基于特征进程的P2P流量识别

为了解决P2P流量识别中用户使用端口跳跃、数据加密等方法带来的识别难题，通过对主机进程与网络流量相关性的研究，提出一种基于特征进程的P2P流量识别系统，在客户端通过进程匹配完成P2P流量的识别，并且具有发现未知P2P进程的能力。实验表明，该系统对于P2P流量具有较高的识别能力。

P2P Traffic Identification Based on Characteristic Process

To resolve the hard problem which is caused by using port hopping and data encryption in P2P traffic identification, a new system for identifying the P2P traffic is presented based on characteristic process by the relevant researching between host process and network traffic, and the identification of P2P traffic is realized by process matching on the client host. The system also has the ability to detect unknown P2P process. Experimental results show that the system has a good performance in P2P traffic identification.