Forensics in Telecommunications, Information, and Multimedia. Third International ICST Conference, e-Forensics 2010, Shanghai, China, November 11-12, 2010, Revised Selected Papers

Research Article

A Stream Pattern Matching Method for Traffic Analysis

Download
467 downloads
  • @INPROCEEDINGS{10.1007/978-3-642-23602-0_12,
        author={Can Mo and Hui Li and Hui Zhu},
        title={A Stream Pattern Matching Method for Traffic Analysis},
        proceedings={Forensics in Telecommunications, Information, and Multimedia. Third International ICST Conference, e-Forensics 2010, Shanghai, China, November 11-12, 2010, Revised Selected Papers},
        proceedings_a={E-FORENSICS},
        year={2012},
        month={10},
        keywords={Traffic Recognition Stream Pattern Glushkov NFA},
        doi={10.1007/978-3-642-23602-0_12}
    }
    
  • Can Mo
    Hui Li
    Hui Zhu
    Year: 2012
    A Stream Pattern Matching Method for Traffic Analysis
    E-FORENSICS
    Springer
    DOI: 10.1007/978-3-642-23602-0_12
Can Mo1, Hui Li1, Hui Zhu1
  • 1: Xidian University

Abstract

In this paper, we propose a stream pattern matching method that realizes a standard mechanism which combines different methods with complementary advantages. We define a specification of the stream pattern description, and parse it to the tree representation. Finally, the tree representation is transformed into the S-CG-NFA for recognition. This method provides a high level of recognition efficiency and accuracy.