Digging into HTTPS: Flow-based classification of webmail traffic

Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC

Volumn , Issue , 2010, Pages 322-327

  Schatzmann, Dominik ^a   Mühlbauer, Wolfgang ^a   Spyropoulos, Thrasyvoulos ^a   Dimitropoulos, Xenofontas ^a  

^a ETH ZURICH   (Switzerland)

Author keywords

Flow level data; HTTPS traffic; Traffic classification; Webmail

Indexed keywords

ELECTRONIC MAIL; HTTP; TELECOMMUNICATION TRAFFIC;

FLOW BASED; FLOW-LEVEL; FLOW-LEVEL DATA; HOTMAIL; HTTPS TRAFFIC; IMMINENT THREATS; INTERNET MAIL; OUTLOOK WEB ACCESS; TRAFFIC CLASSIFICATION; WEBMAIL;

CLASSIFICATION (OF INFORMATION);

EID: 78650901973     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1879141.1879184     Document Type: Conference Paper

References (31)

1. T. Auld, A. Moore, and S. Gull. Bayesian Neural Networks for Internet Traffic Classification. IEEE Transactions on Neural Networks, 2007.
2. L. Bernaille, R. Teixeira, and K. Salamatian. Early application identification. In Proc. of ACM CoNEXT, 2006.
3. Trojan Now Uses Hotmail, Gmail as Spam Hosts. http://news.bitdefender. com/NW544-en-n-\-Trojan-Now-Uses-Hotmail-as-Spam-Hosts.html, 2007.
4. C. Chang and C. Lin. LIBSVM: a Library for Support Vector Machines, 2001. www.csie.ntu.edu.tw/~cjlin/libsvm.
5. T. Choi, C. Kim, S. Yoon, J. Park, B. Lee, H. Kim, and H. Chung. Content-Aware Internet Application Traffic Measurement and Analysis. In Proc. of IEEE/IFIP NOMS, 2005.
6. Email client popularity. http://www.campaignmonitor.com/stats/email- clients.
7. M. Crotti, M. Dusi, F. Gringoli, and L. Salgarelli. Traffic Classification Through Simple Statistical Fingerprinting. ACM SIGCOMM CCR, 2007.
8. H. Dreger, A. Feldmann, M. Mai, V. Paxson, and R. Sommer. Dynamic Application-Layer Protocol Analysis for Network Intrusion Detection. In Proc. of USENIX Security Symposium, 2006.
9. P. Haffner, S. Sen, O. Spatscheck, and D. Wang. Acas: Automated Construction of Application Signatures. In Proc. of SIGCOMM MineNet Workshop, 2005.
10. S. Hao, N. Feamster, A. Gray, N. Syed, and S. Krasser. Detecting Spammers with SNARE: Spatio-Temporal Network-level Automatic Reputation Engine. In Proc. of USENIX Security Symposium, 2009.
11. The Horde Project. www.horde.org.
12. Scammers Exploit Public Lists of Hijacked Hotmail Passwords. http://www.computerworld.com/s/article/9139092/Scammers-exploit-public-lists-of- hijacked-Hotmail-passwords, 2007.
13. M. Iliofotou, P. Pappu, M. Faloutsos, M. Mitzenmacher, and G. Varghese. Network Monitoring Using Traffic Dispersion Graphs. In Proc. of ACM IMC, 2007.
14. T. Karagiannis, K. Papagiannaki, and M. Faloutsos. BLINC: Multilevel Traffic Classification in the Dark. In Proc. of ACM SIGCOMM, 2005.
15. T. Karagiannis, K. Papagiannaki, N. Taft, and M. Faloutsos. Profiling the End Host. In Proc. of PAM, 2007.
16. H. Kim, K. Claffy, M. Fomenkov, D. Barman, M. Faloutsos, and K. Lee. Internet Traffic Classification Demystified: Myths, Caveats, and the Best Practices. In Proc. of ACM CoNEXT, 2008.
17. H. Kim, M. Fomenkov, K. Claffy, N. Brownlee, D. Barman, and M. Faloutsos. Comparison of Internet Traffic Classification Tools. In Proc. of IMRG workshop on application classification and identification report, 2009.
18. W. Li, A. W. Moore, and M. Canini. Classifying HTTP Traffic in the New Age. In ACM SIGCOMM, Poster Session, 2008.
19. Z. Li, R. Yuan, and X. Guan. Accurate Classification of the Internet Traffic Based on the SVM Method. In Proc. of IEEE International Conference on Communications (ICC), 2007.
20. A. McGregor, M. Hall, P. Lorier, and J. Brunskill. Flow Clustering Using Maching Learning Techniques. In Proc. of PAM, 2004.
21. The Middleware Threats. http://biz.yahoo.com/msft/p7.html.
22. A. Moore and D. Zuev. Internet Traffic Classification Using Bayesian Analysis Techniques. In Proc. of ACM SIGMETRICS, 2005.
23. A. W. Moore and P. Konstantina. Toward the Accurate Identification of Network Applications. In Proc. of PAM, 2005.
24. J. Myers and A. Well. Research Design and Statistical Analysis (2nd edition). Routledge, 2002.
25. Microsoft Outlook Web Access. www.microsoft.com/exchange/code/OWA/index. html.
26. A. Ramachandran and N. Feamster. Understanding the Network-Level Behavior of Spammers. In Proc. of ACM SIGCOMM, 2006.
27. M. Roughan, S. Sen, O. Spatschek, and N. Duffield. Class-of-Service Mapping for QoS: a Statistical Signature-Based Approach to IP Traffic Classification. In Proc. of ACM IMC, 2004.
28. D. Schatzmann, M. Burkhart, and T. Spyropoulos. Inferring Spammers in the Network Core. In Proc. of PAM, 2009.
29. F. Schneider, S. Agarwal, T. Alpcan, and A. Feldmann. The New Web: Characterizing AJAX Traffic. In Proc. of PAM, 2008.
30. S. Sen, O. Spatscheck, and D. Wang. Accurate, Scalable In-Network Identification of P2P Traffic Using Application Signatures. In Proc. of WWW, 2004.
31. The Swiss Education and Research Network (SWITCH). http://www.switch.ch.