Research Article
Detecting ShadowsocksR User Based on Intelligence of Cyber Entities
| | Symbol | Definition |
| | SS (R) | ShadowsocksR (SSR) | | Number of extra-area IPs communicating with the users’ host within the specified time window | | Number of intra-area IPs communicating with the users’ host within the specified time window | | Number of extra-domains accessed by the users’ host within the specified time window | | Number of intra-domains accessed by communicating with the users’ host within the specified time window | | Average ratio of extra_ip and intra_ip per minute | | Average ratio of extra_domain and intra_ip per minute | | Statistical characteristics of the sender | | Statistical characteristics of the receiver | | Statistical characteristics of the bidirectional conversation flow |
|
|
