.png){kind=icon}
Return
IP traffic behavior characterization via semantic mining
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jnca.2023.103603.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Discovering and describing IP traffic behavior is becoming more and more significant for efficient network management and security monitoring. Recently, many modeling techniques have been proposed, most of which focused on properties of a single dimension, such as volume-based or spatial-based. Characterizing IP traffic behavior with individual dimension features is often insufficient as they are spatiotemporally correlated. In this paper, we demonstrate that IP traffic behavior can be profiled from the perspective of end users' access relationship. We find that groups of IPs have similar behavior traits, and with insights from the identified behavior profiles, we can discover malicious traffic behavior in the overwhelming measurement data. To this end, firstly, we extract a collection of features to profile traffic behavior from the dimension of temporal, spatial, category, and intensity. Then, we characterize and model the rhythmic behavior, the cyclical behavior, the access stable behavior, the service diversity behavior, and the hotspot behavior. Finally, we use the open -source dataset, synthetic data, and the real Internet Netflow data collected from the China Education Research Network backbone (CERNET) to empirically validate our proposal. Extensive results demonstrate that the applications of derived traffic patterns can achieve fine-grained traffic monitoring.
Keywords:
Behavior characterization
Traffic analysis
Anomaly detection
NetFlows
Network security situation awareness
Journal
IF:
8
Papers:
3.7K
Citations:
1.1W
Organization
Cited Papers
ShareSave
Study of the major essential oil compounds of Coriandrum sativum against Acinetobacter baumannii and the effect of linalool on adhesion, biofilms and quorum sensing.png)
Biofouling
BiofoulingIF0
PREAI
ShareSaveprocmonML: Generating evasion resilient host-based behavioral analytics from tree ensemblesCOMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
ShareSaveShareSave
View more