Classification techniques for encrypted network traffic

Details Classification techniques for encrypted network traffic Classification techniques for encrypted network traffic

2011-06-07

2011-06-07

Moe, Aung S (Department: 2474)

Multiplex communications

Diagnostic testing

Determination of communication parameters

C370S229000, C370S252000, C370S392000

Reexamination Certificate

active

07957319

ABSTRACT:
Methods, apparatuses and systems directed to detecting network applications whose data flows have been encrypted. The present invention extends beyond analysis of explicitly presented packet attributes of data flows and holistically analyzes the behavior of host or end systems as expressed in related data flows against a statistical behavioral model to classify the data flows.

REFERENCES:
patent: 4914650 (1990-04-01), Sriram
patent: 5828846 (1998-10-01), Kirby
patent: 6003077 (1999-12-01), Bawden
patent: 6023456 (2000-02-01), Chapman
patent: 6046980 (2000-04-01), Packer
patent: 6219050 (2001-04-01), Schaffer
patent: 6285660 (2001-09-01), Ronen
patent: 6363056 (2002-03-01), Beigi
patent: 6397359 (2002-05-01), Chandra
patent: 6502131 (2002-12-01), Vaid
patent: 6584467 (2003-06-01), Haught
patent: 6625648 (2003-09-01), Schwaller
patent: 6628938 (2003-09-01), Rachabathuni
patent: 6681232 (2004-01-01), Sistanizadeh
patent: 6690918 (2004-02-01), Evans
patent: 6701359 (2004-03-01), Calabrez
patent: 6738352 (2004-05-01), Yamada
patent: 6798763 (2004-09-01), Kimura
patent: 6894972 (2005-05-01), Phaal
patent: 7120931 (2006-10-01), Cheriton
patent: 7154416 (2006-12-01), Savage
patent: 7155502 (2006-12-01), Galloway
patent: 7193968 (2007-03-01), Kapoor
patent: 7215637 (2007-05-01), Ferguson
patent: 7224679 (2007-05-01), Solomon
patent: 7292531 (2007-11-01), Hill
patent: 7296288 (2007-11-01), Hill
patent: 7324447 (2008-01-01), Morford
patent: 7385924 (2008-06-01), Riddle
patent: 7554983 (2009-06-01), Muppala
patent: 7664048 (2010-02-01), Yung et al.
patent: 7822837 (2010-10-01), Urban et al.
patent: 7843843 (2010-11-01), Papp et al.
patent: 2002/0122427 (2002-09-01), Kamenisky
patent: 2002/0143901 (2002-10-01), Lupo
patent: 2003/0035365 (2003-02-01), Jurdi et al.
patent: 2003/0112764 (2003-06-01), Gaspard
patent: 2003/0185210 (2003-10-01), McCormack
patent: 2004/0125815 (2004-07-01), Shimazu
patent: 2005/0050362 (2005-03-01), Peles
patent: 2005/0055435 (2005-03-01), Gbadegesin et al.
patent: 2005/0063307 (2005-03-01), Samuels
patent: 2005/0108571 (2005-05-01), Lu
patent: 2006/0045014 (2006-03-01), Charzinski
patent: 2007/0206515 (2007-09-01), Andreasen et al.
patent: 2007/0300301 (2007-12-01), Cangini et al.
patent: 2009/0010259 (2009-01-01), Sirotkin
patent: 2010/0118884 (2010-05-01), Hendel et al.
patent: 2010/0192225 (2010-07-01), Ma et al.
patent: 2010/0217886 (2010-08-01), Seren et al.
U.S. Appl. No. 10/720,329, filed Nov. 2003, Yung.
U.S. Appl. No. 10/917,952, filed Aug. 2004, Yung.
U.S. Appl. No. 10/938,435, filed Sep. 2004, Riddle.
U.S. Appl. No. 11/019,501, filed Dec. 2004, Muppala.
Bernaille et al., Blind application recognition through behavioral classification, 2005.
Constantinou et al., Identifying Known and Unknown Peer-to-Peer Traffic, Massachusetts Institute of Technology, 2006.
Crotti et al., Traffic Classification through Simple Statistical Fingerprinting, Universita degli Studi di Brescia, Italy, ACM SIGCOMM Computer Communication Review, vol. 37(1), pp. 7-16, Jan. 2007.
Erman et al., Traffic Classification Using Clustering Algorithms,SIGCOMM'06 WorkshopsSep. 11-15, 2006, Pisa, Italy, Copyright 2006 ACM 1-59593-417-0/06/0009, 2006
Park et al., “Internet traffic classification for scalable QoS provision,” in IEEE International Conference on Multimedia and Expo, Toronto, Ontario, Canada, Jul. 2006.
Karagiannis et al., BLINC: Multilevel Traffic Classification in the Dark,SIGCOMM'05, Aug. 21-26, 2005, Philadelphia, Pennsylvania, USA, Copyright 2005 ACM 1595930094/05/0008, 2005.
Moore et al., Internet Traf—c Classi—cation Using Baycsian Analysis Techniques,SIGMETRICS'05, Jun. 6.10, 2005, Banff, Alberta, Canada, Copyright 2005 ACM 1-59593-022-01/05/0006, 2005.
Nguyen et al., Training on multiple sub-flows to optimise the use of Machine Learning classifiers in real-world IP networks, Accepted Jul. 31, 2006 to be presented at IEEE LCN 2006, Nov. 2006. Paper made possible in part by a grant from the Cisco University Research Program Fund at Community Foundation Silicon Valley, Jul. 2006.

Affiliated with

Also associated with

Rating

Classification techniques for encrypted network traffic does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Classification techniques for encrypted network traffic, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Classification techniques for encrypted network traffic will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2718583