A model of the http traffic generated by a community of users connected to the Internet via a proxy cache is described. The model reproduces Internet traffic realistically and is used as input to the Internet cache simulation models developed by British Telecom research laboratories.

The inclusion of Transmission Control Protocol (TCP) is necessary for the realistic simulation of data networks. However, the operation of HTTP-TCP sources puts a heavy tax on the simulations leading to two major scalability problems: the computing resources required by each source put a limit on the total number of sources that can be simulated, and the number of events generated by every simu...

We focus on two distinctive features of HTTP-based C&C traffic by analyzing HTTP activity sets. First, C&Cs show a few connections at a time (low-density). Second, contents within a request or a response change frequently among consecutive C&Cs (content-change). Based on these two features, we propose a C&C analysis mechanism that detects unknown HTTP-based C&Cs with low false-positives.

Measurement and analysis of real traffic is important to gain knowledge about the characteristics of the traffic. Without measurement, it is impossible to build realistic traffic models. It is recent that data traffic was found to have self-similar properties. In this thesis work traffic captured on the network at SICS and on the Supernet, is shown to have this fractal-like behaviour. The traff...

Users increasingly use mobile devices as their primary means to access the Internet. While it is well known that cellular network operators employ middleboxes, the details of their behavior and their impact on performance for representative Web workloads are poorly understood. This paper presents an analysis of proxy behavior and how transparent Web proxies interact with HTTP traffic in four ma...