Please use this identifier to cite or link to this item:
Title: Can multiscale traffic analysis be used to differentiate Internet applications
Author: Rocha, E.
Salvador, P.
Nogueira, A.
Keywords: Application identification
Cluster analysis
Multifractal behavior
Multiscale analysis
Internet protocols
Network management
Network security
Spectrum analysis
Telecommunication networks
Computer aided network analysis
Issue Date: 2011
Publisher: Springer Verlag
Abstract: An accurate mapping of Internet traffic to applications can be important for a broad range of network management and measurement tasks, including traffic engineering, service differentiation, performance/failure monitoring and security. Traditional mapping approaches have become increasingly inaccurate because many applications use nondefault or ephemeral port numbers, use well-known port numbers associated with other applications, change application signatures or use traffic encryption. In this paper we will demonstrate that multiscale traffic analysis based on multi-order wavelet spectrum can be used as a discriminator of Internet applications traffic profiles. By performing clustering analysis over the multiscale wavelet spectrum coefficients that are inferred from the measured traffic, the proposed methodology is able to efficiently differentiate different IP applications without using any payload information. This characteristic will allow the differentiation of traffic flows in unencrypted and encrypted scenarios. In order to compare the differentiating potential of different traffic application data, upload, download and joint upload and download flow statistics are considered to evaluate the identification approach for each selected protocol. Moreover, we also evaluate which timescales and spectrum orders are more relevant for the traffic differentiation. From the analysis of the obtained results we can conclude that the proposed methodology is able to achieve good identification results using asmall set of timescales of a single order wavelet spectrum of a general raw traffic statistic. © 2010 Springer Science+Business Media, LLC.
Peer review: yes
DOI: 10.1007/s11235-010-9331-1
ISSN: 1018-4864
Appears in Collections:DETI - Artigos

Files in This Item:
File Description SizeFormat 
fulltext.pdfMain article866.5 kBAdobe PDFrestrictedAccess

Formato BibTex MendeleyEndnote Degois 

Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.