• KSII Transactions on Internet and Information Systems
    Monthly Online Journal (eISSN: 1976-7277)

Real-time Classification of Internet Application Traffic using a Hierarchical Multi-class SVM


Abstract

In this paper, we propose a hierarchical application traffic classification system as an alternative means to overcome the limitations of the port number and payload based methodologies, which are traditionally considered traffic classification methods. The proposed system is a new classification model that hierarchically combines a binary classifier SVM and Support Vector Data Descriptions (SVDDs). The proposed system selects an optimal attribute subset from the bi-directional traffic flows generated by our traffic analysis system (KU-MON) that enables real-time collection and analysis of campus traffic. The system is composed of three layers: The first layer is a binary classifier SVM that performs rapid classification between P2P and non-P2P traffic. The second layer classifies P2P traffic into file-sharing, messenger and TV, based on three SVDDs. The third layer performs specialized classification of all individual application traffic types. Since the proposed system enables both coarse- and fine-grained classification, it can guarantee efficient resource management, such as a stable network environment, seamless bandwidth guarantee and appropriate QoS. Moreover, even when a new application emerges, it can be easily adapted for incremental updating and scaling. Only additional training for the new part of the application traffic is needed instead of retraining the entire system. The performance of the proposed system is validated via experiments which confirm that its recall and precision measures are satisfactory.


Statistics

Show / Hide Statistics

Statistics (Cumulative Counts from December 1st, 2015)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.


Cite this article

[IEEE Style]
J. Yu, H. Lee, Y. Im, M. Kim, D. Park, "Real-time Classification of Internet Application Traffic using a Hierarchical Multi-class SVM," KSII Transactions on Internet and Information Systems, vol. 4, no. 5, pp. 859-876, 2010. DOI: 10.3837/tiis.2010.10.009.

[ACM Style]
Jaehak Yu, Hansung Lee, Younghee Im, Myung-Sup Kim, and Daihee Park. 2010. Real-time Classification of Internet Application Traffic using a Hierarchical Multi-class SVM. KSII Transactions on Internet and Information Systems, 4, 5, (2010), 859-876. DOI: 10.3837/tiis.2010.10.009.

[BibTeX Style]
@article{tiis:19888, title="Real-time Classification of Internet Application Traffic using a Hierarchical Multi-class SVM", author="Jaehak Yu and Hansung Lee and Younghee Im and Myung-Sup Kim and Daihee Park and ", journal="KSII Transactions on Internet and Information Systems", DOI={10.3837/tiis.2010.10.009}, volume={4}, number={5}, year="2010", month={October}, pages={859-876}}