Using visual motifs to classify encrypted traffic

Proceedings of the 3rd International Workshop on Visualization for Computer Security, VizSEC'06. Co-located with the 13th ACM Conference on Computer and Communications Security, CCS'06

Volumn , Issue , 2006, Pages 41-50

  Wright, Charles V ^a   Monrose, Fabian ^a   Masson, Gerald M ^a  

^a JOHNS HOPKINS UNIVERSITY   (United States)

Author keywords

Network security; Network traffic visualization; Traffic classification

Indexed keywords

HUMAN OPERATORS; NETWORK TRAFFIC; NETWORK TRAFFIC VISUALIZATION; TRAFFIC CLASSIFICATION;

CLASSIFICATION (OF INFORMATION); CRYPTOGRAPHY; HUMAN COMPUTER INTERACTION; NETWORK PROTOCOLS; NETWORK SECURITY;

TELECOMMUNICATION TRAFFIC;

EID: 34547343780     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1179576.1179584     Document Type: Conference Paper

References (21)

1. th Usenix Security Symposium, pages 1-14, August 2003.
2. th Annual Computer Security Applications Conference, pages 46-55, December 2003.
3. D. Faxon, R. D. King, J. T. Rigsby, S. Bernard, and E. J. Wegman. Data cleansing and preparation at the gates: A data-streaming perspective. In 2004 Proceedings of the American Statistical Association, August 2004.
4. T. Goldring. Scatter (and other) plots for visualizing user profiling data and network traffic. In VizSEC/DMSEC '04: Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pages 119-123, New York, NY, USA, 2004. ACM Press.
5. T. Karagiannis, K. Papagiannaki, and M. Faloutsos. BLINC: Multilevel traffic classification in the dark. In ACM SIGCOMM, August 2005.
6. S. Kent and R. Atkinson. RFC 2406: IP encapsulating security payload (ESP), November 1998.
7. K. Lakkaraju, W. Yurcik, and A. J. Lee. NVisionIP: netfiow visualizations of system state for security situational awareness. In VizSEC/DMSEC '04: Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pages 65-72, 2004.
8. J. Lin, E. Keogh, and S. Lonard. Visualizing and diacovering non-trivial patterns in large time series databases. Information Visualization Journal, 4(2):61-82, April 2005.
9. th Anuual Passive and Active Measurement Workshop (PAM 2004), April 2004.
10. th Anuual Passive and Active Measurement Workshop (PAM 2005), March 2005.
11. A. Moore and D. Zuev. Internet traffic classification using Bayesian analysis techniques. In Proceedings of the ACM SIGMETRICS, June 2005.
12. R. Pang, M. Allman, V. Paxson, and J. Lee. The Devil and Packet Trace Anonymization. In ACM Computer Communication Review, 36(1), pages 29-38, January 2006.
13. L. Rabiner, A. Rosenberg, and S. Levinson. Considerations in dynamic time warping algorithms for discrete word recognition. IEEE Transactions on Acoustics, Speech, and Signal Processing, 26(6):575-582, December 1978.
14. th USENIX Security Symposium, August 2001.
15. C. Wright, F. Monrose, and G. M. Masson. HMM profiles for network traffic classification (extended abstract). In VizSEC/DMSEC '04: Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pages 9-15, October 2004.
16. C. V. Wright, F. Monrose, and G. M. Masson. On inferring application protocol behaviors in encrypted network traffic. Journal of Machine Learning Research, Special Topic on Machine Learning for Computer Security. (to appear).
17. X. Yin, W. Yurcik, M. Treaster, Y. Li, and K. Lakkaraju. Visfiowconnect: netflow visualizations of link relationships for security situational awareness. In VizSEC/DMSEC '04: Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security, pages 26-34, 2004.
18. th European Symposium on Research in Computer Security (ESORICS), pages 191-205, October 2000.
19. th USENIX Security Symposium, pages 157-170, August 2000.
20. th USENIX Security Symposium, pages 171-184, August 2000.
21. D. Zuev and A. Moore. Traffic classification using a statistical approach. In Proceedings of the Passive and Active Measurement Workshop (PAM2005), March/April 2005.