Person:
Torres García, Luis Miguel

Profile Picture

Email Address

Birth Date

Research Projects

Organizational Units

Job Title

Last Name

Torres García

First Name

Luis Miguel

person.page.departamento

Automática y Computación

ORCID

person.page.upna

8531

Name

Filters

2013 - 20173
Reset filters

Settings

Author: Magaña Lizarrondo, Eduardo ×

Search Results

Now showing 1 - 3 of 3
  • Thumbnail Image
    PublicationOpen Access
    A popularity-aware method for discovering server IP addresses related to websites
    (IEEE, 2013) Torres García, Luis Miguel; Magaña Lizarrondo, Eduardo; Izal Azcárate, Mikel; Morató Osés, Daniel; Automática y Computación; Automatika eta Konputazioa
    The complexity of web traffic has grown in the past years as websites evolve and new services are provided over the HTTP protocol. When accessing a website, multiple connections to different servers are opened and it is usually difficult to distinguish which servers are related to which sites. However, this information is useful from the perspective of security and accounting and can also help to label web traffic and use it as ground truth for traffic classification systems. In this paper we present a method to discover server IP addresses related to specific websites in a traffic trace. Our method uses NetFlow-type records which makes it scalable and impervious to encryption of packet payloads. It is, moreover, popularity-aware in the sense that it takes into consideration the differences in the number of accesses to each site in order to provide a better identification of servers. The method can be used to gather data from a group of interesting websites or, by applying it to a representative set of websites, it can label a sizeable number of connections in a packet trace.
  • Thumbnail Image
    PublicationOpen Access
    On the nature of unused TCP connections in web traffic
    (2015) Torres García, Luis Miguel; Magaña Lizarrondo, Eduardo; Izal Azcárate, Mikel; Morató Osés, Daniel; Automática y Computación; Automatika eta Konputazioa
    The popularity of the web and the requirements introduced by current web content have pushed for the development of new techniques that meet these challenges and improve the experience of the users. In particular, during the last years, web browsers have taken aggressive measures in order to reduce webpage download times. These measures have had a noteworthy effect on the profile of web traffic. One of the most striking consequences is that nowadays, more than 20% of the TCP connections opened by a browser are left unused. In this paper we describe these connections, explain why they happen and use them as a simple way of identifying the traffic of different web browsers.
  • Thumbnail Image
    PublicationOpen Access
    TBDClust: time-based density clustering to enable free browsing of sites in pay-per-use mobile Internet providers
    (Elsevier, 2017) Torres García, Luis Miguel; Magaña Lizarrondo, Eduardo; Morató Osés, Daniel; García-Jiménez, Santiago; Izal Azcárate, Mikel; Automatika eta Konputazioa; Institute of Smart Cities - ISC; Automática y Computación
    The World Wide Web has evolved rapidly, incorporating new content types and becoming more dynamic. The contents from a website can be distributed between several servers, and as a consequence, web traffic has become increasingly complex. From a network traffic perspective, it can be difficult to ascertain which websites are being visited by a user, let alone which part of the user's traffic each website is responsible for. In this paper we present a method for identifying the TCP connections involved in the same full webpage download without the need of deep packet inspection. This identification is needed for example to enable free browsing of specific websites in a pay per use mobile Internet access. It could be not only for third party promoted websites but also portals to gubernamental or medical emergency websites. The proposal is based on a modification of the DBSCAN clustering algorithm to work online and over one-dimensional sorted data. In order to validate our results we use both real traffic and packet captures from a controlled environment. The proposal achieves excellent results in consistency (99%) and completeness (92%), meaning that its error margin identifying the webpage downloads is minimal.