[Nets-seminars] Nets-seminar in just over one hour (4 pm)

Felipe Huici f.huici at cs.ucl.ac.uk
Wed Nov 23 14:49:01 GMT 2005


THIS IS AT 4 PM TODAY, ROOM 6.12

--------------------------------------------------------------------------*

Speaker*: Thomas Karagiannis (UC Riverside)

*Title*: BLINC: Multilevel Traffic Classification in the Dark

*Abstract*: We present a fundamentally different approach to classifying
traffic flows according to the applications that generate them. In contrast
to previous methods, our approach is based on observing and identifying
patterns of host behavior at the transport layer. We analyze these patterns
at three levels of increasing detail (i) the social, (ii) the functional and
(iii) the application level. This multilevel approach of looking at traffic
flow is probably the most important contribution of this work. Furthermore,
our approach has two important features. First, it operates in the dark,
having (a) no access to packet payload, (b) no knowledge of port numbers and
(c) no additional information other than what current flow collectors
provide. These restrictions respect privacy, technological and practical
constraints. Second, it can be tuned to balance the accuracy of the
classification versus the number of successfully classified traffic flows.
We demonstrate the effectiveness of our approach on three real traces. Our
results show that we are able to classify 80%- 90% of the traffic with more
than 95% accuracy.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oakham.cs.ucl.ac.uk/pipermail/nets-seminars/attachments/20051123/e0fde06a/attachment.html


More information about the Nets-seminars mailing list