Journal article
Self-Learning IP traffic classification based on statistical flow characteristics
Passive and Active Network Measurement, Vol.3431, pp.325-328
2005
Abstract
A number of key areas in IP network engineering, management and surveillance greatly benefit from the ability to dynamically identify traffic flows according to the applications responsible for their creation. Currently such classifications rely on selected packet header fields (e.g. destination port) or application layer protocol decoding. These methods have a number of shortfalls e.g. many applications can use unpredictable port numbers and protocol decoding requires high resource usage or is simply infeasible in case protocols are unknown or encrypted. We propose a framework for application classification using an unsupervised machine learning (ML) technique. Flows are automatically classified based on their statistical characteristics. We also propose a systematic approach to identify an optimal set of flow attributes to use and evaluate the effectiveness of our approach using captured traffic traces.
Details
- Title
- Self-Learning IP traffic classification based on statistical flow characteristics
- Authors/Creators
- S. Zander (Author/Creator)T. Nguyen (Author/Creator)G. Armitage (Author/Creator)
- Publication Details
- Passive and Active Network Measurement, Vol.3431, pp.325-328
- Publisher
- Springer Verlag
- Identifiers
- 991005544033207891
- Copyright
- 2005 Springer-Verlag Berlin Heidelberg
- Murdoch Affiliation
- Murdoch University
- Language
- English
- Resource Type
- Journal article
- Additional Information
- Conference title: 6th International Workshop, PAM 2005, Boston, MA, USA, March 31 - April 1, 2005
Metrics
496 File views/ downloads
116 Record Views