HTTP Traffic Classification Based on Hierarchical Signature Structure

Sung-Ho YOON
Jun-Sang PARK
Ji-Hyeok CHOI
Youngjoon WON
Myung-Sup KIM

IEICE TRANSACTIONS on Information and Systems   Vol.E98-D    No.11    pp.1994-1997
Publication Date: 2015/11/01
Publicized: 2015/08/19
Online ISSN: 1745-1361
DOI: 10.1587/transinf.2014EDL8191
Type of Manuscript: LETTER
Category: Information Network
HTTP traffic classification,  payload signature,  signature hierarchy,  hash,  

Full Text: PDF>>
Buy this Article

Considering diversified HTTP types, the performance bottleneck of signature-based classification must be resolved. We define a signature model classifying the traffic in multiple dimensions and suggest a hierarchical signature structure to remove signature redundancy and minimize search space. Our experiments on campus traffic demonstrated 1.8 times faster processing speed than the Aho-Corasick matching algorithm in Snort.