Eric.freyssinet: 1 revision imported

2015-02-07T14:30:10Z

1 revision imported

← Older revision		Revision as of 14:30, 7 February 2015
(No difference)

Eric.freyssinet at 14:37, 14 August 2013

2013-08-14T14:37:52Z

New page

{{Publication
|Type=Conference paper
|Link=http://www.cs.uga.edu/~kangli/src/dimva2013.pdf www.cs.uga.edu
|Author=Babak Rahbarinia, Roberto Perdisci, Andrea Lanzi, Kang Li
|NomRevue=DIMVA
|Date=2013
|Editor=Conference on Detection of Intrusions and Malware & Vulnerability Assessment
|Year=2013
|Abstract=In this paper we present PeerRush, a novel system for the identification of unwanted P2P traffic. Unlike most previous work, Peer-Rush goes beyond P2P traffic detection, and can accurately categorize the detected P2P traffic and attribute it to specific P2P applications, including malicious applications such as P2P botnets. PeerRush achieves these results without the need of deep packet inspection, and can accurately identify applications that use encrypted P2P traffic.

We implemented a prototype version of PeerRush and performed an extensive evaluation of the system over a variety of P2P traffic datasets. Our results show that we can detect all the considered types of P2P traffic with up to 99.5% true positives and 0.1% false positives. Furthermore, PeerRush can attribute the P2P traffic to a specific P2P application with a misclassification rate of 0.68% or less.
|Keyword=P2P, Trac classification, Botnets
}}

PeerRush: mining for unwanted P2P traffic - Revision history

Eric.freyssinet: 1 revision imported

Eric.freyssinet at 14:37, 14 August 2013