Premium
Internet traffic classification based on flows' statistical properties with machine learning
Author(s) -
Vlăduţu Alina,
Comăneci Dragoş,
Dobre Ciprian
Publication year - 2016
Publication title -
international journal of network management
Language(s) - English
Resource type - Journals
SCImago Journal Rank - 0.373
H-Index - 28
eISSN - 1099-1190
pISSN - 1055-7148
DOI - 10.1002/nem.1929
Subject(s) - computer science , traffic classification , machine learning , artificial intelligence , unsupervised learning , the internet , supervised learning , communication source , network packet , port (circuit theory) , computer network , artificial neural network , world wide web , electrical engineering , engineering
Summary Machine learning has recently entered the area of network traffic classification as an alternative to the deep packet inspection technique. It provides both unsupervised and supervised learning algorithms that are capable to put aside similar types of traffic or recognize Internet protocols based on some training, pre‐labeled samples. The current work proposes a new approach in the area of network traffic classification using machine learning. First, we extract the unidirectional and bidirectional flows from a traffic capture. A flow is a collection of packets that share sender and receiver IP address and port. Second, we select relevant statistical properties of these flows and use an unsupervised learning mechanism to group flows into clusters based on the similarities. Eventually, we use this classification as training input for a supervised learning engine that will have to properly determine the class of new, unseen traffic flows. Copyright © 2016 John Wiley & Sons, Ltd.