The classification of SSH tunneled traffic using maximum likelihood classifier

CORC > 西安光学精密机械研究所 > 中国科学院西安光学精密机械研究所 > 光电测量技术实验室

	The classification of SSH tunneled traffic using maximum likelihood classifier
	TanXiaobing ; SuXiuqin ; QianQingming
	2011
会议名称	2011 international conference on electronics, communications and control, icecc 2011
会议日期	september 9, 2011 - september 11, 2011
会议地点	ningbo, china
关键词	SSH tunnel traffic classification boundary detection maximum likelihood classification
页码	2347-2350
通讯作者	tan xiaobing
英文摘要	secure shell(ssh) [1] provides tcp/ip port forwarding for any application-layer protocols. it is useful in protecting the privacy of users, but it can lead to the illegal use of some forbidden protocols. because of the encryption, the deep payload inspection (dpi) technique is ineffective in classifying the network traffic. this paper introduces how to employ the statistical pattern recognition method, maximum likelihood classification [2, 3], to classify the ssh tunneled traffic, i.e. to decide which protocols is tunneled in the encrypted tunnels. it is very important to find out the boundary of a tunneled flow in processing the originate data. so we proposed a method for detecting the boundaries of ssh tunneled traffic.
收录类别	EI
产权排序	1
会议主办者	ningbo university
会议录	2011 international conference on electronics, communications and control
语种	英语
ISBN号	9781457703218
内容类型	会议论文
源URL	[http://ir.opt.ac.cn/handle/181661/20023]
专题	西安光学精密机械研究所_光电测量技术实验室
推荐引用方式 GB/T 7714	TanXiaobing,SuXiuqin,QianQingming. The classification of SSH tunneled traffic using maximum likelihood classifier[C]. 见:2011 international conference on electronics, communications and control, icecc 2011. ningbo, china. september 9, 2011 - september 11, 2011.