00000nam 2200000zi 4500 9.915240 CaOODSP 20221107183157 m o d f cr cn||||||||| 220908e200512##oncad ob f000 0 eng d CaOODSP eng rda CaOODSP eng eng fre Co24-3/8-2005-3E-PDF Montigny-Leboeuf, Annie de, 1974- author. Flow attributes for use in traffic characterization / Annie de Montigny-Leboeuf. Ottawa : Communications Research Centre Canada = Centre de recherches sur les communications Canada, December 2005. 1 online resource (vi, 36 pages) : illustrations, graphs. text txt rdacontent computer c rdamedia online resource cr rdacarrier CRC technical note ; no. CRC-TN-2005-003 Digitized edition from print [produced by Innovation, Science and Economic Development Canada]. Includes bibliographical references (pages 26-27). "Attackers disguise their activities in order to evade detection and circumvent network security measures. The work presented in this document builds upon earlier work on traffic profiling to reveal the nature of a flow based on its behaviour. An important step, which is the focus of the document, consists of identifying relevant and discriminative flow attributes for use in traffic characterization. We have developed a number of indicators that portray essential communication dynamics, based solely on information that can be gathered from monitoring packet headers. The indicators are lightweight and the characteristics measured can be interpreted from domain knowledge. A tool is under development at the Communications Research Centre Canada to demonstrate the relevance of the flow attributes in characterizing network traffic. In particular, the tool includes the capability to describe the traffic and recognize a number of ubiquitous protocols. Several of the protocols we experimented with are in essence very similar, but were found to be distinguishable with the indicators presented herein. Preliminary assessment shows us that the derived tool is useful as is, and may lead with further research to a number of applications"--Abstract, page iii. Includes abstracts in English and French. Telecommunication Traffic. Computer networks Security measures. Télécommunications Trafic. Réseaux d'ordinateurs Sécurité Mesures. Communications Research Centre (Canada), issuing body. CRC technical note ; no. CRC-TN-2005-003. (CaOODSP)9.882494 PDF 2.45 MB https://publications.gc.ca/collections/collection_2022/isde-ised/co24/Co24-3-8-2005-3-eng.pdf