Adaptive extraction method of network application signatures

Abstract

An adaptive application signature extraction method (AdapSig) was proposed.AdapSig firstly extracted keyword sequences from payloads of packets,and then negative examples and redundancy filter were used to generate candidate signatures.An adaptive mechanism based on self-identification rate was applied to select the final si ture.Experimental results show that application signatures extracted by AdapSig have high accuracy for various protocols.

Keywords

• application signature;keyword minging;adaptive signature extraction;application identification