An novel hybrid method for effectively classifying encrypted traffic

GLOBECOM - IEEE Global Telecommunications Conference

Volumn , Issue , 2010, Pages

  Sun, Guang Lu ^a,d   Xue, Yibo ^a,b   Dong, Yingfei ^c   Wang, Dongsheng ^a,b   Li, Chenglong ^a  

^a TSINGHUA UNIVERSITY   (China)

^b TSINGHUA NATIONAL LABORATORY FOR INFORMATION SCIENCE AND TECHNOLOGY   (China)

^c University of Hawaii at Manoa   (United States)

^d HARBIN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

Author keywords

Encrypted protocol; Hybrid method; Statistical analysis; Traffic classification

Indexed keywords

CRYPTOGRAPHY; LEARNING SYSTEMS; TELECOMMUNICATION TRAFFIC;

CONCRETE APPLICATIONS; ENCRYPTED PROTOCOLS; ENCRYPTED TRAFFIC; HYBRID METHOD; MACHINE LEARNING METHODS; MATCHING METHODS; SIGNATURE-MATCHING; SSL/TLS; STATISTICAL ANALYSIS METHODS; TRAFFIC CLASSIFICATION;

STATISTICAL METHODS;

EID: 79551620659     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/GLOCOM.2010.5683649     Document Type: Conference Paper

References (11)

1. V. Paxson, "Bro: A system for detecting network intruders in real-time," Computer Networks, vol. 31(23-24), pp. 2435-2463, 1999.
2. T. Karagiannis, A. Broido, N. Brownlee, and K. Claffy, "Is P2P dying or just hiding?" in Proceedings of Globecom 2004, Dallas, Texas, USA, November/December 2004.
3. S. Sen, O. Spatscheck, and D. Wang, "Accurate, scalable in network identification of P2P traffic using application signatures," in WWW2004, New York, NY, USA, May 2004.
4. A. Moore and D. Zuev, "Internet traffic classification using Bayesian analysis techniques," in Proc. of ACM SIGMETRICS 2005, Banff, Alberta, Canada, June 2005.
5. M. Dusi, A. Este, F. Gringoli, and L. Salgarelli, "Using GMM and SVM-based Techniques for the Classification of SSH-Encrypted Traffic," The 2009 IEEE International Conference on Communications, Dresden, June 14-18, 2009.
6. T. Nguyen, G. Armitage. "A survey of techniques for Internet traffic classification using machine laerning," IEEE Communications Surveys and Tutorials, 2008.
7. P. Haffner, S. Sen, O. Spatscheck, and D. Wang, "ACAS: Automated Construction of Application Signatures," in SIGCOMM'05 Workshops, Philadelphia, USA, August 22-26, 2005.
8. A. McGregor, M. Hall, P. Lorier, and J. Brunskill, "Flow clustering using machine learning techniques," in Proc. of PAM2004, Antibes Juan-les-Pins, France, April 2004.
9. N. Williams, S. Zander, and G. Armitage, "A preliminary performance comparison of five machine learning algorithms for practical IP traffic flow classification," SIGCOMM Computer Communication Review, vol. 36, no.5, pp.5-16, 2006.
10. T. Dierks, E. Rescorla, "The Transport Layer Security (TLS) Protocol, version 1.2", IETF RFC, 2008.
11. J. Duda, P. Hart and D. Stork, "Pattern Classification (Second Edition)", John wiley&sons Inc, 2001.