Browse > Article
http://dx.doi.org/10.3837/tiis.2014.07.004

Application Traffic Classification using PSS Signature  

Ham, Jae-Hyun (The 2nd R&D Institute-1 Agency for Defense Development)
An, Hyun-Min (Dept. of Computer and Information Science Korea University)
Kim, Myung-Sup (Dept. of Computer and Information Science Korea University)
Publication Information
KSII Transactions on Internet and Information Systems (TIIS) / v.8, no.7, 2014 , pp. 2261-2280 More about this Journal
Abstract
Recently, network traffic has become more complex and diverse due to the emergence of new applications and services. Therefore, the importance of application-level traffic classification is increasing rapidly, and it has become a very popular research area. Although a lot of methods for traffic classification have been introduced in literature, they have some limitations to achieve an acceptable level of performance in real-time application-level traffic classification. In this paper, we propose a novel application-level traffic classification method using payload size sequence (PSS) signature. The proposed method generates unique PSS signatures for each application using packet order, direction and payload size of the first N packets in a flow, and uses them to classify application traffic. The evaluation shows that this method can classify application traffic easily and quickly with high accuracy rates, over 99.97%. Furthermore, the method can also classify application traffic that uses the same application protocol or is encrypted.
Keywords
Application-level Traffic Classification; Application Identification; Statistical Signature; Signature-based Classification; Statistics-based Classification;
Citations & Related Records
Times Cited By KSCI : 3  (Citation Analysis)
연도 인용수 순위
1 T. T. T. Nguyen, G. Armitage, P. Branch, and S. Zander, "Timely and Continuous Machine-Learning-Based Classification for Interactive IP Traffic," IEEE/ACM Transactions on Networking, vol. 20, no. 6, pp. 1880-1894, December, 2012.   DOI   ScienceOn
2 M. S. Kim, Y. J. Won, and J. W. K. Hong, "Application-Level Traffic Monitoring and an Analysis on IP Networks," ETRI journal, vol. 27, no. 1, pp. 22-42, February, 2005.   DOI   ScienceOn
3 M. J. Choi, J. S. Park, and M. S. Kim, "An Integrated Method for Application-level Internet Traffic Classification," KSII Transactions on Internet and Information Systems, vol. 8, no. 3, pp. 838-856, March, 2014.   DOI   ScienceOn
4 A. Callado, C. Kamienski, G. Szabo, B. Gero, J. Kelner, S. Fernandes, et al., "A Survey on Internet Traffic Identification," IEEE Communications Surveys and Tutorials, vol. 11, no. 3, pp. 37-52, Third Quarter, 2009.   DOI   ScienceOn
5 L. Bernaille, R. Teixeira, I. Akodkenou, A. Soule, and K. Salamatian, "Traffic classification on the fly," ACM SIGCOMM Computer Communication Review, vol. 36, no 2, pp. 23-26, April, 2006.   DOI   ScienceOn
6 J. H. Yu, H. S. Lee, Y. H. Im, M. S. Kim, and D. H. Park, "Real-time Classification of Internet Application Traffic using a Hierarchical Multi-class SVM," KSII Transactions on Internet and Information Systems, vol. 4, no 5, pp. 859-876, October, 2010.
7 F. Gringoli, L. Salgarelli, M. Dusi, N. Cascarano, F. Risso, and K. C. Claffy, "GT: picking up the truth from the ground for internet traffic," ACM SIGCOMM Computer Communication Review, vol. 39, no. 5, pp. 12-18, October, 2009.   DOI
8 H. Kim, K. Claffy, M. Fomenkov, D. Barman, M. Faloutsos, and K. Lee, "Internet traffic classification demystified: myths, caveats, and the best practices," in Proc. of ACM CoNEXT Conference, 2008.
9 K. C. Lan and J. Heidemann, "A measurement study of correlations of Internet flow characteristics," Computer Networks, vol. 50, no. 1, pp. 46-62, January, 2006.   DOI   ScienceOn
10 R. T. Gu, H. X. Wang, Y. M. Sun, and Y. F. Ji, "Fast Traffic Classification Using Joint Distribution of Packet Size and Estimated Protocol Processing Time," IEICE Transactions on Information and Systems, vol. E93.D, no 11, pp. 2944-2952, November, 2010.   DOI
11 C. N. Lu, C. Y. Huang, Y. D. Lin, and Y. C. Lai, "Session level flow classification by packet size distribution and session grouping," Computer Networks, vol. 56, no. 1, pp. 260-272, January, 2012.   DOI   ScienceOn
12 J. S. Park, S. H. Yoon and M. S. Kim, "Performance Improvement of Payload Signature-Based Traffic Classification System Using Application Traffic Temporal Locality," in Proc. Of Asia-Pacific Network Operations and Management Symposium, September 25-27, 2013.
13 T. Bujlow, T. Riaz, and J. M. Pedersen, "A method for classification of network traffic based on C5.0 Machine Learning Algorithm," in Proc. of International Conference on Computing, Networking and Communications, pp. 237-241, January 30-February 2, 2012.
14 T. T. T. Nguyen and G. Armitage, "A Survey of Techniques for Internet Traffic Classification using Machine Learning," IEEE Communications Surveys and Tutorials, vol. 10, no. 4, pp. 56-76, Fourth Quarter, 2008.   DOI
15 A. Dainotti, A. Pescape, and K. C. Claffy, "Issues and Future Directions in Traffic Classification," IEEE Network, vol. 26, no. 1, pp. 35-40, January-February, 2012.
16 L. Bernaille, R. Teixeira, and K. Salamatian, "Early application identification," in Proc. of ACM CoNEXT conference, 2006.
17 Y. Jin, N. Duffield, J. Erman, P. Haffner, S. Sen, and Z. L. Zhang, "A Modular Machine Learning System for Flow-Level Traffic Classification in Large Networks," ACM Transactions on Knowledge Discovery from Data, vol. 6, no. 1, pp. 1-34, March, 2012.
18 J. Tan, X. Chen, and M. Du, "An Internet Traffic Identification Approach Based on GA and PSO-SVM," Journal of Computers, vol. 7, no. 1, pp. 19-29, January, 2012.
19 R. Yuan, Z. Li, X. Guan, and L. Xu, "An SVM-based machine learning method for accurate internet traffic classification," Information Systems Frontiers, vol. 12, no. 2, pp. 149-156, April, 2010.   DOI
20 B. C. Park, Y. J. Won, M. S. Kim, and J. W. Hong, "Towards automated application signature generation for traffic identification," in Proc. of IEEE Network Operations and Management Symposium, pp. 160-167, April 7-11, 2008.
21 S. Runyuan, Y. Bo, P. Lizhi, C. Yuehui, Z. Lei, and J. Shan, "Traffic classification using probabilistic neural networks," in Proc. of International Conference on Natural Computation, pp. 1914-1919, August 10-12, 2010.
22 C. Yin, S. Li, and Q. Li, "Network traffic classification via HMM under the guidance of syntactic structure," Computer Networks, vol. 56, no. 6, pp. 1814-1825, April, 2012.   DOI   ScienceOn