CAPEC-324: TCP (ISN) Sequence Predictability Probe

攻击模式描述

This type of operating system probe attempts to determine an estimate for how predictable the sequence number generation algorithm is for a remote host. Statistical techniques, such as standard deviation, can be used to determine how predictable the sequence number generation is for a system. This result can then be compared to a database of operating system behaviors to determine a likely match for operating system and version.

前提条件

• The ability to monitor and interact with network communications.Access to at least one host, and the privileges to interface with the network interface card.

所需资源

• A tool capable of sending and receiving packets from a remote system.

后果影响