Reviewing traffic classification

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 7754, Issue , 2013, Pages 123-147

  Valenti, Silvio ^a,d   Rossi, Dario ^a   Dainotti, Alberto ^b,e   Pescapè, Antonio ^b   Finamore, Alessandro ^c   Mellia, Marco ^c  

^a TELECOM PARISTECH   (France)

^b UNIVERSITY OF NAPLES FEDERICO II   (Italy)

^c POLITECNICO DI TORINO   (Italy)

^d GOOGLE INC   (United States)

^e UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

ANOMALY DETECTION; INTERNET PROTOCOLS; LARGE DATASET; LEARNING SYSTEMS; QUALITY OF SERVICE; SUPERVISED LEARNING;

INTERNET APPLICATION; MACHINE LEARNING TECHNIQUES; NETWORK ADMINISTRATOR; NETWORK APPLICATIONS; RESEARCH COMMUNITIES; SUPERVISED MACHINE LEARNING; TRAFFIC CLASSIFICATION; TRANSPORT LAYER PROTOCOLS;

LEARNING ALGORITHMS;

EID: 84875924329     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-36784-7_6     Document Type: Review

References (68)

1. CAIDA, The Cooperative Association for Internet Data Analysis, http://www.caida.org/research/ traffic-Analysis/classification-overview/
2. IANA, List of assigned port numbers, http://www.iana.org/assignments/ port-numbers
3. l7filter, Application layer packet classifier for Linux, http://l7-filter.clearfoundation.com/
4. Tstat, http://tstat.tlc.polito.it
5. Aceto, G., Dainotti, A., de Donato, W., Pescap̀e, A.: Portload: Taking the best of two worlds in traffic classification. In: INFOCOM IEEE Conference on Computer Communications Workshops, 15, pp. 1-5 (2010
6. Bakerand, F., Fosterand, B., Sharp, C.: Cisco Architecture for Lawful Intercept in IP Networks. IETF RFC 3924 (Informational) (October 2004
7. Bermolen, P.,Mellia, M., Meo, M., Rossi, D., Valenti, S.: Abacus: Accurate behavioral classification of P2P-TV traffic. Elsevier Computer Networks 55(6), 1394-1411 (2011
8. Bernaille, L., Teixeira, R., Salamatian, K.: Early application identification. In: Proc. of ACM CoNEXT 2006, Lisboa, PT (December 2006
9. Carela-Espaoll, V., Barlet-Ros, P., Sole-Simo, M., Dainotti, A., de Donato, W., Pescap̀e, A.: K-dimensional trees for continuous traffic classification, pp. 141-154 (2010
10. Cascarano, N., Risso, F., Este, A., Gringoli, F., Salgarelli, L., Finamore, A., Mellia, M.: Comparing P2PTV Traffic Classifiers. In: 2010 IEEE International Conference on Communications (ICC), pp. 1-6 (May 2010
11. Cascarano, N., Rolando, P., Risso, F., Sisto, R.: Infant: Nfa pattern matching on gpgpu devices. Computer Communication Review 40(5), 20-26 (2010
12. Claise, B.: Cisco Systems NetFlow Services Export Version 9. RFC 3954 (Informational) (October 2004
13. Cortes, C., Vapnik, V.: Support-vector networks. Machine Learning 20, 273-297 (1995
14. Cristianini, N., Shawe-Taylor, J.: An introduction to Support Vector Machines and Other Kernel-based Learning Methods. Cambridge University Press, New York (1999
15. Crotti, M., Dusi, M., Gringoli, F., Salgarelli, L.: Traffic classification through simple statistical fingerprinting. ACM SIGCOMM Computer Communication Review 37(1), 5-16 (2007
16. Dainotti, A., de Donato, W., Pescap'e, A.: TIE: A Community-Oriented Traffic Classification Platform. In: Papadopouli, M., Owezarski, P., Pras, A. (eds.) TMA 2009. LNCS, vol. 5537, pp. 64-74. Springer, Heidelberg (2009
