Estimating Diffusion Path of Information using Overlay Network

• Project/Area Number: 21700066
• Research Category: Grant-in-Aid for Young Scientists (B)
• Allocation Type: Single-year Grants
• Research Field: Computer system/Network
• Research Institution: Tohoku University
• Principal Investigator: WAIZUMI Yuji Tohoku University, 大学院・情報科学研究科, 准教授 (90333872)
• Project Period (FY): 2009 – 2010
• Project Status: Completed (Fiscal Year 2010)
• Budget Amount: ¥3,900,000 (Direct Cost: ¥3,000,000、Indirect Cost: ¥900,000); Fiscal Year 2010: ¥1,820,000 (Direct Cost: ¥1,400,000、Indirect Cost: ¥420,000); Fiscal Year 2009: ¥2,080,000 (Direct Cost: ¥1,600,000、Indirect Cost: ¥480,000)
• Keywords: 情報システム / セキュア・ネットワーク / フロー類似性 / 文字コード / 拡散経路推定 / 送受信タイミング / 情報流出 / 移動経路推定 / フロー同一性

Research Abstract

An estimation method of diffusion path of information on the Internet has been developed. The method consists of extracting module of a flow identifier and identifying module. As flow identifier, 8 bit code of flow payloads and time interval for transmitting messages are proposed. Using these identifiers, an algorithm to detect identity of flows observed in network is developed keeping to privacy.

Research Products

• [Journal Article] Network Application Identification Based on Communication Characteristics of Application Messages (2011)
  • Author(s): Y.Waizumi、Y.Tsukabe、H.Tsunoda, Y.Nemoto、K.Tanaka
  • Journal Title: Journal of Communication And Computer No.8 Pages: 111-119
  • Peer Reviewed
• [Journal Article] Network Application Identification Based on Communication Characteristics of Application Messages (2011)
  • Author(s): Y.Waizumi, Y.Tsukabe, H.Tsunoda, Y.Nemoto, K.Tanaka
  • Journal Title: Journal of Communication And Computer Volume: 2
  • Peer Reviewed
• [Journal Article] メッセージの遷移パターンに基づくネットワークアプリケーション識別システムの試作 (2010)
  • Author(s): 和泉勇治、阿部康一、根元義章
  • Journal Title: 電子情報通信学会論文誌D J93-D Pages: 2257-2267
  • NAID: 110007730883
  • Peer Reviewed
• [Journal Article] メッセージの遷移パターンに基づくネットワークアプリケーション識別システムの試作 (2010)
  • Author(s): 和泉勇治、阿部康一、根元義章
  • Journal Title: 電子情報通信学会論文誌D Volume: J93-D Pages: 2257-2267
  • NAID: 110007730883
  • Peer Reviewed
• [Journal Article] Combating against internet worms in large-scale networks : an autonomic signature-based solution (2009)
  • Author(s): K.Simkhada, T.Taleb, Y.Waizumi, A.Jamalipour, Y.Nemoto
  • Journal Title: SECURITY AND COMMUNICATION NETWORKS Pages: 11-28
  • Peer Reviewed
• [Journal Article] Network Application Identification Based on Communication characteristics of Application Messages (2009)
  • Author(s): Y.Waizumi, Y.Tsukabe, H.Tsunoda, Y.Nemoto
  • Journal Title: Proc.of WCSET 2009 60 Pages: 708-713
  • Peer Reviewed
• [Journal Article] A New Traffic Pattern Matching for DDoS Traceback Using In dependent Component Analysis (2009)
  • Author(s): Y.Waizumi, T.Sato, Y.Nemoto
  • Journal Title: Proc.of WCSET 2009 60 Pages: 701-707
  • Peer Reviewed
• [Journal Article] Detecting DRDoS attacks by a simple response packet confirmation mechanism (2008)
  • Author(s): H.Tsunoda, K.Ohta, A.Yamamoto, N.Ansari, Y.Waizumi, Y.Nemoto
  • Journal Title: Computer Communications No.3 Pages: 3299-3306
  • Peer Reviewed
• [Presentation] パケットペイロード長の発生確率に基づいたネットワークアプリケーション識別 (2010)
  • Author(s): 和泉勇治、佐藤剛、田中和之
  • Organizer: 電子情報通信学会ニューロコンピューティング研究会
  • Place of Presentation: 東北大学(宮城)
  • Year and Date: 2010-11-18
• [Presentation] Network Application Identification Based on Communication characteristics of Application Messages (2009)
  • Author(s): Y.Waizumi, Y.Tsukabe, H.Tsunoda, Y.Nemoto
  • Organizer: Proc.of WCSET 2009, No.6, 708-713
  • Place of Presentation: Bangkok、タイ
  • Year and Date: 2009-12-26
• [Presentation] A New Traffic Pattern Matching for DDoS Traceback Using Inde pendent Component Analysis (2009)
  • Author(s): Y.Waizumi, T.Sato, Y.Nemoto
  • Organizer: Proc.of WCSET 2009, No.60, 701-707
  • Place of Presentation: Bangkok、タイ
  • Year and Date: 2009-12-26
• [Presentation] メッセージの送受信特性に基づいたネットワークアプリケーション識別に関する一考察 (2009)
  • Author(s): 和泉勇治, 塚辺有哉, 角田裕, 根元義章
  • Organizer: 電子情報通信学会通信方式研究会技術研究報告
  • Place of Presentation: 東北大学
  • Year and Date: 2009-09-10
• [Presentation] A Reliable Network Application Identification Based on Transition Pattern of Payload Length (2008)
  • Author(s): S.Yagi, Y.Waizumi, H.Tsunoda, Y.Nemoto
  • Organizer: Proc.of IEEE Globecom 2008
  • Place of Presentation: New Orleans,米国
  • Year and Date: 2008-12-02
• [Presentation] Network Application Ident -ification Using Transition Pattern of Payload Length (2008)
  • Author(s): S.Yagi, Y.Waizumi, H.Tsunoda, A.Jamalipour, N.Kato, Y.Nemoto
  • Organizer: IEEE WCNC 2008
  • Place of Presentation: Las Vegas、米国
  • Year and Date: 2008-04-02