Fast application-level traffic classification using NetFlow records

Tongxin Xuebao/Journal on Communications

Volumn 33, Issue 1, 2012, Pages 145-152

  Chen, Liang ^a,b   Gong, Jian ^a,b  

^a SOUTHEAST UNIVERSITY   (China)

^b Jiangsu Province Key Laboratory of Computer Networking Technology   (China)

Author keywords

Bayes discrimination; Computer system architecture; Correlation coefficient; Feature selection; NetFlow; Traffic classification

Indexed keywords

BAYES DISCRIMINATION; COMPUTER SYSTEM ARCHITECTURE; CORRELATION COEFFICIENT; NETFLOWS; TRAFFIC CLASSIFICATION;

ALGORITHMS; FEATURE EXTRACTION;

TELECOMMUNICATION TRAFFIC;

EID: 84863063180     PISSN: 1000436X     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (20)

1. MOORE A W, PAPAGIANNAKI K. Toward the accurate identification of network applications[A]. Proc of PAM 2005[C]. Boston, USA, 2005. 41-54.
2. KIM M S, WON Y J, HONG J W K. Application-level traffic monitoring and an analysis on IP networks[J]. ETRI Journal, 2005, 27(11): 22-42.
3. MCGREGOR A, HALL M, LORIER P, et al. Flow clustering using machine learning techniques[A]. Proc of PAM 2004[C]. Antibes Juan-les-Pins, France, 2004. 205-214.
4. ERMAN J, ARLITT M, MAHANTI A. Traffic classification using clustering algorithms[A]. Proc of ACM SIGCOMM Workshop on Mining Network Data 2006[C]. Pisa, Italy, 2006. 281-286.
5. ERMAN J, MAHANTI A, ARLITT M. Internet traffic identification using machine learning[A]. Proc of 49th IEEE Global Telecommunications Conference[C]. San Francisco, USA, 2006. 1-6.
6. KARAGIANNIS T, PAPAGIANNAKI K, FALOUTSOS M. BLINC: multilevel traffic classification in the dark[A]. Proc of ACM SIGCOMM 2005[C]. Philadelphia, USA, 2005. 229-240.
7. ROUGHAN M, SEN S, SPATSCHECK O, et al. Class-of-service mapping for QoS: a statistical signature-based approach to IP traffic classification[A]. Proc of ACM SIGCOMM IMC 2004[C]. Taormina, Italy, 2004. 135-148.
8. ZANDER S, NGUYEN T, ARMITAGE G J. Self-learning IP traffic classification based on statistical flow characteristics[A]. Proc of PAM2005[C]. Boston, USA, 2005. 325-328.
9. ZANDER S, WILLIAMS N, ARMITAGE G. Internet archeology: estimating individual application trends in incomplete historic traffic traces[A]. Proc of PAM 2006[C]. Adelaide, Australia, 2006. 205-206.
10. LI M, ZHAO W. Representation of a stochastic traffic bound[J]. IEEE Transactions on Parallel and Distributed Systems, 2010, 21(9): 1368-1372.
11. MOORE A W, ZUEV D. Internet traffic classification using bayesian analysis techniques[A]. Proc of ACM SIGMETRICS 2005[C]. Banff, Canada, 2005. 50-60.
12. MOORE A W, ZUEV D. Discriminators for Use in Flow-Based Classification[R]. RR-05-13, London: Intel Research, Cambridge, 2005.
13. LIU Y X, XU Q L, YUN X C. Research on IDS-faced general-purpose application-level protocol identification technology[J]. Journal of Shandong University (Engineering Science), 2007, 37(1): 65-69.
14. GONG J, SUN Z X, GU Q. Research of identification method based on P2P flow behavior characterization[J]. Journal of Chinese Computer Systems, 2007, 28(1): 48-53.
15. LIU B, LI Z T, LI J. A new method on P2P traffic identification based on flow[J]. Journal of Xiamen University (Natural Science), 2007, 46(2): 132-135.
16. Cisco. cisco IOS netflow introduction[EB/OL]. http://www.cisco.com/warp/public/732/Tech/NetFlow, 2006.
17. ZHU D Y, WU C O, QIN W L. Multivariate Statistical Analysis and SAS[M]. Nanjing: Southeast University Press, 1999.
18. LI M, LIM S C. Modeling network traffic using generalized Cauchy process[J]. Physica A, 2008, 387(11): 2584-2594.
19. LI M. Change trend of averaged Hurst parameter of traffic under DDOS flood attacks[J]. Computers and Security, 2006, 25(3): 213-220.
20. LI M. An approach to reliably identifying signs of DDOS flood attacks based on LRD traffic pattern recognition[J]. Computers and Security, 2004, 23(7): 549-558.