Network traffic classification using decision tree based on minimum partition distance

Before data communications,every application protocol to handshake at application layer and transmit some parameters.This process is quite different according to the protocols,such as the packet direction,payload size and the information entropy of each packet payload.So according to these features,...

Full description

Saved in:
Bibliographic Details
Main Authors: Zhe YANG, Ling-zhi LI, Qi-jin JI, Yan-qin ZHU
Format: Article
Language:zho
Published: Editorial Department of Journal on Communications 2012-03-01
Series:Tongxin xuebao
Subjects:
Online Access:http://www.joconline.com.cn/zh/article/doi/1000-436X(2012)03-0090-13/
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1841539898317733888
author Zhe YANG
Ling-zhi LI
Qi-jin JI
Yan-qin ZHU
author_facet Zhe YANG
Ling-zhi LI
Qi-jin JI
Yan-qin ZHU
author_sort Zhe YANG
collection DOAJ
description Before data communications,every application protocol to handshake at application layer and transmit some parameters.This process is quite different according to the protocols,such as the packet direction,payload size and the information entropy of each packet payload.So according to these features,decision tree algorithm based on minimum partition distance was used to train the classifier.The results of the offline experiments on real network traces and the online classification experiments in campus network indicate that,analyzing the first four or six packets of each flow is enough to classify eight common used application protocols with high overall accuracy and low cost.Contrast to other machine learning algorithms,decision tree can achieve better ent traces and low classification time.So it is very suitable for real-time traffic classification.
format Article
id doaj-art-3d6b7d349ccd452c98f6842e52d5f359
institution Kabale University
issn 1000-436X
language zho
publishDate 2012-03-01
publisher Editorial Department of Journal on Communications
record_format Article
series Tongxin xuebao
spelling doaj-art-3d6b7d349ccd452c98f6842e52d5f3592025-01-14T06:31:25ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2012-03-01339110259660817Network traffic classification using decision tree based on minimum partition distanceZhe YANGLing-zhi LIQi-jin JIYan-qin ZHUBefore data communications,every application protocol to handshake at application layer and transmit some parameters.This process is quite different according to the protocols,such as the packet direction,payload size and the information entropy of each packet payload.So according to these features,decision tree algorithm based on minimum partition distance was used to train the classifier.The results of the offline experiments on real network traces and the online classification experiments in campus network indicate that,analyzing the first four or six packets of each flow is enough to classify eight common used application protocols with high overall accuracy and low cost.Contrast to other machine learning algorithms,decision tree can achieve better ent traces and low classification time.So it is very suitable for real-time traffic classification.http://www.joconline.com.cn/zh/article/doi/1000-436X(2012)03-0090-13/traffic classificationbidirectional flowminimum partition distancedecision tree
spellingShingle Zhe YANG
Ling-zhi LI
Qi-jin JI
Yan-qin ZHU
Network traffic classification using decision tree based on minimum partition distance
Tongxin xuebao
traffic classification
bidirectional flow
minimum partition distance
decision tree
title Network traffic classification using decision tree based on minimum partition distance
title_full Network traffic classification using decision tree based on minimum partition distance
title_fullStr Network traffic classification using decision tree based on minimum partition distance
title_full_unstemmed Network traffic classification using decision tree based on minimum partition distance
title_short Network traffic classification using decision tree based on minimum partition distance
title_sort network traffic classification using decision tree based on minimum partition distance
topic traffic classification
bidirectional flow
minimum partition distance
decision tree
url http://www.joconline.com.cn/zh/article/doi/1000-436X(2012)03-0090-13/
work_keys_str_mv AT zheyang networktrafficclassificationusingdecisiontreebasedonminimumpartitiondistance
AT lingzhili networktrafficclassificationusingdecisiontreebasedonminimumpartitiondistance
AT qijinji networktrafficclassificationusingdecisiontreebasedonminimumpartitiondistance
AT yanqinzhu networktrafficclassificationusingdecisiontreebasedonminimumpartitiondistance