.png){kind=icon}
返回
IP traffic behavior characterization via semantic mining
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jnca.2023.103603.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Discovering and describing IP traffic behavior is becoming more and more significant for efficient network management and security monitoring. Recently, many modeling techniques have been proposed, most of which focused on properties of a single dimension, such as volume-based or spatial-based. Characterizing IP traffic behavior with individual dimension features is often insufficient as they are spatiotemporally correlated. In this paper, we demonstrate that IP traffic behavior can be profiled from the perspective of end users' access relationship. We find that groups of IPs have similar behavior traits, and with insights from the identified behavior profiles, we can discover malicious traffic behavior in the overwhelming measurement data. To this end, firstly, we extract a collection of features to profile traffic behavior from the dimension of temporal, spatial, category, and intensity. Then, we characterize and model the rhythmic behavior, the cyclical behavior, the access stable behavior, the service diversity behavior, and the hotspot behavior. Finally, we use the open -source dataset, synthetic data, and the real Internet Netflow data collected from the China Education Research Network backbone (CERNET) to empirically validate our proposal. Extensive results demonstrate that the applications of derived traffic patterns can achieve fine-grained traffic monitoring.
Keyword:
Behavior characterization
Traffic analysis
Anomaly detection
NetFlows
Network security situation awareness
期刊
IF:
8
论文数:
3.7K
被引数:
1.1W
机构
引用论文
分享收藏Machine learning based malicious payload identification in software-defined networking软件定义网络中基于机器学习的恶意负载识别
OAAI
OAAI分享收藏Study of the major essential oil compounds of Coriandrum sativum against Acinetobacter baumannii and the effect of linalool on adhesion, biofilms and quorum sensing.png)
Biofouling
BiofoulingIF0
PREAI
分享收藏procmonML: Generating evasion resilient host-based behavioral analytics from tree ensemblesCOMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏Towards secure intrusion detection systems using deep learning techniques: Comprehensive analysis and review走向使用深度学习技术的安全入侵检测系统: 综合分析和回顾
PREAI
分享收藏
查看更多内容