Traffic classification on the fly

Authors:
Laurent Bernaille;Renata Teixeira;Ismael Akodkenou;Augustin Soule;Kave Salamatian
Affiliations:
LIP6, Université Pierre et Marie Curie, Paris, FRANCE;LIP6, Université Pierre et Marie Curie, Paris, FRANCE;LIP6, Université Pierre et Marie Curie, Paris, FRANCE;Thomson Paris Lab;LIP6, Université Pierre et Marie Curie, Paris, FRANCE
Venue:
ACM SIGCOMM Computer Communication Review
Year:
2006

Citing 5
Cited 58

Inverting sampled traffic

Proceedings of the 3rd ACM SIGCOMM conference on Internet measurement
Class-of-service mapping for QoS: a statistical signature-based approach to IP traffic classification

Proceedings of the 4th ACM SIGCOMM conference on Internet measurement
Internet traffic classification using bayesian analysis techniques

SIGMETRICS '05 Proceedings of the 2005 ACM SIGMETRICS international conference on Measurement and modeling of computer systems
BLINC: multilevel traffic classification in the dark

Proceedings of the 2005 conference on Applications, technologies, architectures, and protocols for computer communications
Traffic classification using a statistical approach

PAM'05 Proceedings of the 6th international conference on Passive and Active Network Measurement

A preliminary performance comparison of five machine learning algorithms for practical IP traffic flow classification

ACM SIGCOMM Computer Communication Review
Unexpected means of protocol inference

Proceedings of the 6th ACM SIGCOMM conference on Internet measurement
On Inferring Application Protocol Behaviors in Encrypted Network Traffic

The Journal of Machine Learning Research
NetADHICT: a tool for understanding network traffic

LISA'07 Proceedings of the 21st conference on Large Installation System Administration Conference
An adaptive anomaly detector for worm detection

SYSML'07 Proceedings of the 2nd USENIX workshop on Tackling computer systems problems with machine learning techniques
Early application identification

CoNEXT '06 Proceedings of the 2006 ACM CoNEXT conference
Acceleration of decision tree searching for IP traffic classification

Proceedings of the 4th ACM/IEEE Symposium on Architectures for Networking and Communications Systems
Topnet: a network-aware top(1)

LISA'08 Proceedings of the 22nd conference on Large installation system administration conference
Traffic classification using en-semble learning and co-training

AIC'08 Proceedings of the 8th conference on Applied informatics and communications
Characterizing network traffic by means of the NetMine framework

Computer Networks: The International Journal of Computer and Telecommunications Networking
Automatic discovery of botnet communities on large-scale communication networks

Proceedings of the 4th International Symposium on Information, Computer, and Communications Security
BotCop: An Online Botnet Traffic Classifier

CNSR '09 Proceedings of the 2009 Seventh Annual Communication Networks and Services Research Conference
Online Classification of Network Flows

CNSR '09 Proceedings of the 2009 Seventh Annual Communication Networks and Services Research Conference
On Metrics to Distinguish Skype Flows from HTTP Traffic

Journal of Network and Systems Management
Review: Application classification using packet size distribution and port association

Journal of Network and Computer Applications
Classifying SSH encrypted traffic with minimum packet header features using genetic programming

Proceedings of the 11th Annual Conference Companion on Genetic and Evolutionary Computation Conference: Late Breaking Papers
Browser Fingerprinting from Coarse Traffic Summaries: Techniques and Implications

DIMVA '09 Proceedings of the 6th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment
Classification of P2P and HTTP Using Specific Protocol Characteristics

EUNICE '09 Proceedings of the 15th Open European Summer School and IFIP TC6.6 Workshop on The Internet of the Future
Early traffic classification using support vector machines

Proceedings of the 5th International Latin American Networking Conference
Exploiting dynamicity in graph-based traffic analysis: techniques and applications

Proceedings of the 5th international conference on Emerging networking experiments and technologies
Statistical texture analysis methods for network traffic classification

AsiaCSN '07 Proceedings of the Fourth IASTED Asian Conference on Communication Systems and Networks
Machine learning based encrypted traffic classification: identifying SSH and skype

CISDA'09 Proceedings of the Second IEEE international conference on Computational intelligence for security and defense applications
Decision tree network traffic classifier via adaptive hierarchical clustering for imperfect training dataset

WiCOM'09 Proceedings of the 5th International Conference on Wireless communications, networking and mobile computing
Early recognition of encrypted applications

