Abstract:The discovery and description of the IP traffic behavior is of great significance for both network operation management and network security monitoring. Researches demonstrate that there are some similarities of the traffic behavior among different IPs, hence, they can be clustered based on the behavior similarity. These similar traffic behaviors can be depicted by a specific behavior pattern called IP address role in our work. Towards this end, a unidirectional IP flow record is used to represent an independent IP activity. The traffic behavior metrics are defined in four dimensions including the duration time, the peer address, the application types and the number of packets and bytes contained in the flow, which corresponds to temporal dimension, spatial dimension, category dimension and intensity dimension, respectively. Nine single-attribute and thirty-nine dual-attribute metrics are extracted from four dimensions to compose the IP address traffic characteristic spectrum, which is used to profile the behavior of all IPs in the observed network and provide the data for the behavior description of each class of IP. These classes are established by a characteristic spectrum matched IP address role mining algorithm designed in this paper. NetFlow data collected from some border routers of China Education Research Network backbone (CERNET) is used to verify the method. Experimental results demonstrate that our approach can be applied to anomaly behavior detection and mainstream behavioral habits analysis.

Analyzing Traffic Characteristics Between Backbone Networks Based on Hadoop.

Network traffic analysis based on Hadoop

Hadoop-based Network Traffic Anomaly Detection in Backbone

Offline Traffic Analysis System Based on Hadoop

Characterizing Internet Backbone Traffic from Macro to Micro

Modeling and Characterizing Internet Backbone Traffic

Backbone Traffic Pattern Analysing Based on Joint Entropy.

Flow Identification and Characteristics Mining from Internet Traffic with Hadoop

IP Network Traffic Analysis Based on Big Data.

Monitoring and analyzing big traffic data of a large-scale cellular network with Hadoop

Analyzing GPRS Mobile Network Traffic with Map Reduce

A Methodology for Analyzing Backbone Network Traffic at Stream-Level

Characterizing and Modeling Microblog Traffic in Cellular Data Network Based on Massive Data Analysis

Investigation of network traffic in geo-distributed data centers

Characterizing Internet Backbone Traffic Based on Deep Packets Inspection and Deep Flows Inspection

Traffic and User Behavior Analysis of Online Mobile Games

Characterizing and Modeling of Large-Scale Traffic in Mobile Network

The Impact of Typical Applications on Network Traffic

Performance Analysis of MAN Backbone Net Traffic

Design and Implementation of Network User Behaviors Analysis Based on Hadoop for Big Data

IP Backbone Traffic Behavior Characteristic Spectrum Composing and Role Mining