Translate original post with Google Translate

L’équipe Hynesim à l’honneur de publier son article sur IpMorph en anglais dans le Journal of Computer Virology aux éditions Springer (http://www.springerlink.com/content/u83373851p590630/) dans la collection des sciences de l’informatique.

Title : IpMorph: fingerprinting spoofing unification

Author(s) : Guillaume Prigent (1), Florian Vichot (1) and Fabrice Harrouet (2)

Contact Information :
(1) Diateam: Architectes de l’information, 41, rue Yves Collet, 29200 Brest, France
(2) Laboratoire d’Informatique des Systèmes Complexes (LISyC), Technopôle Brest Iroise, 29280 Plouzané, France

Abstract : There is nowadays a wide range of TCP/IP stack identification tools that allow to easily recognize the operating system of foreseen targets. The object of this article is to show that fingerprint concealment and spoofing are uniformly possible against different known fingerprinting tools. We present IpMorph, counter-recognition software implemented as a user-mode TCP/IP stack, ensuring session monitoring and on the fly packets re-writing. We detail its operation and use against tools like Nmap, Xprobe2, Ring2, SinFP and p0f, and we evaluate its efficiency thanks to a first technical implementation that already covers most of our objectives.
The IpMorph software is distributed under the GPLv3 license. This independent project is based on our previous works, and mainly derives from a specific need in the “Hynesim” network architecture simulation project (DGA-CELAR/SSI-AMI government contract, http://www.hynesim.org).