Tunnel Hunter: Detecting application-layer tunnels with statistical fingerprinting

• Published in: Computer networks (Amsterdam, Netherlands : 1999) Vol. 53; no. 1; pp. 81 - 97
• Main Authors: Dusi, M., Crotti, M., Gringoli, F., Salgarelli, L.
• Format: Journal Article
• Language: English
• Published: Kidlington Elsevier B.V 16.01.2009; Elsevier; Elsevier Sequoia S.A
• Subjects: Access methods and protocols, osi model; Applied sciences; Encrypted traffic; Exact sciences and technology; Fingerprinting; Gateways; Internet Protocol; Miscellaneous; Network security; Studies; Systems, networks and services of telecommunications; Telecommunications; Telecommunications and information theory; Teleprocessing networks. Isdn; Teletraffic; Traffic flow; Traffic identification; Valuation and optimization of characteristics. Simulation; Network security; Encrypted traffic; Traffic identification; Peer to peer; Internet protocol; Teletraffic; Resource sharing; HTTP; Electronic mail; Encryption; Addressing; Firewall; Statistical method; Accuracy; Traffic flow; Computer network; Fingerprint method; Security of data; Information gateway; Computer security

Application-layer tunnels nowadays represent a significant security threat for any network protected by firewalls and Application Layer Gateways. The encapsulation of protocols subject to security policies such as peer-to-peer, e-mail, chat and others into protocols that are deemed as safe or necess...