Identifying online traffic based on property of TCP flow

doi:10.1016/S1005-8885(08)60231-9

中国邮电高校学报(英文) ›› 2009, Vol. 16 ›› Issue (3): 84-88.doi: 10.1016/S1005-8885(08)60231-9

Identifying online traffic based on property of TCP flow

洪民火,顾仁涛,王宏祥,孙咏梅,纪越峰

Key Laboratory of Optical Communications and Lightwave Technologies, Beijing University of Posts and Telecommunications, Beijing 100876, China

收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2009-06-30
通讯作者: 洪民火

Identifying online traffic based on property of TCP flow

HONG Min-huo, GU Ren-tao, WANG Hong-xiang, SUN Yong-mei, JI Yue-feng

Key Laboratory of Optical Communications and Lightwave Technologies, Beijing University of Posts and Telecommunications, Beijing 100876, China

Received:1900-01-01 Revised:1900-01-01 Online:2009-06-30
Contact: HONG Min-huo

摘要/Abstract

摘要：

Classification of network traffic using port-based or payload-based analysis is becoming increasingly difficult when many applications use dynamic port numbers, masquerading techniques, and encryption to avoid detection. In this article, an approach is presented for online traffic classification relying on the observation of the first n packets of a transmission control protocol (TCP) connection. Its key idea is to utilize the properties of the observed first ten packets of a TCP connection and Bayesian network method to build a classifier. This classifier can classify TCP flows dynamically as packets pass through it by deciding whether a TCP flow belongs to a given application. The experimental results show that the proposed approach performs well in online internet traffic classification and that it is superior to naïve Bayesian method.

关键词:

network;traffic;classification,;inter-arrival;time,;TCP;flow,;Bayesian;network

Abstract:

Key words:

network traffic classification;inter-arrival time;TCP flow;Bayesian network

HONG Min-huo, GU Ren-tao, WANG Hong-xiang, SUN Yong-mei, JI Yue-feng. Identifying online traffic based on property of TCP flow[J]. Acta Metallurgica Sinica(English letters), 2009, 16(3): 84-88.

参考文献

1. Karagiannis T, Papagiannaki K, Faloutsos M. BLINC: multilevel traffic classification in the dark. Proceedings of the 2005 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM’05), Aug 22-26, 2005, Philadelphia, PA, USA. New York, NY, USA: ACM, 2005: 229-240

2. McGregor A, Hall M, Lorier P, et al. Flow clustering using machine learning techniques. Proceedings of the the 5th Passive and Active Measurement Workshop (PAM’ 04), Apri 19-20, 2004, Antibes, France. New York, NY, USA: ACM, 2004: 205-214

3. Paxson V. Empirically derived analytic models of wide-area TCP connections. IEEE/ACM Transactions on Networking, 1994, 2(4): 316-336

4. Paxson V, Floyd S. Wide-area traffic: the failure of Poisson modeling. IEEE/ACM Transactions on Networking, 1995, 3(3): 226-244

5. Roughan M, Sen S, Spatscheck O, et al. Class-of-service mapping for QoS: a statistical signature-based approach to IP traffic classification. Proceedings of the 4th ACM SIGCOMM Conference on Internet Measurement Conference (IMC’04), Oct 25-27, 2004, Taormina, Italy. New York, NY, USA: ACM, 2004: 135-148

6. Bernaille L, Teixeira R, Salamatian K. Early application identification. Proceedings of the 2nd Conference on Future Networking Technologies (CoNEXT’06), Dec 4-7, 2006, Lisboa, Portugal. New York, NY, USA: ACM, 2006: 436-445

7. Crotti M, Gringoli F, Pelosato P, et al. A statistical approach to IP-level classification of network traffic. Proceedings of the IEEE International Conference on Communications (ICC’06): Vol 1, Jun 11-15, 2006, Istanbul, Turkey. Piscataway, NJ, USA: IEEE, 2006: 170-176

8. Moore A W, Zuev D. Internet traffic classification using Bayesian analysis techniques. Proceedings of ACM International Conference on Measurement & Modeling of Computer Systems (SIGMETRICS’05), Jun 6-10, 2005, Banff, Canada, New York, NY, USA: ACM, 2005: 50-60

