Advanced Search

YAMA : a system for marking network traffic

Research and Teaching Output of the MIT Community

Planned maintenance alert - Monday, April 21: DSpace@MIT will undergo maintenance activities that will affect service availability and access to file content. While the service interruptions should be brief, access to file content may take longer to restore. Status updates will be posted to

Show simple item record

dc.contributor.advisor Robert K. Cunningham. en_US Hernández González, Néstor Felipe en_US
dc.contributor.other Massachusetts Institute of Technology. Dept. of Electrical Engineering and Computer Science. en_US 2008-05-19T16:00:05Z 2008-05-19T16:00:05Z 2006 en_US 2006 en_US
dc.description Thesis (M. Eng.)--Massachusetts Institute of Technology, Dept. of Electrical Engineering and Computer Science, 2006. en_US
dc.description Includes bibliographical references (p. 105-108). en_US
dc.description.abstract Computer security performance analysis requires precise labeling of traffic as either background or attack traffic. When an experiment is performed on-line, it may also be important to identify traffic from the security system. Today this is tedious and difficult, requiring personnel with a deep understanding of multiple protocols. YAMA (Your Able Marking Aide) is a tool that labels sessions and packets associated with a set of user actions given those actions, the traffic, and a network configuration (host information and web page corpus). An evaluation of a version that processes web traffic is performed using data from Alexas Top 100 Sites. YAMA 1.0 correctly associates the action of visiting a specific site with 90% of all HTTP packets, and 99% of both HTTP GET and DNS packets. Furthermore, YAMA 1.0 produces zero false positives when given a high-level event indicating a user visited one web site and packets from a different site. en_US
dc.description.statementofresponsibility by Néstor Felipe Hernández González. en_US
dc.format.extent 108 p. en_US
dc.language.iso eng en_US
dc.publisher Massachusetts Institute of Technology en_US
dc.rights M.I.T. theses are protected by copyright. They may be viewed from this source for any purpose, but reproduction or distribution in any format is prohibited without written permission. See provided URL for inquiries about permission. en_US
dc.rights.uri en_US
dc.subject Electrical Engineering and Computer Science. en_US
dc.title YAMA : a system for marking network traffic en_US
dc.title.alternative System for marking network traffic en_US
dc.type Thesis en_US M.Eng. en_US
dc.contributor.department Massachusetts Institute of Technology. Dept. of Electrical Engineering and Computer Science. en_US
dc.identifier.oclc 214350628 en_US

Files in this item

Name Size Format Description
214350628.pdf 4.351Mb PDF Preview, non-printable (open to all)
214350628-MIT.pdf 4.351Mb PDF Full printable version (MIT only)

This item appears in the following Collection(s)

Show simple item record