This paper proposes KISS, a novel Internet classifica- tion engine. Motivated by the expected raise of UDP traffic, which stems from the momentum of Peer-to-Peer (P2P) streaming appli- cations, we propose a novel classification framework that leverages on statistical characterization of payload. Statistical signatures are derived by the means of a Chi-Square-like test, which extracts the protocol “format,” but ignores the protocol “semantic” and “synchronization” rules. The signatures feed a decision process based either on the geometric distance among samples, or on Sup- port Vector Machines. KISS is very accurate, and its signatures are intrinsically robust to packet sampling, reordering, and flow asym- metry, so that it can be used on almost any network. KISS is tested in different scenarios, considering traditional client–server proto- cols, VoIP, and both traditional and new P2P Internet applications. Results are astonishing. The average True Positive percentage is 99.6%, with the worst case equal to 98.1,% while results are al- most perfect when dealing with new P2P streaming applications.
KISS: Stochastic Packet Inspection Classifier for UDP Traffic / Finamore, Alessandro; Mellia, Marco; Meo, Michela; Rossi, D.. - In: IEEE-ACM TRANSACTIONS ON NETWORKING. - ISSN 1063-6692. - STAMPA. - 18:5(2010), pp. 1505-1515. [10.1109/TNET.2010.2044046]
|Titolo:||KISS: Stochastic Packet Inspection Classifier for UDP Traffic|
|Data di pubblicazione:||2010|
|Digital Object Identifier (DOI):||http://dx.doi.org/10.1109/TNET.2010.2044046|
|Appare nelle tipologie:||1.1 Articolo in rivista|