Traffic Identification Based on Applications using Statistical Signature Free from Abnormal TCP Behavior




Hyun-Min An;Su-Kang Lee;Jae-Hyun Ham;Myung-Sup Kim

Key Words

application-level traffic classification ; application identification ; statistical signature ; signature-based classification ; statistics-based classification


Journal of Information Science and Engineering

Volume or Term/Year and Month of Publication

31卷5期(2015 / 09 / 01)

Page #

1669 - 1692

Content Language


English Abstract

As network traffic becomes more complex and diverse from the existence of new applications and services, application-based traffic classification is becoming important for the effective use of network resources. To remedy the drawbacks of traditional methods, such as port-based or payload-based traffic classification, traffic classification methods based on the statistical information of a flow have recently been proposed. However, abnormal TCP behaviors, such as a packet retransmission or out-of-order packets, cause inconsistencies in the statistical information of a flow. Furthermore, the analysis results cannot be trusted without resolving the abnormal behaviors. In this paper, we analyze the limitations of traffic classification caused by abnormal TCP behavior, and propose a novel application-based traffic classification method using a statistical signature with resolving abnormal TCP behaviors. The proposed method resolves abnormal TCP behaviors and generates unique signatures for each application using the packet order, direction, and payload size of the first N packets in a flow, and uses them to classify the application traffic. The evaluation shows that this method can classify application traffic easily and quickly with high accuracy rates of over 99%. Furthermore, the method can classify traffic generated by applications that use the same application protocol or are encrypted.

Topic Category 基礎與應用科學 > 資訊科學
Times Cited
  1. 楊嘉鳴(2007)。利用物理模擬產生動作轉換且根據高自由度輸入裝置設計的互動式人物動畫系統。臺灣大學資訊工程學研究所學位論文。2007。1-59。 
  2. 翟軍堯(2010)。C60於ITO陽極對電洞注入與傳輸之影響。臺灣大學光電工程學研究所學位論文。2010。1-40。