Browsing by Author "Khatouni, Ali Safari"

Filter results by typing the first few letters
Now showing 1 - 1 of 1
  • Thumbnail Image
    Conference Object
    Citation - WoS: 5
    Citation - Scopus: 18
    Exploring NAT Detection and Host Identification Using Machine Learning
    (Institute of Electrical and Electronics Engineers Inc., 2019) Ali Safari Khatouni; Lan Zhang; Khurram Aziz; Ibrahim Zincir; Zhang, Lan; Zincir, Ibrahim; Khatouni, Ali Safari; Aziz, Khurram; Zincir-Heywood, Nur; H. Lutfiyya , Y. Diao , N. Zincir-Heywood , R. Badonnel , E. Madeira
    The usage of Network Address Translation (NAT) devices is common among end users organizations and Internet Service Providers. NAT provides anonymity for users within an organization by replacing their internal IP addresses with a single external wide area network address. While such anonymity provides an added measure of security for legitimate users it can also be taken advantage of by malicious users hiding behind NAT devices. Thus identifying NAT devices and hosts behind them is essential to detect malicious behaviors in traffic and application usage. In this paper we propose a machine learning based solution to detect hosts behind NAT devices by using flow level statistics (excluding IP addresses port numbers and application layer information) from passive traffic measurements. We capture a large dataset and perform an extensive evaluation of our proposed approach with four existing approaches from the literature. Our results show that the proposed approach could identify NAT behaviors and hosts not only with higher accuracy but also demonstrates the impact of parameter sensitivity of the proposed approach. © 2020 Elsevier B.V. All rights reserved.