Conference paper
Classifying ethernet data packets based on raw bit patterns
2010 Third International Conference on Knowledge Discovery and Data Mining, pp.490-493
IEEE
3rd International Conference on Knowledge Discovery and Data Mining (Phuket, 09/01/2010–10/01/2010)
2010
Abstract
Currently most operations on network data packets are controlled by the applicable protocols such as TCP/IP. However, there is scope to examine and classify the data without resorting to processing through a protocol stack. To do this, use can be made of the complex and sophisticated algorithms developed for the analysis of biological and genomics data. This makes use of similarities in the way information is stored in biological structures and network data traffic. It can be shown that network data flows have many of the same structural characteristics as biological DNA - areas of conservation (an area of data that has the same composition as an area in another packet of data will often have similar functionality), "motifs" with particular functions and the equivalent of "junk DNA" - areas where seemingly random changes occur. This paper looks at the novel application of algorithms designed to process DNA data to analyse and classify Ethernet network data packets based on the patterns discernible in the data rather than the more traditional method of matching fixed fields within the data based on protocol specifications. We are able to show that these algorithms are able to successfully and accurately classify packets of data into groups whose members have similar characteristics based on actual content rather than meta-data. This provides a unique and useful method of grouping and classifying packets that could be of use in diverse applications such as IDS systems, and the search for, and identification of specific types of data.
Details
- Title
- Classifying ethernet data packets based on raw bit patterns
- Authors/Creators
- W.D. Kenworthy (Author/Creator) - Murdoch University
- Publication Details
- 2010 Third International Conference on Knowledge Discovery and Data Mining, pp.490-493
- Conference
- 3rd International Conference on Knowledge Discovery and Data Mining (Phuket, 09/01/2010–10/01/2010)
- Publisher
- IEEE
- Identifiers
- 991005545243707891
- Copyright
- © 2010 IEEE
- Murdoch Affiliation
- School of Information Technology
- Language
- English
- Resource Type
- Conference paper
- Note
- Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE. This paper appears in: 3rd International Conference on Knowledge Discovery and Data Mining, WKDD 2010; Phuket; 9 January 2010 through 10 January 2010; Category number P3923; Code 80211
Metrics
458 File views/ downloads
73 Record Views