NDLI: A framework for tunneled traffic analysis

Content Provider	IEEE Xplore Digital Library
Author	Yildirim, T. Radcliffe, P.J.
Copyright Year	2010
Description	Author affiliation: School of Electrical & Computer Engineering, RMIT University, Australia (Yildirim, T.; Radcliffe, P.J.)
Abstract	Research in traffic classification is reaching into ever more difficult areas. Traditional techniques such as header and payload inspection are not providing sufficient information due to usage of non-standard ports and encryption. Promising alternative methods have been proposed based on the statistical behaviour of traffic flows. Although these methods can achieve quite high accuracies in non-encrypted traffic flows, traffic identification of encrypted traffic flows is still in its early stages. We argue that the results to date for encrypted traffic cannot help a network device such as a firewall make any useful decision, nor are there any indications that this may be achieved in the future. We propose a novel approach to cope with encrypted peer to peer network layer tunnels which are a particular problem in schools, universities, and larger corporate networks. First statistical techniques are used to identify the protocols present, a process that may take in the order of seconds. Next, based on the protocols discovered, and enterprise policies, a network device is advised to block, band-limit, or allow the whole tunnel, or a range of packet sizes within that tunnel. Preliminary research has concluded that VoIP traffic can be successfully handled by this approach and that advise to a network device can be practically useful. Work continues to apply these techniques to other protocols and mixes of protocols within a peer to peer tunnels.
Starting Page	1029
Ending Page	1034
File Size	6222637
Page Count	6
File Format	PDF
ISBN	9781424454273
ISSN	17389445
e-ISBN	9781424454280
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2010-02-07
Publisher Place	Korea (South)
Access Restriction	Subscribed
Rights Holder	Electronics and Telecommunications Research Institute
Subject Keyword	Telecommunication traffic Cryptography Virtual private networks Protocols Machine learning algorithms Payloads Inspection Internet telephony Videoconference Peer to peer computing VoIP Traffic Classification VPN Encrypted Traffic IPSec
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Mr. Siddhartha Mukherjee siddhartha@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	ndl-support@iitkgp.ac.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Libarray of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Secure voice over Internet Protocol (voIP) using virtual private networks (VPN) and Internet Protocol Security (IPSec)

Multi-levels traffic classification technique

Detecting tunneled video streams using traffic analysis

Efficient Algorithms for Dynamic Detection and Resolution of IPSec/VPN Security Policy Conflicts

Performance Comparison of Four Rule Sets: An Example for Encrypted Traffic Classification

VoIP traffic classification in IPSec tunnels

A novel traffic classification algorithm using machine learning

Investigating Two Different Approaches for Encrypted Traffic Classification

QRP05-4: Internet Traffic Identification using Machine Learning

A framework for tunneled traffic analysis

Similar Documents

Secure voice over Internet Protocol (voIP) using virtual private networks (VPN) and Internet Protocol Security (IPSec)

Multi-levels traffic classification technique

Detecting tunneled video streams using traffic analysis

Efficient Algorithms for Dynamic Detection and Resolution of IPSec/VPN Security Policy Conflicts

Performance Comparison of Four Rule Sets: An Example for Encrypted Traffic Classification

VoIP traffic classification in IPSec tunnels

A novel traffic classification algorithm using machine learning

Investigating Two Different Approaches for Encrypted Traffic Classification

QRP05-4: Internet Traffic Identification using Machine Learning

A framework for tunneled traffic analysis