17. Dainotti, A., de Donato, W., Pescap̀e, A., Salvo Rossi, P.: Classification of network traffic via packet-level hidden markov models 30, 1-5 (2008
18. Dainotti, A., Pescap̀e, A., Kim, H.C.: Traffic classification through joint distributions of packet-level statistics. In: GLOBECOM, pp. 1-6 (2011
19. Dainotti, A., Pescap'e, A., Claffy, K.C.: Issues and future directions in traffic classification. IEEE Network 26(1), 35-40 (2012
20. Dainotti, A., Pescap'e, A., Sansone, C.: Early Classification of Network Traffic through Multi-classification. In: Domingo-Pascual, J., Shavitt, Y., Uhlig, S. (eds.) TMA 2011. LNCS, vol. 6613, pp. 122-135. Springer, Heidelberg (2011
21. Dainotti, A., Pescap'e, A., Sansone, C., Quintavalle, A.: Using a Behaviour Knowledge Space Approach for Detecting Unknown IP Traffic Flows. In: Sansone, C., Kittler, J., Roli, F. (eds.) MCS 2011. LNCS, vol. 6713, pp. 360-369. Springer, Heidelberg (2011
22. Santiago del R'io, P.M., Rossi, D., Gringoli, F., Nava, L., Salgarelli, L., Aracil, J.: Wirespeed statistical classification of network traffic on commodity hardware. In: ACM IMC 2012 (2012
23. Erman, J., Arlitt, M., Mahanti, A.: Traffic classification using clustering algorithms. In: MineNet 2006: Mining Network Data (MineNet)Workshop at ACM SIGCOMM 2006, Pisa, Italy (2006
24. Erman, J., Mahanti, A., Arlitt, M., Williamson, C.: Identifying and discriminating between web and peer-To-peer traffic in the network core. In: Proceedings of the 16th International Conference on World Wide Web, WWW2007, Banff, Alberta, Canada, pp. 883-892 (2007
25. Finamore, A., Mellia, M., Meo, M., Rossi, D.: KISS: Stochastic Packet Inspection. In: Papadopouli, M., Owezarski, P., Pras, A. (eds.) TMA 2009. LNCS, vol. 5537, pp. 117-125. Springer, Heidelberg (2009
26. Finamore, A., Mellia, M., Meo, M., Rossi, D.: Kiss: Stochastic packet inspection classifier for udp traffic. IEEE/ACM Transaction on Networking 18(5), 1505-1515 (2010
27. Finamore, A., Meo, M., Rossi, D., Valenti, S.: Kiss to Abacus: A Comparison of P2PTV Traffic Classifiers. In: Ricciato, F., Mellia, M., Biersack, E. (eds.) TMA 2010. LNCS, vol. 6003, pp. 115-126. Springer, Heidelberg (2010
28. Fu, T.Z.J., Hu, Y., Shi, X., Chiu, D.M., Lui, J.C.S.: PBS: Periodic Behavioral Spectrum of P2P Applications. In: Moon, S.B., Teixeira, R., Uhlig, S. (eds.) PAM2009. LNCS, vol. 5448, pp. 155-164. Springer, Heidelberg (2009
29. Gringoli, F., Salgarelli, L., Dusi, M., Cascarano, N., Risso, F., Claffy, K.C.: GT: Picking up the truth from the ground for internet traffic. ACM SIGCOMM Comput. Commun. Rev. 39(5), 12-18 (2009
30. Haffner, P., Sen, S., Spatscheck, O., Wang, D.: ACAS: Automated construction of application signatures. In: ACM SIGCOMM Workshop on Mining Network Data (Minenet 2005), Philadelphia, PA (August 2005
31. Iliofotou, M., Pappu, P., Faloutsos, M., Mitzenmacher, M., Singh, S., Varghese, G.: Network monitoring using traffic dispersion graphs (tdgs). In: Proc. of IMC 2007, San Diego, California, USA (2007
32. Jamshed, M., Lee, J., Moon, S., Yun, I., Kim, D., Lee, S., Yi, Y., Park, K.S.: Kargus: A highly-scalable software-based intrusion detection system (2012
33. Jin, Y., Duffield, N., Haffner, P., Sen, S., Zhang, Z.-L.: Inferring applications at the network layer using collective traffic statistics. SIGMETRICS Perform. Eval. Rev. 38 (June 2010
