000 02892cam  2200373zi 4500
0019.915240
003CaOODSP
00520221107183157
006m     o  d f      
007cr cn|||||||||
008220908e200512##oncad   ob   f000 0 eng d
040 |aCaOODSP|beng|erda|cCaOODSP
0410 |aeng|beng|bfre
0861 |aCo24-3/8-2005-3E-PDF
1001 |aMontigny-Leboeuf, Annie de, |d1974- |eauthor.
24510|aFlow attributes for use in traffic characterization / |cAnnie de Montigny-Leboeuf.
264 1|aOttawa : |bCommunications Research Centre Canada = Centre de recherches sur les communications Canada, |cDecember 2005.
300 |a1 online resource (vi, 36 pages) : |billustrations, graphs.
336 |atext|btxt|2rdacontent
337 |acomputer|bc|2rdamedia
338 |aonline resource|bcr|2rdacarrier
4901 |aCRC technical note ; |vno. CRC-TN-2005-003
500 |aDigitized edition from print [produced by Innovation, Science and Economic Development Canada].
504 |aIncludes bibliographical references (pages 26-27).
5203 |a"Attackers disguise their activities in order to evade detection and circumvent network security measures. The work presented in this document builds upon earlier work on traffic profiling to reveal the nature of a flow based on its behaviour. An important step, which is the focus of the document, consists of identifying relevant and discriminative flow attributes for use in traffic characterization. We have developed a number of indicators that portray essential communication dynamics, based solely on information that can be gathered from monitoring packet headers. The indicators are lightweight and the characteristics measured can be interpreted from domain knowledge. A tool is under development at the Communications Research Centre Canada to demonstrate the relevance of the flow attributes in characterizing network traffic. In particular, the tool includes the capability to describe the traffic and recognize a number of ubiquitous protocols. Several of the protocols we experimented with are in essence very similar, but were found to be distinguishable with the indicators presented herein. Preliminary assessment shows us that the derived tool is useful as is, and may lead with further research to a number of applications"--Abstract, page iii.
546 |aIncludes abstracts in English and French.
650 0|aTelecommunication|xTraffic.
650 0|aComputer networks|xSecurity measures.
650 6|aTélécommunications|xTrafic.
650 6|aRéseaux d'ordinateurs|xSécurité|xMesures.
7102 |aCommunications Research Centre (Canada), |eissuing body.
830#0|aCRC technical note ;|vno. CRC-TN-2005-003.|w(CaOODSP)9.882494
85640|qPDF|s2.45 MB|uhttps://publications.gc.ca/collections/collection_2022/isde-ised/co24/Co24-3-8-2005-3-eng.pdf