A popularity-aware method for discovering server IP addresses related to websites
Fecha
2013Autor
Versión
Acceso abierto / Sarbide irekia
Tipo
Contribución a congreso / Biltzarrerako ekarpena
Impacto
|
10.1109/GIIS.2013.6684350
Resumen
The complexity of web traffic has grown in the past
years as websites evolve and new services are provided over the
HTTP protocol. When accessing a website, multiple connections
to different servers are opened and it is usually difficult to
distinguish which servers are related to which sites. However,
this information is useful from the perspective of security and
accounting and can also help to ...
[++]
The complexity of web traffic has grown in the past
years as websites evolve and new services are provided over the
HTTP protocol. When accessing a website, multiple connections
to different servers are opened and it is usually difficult to
distinguish which servers are related to which sites. However,
this information is useful from the perspective of security and
accounting and can also help to label web traffic and use it
as ground truth for traffic classification systems. In this paper
we present a method to discover server IP addresses related to
specific websites in a traffic trace. Our method uses NetFlow-type
records which makes it scalable and impervious to encryption of
packet payloads. It is, moreover, popularity-aware in the sense
that it takes into consideration the differences in the number of
accesses to each site in order to provide a better identification
of servers. The method can be used to gather data from a group
of interesting websites or, by applying it to a representative set
of websites, it can label a sizeable number of connections in a
packet trace. [--]
Materias
Packet trace,
Popularity-aware method,
Server IP addresses,
Web sites,
HTTP protocol,
Web traffic,
Traffic classification systems,
Ground truth,
Traffic trace,
NetFlow-type records,
Encryption,
Packet payloads
Editor
IEEE
Publicado en
Global Information Infrastructure Symposium - GIIS 2013
Notas
Trabajo presentado al IEEE Global Information Infrastructure and Networking Symposium 2013 (GIIS 2013), 28-31 de octubre, Trento (Italia)
Departamento
Universidad Pública de Navarra. Departamento de Automática y Computación /
Nafarroako Unibertsitate Publikoa. Automatika eta Konputazioa Saila