An automatic application signature construction system for unknown traffic

Concurrency and Computation: Practice and Experience

Volumn 22, Issue 13, 2010, Pages 1927-1944

  Wang, Yu ^a,b   Xiang, Yang ^a   Yu, Shun Zheng ^b  

^a DEAKIN UNIVERSITY   (Australia)

^b SUN YAT SEN UNIVERSITY   (China)

Author keywords

Clustering; Feature selection; Machine learning; Traffic classification

Indexed keywords

COMPUTER APPLICATIONS; COMPUTER NETWORKS; FEATURE EXTRACTION; LEARNING SYSTEMS;

APPLICATION SIGNATURES; AUTOMATIC APPLICATION; CLUSTERING; COMMUNICATION PATTERN; LABELED TRAINING DATA SETS; NETWORK TRAFFIC FLOW; STATISTICAL CHARACTERISTICS; TRAFFIC CLASSIFICATION;

CONCURRENCY CONTROL;

EID: 77956489422     PISSN: 15320626     EISSN: 15320634     Source Type: Journal    
DOI: 10.1002/cpe.1603     Document Type: Article

References (20)

1. Internet Assigned Numbers Authority. Available at: http://www.iana.org [15 November 2009].
2. Karagiannis T, Broido A. Brownlee N. Claffy K. Is P2P dying or just hiding? Proceedings of the 47th Annual IEEE Globecom 2004, Dallas, TX, U.S.A., November/December 2004.
3. Sen S, Spatscheck O, Wang D. Accurate, scalable in-network identification of P2P traffic using application signatures. WWW2004, New York, NY, U.S.A., May 2004.
4. Moore A, Papagiannaki K. Toward the accurate identification of network application. Proceedings of PAM 2005, Boston, MA, U.S.A., March/April 2005.
5. Wireshark. Available at: http://www.wireshark.org [15 November 2009].
6. L7-filter-Application Layer Packet Classifier for Linux. Avialble at: http://l7-filter.sourceforge.net [15 November 2009].
7. McGregor A, Hall M, Lorier P, Brunskill J. Flow clustering using machine learning techniques. PAM 2004, Antibes Juan-les-Pins, France, April 2004.
8. Moore A, Zuev D. Internet traffic classification using Bayesian analysis techniques. SIGMETRICS 2005, Banff, Alta, Canada, June 2005.
9. Auld T, Moore AW, Gull SF. Bayesian neural networks for Internet traffic classification. IEEE Transactions on Neural Networks 2007; 18(1):223-239.
10. Zander S, Nguyen T, Armitage G, Automated traffic classification application identification using machine learning.LCN 2005, Sydney, Australia, November 2005.
11. Erman J, Mahanti A, Arlitt M. Internet traffic identification using machine learning techniques. GLOBECOM 2006, San Francisco, U.S.A., December 2006.
12. Erman J, Arlitt M, Mahanti A. Traffic classification using clustering algorithms. MineNet '06: Proceedings of the 2006 SIGCOMM Workshop on Mining Network Data. ACM: New York, NY, U.S.A., 2006; 281-286.
13. Erman J, Mahanti A, Arlitt M, Cohen I, Williamson C. Semisupervised network traffic classification. SIGMETRICS Performance Evaluation Review 2007; 35(1):369-370.
14. Bernaille L, Teixeira R, Akodkenou I, Soule A, Salamatian K. Traffic classification on the fly. SIGCOMM Computer Communication Review 2006; 36(2):23-26.
15. Crotti M, Dusi M, Gringoli F, Salgarelli L. Traffic classification through simple statistical fingerprinting. SIGCOMM Computer Communication Review 2007; 37(1):5-16.
16. Haffner P, Sen S, Spatscheck O, Wang D. ACAS: Automated construction of application signatures. MineNet 05, Philadelphia, PA, U.S.A., August 2005.
17. Ma J, Levchenko K, Kreibich C, Savage S, Voelker G. Unexpected means of protocol inference. IMC 06, Rio de Janeriro, Brazil, October 2006.
18. Witten I, Frank E. Data Mining: Pratical Machine Learning Tools and Techniques (2nd edn). Morgan Kaufmann: San Francisco, 2005.
19. Pelleg D, Moore A. X-means: Extending K-means with efficient estimation of the number of clusters. Proceedings of the Seventeenth International Conference on Machine Learning, Stanford University, U.S.A., 2000; 727-734.
20. Weka 3.5.Available at: http://www.cs.waikato.ac.nz/ml/weka [15 November 2009].