Abstract:Timely traffic identification is critical in network security monitoring and traffic engineering. Traditional methods using well-known ports, protocols and precise signature matching are no longer accurate with the proliferation of new applications. Recently, applying pattern recognition methods to classify network application traffic based on the flow parameters (e.g. port, flow duration, etc.) has become increasing popular. However, many methods developed in the previous works are either too complex to be applied in real-time, or suffer from lower accuracy due to the insufficient knowledge of the application. In this paper, we first give an overview on the developments of pattern recognition methods as traffic classification tools. We then develop two separate pattern recognition methods: one with supervised learning, and one with un-supervised learning, and apply them to classify traffic captured from a campus backbone network. The supervised learning method (an optimized SVM method) yields approximately 99.41 % accuracy for the collected traffic. The un-supervised learning method (an entropy based clustering method) gets the average accuracy of 92.41% for the top 20 traffic generating hosts during the same time period. Performance test on a single PC with 3GHz Pentium 4 processors and 1 GB of memory show that both methods can handle more than 10000 network flows per second, close to real time requirements for many situations.

Traffic Identification Using Flexible Neural Trees

Early Stage Internet Traffic Identification Model based on Flexible Neural Trees

Traffic Classification Using Probabilistic Neural Networks.

A Novel Method of P2P Hosts Detection Based on Flexible Neural Tree

Real-Time P2P Traffic Identification

Network Traffic Classification Using Further Division Of Partition Space

Online hybrid traffic classifier for Peer-to-Peer systems based on network processors

A Peer-To-Peer Traffic Identification Method Using Machine Learning

Network Traffic Content Identification Based on Time-Scale Signal Modeling.

Internet Traffic Classification Using Feed-Forward Neural Network

Online Internet Traffic Identification Algorithm Based on Multistage Classifier

Traffic Classification - Towards Accurate Real Time Network Applications

An Application Traffic Identification Method Based on Deep ResNet

Network Traffic Classification Algorithm Based on Spectral Clustering

Hierarchical RBF Neural Network Using for Early Stage Internet Traffic Identification

A New Method of P2P Traffic Identification Based on Support Vector Machine at the Host Level

Identifying Traffic Clusters in Urban Networks Based on Graph Theory Using License Plate Recognition Data

Peer-to-Peer traffic identification using TCM based active learning

P2P Traffic Identification Based on Neural Network

Identification of P2P Traffic Using Statistics Method and Neural Network

Early Stage Internet Traffic Identification Using Data Gravitation Based Classification