Presentation	2005-12-15 Application Classification Method based on Flow Behavior Analysis Tsutomu KITAMURA, Takayuki SHIZUNO, Toshiya OKABE,
PDF Download Page	PDF download Page Link
Abstract(in Japanese)	(See Japanese page)
Abstract(in English)	Existing gateway equipments such as session border controller (SBC) or firewall gateway identify and control application packet flows by analyzing packet headers and payloads - such as TCP/UDP port numbers and specific bit strings. However this approach is not effective under the following conditions, where 1) applications use intentionally well-known ports with improper use, 2) the payloads are encrypted. We have developed an application classification method based on analyzing flow behaviors - such as packet size, inter-arrival time between packets. We evaluated the proposed method in application classification performance. The results show that the proposed method can work in the above conditions.
Keyword(in Japanese)	(See Japanese page)
Keyword(in English)	Flow Behavior / Application Classification
Paper #	NS2005-136
Date of Issue

Conference Information
Committee	NS
Conference Date	2005/12/8(1days)
Place (in Japanese)	(See Japanese page)
Place (in English)
Topics (in Japanese)	(See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To	Network Systems(NS)
Language	JPN
Title (in Japanese)	(See Japanese page)
Sub Title (in Japanese)	(See Japanese page)
Title (in English)	Application Classification Method based on Flow Behavior Analysis
Sub Title (in English)
Keyword(1)	Flow Behavior
Keyword(2)	Application Classification
1st Author's Name	Tsutomu KITAMURA
1st Author's Affiliation	NEC Corporation()
2nd Author's Name	Takayuki SHIZUNO
2nd Author's Affiliation	NEC Corporation
3rd Author's Name	Toshiya OKABE
3rd Author's Affiliation	NEC Corporation
Date	2005-12-15
Paper #	NS2005-136
Volume (vol)	vol.105
Number (no)	470
Page	pp.pp.-
#Pages	4
Date of Issue