A feasibility study of stateful automaton packet inspection for streaming application detection systems

doi:10.1080/17517575.2016.1234070

淡江大學機構典藏 > 工學院 > 資訊工程學系暨研究所 > 期刊論文 > Item 987654321/115996

請使用永久網址來引用或連結此文件: https://tkuir.lib.tku.edu.tw/dspace/handle/987654321/115996

題名:	A feasibility study of stateful automaton packet inspection for streaming application detection systems
作者:	Tseng, Kuo-Kun;Lo, Jiao;Liu, Yiming;Chang, Shih-Hao;Merabti, Madjid;Felix, C. K. Ng;Wu, Chun-Ho
關鍵詞:	Firewall;packet classification;stateful automaton;Aho–Corasick
日期:	2017-01-25
上傳時間:	2019-03-16 12:10:52 (UTC+8)
摘要:	The rapid development of the internet has brought huge benefits and social impacts; however, internet security has also become a great problem for users, since traditional approaches to packet classification cannot achieve satisfactory detection performance due to their low accuracy and efficiency. In this paper, a new stateful packet inspection method is introduced, which can be embedded in the network gateway and used by a streaming application detection system. This new detection method leverages the inexact automaton approach, using part of the header field and part of the application layer data of a packet. Based on this approach, an advanced detection system is proposed for streaming applications. The workflow of the system involves two stages: the training stage and the detection stage. In the training stage, the system initially captures characteristic patterns from a set of application packet flows. After this training is completed, the detection stage allows the user to detect the target application by capturing new application flows. This new detection approach is also evaluated using experimental analysis; the results of this analysis show that this new approach not only simplifies the management of the state detection system, but also improves the accuracy of data flow detection, making it feasible for real-world network applications.
關聯:	Enterprise Information Systems 11(9), p.1317-1336
DOI:	10.1080/17517575.2016.1234070
顯示於類別:	[資訊工程學系暨研究所] 期刊論文

文件中的檔案:

檔案	描述	大小	格式	瀏覽次數
index.html		0Kb	HTML	194	檢視/開啟

在機構典藏中所有的資料項目都受到原著作權保護.

TAIR相關文章

資料載入中.....