SigBox: Automatic Signature Generation Method for Fine-Grained Traffic Identification
DC Field | Value | Language |
---|---|---|
dc.contributor.author | Shim, Kyu-Seok | - |
dc.contributor.author | Yoon, Sung-Ho | - |
dc.contributor.author | Lee, Su-Kang | - |
dc.contributor.author | Kim, Myung-Sup | - |
dc.date.accessioned | 2021-09-03T09:06:06Z | - |
dc.date.available | 2021-09-03T09:06:06Z | - |
dc.date.created | 2021-06-16 | - |
dc.date.issued | 2017-03 | - |
dc.identifier.issn | 1016-2364 | - |
dc.identifier.uri | https://scholar.korea.ac.kr/handle/2021.sw.korea/84322 | - |
dc.description.abstract | The continual appearance of new applications and their frequent updates emphasize the need for automatic signature generation. Although several automatic methods have been proposed, there are still limitations to their adoption in a real network environment in terms of automation, robustness, and elaboration. To address this issue, we propose an automatic signature generation method, so called SigBox, for fine-grained traffic identification. Using a modified sequence pattern algorithm, this system extracts three types of signatures: content, packet, and flow signature. A flow signature, the final result of this system, consists of a series of packet signatures, and a packet signature consists of a series of content signatures. A content signature is defined as a distinguishable and unique substring of the packet payload. By using the modified sequence pattern algorithm, we can improve the system performance in terms of automation and robustness. In addition, the proposed method can generate an elaborated signature for fine-grained traffic identification by using flow-level features beyond those of the packet level. In order to verify the feasibility of our proposed system, we present the results of experiments based on ten popular applications according to three defined metrics: redundancy, coverage, and accuracy. In addition, we show the quality of the generated signatures as compared to those produced by existing methods. | - |
dc.language | English | - |
dc.language.iso | en | - |
dc.publisher | INST INFORMATION SCIENCE | - |
dc.subject | CLASSIFICATION | - |
dc.subject | SYSTEM | - |
dc.title | SigBox: Automatic Signature Generation Method for Fine-Grained Traffic Identification | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Kim, Myung-Sup | - |
dc.identifier.scopusid | 2-s2.0-85046888642 | - |
dc.identifier.wosid | 000396960800015 | - |
dc.identifier.bibliographicCitation | JOURNAL OF INFORMATION SCIENCE AND ENGINEERING, v.33, no.2, pp.537 - 569 | - |
dc.relation.isPartOf | JOURNAL OF INFORMATION SCIENCE AND ENGINEERING | - |
dc.citation.title | JOURNAL OF INFORMATION SCIENCE AND ENGINEERING | - |
dc.citation.volume | 33 | - |
dc.citation.number | 2 | - |
dc.citation.startPage | 537 | - |
dc.citation.endPage | 569 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.subject.keywordPlus | CLASSIFICATION | - |
dc.subject.keywordPlus | SYSTEM | - |
dc.subject.keywordAuthor | traffic identification | - |
dc.subject.keywordAuthor | traffic classification | - |
dc.subject.keywordAuthor | automatic signature generation | - |
dc.subject.keywordAuthor | sequence pattern algorithm | - |
dc.subject.keywordAuthor | Apriori algorithm | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
(02841) 서울특별시 성북구 안암로 14502-3290-1114
COPYRIGHT © 2021 Korea University. All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.