13 citations · 13 across the 2 of their papers we have counts for
3 papers
cs.CR2020★ 13 cited
Accurate TLS Fingerprinting using Destination Context and Knowledge Bases
Blake Anderson, David McGrew
Network fingerprinting is used to identify applications, provide insight into network traffic, and detect malicious activity. With the broad adoption of TLS, traditional fingerprin…
cs.CR2017
OS Fingerprinting: New Techniques and a Study of Information Gain and Obfuscation
Blake Anderson, David McGrew
Passive operating system fingerprinting reveals valuable information to the defenders of heterogeneous private networks; at the same time, attackers can use fingerprinting to recon…
cs.CR2016
Deciphering Malware's use of TLS (without Decryption)
Blake Anderson, Subharthi Paul, David McGrew
The use of TLS by malware poses new challenges to network threat detection because traditional pattern-matching techniques can no longer be applied to its messages. However, TLS al…