• DocumentCode
    53491
  • Title

    Internet Traffic Classification by Aggregating Correlated Naive Bayes Predictions

  • Author

    Zhang, Jun ; Chen, Chao ; Xiang, Yang ; Zhou, Wanlei ; Xiang, Yong

  • Author_Institution
    Sch. of Inf. Technol., Deakin Univ., Melbourne, VIC, Australia
  • Volume
    8
  • Issue
    1
  • fYear
    2013
  • fDate
    Jan. 2013
  • Firstpage
    5
  • Lastpage
    15
  • Abstract
    This paper presents a novel traffic classification scheme to improve classification performance when few training data are available. In the proposed scheme, traffic flows are described using the discretized statistical features and flow correlation information is modeled by bag-of-flow (BoF). We solve the BoF-based traffic classification in a classifier combination framework and theoretically analyze the performance benefit. Furthermore, a new BoF-based traffic classification method is proposed to aggregate the naive Bayes (NB) predictions of the correlated flows. We also present an analysis on prediction error sensitivity of the aggregation strategies. Finally, a large number of experiments are carried out on two large-scale real-world traffic datasets to evaluate the proposed scheme. The experimental results show that the proposed scheme can achieve much better classification performance than existing state-of-the-art traffic classification methods.
  • Keywords
    Internet; belief networks; pattern classification; statistical analysis; BoF-based traffic classification method; Internet traffic classification; aggregation strategies; bag-of-flow; classification performance; classifier combination framework; correlated naive Bayes predictions; discretized statistical features; flow correlation information; naive Bayes predictions; network security; prediction error sensitivity; traffic flows; Accuracy; Correlation; Feature extraction; IP networks; Niobium; Training; Training data; Traffic classification; naive Bayes; network security;
  • fLanguage
    English
  • Journal_Title
    Information Forensics and Security, IEEE Transactions on
  • Publisher
    ieee
  • ISSN
    1556-6013
  • Type

    jour

  • DOI
    10.1109/TIFS.2012.2223675
  • Filename
    6327666