Use of Data Mining Techniques for Network Data Analysis
Július Baráth, Miroslav Liska · 2021
The aim of this paper is to verify the possibility of determining the types of communicating operating systems based on passive monitoring of network traffic. The remote observer captures network communication and records visited destinations. Based on the list, we try to extract signatures characterizing each operating system using four data mining techniques. The obtained signatures can later be used to determine the communicating operating systems and, after extending the method, also to detect the services used, as a basis for filtering the selected communication, etc.