AutoSig-automatically generating signatures for applications

Proceedings - IEEE 9th International Conference on Computer and Information Technology, CIT 2009

Volumn 2, Issue , 2009, Pages 104-109

  Mingjiang, Ye ^a   Ke, Xu ^a   Jianping, Wu ^a   Hu, Po ^b  

^a TSINGHUA UNIVERSITY   (China)

^b The Fifth Electronics Research Institute of the Ministry of Industry and Information Technology   (China)

Author keywords

Network management; Signature generation; Traffic classiffication

Indexed keywords

APPLICATION PROTOCOLS; APPLICATION SIGNATURES; AUTOMATIC APPLICATION; NETWORK AREA; NETWORK TRAFFIC; PORT NUMBERS; SIGNATURE GENERATION; SUB-STRINGS; SUBSTRING; TRAFFIC TRACES;

INFORMATION TECHNOLOGY;

PACKET SWITCHING;

EID: 73549107668     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CIT.2009.97     Document Type: Conference Paper

References (15)

1. A. McGregor, M. Hall, P. Lorier, and J. Brunskill. Flow Clustering Using Machine Learning Techniques. In PAM, 2004.
2. J. Erman, A. Mahanti, and M. Arlitt. 'Internet Traffic Identification using Machine Learning,' Proc. of IEEE Globecom, San Francisco, USA, November 2006.
3. A. W. Moore and D. Zuev. Internet Traffic Classification Using Bayesian Analysis Techniques. In ACM SIGMETRICS, 2005.
4. D. Zuev, A. Moore, 'Traffic Classification using a Statistical Approach', Passive & Active Measurement Workshop, Boston, U.S.A, March/April 2005.
5. N. Williams, S. Zander, and G. Armitage, 'A Preliminary Performance Comparison of Five Machine Learning Algorithms for Practical IP Traffic Flow Classification,' SIGCOMM Computer Communications Review, Vol. 36, No. 5, pp. 5-16, 2006.
6. H Dahmouni, S.Vaton, and D. Rossé, 2007. A markovian signature-based approach to IP traffic classification. In Proceedings of the 2005 ACM SIGCOMM Workshop on Mining Network Data, 2005, pp.29-34.
7. A. Moore and K. Papagiannaki, 'Toward the Accurate Identification of Network Applications', Passive and Active Measurements Workshop, 2005.
8. S. Sen O. Spatscheck and D. Wang, 'Accurate, Scalable In-Network Identification of P2P Traffic Using Application Signatures,' Proc. of ACM WWW'04, 2004.
9. S. Fide and S. Jenks, "A Survey of String Matching Approaches in Hardware", Technical Report TR SPDS 06-01, University of California - Irvine, March 2006
10. P. Haffner, S. Sen, O.Spatscheck, and D. Wang, ACAS: automated construction of application signatures. In Proceedings of the 2005 ACM SIGCOMM Workshop on Mining Network Data 2005 pp.197-202.
11. J. Ma, K. Levchenko , C. Kreibich, S. Savage, and G. M Voelker, 2006. Unexpected means of protocol inference. In Proceed-ings of the 6th ACM SIGCOMM Conference on internet Measurement. IMC '06. ACM, pp.313-326
12. S. Singh, C. Estan, G. Varghese, and S. Savage, 2004. Automated worm fingerprinting. In Proceedings of the 6th Conference on Symposium on Opearting Systems Design & Implementation - Volume 6, OSDI 04.
13. H. Kim, B. Karp, Autograph: Toward automatic distributed worm signature detection. In: Proc. of the USENIX Security Symp. Diego, 2004. pp.271-286
14. J. Newsome, B. Karp, and D. Song, 2005. Polygraph: Automatically Generating Signatures for Polymorphic Worms. In Pro-ceedings of the 2005 IEEE Symposium on Security and Privacy, pp.226-241.
15. Byung-Chul Park, Young J. Won, Myung-Sup Kim, and James Won-Ki Hong. 'Towards Automated Application Signature Gen-eration for Traffic Identification,' Proc. of the IEEE/IFIP Network Operations and Management Symposium (NOMS 2008), April 2008, pp. 160-167