Catalog Home Page

Design of DIFFUSE v0.1 – DIstributed firewall and Flow-shaper using statistical evidence

Zander, S. and Armitage, G. (2010) Design of DIFFUSE v0.1 – DIstributed firewall and Flow-shaper using statistical evidence. Swinburne University of Technology. Centre for Advanced Internet Architectures, Melbourne, VIC.

[img]
Preview
Free to read: http://caia.swin.edu.au/reports/101223A/CAIA-TR-10...
*No subscription required

Abstract

In recent years a growing number of researchers investigated the performance of machine learning based traffic classification using statistical properties – classification techniques that do not require packet payload inspection. Such techniques assist Internet Service Providers to work within any legal or technical limitations on direct payload inspection. Potential new applications include automated ‘market research’, automated traffic prioritisation, and Lawful Interception. For many of these new applications a de-coupling between the flow classification and subsequent flow treatment, such as blocking or shaping, is highly desirable. In the DIFFUSE project we are developing extensions for an existing packet filter that provide ML-based traffic classification based on statistical properties and de-couple flow classification from flow treatment. This report describes the selection of the existing packet filter extended, the design of the overall architecture and key components, as well as the machine learning techniques supported.

Publication Type: Report
Series Name: CAIA Technical Report NO. 101223A
Publisher: Swinburne University of Technology. Centre for Advanced Internet Architectures
URI: http://researchrepository.murdoch.edu.au/id/eprint/35026
Item Control Page Item Control Page

Downloads

Downloads per month over past year