Internet traffic classification based on flows' statistical properties with machine learning

Alina Vlăduţu, Dragoş Comăneci and Ciprian Dobre

International Journal of Network Management, 2017, vol. 27, issue 3

Abstract: Machine learning has recently entered the area of network traffic classification as an alternative to the deep packet inspection technique. It provides both unsupervised and supervised learning algorithms that are capable to put aside similar types of traffic or recognize Internet protocols based on some training, pre‐labeled samples. The current work proposes a new approach in the area of network traffic classification using machine learning. First, we extract the unidirectional and bidirectional flows from a traffic capture. A flow is a collection of packets that share sender and receiver IP address and port. Second, we select relevant statistical properties of these flows and use an unsupervised learning mechanism to group flows into clusters based on the similarities. Eventually, we use this classification as training input for a supervised learning engine that will have to properly determine the class of new, unseen traffic flows. Copyright © 2016 John Wiley & Sons, Ltd.

Date: 2017
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://doi.org/10.1002/nem.1929

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:wly:intnem:v:27:y:2017:i:3:n:e1929

Access Statistics for this article

More articles in International Journal of Network Management from John Wiley & Sons
Bibliographic data for series maintained by Wiley Content Delivery ().