CAPEC Definitions / CAPEC-324
CAPEC-324: TCP (ISN) Sequence Predictability Probe
This type of operating system probe attempts to determine an estimate for how predictable the sequence number generation algorithm is for a remote host. Statistical techniques, such as standard deviation, can be used to determine how predictable the sequence number generation is for a system. This result can then be compared to a database of operating system behaviors to determine a likely match for operating system and version.
Extended Description
No Extended Description.
Mitigations
No Mitigations found.
Relationships with other CAPECs
CAPEC-312: Active OS Fingerprinting
Prerequisites
The ability to monitor and interact with network communications.Access to at least one host, and the privileges to interface with the network interface card.
Related Weaknesses
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
