A P2P network traffic identification model based on heuristic rules

摘要

Recently, as some technologies such as dynamic ports and payload encryption have been used by some P2P applications, so as to avoid auditing and monitoring, this make identification of P2P applications to be more difficult. To address this issue, we proposed a novel model which based on the behavior characteristics of flow in transport layer. This model not depends on only port or payload, so both of unknown and encryption applications can be identified as well. The experiment proved that the method can achieve better accuracy.