Towards the Deployment of Machine Learning Solutions in Network Traffic Classification: A Systematic Survey

被引:232
作者
Pacheco, Fannia [1 ]
Exposito, Ernesto [1 ]
Gineste, Mathieu [2 ]
Baudoin, Cedric [2 ]
Aguilar, Jose [3 ]
机构
[1] UPPA, LIUPPA, E2S, F-64600 Anglet, France
[2] Thales Alenia Space, Business Line Telecommun Res & Dev Dept, F-31100 Toulouse, France
[3] Univ Los Andes, CEMISID, Dept Comp, Fac Ingn, Merida 5101, Venezuela
关键词
Internet traffic; traffic classification; machine learning; traffic monitoring; UNSUPERVISED FEATURE-SELECTION; ANOMALY DETECTION; EARLY-STAGE; INTRUSION DETECTION; FEATURE GENERATION; PACKET CAPTURE; INTERNET; IDENTIFICATION; ALGORITHMS; DIAGNOSIS;
D O I
10.1109/COMST.2018.2883147
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Traffic analysis is a compound of strategies intended to find relationships, patterns, anomalies, and misconfigurations, among others things, in Internet traffic. In particular, traffic classification is a subgroup of strategies in this field that aims at identifying the application's name or type of Internet traffic. Nowadays, traffic classification has become a challenging task due to the rise of new technologies, such as traffic encryption and encapsulation, which decrease the performance of classical traffic classification strategies. Machine learning (ML) gains interest as a new direction in this field, showing signs of future success, such as knowledge extraction from encrypted traffic, and more accurate Quality of Service management. ML is fast becoming a key tool to build traffic classification solutions in real network traffic scenarios; in this sense, the purpose of this investigation is to explore the elements that allow this technique to work in the traffic classification field. Therefore, a systematic review is introduced based on the steps to achieve traffic classification by using ML techniques. The main aim is to understand and to identify the procedures followed by the existing works to achieve their goals. As a result, this survey paper finds a set of trends derived from the analysis performed on this domain; in this manner, the authors expect to outline future directions for ML-based traffic classification.
引用
收藏
页码:1988 / 2014
页数:27
相关论文
共 194 条
[1]   Multi-classification approaches for classifying mobile app traffic [J].
Aceto, Giuseppe ;
Ciuonzo, Domenico ;
Montieri, Antonio ;
Pescape, Antonio .
JOURNAL OF NETWORK AND COMPUTER APPLICATIONS, 2018, 103 :131-145
[2]   Stealthy Denial of Service (DoS) attack modelling and detection for HTTP/2 services [J].
Adi, Erwin ;
Baig, Zubair ;
Hingston, Philip .
JOURNAL OF NETWORK AND COMPUTER APPLICATIONS, 2017, 91 :1-13
[3]   Autonomic communication system based on cognitive techniques [J].
Aguilar, Jose ;
Torres, Jose ;
Aguilar, Kristell .
INTERNATIONAL JOURNAL OF KNOWLEDGE-BASED AND INTELLIGENT ENGINEERING SYSTEMS, 2018, 22 (01) :17-37
[4]   Graph based anomaly detection and description: a survey [J].
Akoglu, Leman ;
Tong, Hanghang ;
Koutra, Danai .
DATA MINING AND KNOWLEDGE DISCOVERY, 2015, 29 (03) :626-688
[5]  
Al Khater Noora, 2015, 2015 Tenth International Conference on Digital Information Management (ICDIM). Proceedings, P43, DOI 10.1109/ICDIM.2015.7381869
[6]   Traffic classification for managing Applications' networking profiles [J].
Alizadeh, Hassan ;
Zuquete, Andre .
SECURITY AND COMMUNICATION NETWORKS, 2016, 9 (14) :2557-2575
[7]   How Robust Can a Machine Learning Approach Be for Classifying Encrypted VoIP? [J].
Alshammari, Riyad ;
Zincir-Heywood, A. Nur .
JOURNAL OF NETWORK AND SYSTEMS MANAGEMENT, 2015, 23 (04) :830-869
[8]   Identification of VoIP encrypted traffic using a machine learning approach [J].
Alshammari, Riyad ;
Zincir-Heywood, A. Nur .
JOURNAL OF KING SAUD UNIVERSITY-COMPUTER AND INFORMATION SCIENCES, 2015, 27 (01) :77-92
[9]   Can encrypted traffic be identified without port numbers, IP addresses and payload inspection? [J].
Alshammari, Riyad ;
Zincir-Heywood, A. Nur .
COMPUTER NETWORKS, 2011, 55 (06) :1326-1350
[10]  
Amoli Payam Vahdani, 2013, 2013 IEEE International Workshop on Measurements & Networking (M&N), P149, DOI 10.1109/IWMN.2013.6663794