Self-learning IP traffic classification based on statistical flow characteristics

Lecture Notes in Computer Science

Volumn 3431, Issue , 2005, Pages 325-328

  Zander, Sebastian ^a   Nguyen, Thuy ^a   Armitage, Grenville ^a  

^a SWINBURNE UNIVERSITY OF TECHNOLOGY   (Australia)

Author keywords

[No Author keywords available]

Indexed keywords

CRYPTOGRAPHY; LEARNING SYSTEMS; NETWORK PROTOCOLS; TELECOMMUNICATION TRAFFIC;

FLOW ATTRIBUTES; PACKET HEADER FIELDS; PROTOCOL DECODING; TRAFFIC FLOWS;

COMPUTER NETWORKS;

EID: 24344492729     PISSN: 03029743     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1007/978-3-540-31966-5_26     Document Type: Conference Paper

References (11)

1. S. Sen, O. Spatscheck, D. Wang, "Accurate, Scalable In-Network Identification of P2P Traffic Using Application Signatures", WWW 2004, New York, USA, May 2004.
2. J. Frank, "Machine Learning and Intrusion Detection: Current and Future Directions", Proceedings of the National 17th Computer Security Conference, 1994.
3. M. Roughan, S. Sen, O. Spatscheck, N. Duffield, "Class-of-Service Mapping for QoS: A statistical signature-based approach to IP traffic classification", ACM SIGCOMM Internet Measurement Workshop 2004, Taormina, Sicily, Italy.
4. A. McGregor, M. Hall, P. Loner, J. Brunskill, "Flow Clustering Using Machine Learning Techniques", Passive & Active Measurement Workshop 2004, France, April, 2004.
5. K. Lan, J. Heidemann, "On the correlation of Internet flow characteristics", Technical Report ISI-TR-574, USC/Information Sciences Institute, July, 2003.
6. K. Claffy, H.-W. Braun, G. Polyzos, "Internet Traffic Profiling", CAIDA, San Diego Supercomputer Center, http://www.caida.org/outreach/papers/1994/itf/, 1994.
7. T. Dunnigan, G. Ostrouchov, "Flow Characterization for Intrusion Detection", Oak Ridge National Laboratory, Tech Report, http://www.csm.ornl.gov/~ost/id/tm.ps, November 2000.
8. NetMate, http://sourceforge.net/projects/netmate-meter/ (as of January 2005).
9. P. Cheeseman, J. Stutz, "Bayesian Classification (Autoclass): Theory and Results", Advances in Knowledge Discovery and Data Mining, AAAI/MIT Press, USA, 1996.
10. A. Dempster, N. Laird, D. Rubin, "Maximum Likelihood from Incomplete Data via the EM Algorithm, Journal of Royal Statistical Society, Series B, Vol. 30, No. 1, 1977.
11. NLANR traces: http://pma.nlanr.net/Special/ (as of January 2005).