9. Nilsson N J. Artificial intelligence: a new synthesis. San Fransisco, CA, USA: Morgan Kaufmann Publishers, 1998: 197-223

10. Friedman N, Geiger D, Goldszmidt M. Bayesian network classifiers. Machine Learning, 1997, 29(2/3): 131-163

11. Hall M A. Correlation-based feature selection for machine learning. Ph. D. Dissertations. Hamilton, NZ, USA: Department of Computer Science, Waikato University, 1998

12. Moore A W, Papagiannaki K. Toward the accurate identification of network applications. Proceedings of the the 6th Passive and Active Measurement Workshop (PAM’ 05), Mar 31-Apr 1, 2005, Boston, MA, USA. New York, NY, USA: ACM, 2005: 41-54

[1]	Chai Rong, Duan Xiaofang, Wang Lixuan. GNN-based temporal knowledge reasoning for UAV mission planning systems[J]. 中国邮电高校学报(英文版), 2024, 31(1): 12-25.
[2]	吕鹏超, 黄俊杰, 刘波. Linear-quadratic optimal control for time-varying descriptor systems via space decompositions [J]. 中国邮电高校学报(英文版), 2023, 30(6): 38-48.
[3]	许杏桃, 陶加贵. Parameter optimization of complex network based on the change-point identification [J]. 中国邮电高校学报(英文版), 2023, 30(6): 22-29.
[4]	张思聪, 戴建卓, 黄文静, 糜欣平. Behavioral finance between the spot and futures markets based on multilayer network [J]. 中国邮电高校学报(英文版), 2023, 30(6): 82-88.
[5]	彭宏刘耀宗. Joint global constraint and Fisher discrimination based multi-layer dictionary learning for image classification[J]. 中国邮电高校学报(英文版), 2023, 30(5): 1-10.
[6]	赵海英郭轩 . Pointer-prototype fusion network for few-shot named entity recognition[J]. 中国邮电高校学报(英文版), 2023, 30(5): 32-41.
[7]	Feng Yuting, Gong Haobing, Hao Xiaojing, Gao Hui, Guo Xiangming. Machine-learning based ocean atmospheric duct forecasting: a hybrid model-data-driven approach[J]. 中国邮电高校学报(英文版), 2023, 30(4): 1-9.
[8]	Zhang Xijun, Zhang Guannan, Zhang Xianli, Zhang Hong, Zhang Minghu. Medium and long-term traffic flow prediction based on ACNN-Trans model[J]. 中国邮电高校学报(英文版), 2023, 30(4): 21-32.
[9]	Duan Li, Chen Lin, Luo Bing. Surveys on the application of neural networks to event extraction[J]. 中国邮电高校学报(英文版), 2023, 30(4): 43-54.
[10]	Luo Zhiyong, Tan Shanxin, Xu Haifeng, Liu Xintong. Workflow optimization algorithm based on virtualization and nonlinear production quality under time constraints[J]. 中国邮电高校学报(英文版), 2023, 30(4): 55-66.
[11]	Zhang Qianqian, Xu Yanli. Channel estimation based on multi-armed approach for maritime OFDM wireless communications[J]. 中国邮电高校学报(英文版), 2023, 30(4): 75-85.
[12]	Yin Sihan, Li Yalei, Liu Xiaoping, Cui Xu, Wang Huapeng. Transformer fault diagnosis based on relational teacher-student network [J]. 中国邮电高校学报(英文版), 2023, 30(3): 41-54.
[13]	Guo Hui, Zhao Xuehui. Maximum throughput design of wireless powered communication network with IRS-NOMA based on user clustering [J]. 中国邮电高校学报(英文版), 2023, 30(3): 55-64.
[14]	Zhang Luying, Liu Xiaokai, Li Zhao, Xu Fangmin, Zhao Chenglin. Prediction based dynamic resource allocation method for edge computing first networking [J]. 中国邮电高校学报(英文版), 2023, 30(3): 78-87.
[15]	罗智勇刘心彤许海峰谢志强李杰. Accuracy optimization of virtual iterative reduction algorithm under time constraint [J]. 中国邮电高校学报(英文版), 2023, 30(2): 49-60.

Identifying online traffic based on property of TCP flow

Identifying online traffic based on property of TCP flow

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 15

编辑推荐

Metrics

本文评价