Posted on : 28-05-2008 | By : Elie Bursztein | In : Software
0
Apsm is a desktop application that gathers Apache status mod data to plot charts and compute statistics. Its goal is to help you analyze how the load of your HTTP servers evolves real time. It is written in Java so it should run on every OS.
Download it from Google Code
While fully functional, this is a very early release: I have spent only a day to code it. I will put more effort into it, if I see that it fulfill a need hence do not hesitate to provide your feedback
As far as I know, this is the first software that use apache mod to make charts.
Here is some screenshot, If you want to see what it look like before using it:
Posted on : 20-05-2008 | By : Elie Bursztein | In : Article, Publications
0
Published at WISTP 2008 and Awarded Best Paper
With the growing use of protocols obfuscation techniques, protocol identification for Q.O.S enforcement, traffic prohibition, and intrusion detection has became complex task. This paper address this issue with a probabilistic identification analysis that combines multiples advanced identification techniques and returns an ordered list of probable protocols. It combines a payload analysis with a classifier based on several discriminators, including packet entropy and size.
We show with its implementation, that it overcomes the limitations of traditional port-based protocol identification when dealing with hard to classify protocol such as peer to peer protocols. We also details how it deals with tunneled session and covert channel.
Author Version (PDF)