Ji Qingbing’s research while affiliated with The 54th Research Institute of China Electronics Technology Group Corporation and other places

What is this page?


This page lists works of an author who doesn't have a ResearchGate profile or hasn't added the works to their profile yet. It is automatically generated from public (personal) data to further our legitimate goal of comprehensive and accurate scientific recordkeeping. If you are this author and want this page removed, please let us know.

Publications (1)


Research on ShadowsocksR Traffic Identification Based on Xgboost Algorithm
  • Chapter

January 2021

·

211 Reads

·

6 Citations

Advances in Intelligent Systems and Computing

Ji Qingbing

·

Deng Xiaoyan

·

Ni Lulin

·

Lei Haijun

It is very difficult to identify Shadowsocks (SS) traffic, most of which stay in the laboratory environment, and there are very few published research results in this field at home and abroad. ShadowsocksR (SSR) is an enhanced version of SS. It can disguise the traffic of SS as that of conventional protocol, such as HTTP traffic, TLS traffic, etc., which makes it more difficult to identify SSR traffic. Based on Xgboost algorithm, this paper proposes a method to identify SSR traffic for the first time. The experimental results show that this method has a good recognition effect on SSR traffic, and the precision, the recall, the accuracy is all above 95.3%.

Citations (1)


... To date, few detection schemes for SSR communication exist, most of which have been improved on the basis of the SS communication detection method. Ji et al. [15] proposed an SSR traffic identification algorithm based on the XGboost algorithm and K-means clustering algorithm for SS traffic disguised as HTTP traffic. ey analyzed the differences between SSR and non-SSR communication traffic from the perspective of the HTTP protocol and encrypted traffic and extracted the statistical features of the traffic load, the information entropy of the first four packet payloads of single traffic, and other entropy obtained by cluster analysis as the features by which to identify the SSR traffic. ...

Reference:

Detecting ShadowsocksR User Based on Intelligence of Cyber Entities
Research on ShadowsocksR Traffic Identification Based on Xgboost Algorithm
  • Citing Chapter
  • January 2021

Advances in Intelligent Systems and Computing