基于端口特征的P2P应用识别方案  

Method of P2P Application Identification Based on Port Features

作　　者：周亚建[1,2,3] 薛超[1,2] 平源[1,2,4] 

机构地区：[1]北京邮电大学信息安全中心,北京100876 [2]北京邮电大学灾备技术国家工程实验室,北京100876 [3]电子信息控制重点实验室,成都610036 [4]许昌学院计算机科学与技术学院,河南许昌461000

出　　处：《北京工业大学学报》2013年第11期1667-1672,共6页Journal of Beijing University of Technology

基　　金：国家自然科学基金资助项目(61303232);河南省自然科学基金资助项目(132300410393);河南省教育厅科学技术研究重点项目(13A413750)

摘　　要：为了使网络管理员能更好地监控和管理P2P流量数据,分析了运行不同P2P应用时的主机行为特征,提出一种基于端口特征的P2P应用识别方案.该方案利用P2P应用的UDP监听端口产生的数据报长度及其分布特征,通过机器学习的方法对监听端口进行分类,进而识别出对应的P2P应用.实验结果表明,该方案能有效地识别节点主机运行的不同的P2P应用,尤其对于视频类P2P应用的识别准确率可以达到99.91%.To make the network administrators to monitor and manage P2P traffic data efficiently, a port feature based P2P application identification method was proposed, following with the analysis of behavioral characteristics of diverse P2P applications. In the proposed method, both of the packet length and the distribution of packet size with respect to each UDP port were employed to form a vector for each P2P application, and then the work of P2P application identification could be done effectively by a machine learning method, i. e. , support vector machine. Results show that the proposed method can distinguish the different P2P applications effectively, especially for the video applications which can be achieved for a precision of 99.91%.

关 键 词：P2P 端口特征 机器学习 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]