Abstract:Timely traffic identification is critical in network security monitoring and traffic engineering. Traditional methods using well-known ports, protocols and precise signature matching are no longer accurate with the proliferation of new applications. Recently, applying pattern recognition methods to classify network application traffic based on the flow parameters (e.g. port, flow duration, etc.) has become increasing popular. However, many methods developed in the previous works are either too complex to be applied in real-time, or suffer from lower accuracy due to the insufficient knowledge of the application. In this paper, we first give an overview on the developments of pattern recognition methods as traffic classification tools. We then develop two separate pattern recognition methods: one with supervised learning, and one with un-supervised learning, and apply them to classify traffic captured from a campus backbone network. The supervised learning method (an optimized SVM method) yields approximately 99.41 % accuracy for the collected traffic. The un-supervised learning method (an entropy based clustering method) gets the average accuracy of 92.41% for the top 20 traffic generating hosts during the same time period. Performance test on a single PC with 3GHz Pentium 4 processors and 1 GB of memory show that both methods can handle more than 10000 network flows per second, close to real time requirements for many situations.

Study of Network Traffic Classification and Application Identification

Research on Machine Learning Based Network Application Identification

A Summary of Traffic Identification Method Depended on Machine Learning

Study on Internet Traffic Classification Using Machine Learning

Machine learning based network traffic classification: a survey

Study on Traffic Identification Technologies of Electricity Grid Information and Communication Network

Research on Network Traffic Classification Based on Machine Learning and Deep Learning

The Study of Network Traffic Identification Based on Machine Learning Algorithm

Advances in Machine Learning Based Network Traffic Classification

Comparison research on the methods of network traffic classification

Traffic classification beyond application level: identifying content types from network traces.

Network Traffic Classification Techniques and Comparative Analysis Using Machine Learning Algorithms

A Survey on Network Traffic Identification

Comparison Research on the Methods of Internet Traffic Classification

Internet Traffic Classification Using Machine Learning: A Token-based Approach

Traffic Classification - Towards Accurate Real Time Network Applications

Research Progress and Prospects of Network Traffic Classification

Network Traffic Classification Algorithm Based on Spectral Clustering

Towards Automatic Identification of Network Applications

Online Internet Traffic Identification Algorithm Based on Multistage Classifier

A Statistical-Feature-based Approach to Internet Traffic Classification Using Machine Learning.