System and method for identifying peer-to-peer (P2P) application service

1 . A system for identifying a peer-to-peer (P2P) application service, comprising:

a flow generation unit for collecting an Internet protocol (IP) packet and generating a flow;

a port number-based identification unit for identifying a P2P application service on the basis of a port number using the flow generated by the flow generation unit;

a verification unit for verifying the P2P application service identified by the port number-based identification unit;

a payload-based identification unit for, when the verification unit determines that the identification performed by the port number-based identification unit is not correct, or the P2P application service is not identified by the port number-based identification unit, identifying the P2P application service on the basis of a payload;

a SET table generation unit for, when the P2P application service is identified by the payload-based identification unit, or the verification unit determines that the identification performed by the port number-based identification unit is correct, generating a SET table using a flow of the identified P2P application service; and

a SET table-based identification unit for identifying the P2P application service for a flow not identified by either the port number-based identification unit or the payload-based identification unit using the SET table generated by the SET table generation unit.

2 . The system of claim 1 , wherein the flow generation unit generates the flow by combining a transmitter IP, a transmitter port, a receiver IP, a receiver port, and a protocol of the collected IP packet.

3 . The system of claim 1 , wherein the verification unit performs verification using payload information.

4 . The system of claim 1 , wherein the verification unit performs verification using service ports of a transmitting end and a receiving end.

5 . A method of identifying a peer-to-peer (P2P) application service, comprising the steps of:

(a) collecting an Internet protocol (IP) packet and generating a flow;

(b) identifying the P2P application service on the basis of a port number using the generated flow;

(c) when the P2P application service is identified in step (b), verifying the identified application service;

(d) when it is verified that the identification is not correct, or the P2P application service is not identified in step (b), identifying the P2P application service on the basis of a payload;

(e) when the P2P application service is identified in step (d) or it is verified in step (c) that the identification is correct, generating a SET table using a flow of the identified P2P application service; and

(f) identifying the P2P application service for a flow not identified in either step (b) or step (d) using the SET table.

6 . The method of claim 5 , wherein, in step (a), the flow is generated by combining a transmitter IP, a transmitter port, a receiver IP, a receiver port, and a protocol of the collected IP packet.

7 . The method of claim 5 , wherein, in step (c), the verification is performed using payload information.

8 . The method of claim 5 , wherein, in step (c), the verification is performed using service port of a transmitting end and a receiving end.

9 . A recording medium storing the method of any one of claims 5 to 8 using computer-executable program code.