_ids":["https://openalex.org/I184942183"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090446312","display_name":"Paal Engelstad","orcid":"https://orcid.org/0009-0000-8371-927X"},"institutions":[{"id":"https://openalex.org/I184942183","display_name":"University of Oslo","ror":"https://ror.org/01xtthb56","country_code":"NO","type":"education","lineage":["https://openalex.org/I184942183"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Paal E. Engelstad","raw_affiliation_strings":["Autonomous Systems and Sensor Technologies Research Group, University of Oslo, Oslo, Norway"],"affiliations":[{"raw_affiliation_string":"Autonomous Systems and Sensor Technologies Research Group, University of Oslo, Oslo, Norway","institution_ids":["https://openalex.org/I184942183"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5082635229"],"corresponding_institution_ids":["https://openalex.org/I184531372","https://openalex.org/I184942183"],"apc_list":null,"apc_paid":null,"fwci":2.0573,"has_fulltext":true,"cited_by_count":29,"citation_normalized_percentile":{"value":0.89804237,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":"8","issue":"5","first_page":"3534","last_page":"3553"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8484839200973511},{"id":"https://openalex.org/keywords/oracle","display_name":"Oracle","score":0.6133217811584473},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5662422180175781},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5552277565002441},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5031062960624695},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.4605068564414978},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4374507963657379},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4014870524406433},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3338717520236969},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.32500001788139343}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8484839200973511},{"id":"https://openalex.org/C55166926","wikidata":"https://www.wikidata.org/wiki/Q2892946","display_name":"Oracle","level":2,"score":0.6133217811584473},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5662422180175781},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5552277565002441},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5031062960624695},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.4605068564414978},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4374507963657379},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4014870524406433},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3338717520236969},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.32500001788139343},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/jiot.2020.3024293","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2020.3024293","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},{"id":"pmh:oai:www.duo.uio.no:10852/85151","is_oa":true,"landing_page_url":"http://urn.nb.no/URN:NBN:no-87791","pdf_url":"http://hdl.handle.net/10852/85151","source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2327-4662","raw_type":"Journal article"}],"best_oa_location":{"id":"pmh:oai:www.duo.uio.no:10852/85151","is_oa":true,"landing_page_url":"http://urn.nb.no/URN:NBN:no-87791","pdf_url":"http://hdl.handle.net/10852/85151","source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2327-4662","raw_type":"Journal article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6299999952316284}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3130073992.pdf","grobid_xml":"https://content.openalex.org/works/W3130073992.grobid-xml"},"referenced_works_count":51,"referenced_works":["https://openalex.org/W153190198","https://openalex.org/W1522301498","https://openalex.org/W1540641082","https://openalex.org/W1576185228","https://openalex.org/W1678529581","https://openalex.org/W1714781699","https://openalex.org/W1920802909","https://openalex.org/W1993381725","https://openalex.org/W1996789571","https://openalex.org/W2022844530","https://openalex.org/W2029758586","https://openalex.org/W2078021840","https://openalex.org/W2100166367","https://openalex.org/W2102101901","https://openalex.org/W2104599106","https://openalex.org/W2104927807","https://openalex.org/W2109651607","https://openalex.org/W2112495447","https://openalex.org/W2118445820","https://openalex.org/W2118760020","https://openalex.org/W2121015632","https://openalex.org/W2137983211","https://openalex.org/W2139378549","https://openalex.org/W2163038493","https://openalex.org/W2165698076","https://openalex.org/W2169177434