loading...
Detecting and Defending against Web-Server Fingerprinting
San Diego California December 09-December 13
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/CSAC.2002.117630418th Annual Computer Security Applica ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Dustin Lee, University of California, Davis
Jeff Rowe, University of California, Davis
Calvin Ko, Network Associates, Inc.
Karl Levitt, University of California, Davis
Cyber attacks continue to increase in sophistication. Advanced attackers often gather information about a target system before launching a precise attack to exploit a discovered vulnerability. This paper discusses techniques for remote identification of web servers and suggests possible defenses to the probing activity. General concepts of fingerprinting and their application to the identification of Web servers, even where server information has been omitted are described and methodologies for detecting and limiting such activity are discussed.
Citation:
Dustin Lee, Jeff Rowe, Calvin Ko, Karl Levitt, "Detecting and Defending against Web-Server Fingerprinting," acsac, pp.321, 18th Annual Computer Security Applications Conference (ACSAC '02), 2002
Usage of this product signifies your acceptance of the Terms of Use.


Suggestions