Investigating Two Different Approaches for Encrypted Traffic Classification

The basic objective of this work is to compare the utility of an expert driven system and a data driven system for classifying encrypted network traffic, specifically SSH traffic from traffic log files. Pre-processing is applied to the traffic data to represent as traffic flows. Results show that the data driven system approach outperforms the expert driven system approach in terms of high detection and low false positive rates.

• Type: Conference
• Year: 2008
• Where: PST
• Authors: Riyad Alshammari, A. Nur Zincir-Heywood
• Keywords: Data Driven, PST 2008, Security Privacy, SSH Traffic, Traffic Log Files