Detecting and Defending against Web-Server Fingerprinting

Cyber attacks continue to increase in sophistication. Advanced attackers often gather information about a target system before launching a precise attack to exploit a discovered vulnerability. This paper discusses techniques for remote identification of web servers and suggests possible defenses to the probing activity. General concepts of fingerprinting and their application to the identification of Web servers, even where server information has been omitted are described and methodologies for detecting and limiting such activity are discussed.

• Type: Conference
• Year: 2002
• Where: ACSAC
• Authors: Dustin Lee, Jeff Rowe, Calvin Ko, Karl N. Levitt
• Keywords: ACSAC 2002, Paper Discusses Techniques, Precise Attack, Security Privacy, Web Servers