Application classification using packet size distribution and port association

Journal of Network and Computer Applications

Volumn 32, Issue 5, 2009, Pages 1023-1030

  Lin, Ying Dar ^a   Lu, Chun Nan ^a   Lai, Yuan Cheng ^b   Peng, Wei Hao ^a   Lin, Po Ching ^a  

^a NATIONAL CHIAO TUNG UNIVERSITY   (Taiwan)

^b NATIONAL TAIWAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Taiwan)

Author keywords

Packet size distribution; Ports association; Traffic classification; Transport layer behaviors

Indexed keywords

ACCURACY RATE; COMMON NETWORKS; ENCRYPTED MESSAGES; ENCRYPTED TRAFFIC; FALSE NEGATIVE RATE; FALSE POSITIVE; MANAGEMENT APPLICATIONS; MINIMUM DISTANCE; MULTI-DIMENSIONAL SPACE; NETWORK MONITORING; PACKET PAYLOADS; PACKET SIZE; PACKET SIZE DISTRIBUTION; PORT NUMBERS; PORTS ASSOCIATION; REPRESENTATIVE POINT; TRAFFIC CLASSIFICATION; TRANSPORT LAYER BEHAVIORS;

CRYPTOGRAPHY; INTRUSION DETECTION; KNOWLEDGE BASED SYSTEMS; PACKET NETWORKS; POWER SPECTRAL DENSITY; PULSE SHAPING CIRCUITS; SIZE DETERMINATION; SIZE DISTRIBUTION; TELECOMMUNICATION TRAFFIC;

INTERNET;

EID: 67649458219     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2009.03.001     Document Type: Review

References (26)

1. Bernaille L, Teixeira R, Akodjenou I, Soule A, Salamatian K. Traffic classification on the fly. In: Proceedings of the ACM SIGCOMM computer communication review, 2006.
2. BitTorrent. 〈http://bitconjurer.org/BitTorrent〉.
3. Crotti M, Gringoli F, Pelosato P, Salgarelli L. A statistical approach to IP-level classification of network traffic. In: Proceedings of the 41th IEEE international conference on communications, June 2006.
4. Crotti M, Dusi M, Gringoli F, Salgarelli L. Traffic Classification through Simple Statistical Fingerprinting. In: ACM SIGCOMM computer communication review on vol. 37, no. 1, January 2007.
5. Divakaran DM, Murthy HA, Gonsalves TA. Traffic modeling and classification using packet train length and packet train size. In: IPOM 2006.
6. eMule. 〈http://www.emule-project.net/〉.
7. Fraleigh C, Moon S, Lyles B, Cotton C, Khan M, Moll D, et al. Packet-level traffic measurements from the sprint IP backbone. In: Proceedings of the IEEE Network, 2003.
8. Hernandez-Campos F, Donelson F, Jeffay Smith K., Nobel AB. Statistical clustering of internet communications Patterns. In: computing science and statistics, vol. 35, July 2003.
9. Huang Nen-Fu, Jai Gin-Yuan, Chao Han-Chieh. A high accurate machine-learning algorithm for identifying application traffic in early stage. In: Proceedings of the IEEE ICC, 2008.
10. Karagiannis T, Papagiannaki K, Faloutsos M. BLINC: multilevel traffic classification in the dark. In: Proceedings of the conference on applications, technologies, architectures, and protocols for computer communications SIGCOMM, 2005.
11. Karagiannis T, Broido A, Brownlee N, Claffy K, Faloutsos M. Is P2P dying or just hiding? In: Proceedings of the IEEE GLOBECOM, 2004a.
12. Karagiannis T, Broido A, Faloutsos M, Claffy K. Transport layer identification of P2P traffic. In: Proceedings of the fourth ACM SIGCOMM conference on internet measurement, 2004b.
13. McGregor A, Hall M, Lorier P, Brunskill J. Flow clustering using machine learning techniques. In: Proceedings of the fifth passive and active measurement workshop (PAM 2004), March 2004.
14. Moore AW, Papagiannaki K. Toward the Accurate Identification of Network Applications. In: Proceedings of the sixth passive and active measurement workshop (PAM 2005), October 2005.
15. Moore A, Zuev D. Internet traffic classification using Bayesian analysis techniques. In: Proceedings of ACM international conference on measurement and modeling of computer systems (SIGMETERICS), 2005.
16. Moore D, Keys K, Koga R, Lagache E, Claffy KC. The CoralReef software suite as a tool for system and network Administrators. In: LISA '01: Proceedings of the 15th USENIX conference on systems administration, December 2001.
17. Netlimiter. 〈http://www.netlimiter.com〉.
18. Nguyen T, Armitage G. Training on multiple sub-flows to optimize the use of machine learning classifiers in real-world IP networks. In: Proceedings of IEEE 31st conference on local computer network (LCN 2006), 2006.
19. Nguyen T, Armitage G. A survey of techniques for internet traffic classification using machine learning. In: Proceedings of the IEEE communications on surveys and tutorials, 2008.
20. Paxson V. Empirically derived analytic models of wide-area TCP connections. In: Proceedings of the IEEE/ACM transactions on networking, August 1994.
21. Paxson V. Bro: a system for detecting network intruders in real-time. In: Computer networks, 1999.
22. Paxson V, Floyd S. Wide area traffic: the failure of Poisson modeling. In: Proceedings of the IEEE/ACM transactions on networking, June 1995.
23. Roesch M. SNORT: Lightweight intrusion detection for networks. In: LISA '99: Proceedings of the 13th USENIX conference on systems administration, November 1999.
24. Roughan M, Sen S, Spatscheck O, Duffield N. Class-of-service mapping for qos: A statistical signature-based approach to IP traffic classification. In: Proceeding of the IMC, 2004.
25. Saifulla MA, Murthy HA, Gonsalves TA. Identifying patterns in internet traffic. In: Proceedings of the 15th international conference on computer communication, 2002.
26. Zander S, Nguyen T, Armitage G. Automated traffic classification and application identification using machine learning. In: Proceedings of IEEE conference on local computer networks (LCN 2005), 2005.