Entropy-based traffic filtering to support real-time Skype detection
Entropy-based traffic filtering to support real-time Skype detection
复制标题
基于熵的流量过滤支持实时 Skype 检测
DOI：
10.1145/1815396.1815568
复制
发表时间：
2010
期刊：
影响因子：
--
通讯作者：
Teresa Pepe
中科院分区：
文献类型：
--
作者：
P. Dorfinger;Georg Panholzer;B. Trammell;Teresa Pepe
提出了一种基于熵估计的实时隐私保护流量过滤方法。实时分类器的决定基于来自流的第一分组的有效载荷的熵。分类器的目的是检测具有加密有效载荷的流量。作为概念证明，我们展示了我们的方法作为Skype检测引擎的流量过滤器的适用性。在实验室和真实环境中收集的痕迹表明，流量减少了合理的数量，同时实现了类似甚至更高的检测质量。
We propose a novel approach for real-time privacy preserving traffic filtering based on entropy estimation. The decision of the real-time classifier is based on the entropy of the payload from first packet of a flow. The aim of the classifier is to detect traffic with encrypted payload. As a proof of concept we show the applicability of our approach as a traffic filter for a Skype detection engine. Traces collected in laboratory and real-world environments show that the traffic is reduced by a reasonable amount while achieving similar or even improved detection quality.