Acta Metallurgica Sinica(English letters) ›› 2010, Vol. 17 ›› Issue (6): 72-79.doi: 10.1016/S1005-8885(09)60528-8

• Networks • 上一篇    下一篇

Application type identification of Internet flows based on medium mathematics

成卫青1,丁伟2,龚俭2   

  1. Computer College, Nanjing University of Posts and Telecommunications, Nanjing 210003, China
  • 收稿日期:2010-02-08 修回日期:2010-07-13 出版日期:2010-12-30 发布日期:2010-12-06
  • 通讯作者: 成卫青 E-mail:chengweiq@njupt.edu.cn
  • 基金资助:

    973计划 No. 2005CB321901;其他

Application type identification of Internet flows based on medium mathematics

  1. Computer College, Nanjing University of Posts and Telecommunications, Nanjing 210003, China
  • Received:2010-02-08 Revised:2010-07-13 Online:2010-12-30 Published:2010-12-06
  • Contact: Wei-Qing CHENG E-mail:chengweiq@njupt.edu.cn

摘要:

Internet application identification is needed by network management in many aspects, such as quality of service (QoS) management, intrusion detection, traffic engineering, accounting, and so on. This article makes an in-depth study of precise identification of Internet applications by using flow characteristics instead of well-known port or application signature match. A novel approach that identifies the application type of an Internet protocol (IP) flow by finding what flow the flow looks the most like based on medium mathematics system (MMS) is proposed. The approach differs from previous ones mainly in two aspects: it has inherent scalability due to its use of the measure of n-dimensional medium truth degree; not only features of a flow, but also the association between the flow and the other flows of the same host as well as the relation among all flows of a host are employed to recognize a flow’s application type. For the present, some popular applications are concentrated on, and up to six application types can be identified with better accuracy. The results of experiments conducted on Internet show that the proposed methodology is effective and deserves attention.

关键词:

application type identification, flow characteristics, measure of medium truth degree, MMS

Abstract:

Internet application identification is needed by network management in many aspects, such as quality of service (QoS) management, intrusion detection, traffic engineering, accounting, and so on. This article makes an in-depth study of precise identification of Internet applications by using flow characteristics instead of well-known port or application signature match. A novel approach that identifies the application type of an Internet protocol (IP) flow by finding what flow the flow looks the most like based on medium mathematics system (MMS) is proposed. The approach differs from previous ones mainly in two aspects: it has inherent scalability due to its use of the measure of n-dimensional medium truth degree; not only features of a flow, but also the association between the flow and the other flows of the same host as well as the relation among all flows of a host are employed to recognize a flow’s application type. For the present, some popular applications are concentrated on, and up to six application types can be identified with better accuracy. The results of experiments conducted on Internet show that the proposed methodology is effective and deserves attention.

Key words:

application type identification, flow characteristics, measure of medium truth degree, MMS