Robust Network Traffic Classification

IEEE/ACM Transactions on Networking

Volumn 23, Issue 4, 2015, Pages 1257-1270

  Zhang, Jun ^a   Chen, Xiao ^a   Xiang, Yang ^a   Zhou, Wanlei ^a   Wu, Jie ^b  

^a DEAKIN UNIVERSITY   (Australia)

^b Temple University   (United States)

Author keywords

Semi supervised learning; traffic classification; zero day applications

Indexed keywords

ARTIFICIAL INTELLIGENCE; CLUSTERING ALGORITHMS; DECISION TREES; LEARNING ALGORITHMS; LEARNING SYSTEMS; NETWORK MANAGEMENT; SUPERVISED LEARNING;

CLASSIFICATION PERFORMANCE; FUNDAMENTAL TOOLS; PARAMETERS OPTIMIZATION; SEMI- SUPERVISED LEARNING; SEMI-SUPERVISED CLUSTERING; STATE-OF-THE-ART METHODS; TRAFFIC CLASSIFICATION; UNSUPERVISED MACHINE LEARNING;

TELECOMMUNICATION TRAFFIC;

EID: 85028213162     PISSN: 10636692     EISSN: None     Source Type: Journal    
DOI: 10.1109/TNET.2014.2320577     Document Type: Article

References (47)

