Research of the Enhanced Anti-Xprobe2

Anti-Xprobe2 defenses OS fingerprinting detection of Xprobe2 by camouflaging response packets. In this paper, aiming at that the separation of the detection data is achieved using a static data set in the original event separation module, which results in higher false alarm rate, the enhanced An-ti-Xprobe2 is proposed. Event separation module is improved, which is described by a finite state machine. The effectiveness of the proposed method is proved with experimental results.