PBC: A novel method for identifying QQ traffic

Author

Xiaoxian Chen ; Zhenlong Yuan ; Yibo Xue

Author_Institution

Sch. of Comput. Sci. & Technol., Harbin Univ. of Sci. & Technol., Harbin, China

fYear

2014

fDate

3-6 Feb. 2014

Firstpage

787

Lastpage

791

Abstract

Tencent QQ is the most popular instant message communication tool in China, which has more than 780 million users and thus generates huge traffic on the Internet. However, due to its proprietary protocol and encryption mechanism, it is very hard to identify QQ traffic at a fine-grained flow level. To solve this issue, this paper proposes a novel identification method, which uses a Payload and Behavior Combination (PBC) technology. PBC combines the packet payload characteristics with behavior characteristics existing in the QQ communication process. The experimental results show that PBC has a good identification accuracy in dealing with QQ traffic.

Keywords

Internet; cryptography; electronic messaging; protocols; telecommunication traffic; China; Internet; QQ communication process; QQ traffic; Tencent QQ; encryption mechanism; identification method; instant message communication tool; payload and behavior combination technology; protocol; Data communication; Media; Multimedia communication; Payloads; Ports (Computers); Protocols; Servers; Behavior Analysis; Communication Mechanism; Tencent QQ; Traffic Identification;

fLanguage

English

Publisher

ieee

Conference_Titel

Computing, Networking and Communications (ICNC), 2014 International Conference on

Conference_Location

Honolulu, HI

Type

conf

DOI

10.1109/ICCNC.2014.6785437

Filename

6785437