Smartphone reconnaissance, the first step to launch security attacks to a target smartphone, enables an adversary to tailor attacks by exploiting the known vulnerabilities of the target system. In this paper we investigate smartphone OS identification with encrypted traffic. We propose four algorithms to do that, which are based on the spectral analysis of the encrypted traffic. The algorithms are designed for high identification accuracy by removing noise frequency components and for high efficiency in terms of computation complexity. We evaluate the identification algorithms with smartphone traffic collected over three months. The experiment results show that the algorithms can identify the smartphone OS accurately. The identification accuracy can reach 100% with only 30 seconds of smartphone traffic.

中文翻译：

---

迈向智能手机操作系统识别

智能手机侦察是对目标智能手机发起安全攻击的第一步，它使攻击者能够利用目标系统的已知漏洞来定制攻击。在本文中，我们研究了具有加密流量的智能手机操作系统识别。我们提出了四种算法来做到这一点，它们基于对加密流量的频谱分析。这些算法旨在通过去除噪声频率分量来实现高识别精度，并在计算复杂性方面实现高效率。我们使用三个月内收集的智能手机流量评估识别算法。实验结果表明，该算法能够准确识别智能手机操作系统。智能手机流量仅需30秒，识别准确率可达100%。