KISS: Stochastic packet inspection Classifier for UDP traffic

IEEE/ACM Transactions on Networking

Volumn 18, Issue 5, 2010, Pages 1505-1515

  Finamore, Alessandro ^a   Mellia, Marco ^a   Meo, Michela ^a   Rossi, Dario ^b  

^a POLITECNICO DI TORINO   (Italy)

^b TELECOM PARISTECH   (France)

Author keywords

Supervised learning algorithms; traffic classification

Indexed keywords

CLASSIFICATION FRAMEWORK; CLIENT SERVER; DECISION PROCESS; FLOW ASYMMETRY; GEOMETRIC DISTANCES; INTERNET APPLICATION; P2P STREAMING; PACKET INSPECTION; PACKET SAMPLING; PEER TO PEER; STATISTICAL CHARACTERIZATION; STATISTICAL SIGNATURES; STREAMING APPLICATIONS; TRAFFIC CLASSIFICATION; TRUE POSITIVE; UDP TRAFFIC; WORST CASE;

INTERNET; INTERNET PROTOCOLS; INTERNET TELEPHONY; SUPERVISED LEARNING; TELECOMMUNICATION TRAFFIC;

LEARNING ALGORITHMS;

EID: 77958152377     PISSN: 10636692     EISSN: None     Source Type: Journal    
DOI: 10.1109/TNET.2010.2044046     Document Type: Article

References (29)

1. T. Karagiannis, A. Broido, N. Brownlee, K. C. Claffy, and M. Faloutsos, "Is P2P dying or just hiding?," in Proc. IEEE GLOBECOM, Nov. 2004, vol. 3, pp. 1532-1538.
2. D. Bonfiglio, M. Mellia, M. Meo, D. Rossi, and P. Tofanelli, "Revealing Skype traffic: When randomness plays with you," in Proc. ACM SIGCOMM, Kyoto, Japan, Aug. 2007, pp. 37-48.
3. A. Finamore, M. Mellia, M. Meo, and D. Rossi, "KISS: Stochastic packet inspection," in Proc. 1st TMA Workshop, Aachen, Germany, May 11, 2009, pp. 117-125.
4. T. Karagiannis, K. Papagiannaki, and M. Faloutsos, "BLINC: Multilevel traffic classification in the dark," Comput. Commun. Rev., vol. 35, no. 4, pp. 229-240, 2005.
5. A. W. Moore and D. Zuev, "Internet traffic classification using bayesian analysis techniques," in Proc. ACM SIGMETRICS, Banff, Canada, Jun. 2005, pp. 50-60.
6. N. Cristianini and J. Shawe-Taylor, An Introduction to Support Vector Machines and Other Kernel-Based Learning Methods. New York: Cambridge Univ. Press, 1999.
7. M. Mellia, R. Lo Cigno, and F. Neri, "Measuring IP and TCP behavior on edge nodes with Tstat," Comput. Netw., vol. 47, no. 1, pp. 1-21, Jan. 2005.
8. T.Nguyen and G. Armitage,"A survey of techniques for Internet traffic classification using machine learning," IEEE Commun. Surveys Tutorials, vol. 10, no. 4, pp. 56-76, 2008.
9. A. W. Moore and K. Papagiannaki, "Toward the accurate identification of network applications," in Proc. PAM, Boston, MA, Mar./Apr. 2005, pp. 41-54.
10. C. C. Chang and C. J. Lin, "LIBSVM: A library for support vector machines," 2001 [Online]. Available: http://www.csie.ntu.edu.tw/~cjlin/ libsvm
11. "Skype testbed traces," [Online]. Available: http://tstat.tlc.polito.it/ traces-skype.shtml
12. "FastWeb company information," 2006 [Online]. Available: http://company.fastweb.it
13. R. Birke, M. Mellia, M. Petracca, and D. Rossi, "Understanding VoIP from backbone measurements," in Proc. IEEE INFOCOM, Anchorage, AK, May 2007, pp. 2027-2035.
14. E. Leonardi, M. Mellia, A. Horvart, L. Muscariello, S. Niccolini, and D. Rossi, "Building a cooperative P2P-TV application over a wise network: The approach of the European FP-7 STREP NAPA-WINE," IEEE Commun. Mag., vol. 46, no. 4, pp. 20-211, Apr. 2008.
15. "IPP2P home page," [Online]. Available: http://www.ipp2p.org/
16. Y. Kulbak and D. Bickson, "The eMule protocol specification," School of Computer Science and Engineering, The Hebrew University, Tech. Rep. Leibniz Center TR-2005-03, 2005.
17. C. Dewes, A. Wichmann, and A. Feldmann, "An analysis of Internet chat systems," in Proc. 3rd ACM SIGCOMM IMC, Miami Beach, FL, Oct. 2003, pp. 51-64.
18. S. Sen, O. Spatscheck, and D. Wang, "Accurate, scalable in-network identification of P2P traffic using application signatures," in Proc. 13th Int. Conf. WWW, New York, May 2004, pp. 512-521.
19. P. Haffner, S. Sen, O. Spatscheck, and D. Wang, "ACAS: Automated construction of application signatures," in Proc. ACM SIGCOMM Workshop Minenet, Philadelphia, PA, Aug. 2005, pp. 197-202.
20. J. Ma, K. Levchenko, C. Kreibich, S. Savage, and G. M. Voelker, "Unexpected means of protocol inference," in Proc. 6th ACM SIGCOMM IMC, Rio de Janeiro, Brazil, Oct. 2006, pp. 313-326.
21. A. McGregor, M. Hall, P. Lorier, and J. Brunskill, "Flow clustering using machine learning techniques," in Proc. PAM, Antibes Juan-les-Pins, France, Apr. 2004, pp. 205-214.
22. M. Roughan, S. Sen, O. Spatscheck, and N. Duffield, "Class-of-ser- vice mapping for QoS: A statistical signature-based approach to IP traffic classification," in Proc. 4th ACM SIGCOMM IMC, Taormina, Italy, Oct. 2004, pp. 135-148.
23. J. Erman, M. Arlitta, I. Cohen, and C. Williamson, "Offline/realtime traffic classification using semi-supervised learning," Perform. Eval., vol. 64, no. 9-12, pp. 1194-1213, Oct. 2007.
24. T. Karagiannis, A. Broido, M. Faloutsos, and K. Claffy, "Transport layer identification of P2P traffic," in Proc. 4th ACM SIGCOMM IMC, Taormina, Italy, Oct. 2004, pp. 121-134.
25. K. Xu, Z. Zhang, and S. Bhattacharyya, "Profiling internet backbone traffic: Behavior models and applications," in Proc. ACM SIGCOMM, Philadelphia, PA, Aug. 2005, pp. 169-180. (Pubitemid 46323502)
26. H. Kim, K. Claffy, M. Fomenkov, D. Barman, M. Faloutsos, and K. Lee, "Internet traffic classification demystified: Myths, caveats, and the best practices," in Proc. CoNEXT, Madrid, Spain, Dec. 2008, Article No. 11.
27. L. Bernaille, R. Teixeira, and K. Salamatian, "Early application identification," in Proc. CoNEXT, Lisboa, Portugal, Dec. 2006, Article No. 6.
28. M. Crotti, M. Dusi, F. Gringoli, and L. Salgarelli, "Traffic classification through simple statistical fingerprinting," Comput. Commun. Rev., vol. 37, no. 1, pp. 5-16, Jan. 2007.
29. V. Paxson, "Empirically derived analytic models of wide-area TCP connections," IEEE/ACM Trans. Netw., vol. 2, no. 4,pp. 316-336, Aug. 1994.