","https://openalex.org/W2292021756","https://openalex.org/W2395579298","https://openalex.org/W2500302530","https://openalex.org/W2540285146","https://openalex.org/W2606537796","https://openalex.org/W2730209706","https://openalex.org/W2745034467","https://openalex.org/W2753542457","https://openalex.org/W2783099387","https://openalex.org/W2803532778","https://openalex.org/W2897978826","https://openalex.org/W2902203940","https://openalex.org/W2913277331","https://openalex.org/W2964121744","https://openalex.org/W2995590890","https://openalex.org/W3000317464","https://openalex.org/W3138562521","https://openalex.org/W3146803896","https://openalex.org/W4230038347","https://openalex.org/W4231918747","https://openalex.org/W4235381699","https://openalex.org/W4292106049","https://openalex.org/W6606233576","https://openalex.org/W6674940750","https://openalex.org/W6684770248"],"related_works":["https://openalex.org/W2378211422","https://openalex.org/W2745001401","https://openalex.org/W4321353415","https://openalex.org/W2073713056","https://openalex.org/W2130974462","https://openalex.org/W972276598","https://openalex.org/W4246352526","https://openalex.org/W2028665553","https://openalex.org/W3110702597","https://openalex.org/W2086519370"],"abstract_inverted_index":{"With":[0],"the":[1,55,71,124,134,152,175,184,193,212,216,220,252,275,282,287,291,294,300],"emergence":[2],"of":[3,5,73,204,238,247,277,293,302],"Internet":[4],"Things":[6],"(IoT),":[7],"securing":[8],"and":[9,18,41,57,80,96,107,159,234,256,265],"managing":[10],"large,":[11],"complex":[12],"enterprise":[13],"network":[14,20,39,56],"infrastructure":[15],"requires":[16],"capturing":[17],"analyzing":[19],"traffic":[21,109,157,239],"traces":[22,158],"in":[23,37,270],"real":[24],"time.":[25],"An":[26],"accurate":[27],"passive":[28,87,156,179,185,303],"operating":[29],"system":[30],"(OS)":[31],"fingerprinting":[32,45,66,89,148,186],"plays":[33],"a":[34,61,143,199,244,261],"critical":[35],"role":[36],"effective":[38],"management":[40],"cybersecurity":[42],"protection.":[43],"Passive":[44],"does":[46],"not":[47],"send":[48],"probes":[49],"that":[50,123,149,209,285],"introduce":[51],"extra":[52],"load":[53],"to":[54,86,218,225,254,297],"hence":[58],"it":[59,68],"has":[60,215],"clear":[62],"advantage":[63],"over":[64],"active":[65],"since":[67],"also":[69,242],"reduces":[70],"risk":[72],"triggering":[74],"false":[75],"alarms.":[76],"This":[77,181],"article":[78,182],"proposes":[79],"evaluates":[81],"an":[82,116,129,165,271],"advanced":[83],"classification":[84],"approach":[85],"OS":[88,147,177,304],"by":[90,191,250],"leveraging":[91],"state-of-the-art":[92],"classical":[93],"machine":[94,118,170],"learning":[95,98,119,171],"deep":[97],"techniques.":[99],"Our":[100],"controlled":[101],"experiments":[102],"on":[103,138,227,258],"benchmark":[104],"data,":[105],"emulated,":[106],"realistic":[108],"is":[110,128,281],"performed":[111],"using":[112,155,260,290],"two":[113],"approaches.":[114],"Through":[115],"Oracle-based":[117],"approach,":[120],"we":[121,141,206],"found":[122],"underlying":[125,194],"TCP":[126,153,196,213,267,295],"variant":[127,197,214,296],"important":[130],"feature":[131,167],"for":[132,146,168,173,263,289],"predicting":[133,174,211],"remote":[135,176],"OS.":[136],"Based":[137],"this":[139,162,248,280],"observation,":[140],"develop":[142],"sophisticated":[144],"tool":[145,262],"first":[150,283],"predicts":[151],"flavor":[154],"then":[160],"uses":[161],"prediction":[163,269],"as":[164,198],"input":[166],"another":[169],"algorithm":[172],"from":[178,223],"measurements.":[180],"takes":[183],"problem":[187],"one":[188],"step":[189],"further":[190],"introducing":[192],"predicted":[195],"distinguishing":[200],"feature.":[201],"In":[202],"terms":[203],"accuracy,":[205],"empirically":[207],"demonstrate":[208,243],"accurately":[210],"potential":[217,288],"boost":[219,299],"evaluation":[221],"performance":[222,253],"84%":[224],"94%":[226],"average":[228,259],"across":[229,235],"all":[230],"our":[231,278],"validation":[232],"scenarios":[233],"different":[236],"types":[237],"sources.":[240],"We":[241],"practical":[245],"example":[246],"potential,":[249],"increasing":[251],"91.2%":[255],"95.3%":[257],"loss-based":[264],"delay-based":[266],"variants":[268],"emulated":[272],"setting.":[273],"To":[274],"best":[276],"knowledge,":[279],"study":[284],"explores":[286],"knowledge":[292],"significantly":[298],"accuracy":[301],"fingerprinting.":[305]},"counts_by_year":[{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":3}],"updated_date":"2026-03-10T16:38:18.471706","created_date":"2025-10-10T00:00:00"}