Forum Discussion

gbetz's avatar
gbetz
5 years ago

OS Identification: SinFP with Machine Learning Change...

OS Identification: SinFP with Machine Learning Change Operating system (OS) identification Nessus plugins 11936 and 132935 are being updated to use a new machine learning approach that uses models ...
Plugins
Tenable Research
Tenable Research Release
ricky_harding's avatar
ricky_harding
Connect Contributor II
5 years ago

Hi,

This looks really good, especially has on my estate I see a lot of misidentified OSs.

I do have one question though, regarding: "Customers should expect increased accuracy OS fingerprinting of hosts that once had no fingerprint or a low confidence level but should expect to see no or very few vulnerability plugins triggering off the new OS fingerprint."

What percentage would Tenable consider to be low?

One example is: One of our Nessus scanners, running on Centos7 is being passively identified as Windows XP but with a confidence level of

65%.

Thanks Ricky

gbetz's avatar
gbetz
5 years ago

Hello Ricky,

Thank you for your feedback. We set the maximum confidence level for the OS fingerprint for SinFP with Machine Learning to 56. The required confidence level depends on the plugin but generally any confidence level below 75 is considered low.