Network Traffic Classification Using Further Division Of Partition Space

Lin Wang,Bo Yang,Zhenxiang Chen,Yuehui Chen
2007-01-01
Abstract:Classification of network traffic using port-based or payload-based analysis is becoming increasingly difficult with many applications using dynamic port numbers, masquerading techniques, and encryption to avoid detection. An alternative approach is to classify traffic by exploiting the distinctive characteristics of applications when they communicate on a network. We pursue this latter approach and demonstrate how Further Division of Partition Space (FDPS)can be used to effectively identify groups of traffic that are similar using only transport layer statistics. FDPS which is a novel improvement in neural networks classification is proposed in our previous work.We evaluate FDPS and compare it to the traditional neural networks classification, using empirical Internet traces.The experimental results show that FDPS works very well and more quickly than traditional. Our results indicate that FDPS has higher performance than traditional neural networks classification.
What problem does this paper attempt to address?