GMM-based Application-layer Protocol Identification of ESP Traffic
Yu Wang · Jisuanji gongcheng · 2011
This paper proposes a GMM-based application-layer protocol identification technique of ESP traffic.It uses two means to construct the ESP traffic data sets,one is synchronous collection,another is traffic simulation,And builds and tests the GMMs of HTTP,FTP,SMTP and TELNET on the data sets.Result shows GMM is applicable to identify the application-layer protocol of the ESP traffic,and the network-layer characteristics of the ESP traffic leak enough information to identify other application-layer protocol.