Classifying Network Protocol Implementation Versions: An OpenSSL Case Study

Published in Technical Report 13-01, Johns Hopkins University, 2013

This technical report presents techniques for fingerprinting and classifying specific versions of network protocol implementations by analyzing observable behavioral differences. The case study focuses on OpenSSL, demonstrating that implementation version information can be inferred from network traffic analysis.

Citation: P. Martin, M. Rushanan, S. Checkoway, M. Green, A. Rubin. "Classifying Network Protocol Implementation Versions: An OpenSSL Case Study." Technical Report 13-01, Johns Hopkins University, December 2013.
Download Paper