1. Cisco Systems, Inc., San Jose, CA, USA, "Cisco WAN and application optimization solution guide," Tech. Rep., 2008 [Online]. Available: http://www.cisco.com/c/en/us/td/docs/nsite/enterprise/wan/wan-optimization/wan-opt-sg.html
2. T. Nguyen and G. Armitage, "A survey of techniques for Internet traffic classification using machine learning," IEEE Commun. Surveys Tuts., vol. 10, no. 4, pp. 56-76, 4th Quart., 2008.
3. H. Kim et al., "Internet traffic classification demystified: myths, caveats, and the best practices," in Proc. ACM CoNEXT Conf., 2008, pp. 1-12.
4. J. Zhang et al., "Network traffic classification using correlation information," IEEE Trans. Parallel Distrib. Syst., vol. 24, no. 1, pp. 104-117, Jan. 2013.
5. A. Tongaonkar, R. Keralapura, and A. Nucci, "Challenges in network application identification," in Proc. 5th USENIX Conf. Large-Scale Exploits Emergent Threats, 2012, pp. 1-3.
6. A. Moore and D. Zuev, "Internet traffic classification using Bayesian analysis techniques," Perform. Eval. Rev., vol. 33, no. 1, pp. 50-60, 2005.
7. T. Auld, A. Moore, and S. Gull, "Bayesian neural networks for Internet traffic classification," IEEE Trans. Neural Netw., vol. 18, no. 1, pp. 223-239, Jan. 2007.
8. A. Este, F. Gringoli, and L. Salgarelli, "Support vector machines for TCP traffic classification," Comput. Netw., vol. 53, no. 14, pp. 2476-2490, 2009.
9. J. Erman, A. Mahanti, M. Arlitt, and C. Williamson, "Identifying and discriminating between web and peer-to-peer traffic in the network core," in Proc. Int. Conf. World Wide Web, 2007, pp. 883-892.
10. L. Bernaille and R. Teixeira, "Early recognition of encrypted applications," in Proc. Passive Active Netw. Meas., 2007, pp. 165-175.
11. B. Hullár, S. Laki, and A. Gyorgy, "Early identification of peer-to-peer traffic," in Proc. IEEE Int. Conf. Commun., 2011, pp. 1-6.
12. T. Nguyen and G. Armitage, "Training on multiple sub-flows to optimise the use of machine learning classifiers in real-world IP networks," in IEEE Conf. Local Comput. Netw., 2006, pp. 369-376.
13. T. Nguyen, G. Armitage, P. Branch, and S. Zander, "Timely and continuous machine-learning-based classification for interactive IP traffic," IEEE/ACM Trans. Netw., vol. 20, no. 6, pp. 1880-1894, Dec. 2012.
14. P. Bermolen, M. Mellia, M. Meo, D. Rossi, and S. Valenti, "Abacus: Accurate behavioral classification P2P-TV traffic," Comput. Netw., vol. 55, no. 6, pp. 1394-1411, 2011.
15. E. Glatz and X. Dimitropoulos, "Classifying Internet one-way traffic," in Proc. ACM SIGMETRICS/PERFORMANCE Joint Int. Conf. Meas. Model. Comput. Syst., 2012, pp. 417-418.
16. Y. Jin et al., "A modular machine learning system for flow-level traffic classification in large networks," Trans. Knowl. Discov. Data, vol. 6, no. 1, pp. 4:1-4:34, 2012.
17. A. Callado, J. Kelner, D. Sadok, C. A. Kamienski, and S. Fernandes, "Better network traffic identification through the independent combination of techniques," J. Netw. Comput. Appl., vol. 33, no. 4, pp. 433-446, 2010.
18. V. Carela-Español, P. Barlet-Ros, A. Cabellos-Aparicio, and J. Solé- Pareta, "Analysis of the impact of sampling on netflow traffic classification," Compu. Netw., vol. 55, no. 5, pp. 1083-1099, 2011.
19. D. Bonfiglio, M. Mellia, M. Meo, D. Rossi, and P. Tofanelli, "Revealing Skype traffic: when randomness plays with you," Comput. Commun. Rev., vol. 37, no. 4, pp. 37-48, 2007.
20. M. Crotti, M. Dusi, F. Gringoli, and L. Salgarelli, "Traffic classification through simple statistical fingerprinting," Comput. Commun. Rev., vol. 37, pp. 5-16, 2007.
21. S. Valenti, D. Rossi, M. Meo, M. Mellia, and P. Bermolen, "Accurate, fine-grained classification P2P-TV applications by simply counting packets," in Proc. 1st Int. Workshop Traffic Monitoring Anal., 2009, pp. 84-92.
22. A. McGregor, M. Hall, P. Lorier, and J. Brunskill, "Flow clustering using machine learning techniques," in Proc. Passive Active Netw. Meas., 2004, pp. 205-214.
23. S. Zander, T. Nguyen, and G. Armitage, "Automated traffic classification and application identification using machine learning," in Proc. Annu. IEEE Conf. Local Comput. Netw., 2005, pp. 250-257.
24. J. Erman, A. Mahanti, and M. Arlitt, "Internet traffic identification using machine learning," in Proc. IEEE Global Telecommun. Conf., 2006, pp. 1-6.
25. J. Erman, M. Arlitt, and A. Mahanti, "Traffic classification using clustering algorithms," in Proc. SIGCOMM Workshop Mining Netw. Data, 2006, pp. 281-286.
26. D. Liu and C. Lung, "P2P traffic identification and optimization using fuzzy c-means clustering," in Proc. IEEE Int. Conf. Fuzzy Syst., 2011, pp. 2245-2252.
27. L. Bernaille, R. Teixeira, I. Akodkenou, A. Soule, and K. Salamatian, "Traffic classification on the fly," Comput. Commun. Rev., vol. 36, pp. 23-26, 2006.
28. Y. Wang, Y. Xiang, and S.-Z. Yu, "An automatic application signature construction system for unknown traffic," Concurrency Comput., Pract. Exper., vol. 22, no. 13, pp. 1927-1944, 2010.
29. A. Finamore, M. Mellia, and M. Meo, "Mining unclassified traffic using automatic clustering techniques," Traffic Monitoring Anal., vol. 6613, pp. 150-163, 2011.
30. J. Ma, K. Levchenko, C. Kreibich, S. Savage, and G. M. Voelker, "Unexpected means of protocol inference," in Proc. ACM SIGCOMM Conf. Internet Meas., 2006, pp. 313-326.
31. M. Roughan, S. Sen, O. Spatscheck, and N. Duffield, "Class-of-service mapping for QoS: A statistical signature-based approach to IP traffic classification," in Proc. 4th ACM SIGCOMM Conf. Internet Meas., 2004, pp. 135-148.
32. N. Williams, S. Zander, and G. Armitage, "A preliminary performance comparison of five machine learning algorithms for practical IP traffic flow classification," Comput. Commun. Rev., vol. 36, pp. 5-16, 2006.
33. Y. Lim et al., "Internet traffic classification demystified: on the sources of the discriminative power," in Proc. ACM CoNEXT Conf., 2010, pp. 9:1-9:12.
34. S. Lee et al., "Netramark: a network traffic classification benchmark," Comput. Commun. Rev., vol. 41, no. 1, pp. 22-30, 2011.
35. J. Erman, A. Mahanti, M. Arlitt, I. Cohen, and C. Williamson, "Offline/realtime traffic classification using semi-supervised learning," Perform. Eval., vol. 64, no. 9, pp. 1194-1213, 2007.
36. P. Casas, J. Mazel, and P. Owezarski, "MINETRAC: Mining flows for unsupervised analysis & semi-supervised classification," in Proc. 23rd Int. Teletraffic Congr., 2011, pp. 87-94.
37. H. Liu, Z. Wang, and Y. Wang, "Semi-supervised encrypted traffic classification using composite features set," J. Netw., vol. 7, no. 8, pp. 1195-1200, 2012.
38. B. Schlkopf, J. C. Platt, J. Shawe-Taylor, A. J. Smola, and R. C. Williamson, "Estimating the support of a high-dimensional distribution," Neural Comput., vol. 13, no. 7, pp. 1443-1471, 2001.
39. G. Xie, M. Iliofotou, R. Keralapura, M. Faloutsos, and A. Nucci, "Subflow: Towards practical flow-level traffic classification," in Proc. IEEE INFOCOM, 2012, pp. 2541-2545.
40. D. MacKay, Information Theory, Inference and Learning Algorithms. Cambridge, U.K.: Cambridge Univ. Press, 2003.
41. Y. Wang, Y. Xiang, J. Zhang, and S.-Z. Yu, "A novel semi-supervised approach for network traffic clustering," in Proc. Int. Conf. Netw. Syst. Security, 2011, pp. 169-175.
42. M. Baldi, A. Baldini, N. Cascarano, and F. Risso, "Service-based traffic classification: Principles and validation," in Proc. IEEE SARNOFF, 2009, pp. 1-6.
43. N. Cascarano et al., "Comparing p2ptv traffic classifiers," in Proc. IEEE ICC, 2010, pp. 1-6.
44. C. Bishop et al., Pattern Recognition and Machine Learning. New York, NY, USA: Springer, 2006.
45. J. Kittler, M. Hatef, R. Duin, and J. Matas, "On combining classifiers," IEEE Trans. Pattern Anal. Mach. Intell., vol. 20, no. 3, pp. 226-239, Mar. 1998.
46. I. Guyon and A. Elisseeff, "An introduction to variable and feature selection," J. Mach. Learning Res., vol. 3, pp. 1157-1182, 2003.
47. L. Breiman, "Random forests," Mach. Learning, vol. 45, no. 1, pp. 5-32, 2001.