Patent ID: 8539221

Claim:
A method for identifying an application type from encrypted traffic transported over an IP network, the method comprising: extracting at least a portion of IP packet related parameters from IP packets of an encrypted IP flow of the encrypted traffic; transmitting the extracted IP packet related parameters to a learning-based classification engine, the learning-based classification engine having been trained with unencrypted traffic; and inferring by the learning-based classification engine at least one corresponding application type for the encrypted IP flow based on the extracted IP packet related parameters; wherein: the IP packet related parameters have corresponding values in both an IP flow of the training unencrypted traffic corresponding to the application type and the encrypted IP flow of the encrypted traffic, wherein training the learning-based classification engine with unencrypted traffic consists in performing a mapping between values of IP packet related parameters of unencrypted IP flows and corresponding application types of the unencrypted IP flows; and inferring by the learning-based classification engine is performed by comparing values of the extracted IP packet related parameters with the corresponding values for the training unencrypted traffic.