Skip to content

Device Fingerprinting

What is Device Fingerprinting?

A technique that identifies and tracks devices based on their unique combination of hardware, software, and configuration attributes.

Information Security

Frameworks that govern device fingerprinting

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on device fingerprinting

Requirements naming device fingerprinting across 3 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications1 control

Security Dimension 8 Privacy per X.805 Clause 6.8: Privacy shields what could be inferred by watching activity on the network, for example websites visited by users + their geographic location + the IP addresses and DNS names assigned to devices inside a provi...

X805-Dim8-Privacy-Identification-Network-Activity-Personal-Information-Confidentiality · ITU-T X.805 Security Dimension 8 - Privacy + Identification of Network Activity + Personal Information Confidentiality + Subscriber Anonymity + Pseudonymity + Anti-Tracking + Location Privacy + Data Minimization + GDPR/CCPA Alignment →
OWASP API Security Top 10 - 20231 control

Address API4:2023 Unrestricted Resource Consumption + API6:2023 Unrestricted Access to Sensitive Business Flows per OWASP API Security Top 10 2023.

OWASPAPI-4 · Unrestricted Resource Consumption and Sensitive Business Flows →
W3C Verifiable Credentials (VC) Data Model 2.01 control

The specification's privacy guidance covers a spectrum of privacy from fully identifying to anonymous; software trust boundaries; personally identifiable information; correlation through identifiers, signatures, metadata and device fingerprinting;

w3c-verifiable-credentials-vc-data-model-20::8 · Privacy considerations (non-normative) →

Questions people ask about device fingerprinting

What is Device Fingerprinting?
A technique that identifies and tracks devices based on their unique combination of hardware, software, and configuration attributes.
Why is Device Fingerprinting important for compliance?
Device Fingerprinting is a key concept in Information Security. Understanding device fingerprinting helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Device Fingerprinting?
Device Fingerprinting appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, OWASP API Security Top 10 - 2023, W3C Verifiable Credentials (VC) Data Model 2.0. Across these standards we have identified 3 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Device Fingerprinting?
Explore our compliance framework pages to see how device fingerprinting applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Device Fingerprinting applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.