Estimation of TCP Congestion Control Algorithms Detection of Malicious Giant TCP Flow from Packet Logs

• Project/Area Number: 16K06341
• Research Category: Grant-in-Aid for Scientific Research (C)
• Allocation Type: Multi-year Fund
• Section: 一般
• Research Field: Communication/Network engineering
• Research Institution: The University of Electro-Communications
• Principal Investigator: KATO Toshihiko 電気通信大学, 大学院情報理工学研究科, 教授 (90345421)
• Project Period (FY): 2016-04-01 – 2019-03-31
• Project Status: Completed (Fiscal Year 2018)
• Budget Amount: ¥4,550,000 (Direct Cost: ¥3,500,000、Indirect Cost: ¥1,050,000); Fiscal Year 2018: ¥1,430,000 (Direct Cost: ¥1,100,000、Indirect Cost: ¥330,000); Fiscal Year 2017: ¥1,430,000 (Direct Cost: ¥1,100,000、Indirect Cost: ¥330,000); Fiscal Year 2016: ¥1,690,000 (Direct Cost: ¥1,300,000、Indirect Cost: ¥390,000)
• Keywords: TCP / 輻輳制御 / 通信ログ / モニタリング / インターネット

Outline of Final Research Achievements

Recently, various TCP congestion control mechanisms have been introduced. Since the TCP congestion control algorithms affect the performance of the Internet, it is important to analyze which algorithms are used widely. This research focuses on a passive scheme to infer a congestion control algorithm from passively collected packet traces by estimating congestion window at round-trip time (RTT) intervals, and inferring congestion control algorithms by correlating estimated window sizes and their increments. Specifically, two methods are proposed. One is a method for bidirectional packet traces that estimates congestion window sizes by mapping data and ACK segments. The other is a method for unidirectional traces including only data segments. It uses the curve fitting for sequence number vs. time graphs by applying the least squares method with linear through quartic functions, and maps the first-order and second-order differentiations.

Academic Significance and Societal Importance of the Research Achievements

輻輳制御方式はTCPトラヒックを特徴づけるものである．このため，ネットワーク事業者にとっては，自分の運営するネットワークにおいてどのような輻輳制御方式がどの程度利用されているかを調査することは，重要な意味があると考えられる．しかしこれまでは，パッシブに収集された通信ログから，新たに提案された輻輳制御方式（HighSpeed TCPやCUBIC TCPなど）を推定する方法は，まったく提案されていなかった．本研究では，これまでにない手法により，双方向および片方向の通信ログから輻輳制御方式を推定することを可能とした．

Research Products

• [Journal Article] 輻輳ウィンドウとその増加分に着目したパッシブなTCP輻輳制御アルゴリズムの推定方法 (2019)
  • Author(s): 加藤 聰彦, 小田 淳, 厳 笑凡, 山本 嶺, 大坐畠 智
  • Journal Title: 情報処理学会論文誌 Volume: 60 Pages: 479-490
  • NAID: 170000150122
  • Peer Reviewed
• [Journal Article] A Study on Round-trip Time Estimation from Unidirectional Packet Traces Using Different TCP Congestion Control Algorithms (2019)
  • Author(s): Toshihiko Kato, Xiaofan Yan, Ryo Yamamoto, Satoshi Ohzahata
  • Journal Title: International Journal On Advances in Networks and Services Volume: 12 Pages: 1-9
  • Peer Reviewed / Open Access
• [Presentation] Applying Lomb Periodogram to Round-trip Time Estimation from Unidirectional Packet Traces with Different TCP Congestion Controls (2018)
  • Author(s): Toshihiko Kato, Xiaofan Yan, Ryo Yamamoto, Satoshi Ohzahata
  • Organizer: The Thirteenth International Conference on Internet Monitoring and Protection (ICIMP 2018)
  • Int'l Joint Research
• [Presentation] Identification of TCP Congestion Control Algorithms from Unidirectional Packet Traces (2018)
  • Author(s): Toshihiko Kato, Xiaofan Yan, Ryo Yamamoto, Satoshi Ohzahata
  • Organizer: 2nd International Conference on Communication and Network Technology (ICCNT 2018)
  • Int'l Joint Research
• [Presentation] ピリオドグラムによるTCP片方向ログからの往復遅延時間の推定 (2017)
  • Author(s): 厳笑凡，山本嶺，大坐畠智，加藤聰彦
  • Organizer: 電子情報通信学会 コミュニケーションクオリティ研究会 第2回コミュニケーションクオリティ (CQ) 学生ワークショップ
• [Presentation] A Study on How to Characterize TCP Congestion Control Algorithms from Unidirectional Packet Traces (2016)
  • Author(s): Toshihiko Kato, Leelianou Yongxialee, Ryo Yamamoto, and Satoshi Ohzahata
  • Organizer: The Eleventh International Conference on Internet Monitoring and Protection
  • Place of Presentation: Valencia Spain
  • Year and Date: 2016-05-22
  • Int'l Joint Research