Automatic Transition System Model Identification for Network Applications from Packet Traces - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2017

Automatic Transition System Model Identification for Network Applications from Packet Traces

Zeynab Sabahi-Kaviani
  • Fonction : Auteur
  • PersonId : 1030397
Fatemeh Ghassemi
  • Fonction : Auteur
  • PersonId : 999433
Fateme Bajelan
  • Fonction : Auteur
  • PersonId : 1030398

Résumé

A wide range of network management tasks such as balancing bandwidth usage, firewalling, anomaly detection and differentiating traffic pricing, depend on accurate traffic classification. Due to the diversity and variability of network applications, port-based and statistical signature detection approaches become inefficient and hence, behavioral classification approaches have been considered recently. However, so far, there is no automated general method to obtain the behavioral models of applications. In this research, we propose an automatic procedure to infer a transition system model from generated traffic of an application. Our approach is based on passive automata learning theory and evidence driven state merging technique using the rules of the network domain. We consider the behavior of well-known network protocols to generate the model which includes unobserved behaviors and excludes invalid ones as much as possible. To this aim, we present a new equivalence relation regarding the given protocol behaviors to induce proper state merging conditions. This idea has led the time complexity order of the algorithm to be linear rather than exponential. Finally, we apply the model of some real applications to evaluate the precision and execution time of our approach.
Fichier principal
Vignette du fichier
459025_1_En_14_Chapter.pdf (119.25 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01760863 , version 1 (06-04-2018)

Licence

Paternité

Identifiants

Citer

Zeynab Sabahi-Kaviani, Fatemeh Ghassemi, Fateme Bajelan. Automatic Transition System Model Identification for Network Applications from Packet Traces. 7th International Conference on Fundamentals of Software Engineering (FSEN), Apr 2017, Teheran, Iran. pp.212-227, ⟨10.1007/978-3-319-68972-2_14⟩. ⟨hal-01760863⟩
105 Consultations
91 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More