workshop on app classification

Mark Allman mallman at
Wed Jun 13 13:48:32 UTC 2007


This is a bit off-topic, but I wanted to make folks aware of it and note
that we'd love to hear some operational experience / opinion about this
entire area of trying to figure out what app a given traffic flow
involves.  (Yes, I understand that at some level it doesn't matter.)


IMRG Workshop on Application Classification and Identification (WACI)

There is considerable interest in identifying network traffic by 
application to support network provisioning, network security, and 
service quality.  Techniques that rely on a well-known port number 
to identify an application may give a gross notion of the spread of 
applications, but it is not a reliable means for application 
identification in the face of evasion.  There has been work in using 
traffic characteristics to construct application equivalence classes, 
using techniques such as machine learning, principal component 
analysis, deep packet inspection and others.
The Workshop on Application Classification and Identification 
(WACI) aims to bring together the most active researchers in this 
research area. The main objectives of the one-day workshop will be 
to discuss recent advancements in this field, discuss new 
approaches and their implications, and identify open problems that 
require further research.

Topics of interest (include, but are not limited to):
 - Statistical methods for identifying application-layer protocols
 - Methods for finding application classes (file transfer,
   interactive, etc.) 
 - Efficient schemes for using deep packet inspection to identify 
 - Identifying applications within tunnels
 - Identifying rogue/nefarious applications
 - Peer-to-peer application identification
 - Peer-to-peer traffic characterization

Submission instructions

We invite interested researchers to submit a 1-2 page abstract or
position statement. Abstracts will be chosen based on their
relevance to the area of application identification, and on the
diversity of the covered topics. There will be no full-paper
submissions or proceedings. Authors of accepted abstracts however
should plan to give a 25-minute presentation that will be posted at
the workshop's web page (TBA). A significant part of the workshop
will be given to discussions and interaction among participants.
Submissions must be in electronic form, as plain-text or PDF (if
graphs are included) documents, and they should be submitted by
e-mail to: Tim Strayer (strayer at


Attendance at this workshop will be by invitation.  Authors of
submitted abstracts should commit that they will attend the workshop
if their abstract is accepted.  Others interested in attending
should indicate this in email to Tim Strayer (strayer at
There will be no registration fee.

Important Dates
 - July 1, 2007 - submission of 1-2 pages abstract
 - August 15, 2007 - acceptance notification
 - October 3, 2007 - workshop at BBN Technologies

Workshop Location

  WACI will be held at:
    BBN Technologies
    10 Moulton Street
    Cambridge MA, USA

Organizing and program committee

 - Tim Strayer, chair (BBN, strayer at
 - Mark Allman (ICIR-ICSI, mallman at
 - Grenville Armitage (Swinburne University, garmitage at swin,
 - Steve Bellovin (Columbia University, smb at
 - Shudong Jin (Case Western Reserve University, jins at
 - Andrew Moore (CUCL, andrew.moore at


The workshop is sponsored by the IRTF's Internet Measurement
Research Group and hosted by BBN Technologies.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 185 bytes
Desc: not available
URL: <>

More information about the NANOG mailing list