文章基本信息

标题：Network Application Identification Using Sequential Transition Patterns of Payload Length
本地全文：下载
作者：Yuji WAIZUMI ; Tsuyoshi SATO ; Kazuyuki TANAKA 等
期刊名称：Interdisciplinary Information Sciences
印刷版ISSN：1340-9050
电子版ISSN：1347-6157
出版年度：2012
卷号：18
期号：2
页码：189-196
DOI：10.4036/iis.2012.189
出版社：The Editorial Committee of the Interdisciplinary Information Sciences
摘要：A person-to-person information sharing is easily realized by P2P networks that servers are not essential. Information leakages, which are caused by malicious accesses for P2P networks, has become new social issues. To prevent information leakage, it is necessary to detect and block traffics of P2P software. Since some P2P softwares can spoof port numbers, it is difficult to detect the traffics sent from P2P softwares by using port numbers. It is more difficult to devise effective countermeasures for detecting the software because their protocol are not public. In this paper, we propose a method to identify applications using sequential transition patterns of payload length. Through real traffic experiment we show that proposed method can quickly and accurately identify network applications.
关键词：network application identification;packet size transition pattern