Abstract:Network traffic classification is an essential component for network management and security systems. To address the limitations of traditional port-based and payload-based methods, recent studies have been focusing on alternative approaches. One promising direction is applying machine learning techniques to classify traffic flows based on packet and flow level statistics. In particular, previous papers have illustrated that clustering can achieve high accuracy and discover unknown application classes. In this work, we present a novel semi-supervised learning method using constrained clustering algorithms. The motivation is that in network domain a lot of background information is available in addition to the data instances themselves. For example, we might know that flow f1 and f2 are using the same application protocol because they are visiting the same host address at the same port simultaneously. In this case, f1 and f2 shall be grouped into the same cluster ideally. Therefore, we describe these correlations in the form of pair-wise must-link constraints and incorporate them in the process of clustering. We have applied three constrained variants of the K-Means algorithm, which perform hard or soft constraint satisfaction and metric learning from constraints. A number of real-world traffic traces have been used to show the availability of constraints and to test the proposed approach. The experimental results indicate that by incorporating constraints in the course of clustering, the overall accuracy and cluster purity can be significantly improved.

High accurate internet traffic classification based on co-training semisupervised clustering

An Internet Traffic Classification Method Based on Semi-Supervised Support Vector Machine

Network Traffic Classification Based on Semi-Supervised Clustering

Semi-supervised and Compound Classification of Network Traffic

Online Traffic Classification Based on Co-training Method

A Self-Adaptive Network Traffic Classification System with Unknown Flow Detection

Traffic Classification - Towards Accurate Real Time Network Applications

Information Entropy Based Clustering Method for Unsupervised Internet Traffic Classification

A Heuristic-Based Co-clustering Algorithm for the Internet Traffic Classification

Network Traffic Classification Using Tri-training Based on Statistical Flow Characteristics

A Novel Semi-Supervised Approach for Network Traffic Clustering

A Semi-Supervised Clustering Method for Network Application Flow Classification

Realtime traffic classification based on semi-supervised learning

A semi-supervised network traffic classification method based on incremental learning

Service Classification of High-Speed Network Traffic Based on Two-Stage Clustering

Semi-supervised Internet Network Traffic Classification Using a Gaussian Mixture Model

Semi-supervised Network Traffic Classification Method Based on Support Vector Machine

An Effective Network Traffic Classification Method with Unknown Flow Detection

Traffic classification using an improved clustering algorithm

Study on Internet Traffic Classification Using Machine Learning

Unsupervised Traffic Classification Using Affinity-Propagation-Based Clustering Method