Considering diversified HTTP types, the performance bottleneck of signature-based classification must be resolved. We define a signature model classifying the traffic in multiple dimensions and suggest a hierarchical signature structure to remove signature redundancy and minimize search space. Our experiments on campus traffic demonstrated 1.8 times faster processing speed than the Aho-Corasick matching algorithm in Snort.
Sung-Ho YOON
Korea Univ.
Jun-Sang PARK
LG Electronics Inc.
Ji-Hyeok CHOI
ETRI
Youngjoon WON
Hanyang Univ.
Myung-Sup KIM
Korea Univ.
The copyright of the original papers published on this site belongs to IEICE. Unauthorized use of the original or translated papers is prohibited. See IEICE Provisions on Copyright for details.
Copy
Sung-Ho YOON, Jun-Sang PARK, Ji-Hyeok CHOI, Youngjoon WON, Myung-Sup KIM, "HTTP Traffic Classification Based on Hierarchical Signature Structure" in IEICE TRANSACTIONS on Information,
vol. E98-D, no. 11, pp. 1994-1997, November 2015, doi: 10.1587/transinf.2014EDL8191.
Abstract: Considering diversified HTTP types, the performance bottleneck of signature-based classification must be resolved. We define a signature model classifying the traffic in multiple dimensions and suggest a hierarchical signature structure to remove signature redundancy and minimize search space. Our experiments on campus traffic demonstrated 1.8 times faster processing speed than the Aho-Corasick matching algorithm in Snort.
URL: https://global.ieice.org/en_transactions/information/10.1587/transinf.2014EDL8191/_p
Copy
@ARTICLE{e98-d_11_1994,
author={Sung-Ho YOON, Jun-Sang PARK, Ji-Hyeok CHOI, Youngjoon WON, Myung-Sup KIM, },
journal={IEICE TRANSACTIONS on Information},
title={HTTP Traffic Classification Based on Hierarchical Signature Structure},
year={2015},
volume={E98-D},
number={11},
pages={1994-1997},
abstract={Considering diversified HTTP types, the performance bottleneck of signature-based classification must be resolved. We define a signature model classifying the traffic in multiple dimensions and suggest a hierarchical signature structure to remove signature redundancy and minimize search space. Our experiments on campus traffic demonstrated 1.8 times faster processing speed than the Aho-Corasick matching algorithm in Snort.},
keywords={},
doi={10.1587/transinf.2014EDL8191},
ISSN={1745-1361},
month={November},}
Copy
TY - JOUR
TI - HTTP Traffic Classification Based on Hierarchical Signature Structure
T2 - IEICE TRANSACTIONS on Information
SP - 1994
EP - 1997
AU - Sung-Ho YOON
AU - Jun-Sang PARK
AU - Ji-Hyeok CHOI
AU - Youngjoon WON
AU - Myung-Sup KIM
PY - 2015
DO - 10.1587/transinf.2014EDL8191
JO - IEICE TRANSACTIONS on Information
SN - 1745-1361
VL - E98-D
IS - 11
JA - IEICE TRANSACTIONS on Information
Y1 - November 2015
AB - Considering diversified HTTP types, the performance bottleneck of signature-based classification must be resolved. We define a signature model classifying the traffic in multiple dimensions and suggest a hierarchical signature structure to remove signature redundancy and minimize search space. Our experiments on campus traffic demonstrated 1.8 times faster processing speed than the Aho-Corasick matching algorithm in Snort.
ER -