Experience with high-speed automated application-identification for network-management

ANCS'09: Symposium on Architecture for Networking and Communications Systems

Volumn , Issue , 2009, Pages 209-218

  Canini, Marco ^a   Li, Wei ^b   Zadnik, Martin ^c   Moore, Andrew W ^b  

^a UNIVERSITY OF GENOA   (Italy)

^b UNIVERSITY OF CAMBRIDGE   (United Kingdom)

^c CESNET   (Czech Republic)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER ARCHITECTURE; NETWORK MANAGEMENT;

AUTOMATED APPLICATIONS; CONTROL NETWORK; EFFICIENT METHOD; HIGH THROUGHPUT; HIGH-SPEED; HIGH-SPEED PACKET PROCESSING; PACKET LABELING; REAL TRAFFIC;

NETWORK ARCHITECTURE;

EID: 78650502486     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1882486.188253     Document Type: Conference Paper

References (17)

1. M. Roesch. Snort - Lightweight Intrusion Detection for Networks. In Proceedings of USENIX LISA'99, 1999.
2. V. Paxson. Bro: a system for detecting network intruders in real-time. Computer Networks, 31(23-24):2435-2463, 1999.
3. J.W. Lockwood et al. "NetFPGA-an open platform for gigabit-rate network switching and routing". In IEEE International Conference on Microelectronic Systems Education (MSE'07), 2007.
4. L. Bernaille et al. Early application identification. In Proceedings of the ACM CoNEXT'06, December 2006.
5. W. Li et al. Efficient application identification and the temporal and spatial stability of classification schema. Computer Networks, 53(6):790-809, Apr 2009.
6. M. Dusi et al. Tunnel Hunter: Detecting application-layer tunnels with statistical fingerprinting. Computer Networks, 53(1):81-97, Jan 2009.
7. G. Maier et al. Enriching network security analysis with time travel. In Proceedings of ACM SIGCOMM'08, 2008.
8. R. Morris et al. The Click Modular Router. ACM Trans. Comput. Syst., 18(3):263-297, 2000.
9. A. Broder & M. Mitzenmacher. Network applications of bloom filters: A survey. Internet Mathematics, 1(4):485-609, 2003.
10. C. Estan and G. Varghese. New directions in traffic measurement and accounting: Focusing on the elephants, ignoring the mice. ACM Trans. Comput. Syst., 21(3):270-313, 2003.
11. A. Kumar et al. Space-code bloom filter for efficient per-flow traffic measurement. In Proceedings of IEEE INFOCOM, Mar 2004.
12. R. Pang et al. Characteristics of internet background radiation. In Proceedings of IMC'04, 2004.
13. R. Karedla et al. Caching strategies to improve disk system performance. Computer, 27(3), 1994.
14. M. Canini et al. GTVS: Boosting the collection of application traffic ground truth. In Proceedings of TMA'09, May 2009.
15. M. Attig and J.W. Lockwood. SIFT: Snort intrusion filter for TCP. In Proceedings of the 13th Symposium on High Performance Interconnects (HOTI'05), 2005.
16. H. Song et al. Snort offloader: A reconfigurable hardware NIDS filter. In Proceedings of FPL'05, 2005.
17. J. Gonzalez et al. Shunting: A hardware/software architecture for flexible, high-performance network intrusion prevention. In Proceedings of CCS'07, 2007.