Repositório Institucional da Universidade de Aveiro > Departamento de Electrónica, Telecomunicações e Informática > DETI - Artigos >
 Can multiscale traffic analysis be used to differentiate Internet applications
Please use this identifier to cite or link to this item http://hdl.handle.net/10773/5283

title: Can multiscale traffic analysis be used to differentiate Internet applications
authors: Rocha, E.
Salvador, P.
Nogueira, A.
keywords: Application identification
Cluster analysis
Multifractal behavior
Multiscale analysis
Internet protocols
Network management
Network security
Spectrum analysis
Telecommunication networks
Computer aided network analysis
issue date: 2011
publisher: Springer Verlag
abstract: An accurate mapping of Internet traffic to applications can be important for a broad range of network management and measurement tasks, including traffic engineering, service differentiation, performance/failure monitoring and security. Traditional mapping approaches have become increasingly inaccurate because many applications use nondefault or ephemeral port numbers, use well-known port numbers associated with other applications, change application signatures or use traffic encryption. In this paper we will demonstrate that multiscale traffic analysis based on multi-order wavelet spectrum can be used as a discriminator of Internet applications traffic profiles. By performing clustering analysis over the multiscale wavelet spectrum coefficients that are inferred from the measured traffic, the proposed methodology is able to efficiently differentiate different IP applications without using any payload information. This characteristic will allow the differentiation of traffic flows in unencrypted and encrypted scenarios. In order to compare the differentiating potential of different traffic application data, upload, download and joint upload and download flow statistics are considered to evaluate the identification approach for each selected protocol. Moreover, we also evaluate which timescales and spectrum orders are more relevant for the traffic differentiation. From the analysis of the obtained results we can conclude that the proposed methodology is able to achieve good identification results using asmall set of timescales of a single order wavelet spectrum of a general raw traffic statistic. © 2010 Springer Science+Business Media, LLC.
URI: http://hdl.handle.net/10773/5283
ISSN: 1018-4864
publisher version/DOI: http://dx.doi.org/10.1007/s11235-010-9331-1
source: Telecommunication Systems
appears in collectionsDETI - Artigos

files in this item

file description sizeformat
fulltext.pdfMain article866.5 kBAdobe PDFview/open
Restrict Access. You can Request a copy!

Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.


Valid XHTML 1.0! RCAAP OpenAIRE DeGóis
ria-repositorio@ua.pt - Copyright ©   Universidade de Aveiro - RIA Statistics - Powered by MIT's DSpace software, Version 1.6.2