The SPID Algorithm – Statistical Protocol IDentification
About the Author Erik Hjelmvik is an independent network security researcher and open source developer. He holds a M.Sc. degree in engineering from the Royal Institute of Technology (KTH) in Stockholm, Sweden. In the past, Erik served as an R&D engineer at one of Europe’s largest electric utility companies, where he worked with IT security for SCADA and process control systems. Erik is also the creator of the network forensic analysis tool NetworkMiner, which is freely available as open source at SourceForge.net.
About the Sponsor The Internet Infrastructure Foundation (.SE) is responsible for the top-level Swedish Internets domain, .se. The core business is the registration of domain names and the administration and technical operation of the national domain name registry, at the same time as .SE promotes the positive development of the Internet in Sweden. .SE is an independent public utility standing on two legs: domain name operations and development of the Internet. The surplus from the registration of domain names is used to finance projects that contribute to the Internet’s development in Sweden. Financing projects that contribute to the development of the Internet is a prerequisite for the operations, according to the Foundation’s Statutes. .SE is working hard to be an active research and development financier and player within Internet development. The efforts are intended to benefit domain registrants. .SE has established a long-term objective that financing projects for research and development annually will total SEK 25 million as of 2009.
iv