arrow
Return

Internet Traffic Classification Using Constrained Clustering

delete2014-11-01
delete91
PRE
AI
Y
Yu Wang *
向
向阳 (Yang Xiang)
J
Jun Zhang
W
Wanlei Zhou
G
Guiyi Wei
L
Laurence T. Yang
DOI:10.1109/TPDS.2013.307delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Statistics-based Internet traffic classification using machine learning techniques has attracted extensive research interest lately, because of the increasing ineffectiveness of traditional port-based and payload-based approaches. In particular, unsupervised learning, that is, traffic clustering, is very important in real-life applications, where labeled training data are difficult to obtain and new patterns keep emerging. Although previous studies have applied some classic clustering algorithms such as K-Means and EM for the task, the quality of resultant traffic clusters was far from satisfactory. In order to improve the accuracy of traffic clustering, we propose a constrained clustering scheme that makes decisions with consideration of some background information in addition to the observed traffic statistics. Specifically, we make use of equivalence set constraints indicating that particular sets of flows are using the same application layer protocols, which can be efficiently inferred from packet headers according to the background knowledge of TCP/IP networking. We model the observed data and constraints using Gaussian mixture density and adapt an approximate algorithm for the maximum likelihood estimation of model parameters. Moreover, we study the effects of unsupervised feature discretization on traffic clustering by using a fundamental binning method. A number of real-world Internet traffic traces have been used in our evaluation, and the results show that the proposed approach not only improves the quality of traffic clusters in terms of overall accuracy and per-class metrics, but also speeds up the convergence.
Keywords:
Algorithms
clustering
machine learning
traffic analysis
network security
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

IEEE Transactions on Parallel and Distributed Systems cover
IEEE Transactions on Parallel and Distributed Systems
IF:
6
Papers:
5.2K
Citations:
1.1W

Organization

Z
Zhejiang Gongshang University
Scholars:
6.6K
Papers: 4.9K
Citations: 8.1K
D
Deakin University
Scholars:
2.0W
Papers: 2.1W
Citations: 2.8W
Cited Papers

Cited Papers

Arigid pentacoordinate silicon structure generalization of pseudorotation
err1986-05-01
err0
PREAI
errRobert J.P. Corriu; Muhammad Mazhar; Monique Poirier; Gerad Royo
errShare
errSave
Continuous renal replacement therapy principles
err2021-04-05
err0
PREAI
errRolando Claure‐Del Granado; William R. Clark
errShare
errSave
errShare
errSave
A novel strategy for the synthesis of thermally stable and apoptosis-inducing 2,3-dihydroazetes
err2016-01-01
err0
PREAI
errIlia A. Smetanin; Mikhail S. Novikov; Anastasiya V. Agafonova; Nikolai V. Rostovskii; Alexander F. Khlebnikov; Igor V. Kudryavtsev; Maxim A. Terpilowski; Maria K. Serebriakova; Andrey S. Trulioff; Nikolay V. Goncharov
errShare
errSave
researcher View more