东南大学学报（英文版）Issue(3)：289-295,7.DOI:10.3969/j.issn.1003-7985.2014.03.006
基于有效载荷大小的早期网络流量识别
Early-stage Internet traffic identification based on packet payload size
摘要
Abstract
In order to classify the Internet traffic of different Internet applications more quickly two open Internet traffic traces AucklandⅡand UNIBS traffic traces are employed as study objects. Eight earliest packets with non-zero flow payload sizes are selected and their payload sizes are used as the early-stage flow features.Such features can be easily and rapidly extracted at the early flow stage which makes them outstanding. The behavior patterns of different Internet applications are analyzed by visualizing the early-stage packet size values. Analysis results show that most Internet applications can reflect their own early packet size behavior patterns.Early packet sizes are assumed to carry enough information for effective traffic identification.Three classical machine learning classifiers i.e. the naive Bayesian classifier naive Bayesian trees and the radial basis function neural networks are used to validate the effectiveness of the proposed assumption.The experimental results show that the early stage packet sizes can be used as features for traffic identification.关键词
模式识别/网络测量/流量分类/流量特征Key words
pattern recognition/network measurement/traffic classification/traffic feature分类
信息技术与安全科学引用本文复制引用
吴同,韩臻,王伟,彭立志..基于有效载荷大小的早期网络流量识别[J].东南大学学报（英文版）,2014,(3):289-295,7.基金项目
The Program for New Century Excellent Talents in University No．NCET-11-0565 the Fundamental Research Funds for the Central Universities No． K13JB001602012 JBZ0102011JBM217 the Ph．D．Programs Foundation of Ministry of Educa-tion of China No．20120009120010 the Program for Innovative Re-search Team in University of Ministry of Education of China No． IRT201206 the Natural Science Foundation of Shandong Province No．ZR2012FM010 ZR2011FZ001． （）
