Support Vector Machines for TCP traffic classification

作者: Alice Este , Francesco Gringoli , Luca Salgarelli

DOI: 10.1016/J.COMNET.2009.05.003

关键词:

摘要: Support Vector Machines (SVM) represent one of the most promising Machine Learning (ML) tools that can be applied to problem traffic classification in IP networks. In case SVMs, there are still open questions need addressed before they generally classifiers. Having being designed essentially as techniques for binary classification, their generalization multi-class problems is under research. Furthermore, performance highly susceptible correct optimization working parameters. this paper we describe an approach based on SVM. We apply approaches solving with SVMs task statistical and a simple algorithm allows classifier perform correctly little training few hundred samples. The accuracy proposed then evaluated over three sets traces, coming from different topological points Internet. Although results relatively preliminary, confirm SVM-based classifiers very effective at discriminating generated by applications, even reduced set sizes.

参考文章(25)
Anthony McGregor, Mark Hall, Perry Lorier, James Brunskill, Flow Clustering Using Machine Learning Techniques passive and active network measurement. ,vol. 3015, pp. 205- 214 ,(2004) , 10.1007/978-3-540-24668-8_21
Kevin Jeffay, Félix Hernández-Campos, F. Donelson Smith, Andrew B. Nobel, Statistical Clustering of Internet Communication Patterns ,(2003)
Grenville Armitage, Nigel Williams, Sebastian Zander, Evaluating machine learning algorithms for automated network application identification Williams, N. and Zander, S. <http://researchrepository.murdoch.edu.au/view/author/Zander, Sebastian.html> (2006) Evaluating machine learning algorithms for automated network application identification. Swinburne University of Technology. Centre for Advanced Internet Architectures, Melbourne, VIC.. ,(2006)
Martin Roesch, Snort - Lightweight Intrusion Detection for Networks usenix large installation systems administration conference. pp. 229- 238 ,(1999)
Pai-Hsuen Chen, Chih-Jen Lin, Bernhard Schölkopf, A tutorial on ν‐support vector machines Applied Stochastic Models in Business and Industry. ,vol. 21, pp. 111- 136 ,(2005) , 10.1002/ASMB.537
Matt Roughan, Public review for the devil and packet trace anonymization acm special interest group on data communication. ,vol. 36, pp. 27- 28 ,(2006) , 10.1145/1111322.1111329
Laurent Bernaille, Renata Teixeira, Kave Salamatian, Early application identification conference on emerging network experiment and technology. pp. 6- ,(2006) , 10.1145/1368436.1368445
Nigel Williams, Sebastian Zander, Grenville Armitage, A preliminary performance comparison of five machine learning algorithms for practical IP traffic flow classification ACM SIGCOMM Computer Communication Review. ,vol. 36, pp. 5- 16 ,(2006) , 10.1145/1163593.1163596