| 远程操作系统探测技术的研究 |
| |
| 引用本文： | 杨明欣,郭文东. 远程操作系统探测技术的研究[J]. 河北科技大学学报, 2003, 24(3): 15-18 |
| |
| 作者姓名： | 杨明欣 郭文东 |
| |
| 作者单位： | 河北科技大学经济管理学院,河北石家庄,050018;河北科技大学经济管理学院,河北石家庄,050018 |
| |
| 基金项目： | 河北省教育厅资助课题(2000234) |
| |
| 摘 要： | 从传统技术和高级特征探测技术2方面详细地介绍了操作系统探测原理与方法。传统方法中简要介绍了远程登陆标识、抓取文件传输协议标识和http头部3种方法。重点分析了高级特征探测技术,其中又分为主动协议栈技术和被动协议栈技术。文章结合实践,从perl编程角度深入讨论了远程探测操作系统的3种方法,并且归纳总结了它们各自的优缺点,系统地给出了其中2种方法的工作示意图。
|
| 关 键 词： | 远程操作系统探测 主动协议栈 被动协议栈 指纹 |
| 文章编号： | 1008-1542(2003)03-0015-04 |
| 修稿时间： | 2002-11-06 |
Research on the Technology of Remote Operating System Detection |
| |
| YANG Ming-xin,GUO Wen-dong. Research on the Technology of Remote Operating System Detection[J]. Journal of Hebei University of Science and Technology, 2003, 24(3): 15-18 |
| |
| Authors: | YANG Ming-xin GUO Wen-dong |
| |
| Abstract: | From both traditional and advanced points of view.this paper primarily introduces the theory and technology of remote OS (operating systems) detection. This paper simply introduces three traditional methods, which are Telnet Banner Grabbing,FTP Banner Grabbing and HTTP header,and pays emphases on the advanced character detection technology, including active protocol stack and passive protocol stack. From theory to practice,this paper thoroughly discusses three kinds of technology about remote OS detection with the Perl program,summarizes their advantages and disadvantages,and generalizes two of the methods,expressed in sketch. |
| |
| Keywords: | remote OS detection active protocol stack passive protocol stack fingerprinting |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
