A multi-phased statistical learning based classification for network traffic

Abstract

Application Traffic Identification is an imperative device for sorting out the system as it is the most popular approach to distinguish and characterize the network traffic created from different applications. The classification using conventional Port-based and Payload-based techniques has become counterproductive due to inconsistencies. However, in recent times, approaches with machine learning and statistical techniques have guaranteed higher accuracy. However, learning techniques are inadequate for solving problems with Time and Memory intricacies in vast datasets. Hence, the proposed paper presents a novel scheme of Statistical based traffic classification named Multi-Phased Statistical Based Classification methodology that renders Semi-supervised machines with advanced K-medoid clustering and C5.0 Classification algorithm. The proposed system displays a classic competence in observing the known and unknown application flows by statistical features utilization scheme that enhances the classification preciseness. Further, the trial results show that the proposed work outperforms previous approaches by achieving a higher granularity of 98–99% and reducing complexities. Ultimately, the new proposed work is evaluated on our campus traffic traces (AU-IDS). It is proven that the proposed approach accomplishes a higher exactness rate and thus encourages its implementation in real-time.

Network Traffic Classification Model Based on Spatio-Temporal Feature Extraction

“…Statistical traffic classification relies on the statistical characteristics of network traffic to perform classification tasks [20]. Compared to payload-based methods, this approach quickly extracts packet length, timestamps, transmission directions, and other information from packet headers based on statistical features of network traffic without the need for deep packet payload analysis.…”