APPARATUS AND METHOD FOR GENERATING SIGNATURE OF OPERATING SYSTEM

摘要

PURPOSE: An OS signature generating apparatus and a method thereof are provided to automatically generate an OS signature of a host terminal operated as a client or a server by generating header information of a TCP packet the OS signature on a network. CONSTITUTION: A packet collector(110) collects a packet which passes through a monitoring point. A TCP flow generator(120) extracts a TCP(Transmission Control Protocol) packet from the packet and generates a TCP packet flow. A host information extractor(130) extracts an HTTP(Hypertext Transfer Protocol) traffic from the TCP packet flow and extracts identification information of the host terminal from the HTTP traffic. A host packet extractor(140) extracts the packet flow of the host terminal from the TCP packet flow based on the identification information of the host terminal. [Reference numerals] (110) Packet collector; (120) TCP flow generator; (130) Host information extractor; (140) Host packet extractor; (150) Operating system signature generator; (160) Operating system pattern management unit