Identification of traffic flows hiding behind TCP port 80

IEEE International Conference on Communications

Volumn , Issue , 2010, Pages

  Dainotti, Alberto ^a   Gargiulo, Francesco ^a   Kuncheva, Ludmila I ^b   Pescapè, Antonio ^a   Sansone, Carlo ^a  

^a UNIVERSITY OF NAPLES FEDERICO II   (Italy)

^b BANGOR UNIVERSITY   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

ENCRYPTED TRAFFIC; FIREWALL ARCHITECTURE; IDENTIFICATION APPROACH; NETWORK TRAFFIC; PORT NUMBERS; REAL TRAFFIC; SIGN PATTERNS; STAND -ALONE; TCP PORTS; TIME PERIODS; TRAFFIC FLOW; TRAFFIC IDENTIFICATION;

DECISION TREES; QUALITY OF SERVICE; TRAFFIC SURVEYS;

NETWORK SECURITY;

EID: 77955400669     PISSN: 05361486     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICC.2010.5502266     Document Type: Conference Paper

References (34)

1. M. Mellia, A. Pescapé, L. Salgarelli, "Traffic classification and its applications to modern networks", Computer Networks, Vol. 53, Issue 6, 759-760, April 2009.
2. T. Karagiannis, A. Broido, N. Brownlee, KC Claffy, M. Faloutsos. "Is p2p dying or just hiding?". In IEEE Globecom, 2004.
3. A. Moore and K. Papagiannaki. "Toward the accurate identification of network applications". In PAM, April 2005.
4. L7-filter, Application Layer Packet Classifier for Linux. http://l7-filter.sourceforge.net.
5. V. Paxson, "Bro: A system for detecting network intruders in realtime". In Computer Networks, pages 23-24, 1999.
6. T. Karagiannis, A. Broido, M. Faloutsos, KC Claffy. "Transport layer identification of p2p traffic". In ACM IMC, October 2004.
7. A. Moore, D. Zuev. "Internet traffic classification using bayesian analysis techniques". In ACM SIGMETRICS, June 2005.
8. J. Erman, A. Mahanti, M. Arlitt. "Internet traffic identification using machine learning". In IEEE Globecom, November 2006.
9. S. Zander, T. Nguyen, G. Armitage "Automated traffic classification and application identification using machine learning" IEEE LCN, Nov. 2005.
10. T. Auld, A. Moore, S. Gull. "Bayesian neural networks for internet traffic classification". IEEE Trans. Neural Networks, 18(1):223-239, Jan. 2007 (Pubitemid 46062929)
11. L. Bernaille, R. Teixeira, K. Salamatian. "Early application Identification". In ACM CoNEXT, December 2006.
12. J. Erman, A. Mahanti, M. Arlitt, I. Cohen, C. Williamson. "Offline/realtime traffic classification using semi-supervised Learning". In IFIP Performance, October 2007.
13. T. Karagiannis, K. Papagiannaki, M. Faloutsos. "Blinc: Multilevel traffic classification in the dark". In ACM SIGCOMM, August 2005.
14. L. Bernaille and R. Teixeira. "Early recognition of encrypted Applications". In PAM 2007, pages 165-175.
15. S. Zander, T. Nguyen, G. Armitage. "Self-learning ip traffic classification based on statistical flow characteristics". In PAM, 2005.
16. N. Williams, S. Zander, G. Armitage. "A preliminary performance comparison of five machine learning algorithms for practical ip traffic flow classification". ACM SIGCOMM CCR, 36(5):7-15, October 2006.
17. L. Salgarelli, F. Gringoli, T. Karagiannis. "Comparing traffic classifiers". ACM SIGCOMM CCR, 37(3):65-68, 2007.
18. A. Dainotti, W. De Donato, A. Pescapé, P. Salvo Rossi, "Classification of Network Traffic via Packet-Level Hidden Markov Models", IEEE GLOBECOM 2008 - Dec 2008, New Orleans (LA, USA)
19. C. V. Wright, F. Monrose, G. M. Masson. "On inferring application protocol behaviors in encrypted network traffic". Journal of Machine Learning Research, 7:2745-2769, December 2006.
20. F. Gargiulo, L.I.Kuncheva, C. Sansone, "Network Protocol Verification by a Classifier Selection Ensemble". In Proc. of the 8th Conference on Multiple Classifier Systems (MCS), 2009.
21. A. Dainotti, W. De Donato, A. Pescapé, "TIE: a Community-Oriented Traffic Classification Platform", TMA'09, May 2009, Aachen (Germany)
22. http://tie.comics.unina.it
23. L.I. Kuncheva. Combining Pattern Classifiers: Methods and Algorithms. Wiley-Interscience, 2004.
24. L.A. Rastrigin, R.H. Erenstein. Method of Collective Recognition. Energoizdat, Moscow, 1981. (In Russian).
25. K. Woods, W.P. Kegelmeyer, K.W. Bowyer. Combination of multiple classifiers using local accuracy estimates. IEEE Trans. Pattern Anal. Mach. Intell., 19(4):405410, 1997.
26. A. Este, F. Gargiulo, F. Gringoli, L. Salgarelli, C. Sansone. "Pattern recognition approaches for classifying ip flows". In volume 5342 of Lecture Notes in Computer Science, pages 885-895. Springer, 2008.
27. E.P. Freire, A. Ziviani, R.M. Salles. "On metrics to distinguish skype flows from http traffic", LANOMS 2007, pages 57-66, 2007.
28. N. Williams, S. Zander, G. Armitage: "A Preliminary Performance Comparison of Five Machine Learning Algorithms for Practical IP Traffic Flow Classification". ACM SIGCOMM CCR, 36(5), 7-15 2006.
29. R.O. Duda, P.E. Hart, D.G. Stork, "Pattern Classification", 2nd edn. Wiley, Chicheste, 2000.
30. http://l7-filter.sourceforge.net/
31. http://www.caida.org/data/
32. M. Crotti, M. Dusi, F. Gringoli, L. Salgarelli. "Traffic classification through simple statistical fingerprinting", ACM SIGCOMM CCR, 2007
33. http://ee.lbl.gov/anonymized-traces.html
34. http://www.grid.unina.it/Traffic/Traces