Unsupervised traffic classification using flow statistical properties and IP packet payload

Journal of Computer and System Sciences

Volumn 79, Issue 5, 2013, Pages 573-585

  Zhang, Jun ^a   Xiang, Yang ^a   Zhou, Wanlei ^a   Wang, Yu ^a  

^a DEAKIN UNIVERSITY   (Australia)

Author keywords

Cluster aggregation; Network security; Traffic classification; Unsupervised learning

Indexed keywords

INFORMATION RETRIEVAL; INTERNET PROTOCOLS; NETWORK SECURITY; SEMANTICS; UNSUPERVISED LEARNING;

CLUSTER AGGREGATION; LATENT SEMANTIC ANALYSIS; STATISTICAL FEATURES; STATISTICAL PROPERTIES; SUPERVISED CLASSIFICATION; TRAFFIC CLASSIFICATION; UNSUPERVISED APPROACHES; UNSUPERVISED CLUSTERING ALGORITHM;

K-MEANS CLUSTERING;

EID: 84875232356     PISSN: 00220000     EISSN: 10902724     Source Type: Journal    
DOI: 10.1016/j.jcss.2012.11.004     Document Type: Article

References (27)

1. T.T. Nguyen, and G. Armitage A survey of techniques for Internet traffic classification using machine learning IEEE Commun. Surveys Tutor. 10 4 2008 56 76
2. A.W. Moore, and D. Zuev Internet traffic classification using Bayesian analysis techniques SIGMETRICS Perform. Eval. Rev. 33 2005 50 60
3. T. Nguyen, G. Armitage, Training on multiple sub-flows to optimise the use of machine learning classifiers in real-world ip networks, in: Annual IEEE Conference on Local Computer Networks, Los Alamitos, CA, USA, 2006, pp. 369-376.
4. M. Crotti, M. Dusi, F. Gringoli, and L. Salgarelli Traffic classification through simple statistical fingerprinting SIGCOMM Comput. Commun. Rev. 37 2007 5 16
5. L. Bernaille, R. Teixeira, Early recognition of encrypted applications, in: Proceedings of the 8th International Conference on Passive and Active Network Measurement, Berlin, Heidelberg, 2007, pp. 165-175.
6. H. Kim, K. Claffy, M. Fomenkov, D. Barman, M. Faloutsos, K. Lee, Internet traffic classification demystified: myths, caveats, and the best practices, in: Proceedings of the ACM CoNEXT Conference, New York, NY, USA, 2008, pp. 1-12.
7. A. Este, F. Gringoli, and L. Salgarelli Support vector machines for tcp traffic classification Computer Networks 53 14 2009 2476 2490
8. J. Zhang, Y. Xiang, Y. Wang, W. Zhou, Y. Xiang, and Y. Guan Network traffic classification using correlation information IEEE Trans. Parallel Distrib. Syst. 2012 1 15 10.1109/TPDS.2012.98
9. A. McGregor, M. Hall, P. Lorier, J. Brunskill, Flow clustering using machine learning techniques, in: Proceedings of Passive and Active Measurement Workshop, Antibes Juan-les-Pins, France, April 2004, pp. 205-214.
10. S. Zander, T. Nguyen, G. Armitage, Automated traffic classification and application identification using machine learning, in: Annual IEEE Conference on Local Computer Networks, Los Alamitos, CA, USA, 2005, pp. 250-257.
11. L. Bernaille, R. Teixeira, I. Akodkenou, A. Soule, and K. Salamatian Traffic classification on the fly SIGCOMM Comput. Commun. Rev. 36 2006 23 26
12. J. Erman, M. Arlitt, A. Mahanti, Traffic classification using clustering algorithms, in: Proceedings of the SIGCOMM Workshop on Mining Network Data, New York, NY, USA, 2006, pp. 281-286.
13. J. Erman, A. Mahanti, M. Arlitt, C. Williamson, Identifying and discriminating between web and peer-to-peer traffic in the network core, in: Proceedings of the 16th International Conference on World Wide Web, New York, NY, USA, 2007, pp. 883-892.
14. J. Ma, K. Levchenko, C. Kreibich, S. Savage, G.M. Voelker, Unexpected means of protocol inference, in: Proceedings of the 6th ACM SIGCOMM Conference on Internet Measurement, New York, NY, USA, 2006, pp. 313-326.
15. A. Finamore, M. Mellia, M. Meo, Mining unclassified traffic using automatic clustering techniques, in: TMA International Workshop on Traffic Monitoring and Analysis, Vienna, AU, April 2011, pp. 150-163.
16. Y. Wang, Y. Xiang, and S.-Z. Yu An automatic application signature construction system for unknown traffic Concurrency Computat. Pract. Exper. 22 2010 1927 1944
17. P. Haffner, S. Sen, O. Spatscheck, and D. Wang ACAS: automated construction of application signatures Proceedings of the ACM SIGCOMM Workshop on Mining Network Data 2005 ACM New York, NY, USA 197 202
18. A. Finamore, M. Mellia, M. Meo, and D. Rossi KISS: Stochastic packet inspection classifier for UDP traffic IEEE/ACM Trans. Netw. 18 5 2010 1505 1515
19. R.O. Duda, P.E. Hart, and D.G. Stork Pattern Classification 2001 Wiley New York
20. D.J.C. MacKay Information Theory, Inference and Learning Algorithms October 2003 Cambridge University Press Cambridge, UK
21. Y. Wang, Y. Xiang, J. Zhang, S.-Z. Yu, A novel semi-supervised approach for network traffic clustering, in: International Conference on Network and System Security, Milan, Italy, September 2011.
22. C.D. Manning, P. Raghavan, and H. Schütze An Introduction to Information Retrieval 2009 Cambridge University Press
23. L. Fei-Fei, P. Perona, A Bayesian hierarchical model for learning natural scene categories, in: IEEE Computer Society Conference on Computer Vision and Pattern Recognition, vol. 2, San Diego, CA, USA, June 2005, pp. 524-531.
24. J. Newsome, B. Karp, D. Song, Polygraph: Automatically generating signatures for polymorphic worms, in: IEEE Symposium on Security and Privacy, 2005, pp. 226-241.
25. S. Deerwester, S.T. Dumais, G.W. Furnas, T.K. Landauer, and R. Harshman Indexing by latent semantic analysis J. Amer. Soc. Inform. Sci. 41 6 1990 391 407
26. J. Erman, A. Mahanti, M. Arlitt, I. Cohen, and C. Williamson Offline/realtime traffic classification using semi-supervised learning Performance Evaluation 64 9-12 2007 1194 1213
27. Weka 3: Data Mining Software in Java, [online], available: http://www.cs.waikato.ac.nz/ml/weka/