Browse > Article

Performance Improvement of the Payload Signature based Traffic Classification System  

Park, Jun-Sang (고려대학교 컴퓨터정보학과)
Yoon, Sung-Ho (고려대학교 컴퓨터정보학과)
Park, Jin-Wan (고려대학교 컴퓨터정보학과)
Lee, Hyun-Shin (고려대학교 컴퓨터정보학과)
Lee, Sang-Woo (고려대학교 컴퓨터정보학과)
Kim, Myung-Sup (고려대학교 컴퓨터정보학과)
Abstract
The traffic classification is a preliminary and essential step for stable network service provision and efficient network resource management. While a number of classification methods have been introduced in literature, the payload signature-based classification method shows the highest performance in terms of accuracy, completeness, and practicality. However, the payload signature-based method has a significant drawback in high-speed network environment that the processing speed is much slower than other classification method such as header-based and statistical methods. In this paper, We describes various design options to improve the processing speed of traffic classification in design of a payload signature based classification system and describes our selections on the development of our traffic classification system. Also the feasibility of our selection was proved through experimental evaluation on our campus traffic trace.
Keywords
Application-level Traffic Classification; Payload Signature; processing Speed;
Citations & Related Records
연도 인용수 순위
  • Reference
1 Christopher L. Hayes , Yan Luo, "DPICO: a high speed deep packet inspection engine using compact finite automata", ACM/IEEE Symposium on Architecture for networking and communications systems, December 03-04, 2007, Orlando, Florida, USA
2 Liu, Hui Feng, Wenfeng Huang, Yongfeng Li, Xing "Accurate Traffic Classification", Networking, Architecture, and Storage, NAS 2007. International Conference
3 Byung-Chul Park, Young Won, Mi-Jung Choi, Myung-Sup Kim, and James W. Hong, "Empirical Analysis of Application-Level Traffic Classification Using Supervised Machine Learning," Proc. of the Asia-Pacific Network Operations and Management Symposium (APNOMS) 2008, LNCS5297, Beijing, China, Oct. 22-24, 2008, pp.474-477.
4 Yuhai Liu, Hongbo Liu, Hongyu Zhang, Xin Luan, "The Internet Traffic Classification an Online SVM Approach", ICOIN 2008. International Conference, Busan, Korea, Jan. 23-25, 2008, pp. 1-5.
5 G. Vasiliadis, M. Polychronakis, S. Antonatos, E P. Markatos, and S. loannidis, "Regular expression matching on graphics hardware for intrusion detection," in RAID, 2009, pp.265-283.
6 Thomas H. Cormen, Charles E. Leiserson, Ronald L. Rivest, Clifford Stein. Introduction to Algorithms, Second Edition. MIT Press and McGraw-Hill, 2001. ISBN 0-262-03293-7. Chapter 32: String Matching, pp.906-932.
7 F. Risso, M. Baldi, O. Morandi, A. Baldini, and P. Monclus, "Lightweight, Payload-Based Traffic Classification An Experimental Evaluation," IEEE International Conference on Communications, Beijing, China, May. 19-23, 2008, pp. 5869-5875.
8 박준상, 박진완, 윤성호, 오영석, 김명섭, "응용레벨 트래픽 분류를 위한 시그니처 생성 시스템 및 검증 네트워크의 개발", 제31회 정보처리학회 춘계학술발표대회, 부산, 한화리조트, Apr. 23-24, 2009, 제16권 제1호, pp.1288-1291.
9 윤성호, 노현구, 김명섭, "TMA(Traffic Measurement Agent)를 이용한 인터넷 응용 트래픽 분류", 통신학회 하계종합학술발표회, 라마다플라자호텔, Jul. 2-4, 2008, pp.618.
10 Subhabrata Sen , Oliver Spatscheck , Dongmei Wang, "Accurate, scalable in-network identification of p2p traffic using application signatures" World Wide Web 2004, May 17-20, 2004, New York, USA.
11 Sung-Ho Yoon, Jin-Wan Park, Young-Seok Oh, Jun-Sang Park, and Myung-Sup Kim, "Internet Application Traffic Classification Using Fixed IP-port," APNOMS 2009, LNCS, Jeju, Korea, Sep. 23-25, 2009, pp.21-30.
12 Fnag Yu, Zhifeng Chen, Yanlei Dino, T. V. Lakshman, Randy H. Katz, "Fast and memory Efficient Regular Expression Matching for Deep Packet Inspection" ANCS 2006, December , 2006, San jose, California USA.