Abstract:Encrypted Traffic Classification (ETC) can provide necessary information support for network management and security. The state-of-the-art ETC methods take a single flow as the unit and only use sequence features based on in-flow relationships. In an actual network, one-time access to an application will generate multiple flows. Taking a single flow as the classification unit will produce many repeated and potentially erroneous results, which dramatically reduces the classification efficiency and prevents the results from being used for effective network management and security. In this paper, we propose a multi-flow ETC method. Since multiple flows generated by an application cannot be directly bound in a complex multi-application scenario, we first cluster the encrypted traffic to acquire flow bunches through the proposed Time Sequential Hierarchical Clustering with Sliding Windows (TSHC-SW) algorithm. Then, based on the flow bunches, we propose five different multi-flow classification schemas that can realize multi-flow classification effectively with model-independent. Open-world experiments show that our method is versatile in that it can pursue classification accuracy, speed, or sample covering rate, respectively, according to the actual demand and network environment constraints. In flow clustering, we achieve 95% adjusted Rand Index and 98% purity. In the multi-flow classification, we have over 99% F1-score, 79% prediction time saving, and 5% sample covering rate increasing, which is far superior to the state-of-the-art single-flow methods.

Classification of Correlated Internet Traffic Flows.

Internet Traffic Classification by Aggregating Correlated Naive Bayes Predictions

Large traffic flows classification method

An Effective Network Traffic Classification Method with Unknown Flow Detection

Robust network traffic identification with unknown applications.

A Statistical-Feature-based Approach to Internet Traffic Classification Using Machine Learning.

Research on Dynamic Network Flow Classification

ON CLASSIFICATION AND IDENTIFICATION OF INTERNET TRAFFIC BASED ON BAYESIAN BELIEF NETWORK

A traffic classification approach based on characteristics of subflows and ensemble learning

Network Traffic Classification Using Tri-training Based on Statistical Flow Characteristics

Semi-supervised and Compound Classification of Network Traffic

Classification and Application of Long-duration Flows Based on Flow Behavior

A FLOW NATURE CLASSIFICATION METHOD BASED ON MULTI-FEATURES OF N-GRAM

Study on Internet Traffic Classification Using Machine Learning

Application traffic classification based on command exchange mode of TCP flows

Comparison and Analysis of Flow Features at the Packet Level for Traffic Classification

On Addressing the Imbalance Problem: A Correlated KNN Approach for Network Traffic Classification.

Classify Traffic Rather Than Flow: Versatile Multi-Flow Encrypted Traffic Classification with Flow Clustering

A Heuristic-Based Co-clustering Algorithm for the Internet Traffic Classification

Imbalanced Internet Traffic Classification Using Ensemble Framework

SmoteAdaNL: a learning method for network traffic classification