FNF: flow-net based fingerprinting

Abstract

Logging is important since it lets us know what happened or are happening in any systems or networks. Our early work proposed a superior logging mechanism called flow-net. In this paper, we apply the flow-net method to fingerprinting, called flow-net based fingerprinting (FNF), to match and identify malicious behaviours. Evaluation results from experiments demonstrate good performance.