HTTP Traffic Classification Based on Hierarchical Signature Structure

Sung-Ho YOON  Jun-Sang PARK  Ji-Hyeok CHOI  Youngjoon WON  Myung-Sup KIM  

Publication
IEICE TRANSACTIONS on Information and Systems   Vol.E98-D   No.11   pp.1994-1997
Publication Date: 2015/11/01
Online ISSN: 1745-1361
DOI: 10.1587/transinf.2014EDL8191
Type of Manuscript: LETTER
Category: Information Network
Keyword: 
HTTP traffic classification,  payload signature,  signature hierarchy,  hash,  

Full Text: PDF(1.1MB)
>>Buy this Article


Summary: 
Considering diversified HTTP types, the performance bottleneck of signature-based classification must be resolved. We define a signature model classifying the traffic in multiple dimensions and suggest a hierarchical signature structure to remove signature redundancy and minimize search space. Our experiments on campus traffic demonstrated 1.8 times faster processing speed than the Aho-Corasick matching algorithm in Snort.