Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Causing recognition mistake<br />
Evading classification<br />
If the protocol is not recognized, it can’t be decoded<br />
Classification evasion lead to undetected traffic<br />
Classification made easy<br />
Some protocol can be classified with a single message<br />
Sending packet with fake content prior to real one<br />
Will lead to recognition mistake<br />
Éric Leblond, Victor Julien (OISF) <strong>The</strong> <strong>menace</strong> <strong>came</strong> <strong>from</strong> <strong>below</strong> <strong>Hack</strong>.<strong>lu</strong> 2012 53 / 66