KISS: Stochastic Packet Inspection Classifier for UDP Traffic

This paper proposes KISS, a novel Internet classification engine. Motivated by the expected raise of UDP traffic, which stems from the momentum of P2P streaming applications, the authors propose a novel classification framework which leverages on statistical characterization of payload. Statistical signatures are derived by the means of a Chi-Square like test, which extracts the protocol "Format", but ignores the protocol "Semantic" and "Synchronization" rules. The signatures feed a decision process based either on the geometric distance among samples, or on Support Vector Machines.