Abstract:Timely traffic identification is critical in network security monitoring and traffic engineering. Traditional methods using well-known ports, protocols and precise signature matching are no longer accurate with the proliferation of new applications. Recently, applying pattern recognition methods to classify network application traffic based on the flow parameters (e.g. port, flow duration, etc.) has become increasing popular. However, many methods developed in the previous works are either too complex to be applied in real-time, or suffer from lower accuracy due to the insufficient knowledge of the application. In this paper, we first give an overview on the developments of pattern recognition methods as traffic classification tools. We then develop two separate pattern recognition methods: one with supervised learning, and one with un-supervised learning, and apply them to classify traffic captured from a campus backbone network. The supervised learning method (an optimized SVM method) yields approximately 99.41 % accuracy for the collected traffic. The un-supervised learning method (an entropy based clustering method) gets the average accuracy of 92.41% for the top 20 traffic generating hosts during the same time period. Performance test on a single PC with 3GHz Pentium 4 processors and 1 GB of memory show that both methods can handle more than 10000 network flows per second, close to real time requirements for many situations.

Study on Internet Traffic Classification Using Machine Learning

A Statistical-Feature-based Approach to Internet Traffic Classification Using Machine Learning.

Machine learning based network traffic classification: a survey

Online Internet Traffic Identification Algorithm Based on Multistage Classifier

Internet Traffic Classification Using Machine Learning: A Token-based Approach

Network Traffic Classification Techniques and Comparative Analysis Using Machine Learning Algorithms

Advances in Machine Learning Based Network Traffic Classification

Study of Network Traffic Classification and Application Identification

A Summary of Traffic Identification Method Depended on Machine Learning

Machine Learned Real-Time Traffic Classifiers

An Internet Traffic Classification Method Based on Semi-Supervised Support Vector Machine

Traffic Classification - Towards Accurate Real Time Network Applications

Research on Network Traffic Classification Based on Machine Learning and Deep Learning

The Study of Network Traffic Identification Based on Machine Learning Algorithm

IP Traffic Classification Based on Machine Learning

Study on Traffic Identification Technologies of Electricity Grid Information and Communication Network

Study of Network Traffic Recognition Based on Unsupervised Learning Method

Supervised Learning Real-time Traffic Classifiers

An Effective Network Traffic Classification Method with Unknown Flow Detection

Large traffic flows classification method

An SVM-based machine learning method for accurate internet traffic classification