000
| 02892cam 2200373zi 4500 |
---|
001 | 9.915240 |
---|
003 | CaOODSP |
---|
005 | 20221107183157 |
---|
006 | m o d f |
---|
007 | cr cn||||||||| |
---|
008 | 220908e200512##oncad ob f000 0 eng d |
---|
040 | |aCaOODSP|beng|erda|cCaOODSP |
---|
041 | 0 |aeng|beng|bfre |
---|
086 | 1 |aCo24-3/8-2005-3E-PDF |
---|
100 | 1 |aMontigny-Leboeuf, Annie de, |d1974- |eauthor. |
---|
245 | 10|aFlow attributes for use in traffic characterization / |cAnnie de Montigny-Leboeuf. |
---|
264 | 1|aOttawa : |bCommunications Research Centre Canada = Centre de recherches sur les communications Canada, |cDecember 2005. |
---|
300 | |a1 online resource (vi, 36 pages) : |billustrations, graphs. |
---|
336 | |atext|btxt|2rdacontent |
---|
337 | |acomputer|bc|2rdamedia |
---|
338 | |aonline resource|bcr|2rdacarrier |
---|
490 | 1 |aCRC technical note ; |vno. CRC-TN-2005-003 |
---|
500 | |aDigitized edition from print [produced by Innovation, Science and Economic Development Canada]. |
---|
504 | |aIncludes bibliographical references (pages 26-27). |
---|
520 | 3 |a"Attackers disguise their activities in order to evade detection and circumvent network security measures. The work presented in this document builds upon earlier work on traffic profiling to reveal the nature of a flow based on its behaviour. An important step, which is the focus of the document, consists of identifying relevant and discriminative flow attributes for use in traffic characterization. We have developed a number of indicators that portray essential communication dynamics, based solely on information that can be gathered from monitoring packet headers. The indicators are lightweight and the characteristics measured can be interpreted from domain knowledge. A tool is under development at the Communications Research Centre Canada to demonstrate the relevance of the flow attributes in characterizing network traffic. In particular, the tool includes the capability to describe the traffic and recognize a number of ubiquitous protocols. Several of the protocols we experimented with are in essence very similar, but were found to be distinguishable with the indicators presented herein. Preliminary assessment shows us that the derived tool is useful as is, and may lead with further research to a number of applications"--Abstract, page iii. |
---|
546 | |aIncludes abstracts in English and French. |
---|
650 | 0|aTelecommunication|xTraffic. |
---|
650 | 0|aComputer networks|xSecurity measures. |
---|
650 | 6|aTélécommunications|xTrafic. |
---|
650 | 6|aRéseaux d'ordinateurs|xSécurité|xMesures. |
---|
710 | 2 |aCommunications Research Centre (Canada), |eissuing body. |
---|
830 | #0|aCRC technical note ;|vno. CRC-TN-2005-003.|w(CaOODSP)9.882494 |
---|
856 | 40|qPDF|s2.45 MB|uhttps://publications.gc.ca/collections/collection_2022/isde-ised/co24/Co24-3-8-2005-3-eng.pdf |
---|