Traffic Identification Based on Applications using Statistical Signature Free from Abnormal TCP Behavior
DC Field | Value | Language |
---|---|---|
dc.contributor.author | An, Hyun-Min | - |
dc.contributor.author | Lee, Su-Kang | - |
dc.contributor.author | Ham, Jae-Hyun | - |
dc.contributor.author | Kim, Myung-Sup | - |
dc.date.accessioned | 2021-09-04T13:09:12Z | - |
dc.date.available | 2021-09-04T13:09:12Z | - |
dc.date.created | 2021-06-18 | - |
dc.date.issued | 2015-09 | - |
dc.identifier.issn | 1016-2364 | - |
dc.identifier.uri | https://scholar.korea.ac.kr/handle/2021.sw.korea/92643 | - |
dc.description.abstract | As network traffic becomes more complex and diverse from the existence of new applications and services, application-based traffic classification is becoming important for the effective use of network resources. To remedy the drawbacks of traditional methods, such as port-based or payload-based traffic classification, traffic classification methods based on the statistical information of a flow have recently been proposed. However, abnormal TCP behaviors, such as a packet retransmission or out-of-order packets, cause inconsistencies in the statistical information of a flow. Furthermore, the analysis results cannot be trusted without resolving the abnormal behaviors. In this paper, we analyze the limitations of traffic classification caused by abnormal TCP behavior, and propose a novel application-based traffic classification method using a statistical signature with resolving abnormal TCP behaviors. The proposed method resolves abnormal TCP behaviors and generates unique signatures for each application using the packet order, direction, and payload size of the first N packets in a flow, and uses them to classify the application traffic. The evaluation shows that this method can classify application traffic easily and quickly with high accuracy rates of over 99%. Furthermore, the method can classify traffic generated by applications that use the same application protocol or are encrypted. | - |
dc.language | English | - |
dc.language.iso | en | - |
dc.publisher | INST INFORMATION SCIENCE | - |
dc.subject | PACKET SIZE | - |
dc.subject | CLASSIFICATION | - |
dc.title | Traffic Identification Based on Applications using Statistical Signature Free from Abnormal TCP Behavior | - |
dc.type | Article | - |
dc.contributor.affiliatedAuthor | Kim, Myung-Sup | - |
dc.identifier.scopusid | 2-s2.0-84940056866 | - |
dc.identifier.wosid | 000362464100011 | - |
dc.identifier.bibliographicCitation | JOURNAL OF INFORMATION SCIENCE AND ENGINEERING, v.31, no.5, pp.1669 - 1692 | - |
dc.relation.isPartOf | JOURNAL OF INFORMATION SCIENCE AND ENGINEERING | - |
dc.citation.title | JOURNAL OF INFORMATION SCIENCE AND ENGINEERING | - |
dc.citation.volume | 31 | - |
dc.citation.number | 5 | - |
dc.citation.startPage | 1669 | - |
dc.citation.endPage | 1692 | - |
dc.type.rims | ART | - |
dc.type.docType | Article | - |
dc.description.journalClass | 1 | - |
dc.description.journalRegisteredClass | scie | - |
dc.description.journalRegisteredClass | scopus | - |
dc.relation.journalResearchArea | Computer Science | - |
dc.relation.journalWebOfScienceCategory | Computer Science, Information Systems | - |
dc.subject.keywordPlus | PACKET SIZE | - |
dc.subject.keywordPlus | CLASSIFICATION | - |
dc.subject.keywordAuthor | application-level traffic classification | - |
dc.subject.keywordAuthor | application identification | - |
dc.subject.keywordAuthor | statistical signature | - |
dc.subject.keywordAuthor | signature-based classification | - |
dc.subject.keywordAuthor | statistics-based classification | - |
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.
(02841) 서울특별시 성북구 안암로 14502-3290-1114
COPYRIGHT © 2021 Korea University. All Rights Reserved.
Certain data included herein are derived from the © Web of Science of Clarivate Analytics. All rights reserved.
You may not copy or re-distribute this material in whole or in part without the prior written consent of Clarivate Analytics.