Occurrence Probability of SNI in Accessing Service for Improving Accuracy of Service Identification
Ryo Asaoka, Akihiro Nakao, Masato Oguchi, Saneyasu Yamaguchi · 2023
Identifying the service to be connected from an IP flow is beneficial for various applications, and a method of identifying the service based on the SNIs occurring in the flow was proposed. It was also shown that the identification accuracy could be improved by excluding some SNIs from those for identification. However, no discussion has been published on the probability of SNIs occurring in actual service accesses. In this paper, we compare the probability of occurrence of each SNI in each service and show that there are redundant SNIs whose probabilities are the same, and there is one SNI that occurs in all services with similar probabilities and is not useful for service identification. We then show that identification accuracy can be improved by excluding the SNI that occurs in all services from the service identification data.