Port2dist: Semantic port distances for network analytics

Laurent Evrard, Jerome Francois, Jean Noel Colin, Frederic Beck

Research output: Contribution in Book/Catalog/Report/Conference proceedingConference contribution

Abstract

Traffic analysis is a predominant task to support multiple types of management operations. When shifting from manually built signatures to machine learning techniques, a problem resides in the model to represent traffic features. The most notable examples are the TCP and UDP ports, near port numbers in the numerical space is not representative of a close semantic from an operational point of view. We have thus developed a technique to learn meaningful metrics between ports from scanning strategies followed by attackers. In this demonstration, we propose the port2dist tool, allowing to get, seek and retrieve semantic dissimilarities between port numbers.

Original languageEnglish
Title of host publication2019 IFIP/IEEE Symposium on Integrated Network and Service Management, IM 2019
PublisherInstitute of Electrical and Electronics Engineers Inc.
Pages747-748
Number of pages2
ISBN (Electronic)9783903176157
Publication statusPublished - 16 May 2019
Event2019 IFIP/IEEE Symposium on Integrated Network and Service Management, IM 2019 - Arlington, United States
Duration: 8 Apr 201912 Apr 2019

Publication series

Name2019 IFIP/IEEE Symposium on Integrated Network and Service Management, IM 2019

Conference

Conference2019 IFIP/IEEE Symposium on Integrated Network and Service Management, IM 2019
Country/TerritoryUnited States
CityArlington
Period8/04/1912/04/19

Fingerprint

Dive into the research topics of 'Port2dist: Semantic port distances for network analytics'. Together they form a unique fingerprint.

Cite this