Journal on Communications

Previous Articles     Next Articles

Adaptive extraction method of network application signatures

  

  • Online:2013-04-25 Published:2013-04-15
  • Supported by:
    The National High Technology Research and Development Program of China (863 Program) (2007AA01Z449); The Key Program of National Natural Science Foundation of China-Guangdong Joint Funds (U0735002); The National Natural Science Foundation of China (60970146)

Abstract: An adaptive application signature extraction method (AdapSig) was proposed. AdapSig firstly extracted keyword sequences from payloads of packets, and then negative examples and redundancy filter were used to generate candidate signatures. An adaptive mechanism based on self-identification rate was applied to select the final signature. Experimental results show that application signatures extracted by AdapSig have high accuracy for various protocols.

No Suggested Reading articles found!