PAM'07 Proceedings of the 8th international conference on Passive and active network measurement
An SVM-based machine learning method for accurate internet traffic classification

Information Systems Frontiers
Improving cost and accuracy of DPI traffic classifiers

Proceedings of the 2010 ACM Symposium on Applied Computing
Composite lightweight traffic classification system for network management

International Journal of Network Management
Botnet traffic detection techniques by C&C session classification using SVM

IWSEC'07 Proceedings of the Security 2nd international conference on Advances in information and computer security
Probabilistic identification for hard to classify protocol

WISTP'08 Proceedings of the 2nd IFIP WG 11.2 international conference on Information security theory and practices: smart devices, convergence and next generation networks
On the validation of traffic classification algorithms

PAM'08 Proceedings of the 9th international conference on Passive and active network measurement
Better network traffic identification through the independent combination of techniques

Journal of Network and Computer Applications
Optimizing statistical classifiers of network traffic

Proceedings of the 6th International Wireless Communications and Mobile Computing Conference
A framework for tunneled traffic analysis

ICACT'10 Proceedings of the 12th international conference on Advanced communication technology
A brief survey on sequence classification

ACM SIGKDD Explorations Newsletter
Dynamic feature analysis and measurement for large-scale network traffic monitoring

IEEE Transactions on Information Forensics and Security
Clustering botnet communication traffic based on n-gram feature selection

Computer Communications
Optimizing Deep Packet Inspection for High-Speed Traffic Analysis

Journal of Network and Systems Management
Quantifying the accuracy of the ground truth associated with Internet traffic traces

Computer Networks: The International Journal of Computer and Telecommunications Networking
Analysis of the impact of sampling on NetFlow traffic classification

Computer Networks: The International Journal of Computer and Telecommunications Networking
Host-Based P2P Flow Identification and Use in Real-Time

ACM Transactions on the Web (TWEB)
Early classification of network traffic through multi-classification

TMA'11 Proceedings of the Third international conference on Traffic monitoring and analysis
Inferring users' online activities through traffic analysis

Proceedings of the fourth ACM conference on Wireless network security
Admission control for a responsive distributed middleware using decision trees to model run-time parameters

Parallel Computing
SMILER: Towards Practical Online Traffic Classification

Proceedings of the 2011 ACM/IEEE Seventh Symposium on Architectures for Networking and Communications Systems
Session level flow classification by packet size distribution and session grouping

Computer Networks: The International Journal of Computer and Telecommunications Networking
K-dimensional trees for continuous traffic classification

TMA'10 Proceedings of the Second international conference on Traffic Monitoring and Analysis
Generating regular expression signatures for network traffic classification in trusted network management

Journal of Network and Computer Applications
Network flow classification based on the rhythm of packets

ICONIP'11 Proceedings of the 18th international conference on Neural Information Processing - Volume Part II
Statistical traffic classification by boosting support vector machines

Proceedings of the 7th Latin American Networking Conference
Enhancing Tor's performance using real-time traffic classification

Proceedings of the 2012 ACM conference on Computer and communications security
Exploiting packet-sampling measurements for traffic characterization and classification

International Journal of Network Management
Timely and continuous machine-learning-based classification for interactive IP traffic

IEEE/ACM Transactions on Networking (TON)
High throughput and programmable online trafficclassifier on FPGA

Proceedings of the ACM/SIGDA international symposium on Field programmable gate arrays
Application traffic classification at the early stage by characterizing application rounds

Information Sciences: an International Journal
Unsupervised traffic classification using flow statistical properties and IP packet payload

Journal of Computer and System Sciences
Detection and classification of peer-to-peer traffic: A survey

ACM Computing Surveys (CSUR)
Robust network traffic identification with unknown applications

Proceedings of the 8th ACM SIGSAC symposium on Information, computer and communications security
Online NetFPGA decision tree statistical traffic classifier

Computer Communications

Quantified Score

Hi-index	0.00

Visualization

Abstract

The early detection of applications associated with TCP flows is an essential step for network security and traffic engineering. The classic way to identify flows, i.e. looking at port numbers, is not effective anymore. On the other hand, state-of-the-art techniques cannot determine the application before the end of the TCP flow. In this editorial, we propose a technique that relies on the observation of the first five packets of a TCP connection to identify the application. This result opens a range of new possibilities for online traffic classification.