Towards automated application signature generation for traffic identification

NOMS 2008 - IEEE/IFIP Network Operations and Management Symposium: Pervasive Management for Ubiquitous Networks and Services

Volumn , Issue , 2008, Pages 160-167

  Park, Byung Chul ^a   Won, Young J ^a   Kim, Myung Sup ^b   Hong, James W ^a  

^a Pohang University of Science and Technology (POSTECH)   (South Korea)

^b Korea University   (South Korea)

Author keywords

Application signautre; Automated signature generation; Internet application traffic identification; Traffic measurement and analysis

Indexed keywords

INFORMATION SERVICES; INTERNET; INTERNET PROTOCOLS; LAWS AND LEGISLATION; NETWORK PROTOCOLS; PACKET SWITCHING; UBIQUITOUS COMPUTING;

ALTERNATIVE APPROACH; APPLICATION PROTOCOLS; APPLICATION SIGNAUTRE; AUTOMATED SIGNATURE GENERATION; EXHAUSTIVE SEARCH; HIGH-ACCURACY; INTERNET APPLICATION TRAFFIC IDENTIFICATION; INTERNET APPLICATIONS; NETWORK OPERATIONS; PROPRIETARY PROTOCOLS; SIGNATURE GENERATION; TRAFFIC IDENTIFICATION; TRAFFIC MEASUREMENT AND ANALYSIS; UBIQUITOUS NETWORKS;

NETWORK MANAGEMENT;

EID: 51849134180     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/NOMS.2008.4575130     Document Type: Conference Paper

References (17)

1. S. Sen and J. Wang. "Analyzing peer-to-peer traffic across large networks," 2002 ACM SIGCOMM Internet Measurement Workshop, Marseilles, France, Nov. 2002.
2. K. P. Gummadi, R. J. Dunn, S. Saroiu, S. D. Gribble, H. M. Levy, and J. Zahorjan. "Measurement, modeling, and analysis of a peer-to-peer Filesharing workload," 19th ACM Symposium on Operating Systems Principles (SOSP-19), October 2003.
3. Subhabrata Sen, Oliver Spatscheck, Dongmei Wang. "Accurate, Scalable In-Network Identification of P2P Traffic Using Application Signatures," WWW 2004 Conference.
4. H. Kim, B. Karp. "Autograph: Toward automated, distributed worm signature detection," 13th Usenix Security Symposium, 2004.
5. S. Singh, C. Estan, G. Varghese, S. Savage. "Automated Worm Fingerprinting," 6th USENIX Symposium on Operating Systems Design and Implementation, 2004.
6. Sumeet Singh, Cristian Estan, George Varghese and Stefan Savage. "The EarlyBird System for Real-time Detection of Unknown Worms", UCSD Tech Report CS2003-0761, August 2003.
7. W. Scheirer, M. Chuah. "Comparison of Three Sliding-Window Based Worm Signature Generation Schemes," Technical Report LU-CSE-05-025.
8. Thomas Karagiannis, Andre Broido, Michalis Faloutsos, and KC Claffy. "Transport layer identification of p2p traffic," Internet Measurement Conference (IMC), 2004.
9. Young J. Won, Byung-Chul Park, Hong-Taek Ju, Myung-Sup Kim, and James W. Hong. "A Hybrid Approach for Accurate Application Traffic Identification," IEEE/IFIP E2EMON Workshop, Vancouver, April 2006, pp. 1-8.
10. Winpcap. http://www.winpcap.org/.
11. Thomas H. Cormen, Charles E. Leiserson, Ronald L. Rivest, and Clifford Stein, Introduction to Algorithms, 2nd Edition, MIT Press, 2001.
12. David Brumley, James Newsome, Dawn Song, Hao Wang, and Somesh Jha. "Towards Automatic Generation of Vulnerability Signatures," IEEE Symposium on Security and Privacy, May 2006.
13. James Newsome, Brad Karp, Dawn Song. "Polygraph: Automatic Signature Generation for Polymorphic Worms," IEEE Security and Privacy Symposium, May 2005.
14. James Newsome and Dawn Song. "Dynamic Taint Analysis: Automatic Detection, Analysis, and Signature Generation of Exploit Attacks on Commodity Software," Network and Distributed Systems Security Symposium, Feb 2005.
15. Sven Ehlert and Sandrine Petgang, "Analysis and Signature of Skype VoIP Session Traffic," Franunhofer FOKUS Technical Report NGNI-SKYPE-06b, Berlin, Germany, July, 2006.
16. Laurent Bernaille and Renata Teixeira, "Early Recognition of Encrypted Applications," PAM 2007, Louvain-la-neuve, Belgium, April 5-6, 2007, pp. 165-175.
17. The Gnutella protocol specification, http://www9.limewire.com/developer/ gnutella_protocol_0.4.pdf.