Discovering packet structure through lightweight hierarchical clustering

IEEE International Conference on Communications

Volumn , Issue , 2008, Pages 33-39

  Hijazi, Abdulrahman ^a,b   Inoue, Hajime ^a,b   Matrawy, Ashraf ^a,b   Van Oorschot, P C ^a,b   Somayaji, Anil ^a,b  

^a CARLETON UNIVERSITY   (Canada)

^b ATC NY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATIONS; CHLORINE COMPOUNDS; COMPUTER CRIME; DECISION MAKING; DECISION THEORY; DECISION TREES; FLOW OF SOLIDS; INFORMATION SERVICES; INTERNET; INTERNET PROTOCOLS; MATHEMATICAL MODELS; PORTS AND HARBORS; SYSTEMS ENGINEERING;

INTERNATIONAL CONFERENCES; NETWORK TRAFFICS;

COMPUTER NETWORKS;

EID: 51249095142     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICC.2008.15     Document Type: Conference Paper

References (25)

1. Bittorrent protocol specification. http://www.bittorrent.org/protocol. html.
2. L. Bernaille, R. Teixeira, and K. Salamatian. Early application identification. In Proceedings of CONEXT, 2006.
3. Gerald Combs et al. Wireshark. http://www.wireshark.org, 2007.
4. R. O. Duda, P. E. Hart, and D. G. Stork. Pattern Classification, 2nd ed., chapter Unsupervised Learning and Clustering. Wiley, 2001.
5. J. Erman, A. Mahanti, and M. Arlitt. Internet traffic identification using machine learning. In Proceedings of IEEE GlobeCom, 2006.
6. C. Estan, S. Savage, and G. Varghese. Automatically inferring patterns of resource consumption in network traffic. In Proceedings of ACM SIGCOMM, 2003.
7. J. Frank. Artificial intelligence and intrusion detection: Current and future directions. In Proceedings of the 17th National Computer Security Conference, oct 1994.
8. H. Inoue, D. Jansens, A. Hijazi, and A. Somayaji. NetADHICT: A tool for understanding network traffic. In Proceedings of the 21st Large Installation System Administration Conference (LISA'07), Nov 2007.
9. Hajime Inoue, Abdulrahman Hijazi, and Dana Jansens. NetADHICT. http://www.ccsl.carleton.ca/software.
10. T. Karagiannis, A. Broido, N. Brownlee, K. Claffy, and M. Faloutsos. Is p2p dying or just hiding? In IEEE Computer Society Press, editor, Proceedings of IEEE GLOBECOM, Dallas, Texas, November 2004.
11. T. Karagiannis, K. Papagiannaki, and M. Faloutsos. BLINC: Multilevel traffic classification in the dark. In ACM SIGMETRICS, 2005.
12. H. Kim and B. Karp. Autograph: Toward Automated, Distributed Worm Signature Detection. In Proceedings of the 13th USENIX Security Symposium, August 2004.
13. E. Kohler, J. Li, V. Paxson, and S. Shenker. On the structure of addresses in ip traffic. In Proceedings of ACM Internet Measurement Workshop, 2002.
14. W.E. Leland, M.S. Taqq, W. Willinger, and D.V. Wilson. On the self-similar nature of Ethernet traffic. In ACM SIGCOMM, pages 183-193.
15. J. Ma, K. Levchenko, C. Kreibich, S. Savage, and G. M. Voelker. Unexpected means of protocol inference. In ACM IMC, 2006.
16. R. Mahajan, S. Bellovin, S. Floyd, J. Ioannidis, V. Paxson, and S. Shenker. Controlling High Bandwidth Aggregates in the Network. In ACM SIGCOMM Computer Communications Review, July 2002.
17. A. Matrawy, P.C. van Oorschot, and A. Somayaji. Mitigating network denial-of-service through diversity-based traffic management. In Applied Cryptography and Network Security (ACNS'05). Springer, 2005.
18. A. McGregor, M. Hall, P. Lorier, and J. Brunskill. Flow clustering using machine learning techniques. In Proceedings of Passive and Active Measurement Workshop, 2004.
19. V. Paxson and S. Floyd. Wide area traffic: the failure of Poisson modeling. IEEE/ACM Transactions on Networking, 3(3):226-244, 1995.
20. J. A. Pouwelse, P. Garbacki, D. H. J. Epema, and H. J. Sips. The Bittorrent P2P file-sharing system: Measurements and analysis. In Proceedings of 4th Int'l Workshop on Peer-to-Peer Systems (IPTPS), Feb 2005.
21. M. Roughan, S. Sen, O. Spatscheck, and N. Duffield. Class-of-service mapping for qos: a statistical signature-based approach to ip traffic classification. In Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, pages 135-148, 2004.
22. S. Singh, C. Estan, G. Varghese, and S. Savage. The EarlyBird System for Real-time Detection of Unknown Worms. Technical report - cs2003-0761, UCSD, 2003.
23. S. Singh, C. Estan, G. Varghese, and S. Savage. Automated Worm Fingerprinting. In Proceedings of 6th USENIX Symposium on Operating Systems Design and Implementation (OSDI'04), December 2004.
24. S. Zander, T.T.T. Nguyen, and G. Armitage. Automated traffic classification and application identification using machine learning. In Proceedings of IEEE LCN, 2005.
25. G. K. Zipf. The Psychobiology of Language. Houghton-Mifflin, 1935.