1. Research on ShadowsocksR Traffic Identification Based on Xgboost Algorithm
- Author
-
Lei Haijun, Deng Xiaoyan, Ji Qingbing, and Ni Lulin
- Subjects
Protocol (science) ,Computer science ,Traffic identification ,k-means clustering ,Algorithm ,Field (computer science) - Abstract
It is very difficult to identify Shadowsocks (SS) traffic, most of which stay in the laboratory environment, and there are very few published research results in this field at home and abroad. ShadowsocksR (SSR) is an enhanced version of SS. It can disguise the traffic of SS as that of conventional protocol, such as HTTP traffic, TLS traffic, etc., which makes it more difficult to identify SSR traffic. Based on Xgboost algorithm, this paper proposes a method to identify SSR traffic for the first time. The experimental results show that this method has a good recognition effect on SSR traffic, and the precision, the recall, the accuracy is all above 95.3%.
- Published
- 2020