Presentation 2006-12-15
An Application Identification Technology based on Flow Behaviors
Tsutomu KITAMURA, Takayuki SHIZUNO, Toshiya OKABE,
PDF Download Page PDF download Page Link
Abstract(in Japanese) (See Japanese page)
Abstract(in English) Current application identification practices rely on the use of signatures, which are unique bit patterns in packet payloads, and of transport-layer port numbers. Signatures and port numbers are not, however, necessarily reliable for application identification, since many current applications may operate on inconsistent ports and encrypt packet payloads. To address this problem, we have developed an application identification technology based on flow behaviors such as packet sizes and inter-arrival times between packets. This technology is applicable to identify applications, which operate on inconsistent ports and encrypt packet payloads, without relying on signatures and port numbers. In this paper, we report a border control system, which identifies applications based on flow behaviors and controls application flows.
Keyword(in Japanese) (See Japanese page)
Keyword(in English) application identification / flow behaviors / flow control
Paper # NS2006-145
Date of Issue

Conference Information
Committee NS
Conference Date 2006/12/7(1days)
Place (in Japanese) (See Japanese page)
Place (in English)
Topics (in Japanese) (See Japanese page)
Topics (in English)
Chair
Vice Chair
Secretary
Assistant

Paper Information
Registration To Network Systems(NS)
Language JPN
Title (in Japanese) (See Japanese page)
Sub Title (in Japanese) (See Japanese page)
Title (in English) An Application Identification Technology based on Flow Behaviors
Sub Title (in English)
Keyword(1) application identification
Keyword(2) flow behaviors
Keyword(3) flow control
1st Author's Name Tsutomu KITAMURA
1st Author's Affiliation NEC Corporation()
2nd Author's Name Takayuki SHIZUNO
2nd Author's Affiliation NEC Corporation
3rd Author's Name Toshiya OKABE
3rd Author's Affiliation NEC Corporation
Date 2006-12-15
Paper # NS2006-145
Volume (vol) vol.106
Number (no) 418
Page pp.pp.-
#Pages 4
Date of Issue