vix.ing · top · new · best · stats · spec

Traffic analyzer for differentiating BitTorrent handshake failures from port-scans

2013/09/01 by Kamran Riaz Khan, Khan, Kamran, Affan A. Syed +3
Computer Science · #Advanced Data Storage Technologies #Caching and Content Delivery #FOS: Computer and information sciences #Networking and Internet Architecture (cs.NI) #Peer-to-Peer Network Technologies

paper · pdf · doi:10.48550/arxiv.1309.0276

openalex publication_date 2013/09/01 · openalex created_date 2025/10/10 · openalex updated_date 2026/07/28

Abstract

This paper aims to improve the accuracy of port-scan detectors by analyzing traffic of BitTorrent hosts and differentiating their respective BitTorrent connection (attempts) from port-scans. It is shown that by looking at BitTorrent coordination traffic and modelling port-scanning behavior the number of BitTorrent-related false positives can be reduced by 80% without any loss of IDS accuracy.

Related