34. Karagiannis, T., Broido, A., Brownlee, N., Klaffy, K.C., Faloutsos, M.: Is P2P dying or just hiding? In: IEEE GLOBECOM 2004, Dallas, Texas, US (2004
35. Karagiannis, T., Broido, A., Faloutsos, M., Claffy, K.C.: Transport layer identification of P2P traffic. In: 4th ACM SIGCOMM Internet Measurement Conference (IMC 2004), Taormina, IT (October 2004
36. Karagiannis, T., Papagiannaki, K., Taft, N., Faloutsos, M.: Profiling the End Host. In: Uhlig, S., Papagiannaki, K., Bonaventure, O. (eds.) PAM 2007. LNCS, vol. 4427, pp. 186-196. Springer, Heidelberg (2007
37. Khakpour, A.R., Liu, A.X.: High-speed flow nature identification. In: Proceedings of the 2009 29th IEEE International Conference on Distributed Computing Systems, ICDCS (2009
38. Kim, H., Claffy, K., Fomenkov, M., Barman, D., Faloutsos, M., Lee, K.: Internet traffic classification demystified: Myths, caveats, and the best practices. In: Proc. of ACM CoNEXT 2008, Madrid, Spain (2008
39. Kohavi, R., Quinlan, R.: Decision tree discovery. In: Handbook of Data Mining and Knowledge Discovery, pp. 267-276. University Press (1999
40. Kotsiantis, S.B.: Supervised machine learning: A review of classification techniques. In: Proceeding of the 2007 conference on Emerging Artificial Intelligence Applications in Computer Engineering: Real Word AI Systems with Applications in eHealth, HCI, Information Retrieval and Pervasive Technologies, pp. 3-24. IOS Press, Amsterdam (2007
41. Kumar, S., Crowley, P.: Algorithms to accelerate multiple regular expressions matching for deep packet inspection. In: Proceedings of the Annual Conference of the ACM Special Interest Group on Data Communication (SIGCOMM 2006), pp. 339-350 (2006
42. Li,W., Canini,M., Moore, A.W., Bolla, R.: Efficient application identification and the temporal and spatial stability of classification schema. Computer Networks 53(6), 790-809 (2009
43. Liu, Y., Xu, D., Sun, L., Liu, D.: Accurate traffic classification with multi-Threaded processors. In: IEEE International Symposium on Knowledge Acquisition and Modeling Workshop, KAM (2008
44. Ma, J., Levchenko, K., Kreibich, C., Savage, S., Voelker, G.M.: Unexpected means of protocol inference. In: 6th ACM SIGCOMM Internet Measurement Conference (IMC 2006), Rio de Janeiro, BR (October 2006
45. McGregor, A., Hall, M., Lorier, P., Brunskill, J.: Flow Clustering Using Machine Learning Techniques. In: Barakat, C., Pratt, I. (eds.) PAM 2004. LNCS, vol. 3015, pp. 205-214. Springer, Heidelberg (2004
46. Mellia, M., Pescap̀e, A., Salgarelli, L.: Traffic classification and its applications to modern networks. Computer Networks 53(6), 759-760 (2009
47. Moore, A., Zuev, D., Crogan, M.: Discriminators for use in flow-based classification. Technical report, University of Cambridge (2005
48. Moore, A.W., Zuev, D.: Internet traffic classification using bayesian analysis techniques. In: ACM SIGMETRICS 2005, Banff, Alberta, Canada (2005
49. Moore, D., Keys, K., Koga, R., Lagache, E., Claffy, K.C.: The coralreef software suite as a tool for system and network administrators. In: Proceedings of the 15th USENIX Conference on System Administration, San Diego, California (2001
