NDLI: PeerSorter: Classifying Generic P2P Traffic in Real-Time

Content Provider	IEEE Xplore Digital Library
Author	He, Jie Yang, Yuexiang Wang, Xiaolei Zeng, Yingzhi Tang, Chuan
Copyright Year	2014
Abstract	The rapid development of Peer-to-Peer (P2P) technology brings challenges to quality of service (QoS), network planning and access control. An accurate classification of P2P traffic is vital for addressing those challenges. Traditional port-based and payload-based methods fail to cope with emerging port disguise and payload encryption techniques. In this paper, we present Peer Sorter, a system for the classification of generic P2P traffic in real-time. Peer Sorter is featured by four characteristics. Firstly, it can accurately classify nearly all kinds of legitimate P2P applications as well as various P2P botnets, by building application profiles of their significant network activity patterns. Moreover, Peer Sorter is capable of real-time processing, because of its simplicity of mechanism and small classification time windows. In addition, Peer Sorter can be readily extended by adding profiles of new P2P applications. Finally, Peer Sorter can work well even in the scenario where the classification target is running along with other bandwidth consumer (including P2P applications) at the same time. We evaluate the performance of Peer Sorter on traffic datasets of a large variety of P2P applications, including two popular P2P botnets. The experimental results demonstrate that we can classify all the considered types of P2P traffic with an average true positive rate of 97.83% and an average false positive rate below 0.04% within 2 minutes.
Starting Page	605
Ending Page	613
File Size	417881
Page Count	9
File Format	PDF
e-ISBN	9781479979813
DOI	10.1109/CSE.2014.134
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2014-12-19
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Training Protocols real-time Ports (Computers) peer to peer Feature extraction Real-time systems Peer-to-peer computing botnet IP networks traffic classification
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Towards effective feature selection in machine learning-based botnet detection approaches

An analysis of network traffic classification for botnet detection

P2P traffic classification for residential network

Netflow based P2P detection in UDP traffic

PeerDigger: Digging Stealthy P2P Hosts through Traffic Analysis in Real-Time

Role of handshaking packets in improving peer to peer BotNet detection

PeerShark: Detecting Peer-to-Peer Botnets by Tracking Conversations

Botnet detection using software defined networking

Behavior signature for big data traffic identification

PeerSorter: Classifying Generic P2P Traffic in Real-Time

Similar Documents

Towards effective feature selection in machine learning-based botnet detection approaches

An analysis of network traffic classification for botnet detection

P2P traffic classification for residential network

Netflow based P2P detection in UDP traffic

PeerDigger: Digging Stealthy P2P Hosts through Traffic Analysis in Real-Time

Role of handshaking packets in improving peer to peer BotNet detection

PeerShark: Detecting Peer-to-Peer Botnets by Tracking Conversations

Botnet detection using software defined networking

Behavior signature for big data traffic identification

PeerSorter: Classifying Generic P2P Traffic in Real-Time