Analyzing Outbound Network Traffic
Conventional security solutions monitor network communication without paying much attention to outgoing traffic, due to high processing cost of packet level network traffic analysis. Outgoing network communication, originating from typical system's application has common properties, which can be used for traffic selection in security related analysis. The paper presents the concept of outbound network traffic classification based on temporal characteristics of network flows and shows the results of experiments identifying traffic patterns of common user's application and values of classification parameters.
network flow patterns web flow application traffic analysis