50. Moore, A.W., Papagiannaki, K.: Toward the Accurate Identification of Network Applications. In: Dovrolis, C. (ed.) PAM 2005. LNCS, vol. 3431, pp. 41-54. Springer, Heidelberg (2005
51. Napa-Wine, http://www.napa-wine.eu/
52. Nguyen, T.T.T., Armitage, G.: A survey of techniques for internet traffic classification using machine learning. IEEE Communications Surveys & Tutorials 10(4), 56-76 (2008
53. Paxson, V.: Bro: A system for detecting network intruders in real-Time. Elsevier Comput. Netw. 31, 2435-2463 (1999
54. Risso, F., Baldi, M., Morandi, O., Baldini, A., Monclus, P.: Lightweight, payload-based traffic classification: An experimental evaluation. In: Proc. of IEEE ICC 2008 (May 2008
55. Risso, F., Cascarano, N.: Diffinder, http://netgroup.polito.it/ research-projects/l7-Traffic-classification
56. Roesch, M.: Snort-lightweight intrusion detection for networks. In: Proceedings of the 13th USENIX Conference on System Administration, LISA 1999, pp. 229-238. USENIX Association (1999
57. Rossi, D., Valenti, S.: Fine-grained traffic classification with Netflow data. In: TRaffic Analysis and Classification (TRAC)Workshop at IWCMC 2010, Caen, France (June 2010
58. Roughan, M., Sen, S., Spatscheck, O., Duffield, N.: Class-of-service mapping for QoS: A statistical signature-based approach to IP traffic classification. In: ACM SIGCOMM Internet Measurement Conference (IMC 2004), Taormina, IT (October 2004
59. Salgarelli, L., Gringoli, F., Karagiannis, T.: Comparing traffic classifiers. ACM SIGCOMM Comp. Comm. Rev. 37(3), 65-68 (2007
60. Sen, S., Spatscheck, O.,Wang, D.: Accurate, scalable in-network identification of p2p traffic using application signatures. In: 13th International Conference on World Wide Web (WWW 2004), New York, NY, US (May 2004
61. Lim, Y.S., Kim, H., Jeong, J., Kim, C.K., Kwon, T.T., Choi, Y.: Internet traffic classification demystified: On the sources of the discriminative power. In: CoNEXT, p. 9 (2010
62. Szab́o, G., Ǵodor, I., Veres, A., Malomsoky, S., Molńar, S.: Traffic classification over Gbit speed with commodity hardware. IEEE J. Communications Software and Systems 5 (2010
63. Valenti, S., Rossi, D.,Meo, M., Mellia,M., Bermolen, P.: Accurate, Fine-Grained Classification of P2P-TV Applications by Simply Counting Packets. In: Papadopouli, M., Owezarski, P., Pras, A. (eds.) TMA 2009. LNCS, vol. 5537, pp. 84-92. Springer, Heidelberg (2009
64. Vasiliadis, G., Polychronakis, M., Ioannidis, S.: Midea: A multi-parallel intrusion detection architecture. In: ACM Conference on Computer and Communications Security, pp. 297-308 (2011
65. Williams, N., Zander, S., Armitage, G.: A preliminary performance comparison of five machine learning algorithms for practical IP traffic flow classification. ACM SIGCOMM CCR 36(5), 5-16 (2006
66. Wulf, W.A., Mckee, S.A.: Hitting the memory wall: Implications of the obvious. Computer Architecture News 23, 20-24 (1995
67. Xu, K., Zhang, Z.-L., Bhattacharyya, S.: Profiling internet backbone traffic: Behavior models and applications. ACM SIGCOMM Comput. Commun. Rev. 35(4), 169-180 (2005
68. Zu, Y., Yang, M., Xu, Z.,Wang, L., Tian, X., Peng, K., Dong, Q.: Gpu-based nfa implementation for memory efficient high speed regular expression matching. In: PPOPP, pp. 129-140 (2012