PortView: identifying port roles based on port fuzzy macroscopic behavior

Journal of Internet Services and Applications

Table 1 Port communication behavior

Port status	Basic metrics	Port role	Communication
Normal Port	X_i ≈ Y_i	Client Port	$\begin{array}{l} \|DSI P_{i}\| \approx \|DDI P_{i}\| \\ \|SSI P_{i}\| \approx \|SDI P_{i}\| \end{array}$
		Service Port	$\begin{array}{l} \|DSI P_{i}\| > \|DDI P_{i}\| \\ \|SSI P_{i}\| < \|SDI P_{i}\| \end{array}$
		P2P Service Port	$\begin{array}{l} \|DSI P_{i}\| > > \|DDI P_{i}\| \\ \|SSI P_{i}\| < < \|SDI P_{i}\| \end{array}$
		Overlay Port	$\begin{array}{l} \|DSI P_{i}\| < \|DDI P_{i}\| \\ \|SSI P_{i}\| > \|SDI P_{i}\| \end{array}$
Abnormal Port	X_i ≠ Y_i	Scanning Port	$\begin{array}{l} \|DSI P_{i}\| < < \|DDI P_{i}\| \\ \|SSI P_{i}\| \approx \|SDI P_{i}\| \end{array}$
Abnormal Port	X_i ≠ Y_i	Failed Service Port	$\begin{array}{l} \|DSI P_{i}\| > > \|DDI P_{i}\| \\ \|SSI P_{i}\| \approx \|SDI P_{i}\| \end{array}$