title: ÐÑÑÐ²Ð»ÐµÐ½Ð¸Ðµ Ð¸Ð·Ð¼ÐµÐ½ÐµÐ½Ð¸Ð¹ Ð² ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½Ð¾Ð¹ ÑÐµÑÐµÐ²Ð¾Ð¹ Ð¸Ð½ÑÑÐ°ÑÑÑÑÐºÑÑÑÐµ Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÑÐ¸ÑÑÐ¾Ð²ÑÑ Ð¾ÑÐ¿ÐµÑÐ°ÑÐºÐ¾Ð² ÑÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ð¹ Ð¿ÑÐ¾ÑÐ¾ÐºÐ¾Ð»Ð¾Ð²
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð¼Ð°Ð³Ð¸ÑÑÑÐ°
titleType: Subtitle
title: Identification of changes in the corporate network infrastructure by analyzing digital fingerprints of protocol implementations
Creators: name: ÐÐ¾Ð½Ð¸Ð½Ð°, ÐÐ¾Ð»Ð¸Ð½Ð°
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2022
Subjects: ÐÐ°Ð·Ñ Ð´Ð°Ð½Ð½ÑÑ
ÐÐ½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÐµ ÑÐ¸ÑÑÐµÐ¼Ñ
ÑÐ¸ÑÑÐ¾Ð²ÑÐµ Ð¾ÑÐ¿ÐµÑÐ°ÑÐºÐ¸
Ð¾ÑÐµÐ½ÐºÐ° Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ Ð¿ÑÐ¸Ð·Ð½Ð°ÐºÐ¾Ð²
ÑÐ°ÑÑÑÐ¾ÑÐ½Ð¸Ðµ ÐÐµÐ²ÐµÐ½ÑÑÐµÐ¹Ð½Ð°
digital fingerprints
feature information assessment
Levenstein distance

description: Ð¢ÐµÐ¼Ð° Ð²ÑÐ¿ÑÑÐºÐ½Ð¾Ð¹ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ: Â«ÐÑÑÐ²Ð»ÐµÐ½Ð¸Ðµ Ð¸Ð·Ð¼ÐµÐ½ÐµÐ½Ð¸Ð¹ Ð² ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½Ð¾Ð¹ ÑÐµÑÐµÐ²Ð¾Ð¹ Ð¸Ð½ÑÑÐ°ÑÑÑÑÐºÑÑÑÐµ Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÑÐ¸ÑÑÐ¾Ð²ÑÑ Ð¾ÑÐ¿ÐµÑÐ°ÑÐºÐ¾Ð² ÑÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ð¹ Ð¿ÑÐ¾ÑÐ¾ÐºÐ¾Ð»Ð¾Ð²Â». ÐÐ°Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð¿Ð¾ÑÐ²ÑÑÐµÐ½Ð° Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ½Ð¾ÑÑÐ¸ ÑÐ¸ÑÑÐ¾Ð²ÑÑ Ð¾ÑÐ¿ÐµÑÐ°ÑÐºÐ¾Ð² Ð¿Ð¾ÑÑÐµÐ´ÑÑÐ²Ð¾Ð¼ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð¸Ð·Ð¼ÐµÐ½ÐµÐ½Ð¸Ð¹ Ð² ÑÐµÑÐµÐ²Ð¾Ð¼ ÑÑÐ°ÑÐ¸ÐºÐµ ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½Ð¾Ð¹ Ð¸Ð½ÑÑÐ°ÑÑÑÑÐºÑÑÑÑ. ÐÐ°Ð´Ð°ÑÐ¸, ÐºÐ¾ÑÐ¾ÑÑÐµ ÑÐµÑÐ°Ð»Ð¸ÑÑ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: ÐÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ðµ Ð¿Ð¾Ð´ÑÐ¾Ð´Ð¾Ð² Ðº Ð°Ð½Ð°Ð»Ð¸Ð·Ñ ÑÐµÑÐµÐ²Ð¾Ð³Ð¾ ÑÑÐ°ÑÐ¸ÐºÐ° Ñ ÑÐµÐ»ÑÑ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð°Ð¿Ð¿Ð°ÑÐ°ÑÐ½ÑÑ Ð¸ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½ÑÑ ÑÑÐµÐ´ÑÑÐ² Ð² ÑÐµÑÐ¸. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐºÐ° Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ¸ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ Ð¸Ð·Ð¼ÐµÐ½ÐµÐ½Ð¸Ð¹ Ð² ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½Ð¾Ð¹ ÑÐµÑÐµÐ²Ð¾Ð¹ Ð¸Ð½ÑÑÐ°ÑÑÑÑÐºÑÑÑÐµ Ð¿Ð¾ÑÑÐµÐ´ÑÑÐ²Ð¾Ð¼ Ð°Ð½Ð°Ð»Ð¸Ð·Ð° ÑÐµÑÐµÐ²Ð¾Ð³Ð¾ ÑÑÐ°ÑÐ¸ÐºÐ°. ÐÑÐµÐ½ÐºÐ° ÑÑÑÐµÐºÑÐ¸Ð²Ð½Ð¾ÑÑÐ¸ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½Ð¾Ð¹ Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ¸ Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð¸Ñ ÑÐºÑÐ¿ÐµÑÐ¸Ð¼ÐµÐ½ÑÐ° Ð½Ð° ÑÐ¾Ð±ÑÐ°Ð½Ð½ÑÑ Ð´Ð°Ð½Ð½ÑÑ. Ð Ð°Ð±Ð¾ÑÐ° Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð° Ð½Ð° Ð±Ð°Ð·Ðµ ÐÐ Â«ÐÐÐ Â«ÐÐµÐºÑÐ¾ÑÂ», Ð³Ð´Ðµ ÑÐ¾Ð±Ð¸ÑÐ°Ð»Ð°ÑÑ Ð·Ð½Ð°ÑÐ¸ÑÐµÐ»ÑÐ½Ð°Ñ ÑÐ°ÑÑÑ ÑÐ°ÐºÑÐ¸ÑÐµÑÐºÐ¾Ð³Ð¾ Ð¼Ð°ÑÐµÑÐ¸Ð°Ð»Ð°: Ð¾Ð¿Ð¸ÑÐ°Ð½Ð¸Ðµ ÑÑÐµÐ½Ð´Ð° Ð´Ð»Ñ ÑÐ±Ð¾ÑÐ° ÑÑÐ°ÑÐ¸ÐºÐ°, Ð¾ÑÐºÑÑÑÑÐµ Ð±Ð°Ð·Ñ Ð´Ð°Ð½Ð½ÑÑ ÑÐ¸ÑÑÐ¾Ð²ÑÑ Ð¾ÑÐ¿ÐµÑÐ°ÑÐºÐ¾Ð², Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð°Ñ ÑÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ñ ÑÑÐ½ÐºÑÐ¸Ð¾Ð½Ð°Ð»Ð°, Ð¸ÑÐ¿Ð¾Ð»ÑÐ·ÑÐµÐ¼Ð¾Ð³Ð¾ Ð² ÑÐ°Ð±Ð¾ÑÐµ. Ð­ÐºÑÐ¿ÐµÑÐ¸Ð¼ÐµÐ½ÑÐ°Ð»ÑÐ½Ð°Ñ ÑÐ°ÑÑÑ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð° Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð° Ð½Ð° Ð¾ÑÐ½Ð¾Ð²Ðµ Ð¾ÑÐºÑÑÑÐ¾Ð¹ Ð±Ð°Ð·Ñ Ð´Ð°Ð½Ð½ÑÑ TLS-Ð¾ÑÐ¿ÐµÑÐ°ÑÐºÐ¾Ð² Â«CiscoÂ» Ð¸ Ð±Ð°Ð·Ñ TCP-Ð¾ÑÐ¿ÐµÑÐ°ÑÐºÐ¾Ð² Â«SatoriÂ». Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ Ð±ÑÐ» Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½ ÑÐºÑÐ¿ÐµÑÐ¸Ð¼ÐµÐ½Ñ ÑÐ¾ ÑÐ±Ð¾ÑÐ¾Ð¼ ÑÑÐ°ÑÐ¸ÐºÐ° Ð¸ Ð°Ð½Ð°Ð»Ð¸Ð·Ð¾Ð¼ ÑÐ¸ÑÑÐ¾Ð²ÑÑ Ð¾ÑÐ¿ÐµÑÐ°ÑÐºÐ¾Ð², Ð¿ÑÐ¸ÑÑÑÑÑÐ²ÑÑÑÐ¸Ñ Ð² ÑÐ¾Ð±ÑÐ°Ð½Ð½ÑÑ Ð´Ð°Ð½Ð½ÑÑ.
description: The subject of the graduate qualification work is: Â«Identification of changes in the corporate network infrastructure by analyzing digital fingerprints of protocol implementationsÂ». The given work is devoted to studying of the authenticity of digital fingerprints by identifying changes in the network traffic of corporate infrastructure. The research set the following goals: 1. To explore approaches to the analysis of network traffic in order to identify hardware and software in the network. 2. Development of a methodology for detecting changes in corporate network infrastructure by analyzing network traffic. 3. Evaluating the effectiveness of the developed methodology by conducting an experiment on the collected data. The work was carried out on the basis of JSC Â«Research Institute Â«VectorÂ», where a significant part of the factual material was collected: description of the stand for traffic collection, open databases of digital fingerprints, software implementation of the functionality used in the work. The experimental part of the work was carried out on the basis of the open TLS Fingerprints database Â«CiscoÂ» and the TCP Fingerprints database Â«SatoriÂ». As a result, an experiment with traffic collection and analysis of digital fingerprints present in the collected data was conducted.