Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

According to the implementation of the TCP/IP stack an attacker is able to identify which operating system is running on a network device. Is there any paper or the like according on this topic?

share|improve this question
up vote 2 down vote accepted

There's also a Nessus Plugin for that. You can find more details here.

By the way, this technique is called OS Fingerprinting. You can find more details about it on this Wikipedia Page of course and in this SANS paper.

share|improve this answer
Thank you very much. – Thomas Maier Feb 27 '14 at 9:12

Perhaps Remote OS Detection would be of interest to you. And, of course, you can test what you see there with nmap.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.