Key Technology of SSL Encrypted Application Identification Under Imbalance of Application Class

Through a in-depth study about the reason of network class imbalance, a method called SMOTE was chosen over the data set sampling preprocess, making full use of the advantages which is high accuracy of traffic model feature matching identification and sorting out the encrypted SSL flow, and then usi...

Full description

Saved in:
Bibliographic Details
Main Authors: Xuejiao Chen, Pan Wang, Shidong3 Liu
Format: Article
Language:zho
Published: Beijing Xintong Media Co., Ltd 2015-12-01
Series:Dianxin kexue
Subjects:
Online Access:http://www.telecomsci.com/zh/article/doi/10.11959/j.issn.1000-0801.2015355/
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Through a in-depth study about the reason of network class imbalance, a method called SMOTE was chosen over the data set sampling preprocess, making full use of the advantages which is high accuracy of traffic model feature matching identification and sorting out the encrypted SSL flow, and then using the clustering method and the SVM based on mutual information classification method to further identify SSL encryption specific application, like HTTPS/POPS etc. The hybrid method effectively combines the advantages of static feature matching and machine learning methods,to achieve the balance of classification method on accuracy and speed.
ISSN:1000-0801