Traffic causality graphs: Profiling network applications through temporal and spatial causality of flows

Proceedings of the 2011 23rd International Teletraffic Congress, ITC 2011

Volumn , Issue , 2011, Pages 95-102

  Asai, Hirochika ^a   Fukuda, Kensuke ^b   Esaki, Hiroshi ^a  

^a UNIVERSITY OF TOKYO   (Japan)

^b NII/PRESTO JST ^*  (Japan)

Author keywords

[No Author keywords available]

Indexed keywords

APPLICATION PROGRAMS; APPLICATION PROTOCOLS; DATA SETS; GROUND TRUTH; NETWORK APPLICATIONS; NETWORK OPERATOR; PACKET PAYLOADS; PROFILING APPLICATION; ROOT CAUSE; USER AGENTS;

INTERNET PROTOCOLS; USER INTERFACES; VISUALIZATION;

WEB BROWSERS;

EID: 80054978961     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (22)

1. T. Karagiannis, A. Broido, M. Faloutsos, and K. claffy, "Transport layer identification of P2P traffic," in ACM IMC '04, pp. 121-134, 2004.
2. Sourcefire, Inc., "Snort." http://www.snort.org/.
3. J. Levandoski, E. Sommer, and M. Strait, "Application Layer Packet Classifier for Linux." http://l7-filter.sourceforge.net/.
4. OpenDPI.org, "OpenDPI." http://www.opendpi.org/.
5. S. Sen, O. Spatscheck, and D. Wang, "Accurate, scalable in-network identification of P2P traffic using application signatures," in WWW '04, pp. 512-521, 2004.
6. P. Haffner, S. Sen, O. Spatscheck, and D. Wang, "ACAS: Automated construction of application signatures," in ACM SIGCOMM MineNet Workshop '05, MineNet '05, pp. 197-202, 2005.
7. A. W. Moore and K. Papagiannaki, "Toward the accurate identification of network applications," in PAM '05, vol. 3431, pp. 41-54, 2005.
8. A. W. Moore and D. Zuev, "Internet traffic classification using bayesian analysis techniques," in ACM SIGMETRICS '05, pp. 50-60, 2005.
9. M. Crotti, M. Dusi, F. Gringoli, and L. Salgarelli, "Traffic classification through simple statistical fingerprinting," ACM SIGCOMM Comput. Commun. Rev., vol. 37, no. 1, pp. 5-16, 2007.
10. J. Erman, A. Mahanti, M. Arlitt, and C. Williamson, "Identifying and discriminating between web and peer-to-peer traffic in the network core," in WWW '07, pp. 883-892, 2007.
11. G. Dewaele, K. Fukuda, P. Borgnat, P. Abry, and K. Cho, "Extracting hidden anomalies using sketch and non gaussian multiresolution statistical detection procedures," in ACM SIGCOMM LSAD '07, pp. 145-152, 2007.
12. I. Trestian, S. Ranjan, A. Kuzmanovi, and A. Nucci, "Unconstrained endpoint profiling (Googling the Internet)," in ACM SIGCOMM '08, pp. 279-290, 2008.
13. T. Karagiannis, K. Papagiannaki, and M. Faloutsos, "BLINC: Multilevel traffic classification in the dark," in ACM SIGCOMM '05, pp. 229-240, 2005.
14. T. Karagiannis, K. Papagiannaki, N. Taft, and M. Faloutsos, "Profiling the end host," in PAM '07, vol. 4427, pp. 186-196, 2007.
15. M. Iliofotou, P. Pappu, M. Faloutsos, M. Mitzenmacher, S. Singh, and G. Varghese, "Network monitoring using traffic dispersion graphs (TDGs)," in ACM IMC '07, pp. 315-320, 2007.
16. M. Iliofotou, M. Faloutsos, and M. Mitzenmacher, "Exploiting dynam-icity in graph-based traffic analysis: Techniques and applications," in ACM CoNEXT '09, pp. 241-252, 2009.
17. Y. Jin, E. Sharafuddin, and Z.-L. Zhang, "Unveiling core network-wide communication patterns through application traffic activity graph decomposition," in ACM SIGMETRICS '09, pp. 49-60, 2009.
18. V. Perelman, N. Melnikov, and J. Schoenwaelder, "Flow signatures of popular applications," in IFIP/IEEE IM 2011, pp. 9-16, 2011.
19. M. Iliofotou, B. Gallagher, T. Eliassi-Rad, G. Xie, and M. Faloutsos, "Profiling-by-association: A resilient traffic profiling solution for the Internet backbone," in CoNEXT '10, p. 12, ACM, 2010.
20. L. Popa, B.-G. Chun, I. Stoica, J. Chandrashekar, and N. Taft, "Macro-scope: End-point approach to networked application dependency discovery," in ACM CoNEXT '09, pp. 229-240, 2009.
21. S. Kandula, R. Chandra, and D. Katabi, "What's going on?: Learning communication rules in edge networks," in ACM SIGCOMM '08, pp. 87-98, 2008.
22. H.-S. Wu, N.-F. Huang, and G.-H. Lin, "Identifying the use of data/voice/video-based P2P traffic by DNS-query behavior," in IEEE ICC '09, p. 5, 2009.