Abstract
It is great significance for network administrators, researchers, service providers and users to accurately identify network bandwidth occupied by what application and who. It is the foundation for network planning, troubleshooting, intrusion detection, traffic monitoring, accounting management, and user behavior analysis. Traffic analysis based on full data has high requirements of storage space and CPU processing power. Traffic analysis based on NetFlow requires network equipment to support NetFlow. The availability of former and the accuracy of the latter are challenged when data traffic up to 1Gbp or higher.In this paper, we consider user preferences, server address database, application layer protocol features and NetFlow technology when designing the application layer protocol identification algorithms, which can improve the availability and accuracy of identification, experimental results it works well.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Jiang, J., Papavassiliou, S.: A Network Fault Diagnostic Approach Based on a Statistical Traffic Normality Prediction Algorithm. In: Proceedings of IEEE GLOBECOM, 20031291822922
Marina, T., Ji, C.: Adaptive Thresholding for Proactive Network Problem Detection. In: IEEE International Workshop on Systems Management, Rhode Island, Newport, 10821161 (1998)
Goldman, A.: Anomaly Detection Based on an Iterative Local Statisticals Approach. IEEE Signal Processing 84(7), 44024431 (2004)
Mahoney, M.V.: Network Traffic Anomaly Detection Based on Packet Bytes. In: SAC 2003. ACM, Melbourne (2003)
Hellerstein, J.L., Zhang, F., Shahabuddin, P.: Characterizing Normal Operation of a Web Server: Application to Workload Forecasting and Problem Detection
Yang, W., Gu, L.: Time Series Analysis and Dynamic Data Modeling. Press of Beijing University of Science and Engineering, Beijing (1981)
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2012 Springer-Verlag GmbH Berlin Heidelberg
About this chapter
Cite this chapter
Xiaoju, L., Mingyong, Y., Hai, L. (2012). Application Layer Protocol Identification Algorithm Design. In: Zhang, Y. (eds) Future Communication, Computing, Control and Management. Lecture Notes in Electrical Engineering, vol 141. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-27311-7_41
Download citation
DOI: https://doi.org/10.1007/978-3-642-27311-7_41
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-27310-0
Online ISBN: 978-3-642-27311-7
eBook Packages: EngineeringEngineering (R0)