Fast payload-based flow estimation for traffic monitoring and network security

2005 Symposium on Architectures for Networking and Communications Systems, ANCS 2005

Volumn , Issue , 2005, Pages 211-220

  Hao, Fang ^a   Kodialam, Murali ^a   Lakshman, T V ^a   Zhang, Hui ^b  

^a LUCENT TECHNOLOGIES   (United States)

^b NEC LABORATORIES AMERICA   (United States)

Author keywords

Network security; Traffic estimation; Traffic monitoring

Indexed keywords

ALARM GENERATION; ANALYSIS AND SIMULATION; BLOOM FILTERS; FLOW ESTIMATION; IN-NETWORK MANAGEMENT; IP FLOW; LONGEST COMMON SUBSEQUENCE PROBLEM; MEMORY-EFFICIENT ALGORITHMS; ON FLOW; PACKET HEADER; POTENTIAL APPLICATIONS; TRAFFIC ENGINEERING; TRAFFIC ESTIMATION; TRAFFIC MONITORING; VIRUS SIGNATURES;

ALGORITHMS; ESTIMATION; HIGHWAY ENGINEERING; INTERNET; NETWORK MANAGEMENT; PROBLEM SOLVING; TRAFFIC CONTROL;

NETWORK SECURITY;

EID: 50049119954     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ANCS.2005.4675281     Document Type: Conference Paper

References (20)

1. Broder, A.Z., "Some Applications of Rabin's Fingerprinting Method", in Sequences II: Methods in Communications, Security and Computer Science, R. Capocelli, A. De Santis, U. Vaccaro (eds) 1993.
2. Rao, C.R., Linear Statistical Inference and its Applications, John Wiley, 1973.
3. T.S. Ferguson., A Course in Large Sampling Theory, Chapman and Hall, 1996.
4. Chan, C, and Lu, H., "Fingerprinting using Polynomials: Rabin's Method", CMPUT690 Technical Report, University of Alberta, 2001.
5. H. Kim and B. Karp, "Autograph: Toward Automated, Distributed Work Signature Detection", Proceedings of the 13th Usenix Security Symposium (Security 2004), 2004.
6. C. Kreibich and and J. Crowcroft, "Honeycomb-Creating Intrusion Detection Signatures using Honeypots", HotnetsII, 2003.
7. C.J. Coit, S. Staniford, and J. McAlerny, "Towards Faster String Matching for Pattern Detection or Exceeding the Speed of Snort", Proceedings of the 2nd DARPA Information Survivability Conference and Exposition (DISCEX II), 2001.
8. S. Dharmapurikar, P. Krishnamurthy, T. Sproull, and J. Lockwood, "Deep Packet Inspection using Parallel Bloom Filters", Symposium on High Performance Interconnects (HotI), 2003.
9. S. Singh, C. Estan, G. Varghese and S. Savage, "TheEarlyBird System for Real-Time Detection of Unknown Works", Technical Report CS2003-0761, UCSD, 2003.
10. C. Estan, S. Savage and G. Varghese, "Automatically Inferring Patterns of Resource Consumption in Network Traffic", Proceedings of ACM SIGCOMM, Aug. 2003.
11. C. Estan, and G. Varghese, "New Directions in Traffic Measurement and Accounting", Proceedings of ACM SIGCOMM, Aug. 2002.
12. C. Estan, G. Varghese, and M. Fisk, "Bitmap Algorithms for Counting Active Flows on High Speed Links", Internet Measurement Conference, Oct. 2003.
13. U. Manber, "Finding Similar Files in a Large File System", USENIX Winter 1994 Technical Conference, PP. 1-10, 1994.
14. M.O. Rabin "Fingerprinting by Random Polynomials", Center for Research in Computing Technology, Harvard University, Tech Report TR-CSE-03-01, 1981 .
15. J. Twycross and M.M. Williamson, , "Implementing and Testing a New Virus Throttle", 12th USENIX Security Symposium, 2003.
16. Sprint ATL, http://ipmon.sprint.com.
17. http://www.caida.org/analysis/security/witty.
18. http://www.clamav.net.
19. Hao, F., Kodialam, M., Lakshman, T. V., and Zhang, H., "Fast, Memory-Efficient Traffic Estimation by Coincidence Counting", Proceedings of INFOCOM'2005.
20. Hao, F., Kodialam, M., and Lakshman, T. V., "Real-Time Detection of Hidden Traffic Patterns", Proceedings of ICNP'2004.