A survey of techniques for internet traffic classification using machine learning

Maximum Likelihood from Incomplete Data Via the <i>EM</i> Algorithm

Dempster, A. P., Laird, N. M., & Rubin, D. B. (1977) · Journal of the Royal Statistical Society Series B: Statistical Methodology · doi:10.1111/j.2517-6161.1977.tb01600.x · Cited by 50,444 · see citing works

Genetic algorithms in search, optimization, and machine learning

(1989) · Choice Reviews Online · doi:10.5860/choice.27-0936 · Cited by 49,169 · see citing works

Data Mining: Practical Machine Learning Tools and Techniques

Witten, I. H., Frank, E., & Hall, M. A. (2011) · Elsevier eBooks · doi:10.1016/c2009-0-19715-5 · Cited by 25,493 · see citing works

Genetic Algorithms in Search, Optimization and Machine Learning

Goldberg, D. E., & Robson, D. (1988) · Cited by 18,391 · see citing works

Data Mining

Witten, I. H. (2008) · Cited by 9,115 · see citing works

Wrappers for feature subset selection

Kohavi, R., & John, G. H. (1997) · Artificial Intelligence · doi:10.1016/s0004-3702(97)00043-x · Cited by 8,940 · see citing works

Objective Criteria for the Evaluation of Clustering Methods

Rand, W. M. (1971) · Journal of the American Statistical Association · doi:10.1080/01621459.1971.10482356 · Cited by 6,493 · see citing works

Survey of Clustering Algorithms

Xu, R., & Wunsch, D. C. (2005) · IEEE Transactions on Neural Networks · doi:10.1109/tnn.2005.845141 · Cited by 6,223 · see citing works

RTP: A Transport Protocol for Real-Time Applications

Schulzrinne, H. G., Casner, S. L., Frederick, R., & Jacobson, V. L. (2003) · doi:10.17487/rfc3550 · Cited by 5,779 · see citing works

An Architecture for Differentiated Service

Blake, S. L., Black, D. L., Carlson, M., Davies, E., Wang, Z., & Weiss, W. (1998) · Cited by 5,487 · see citing works

Data mining

Witten, I. H., & Frank, E. (2002) · ACM SIGMOD Record · doi:10.1145/507338.507355 · Cited by 5,163 · see citing works

Pattern Classification

Chiang, L. H., Russell, E. L., & Braatz, R. D. (2001) · Advanced textbooks in control and signal processing · doi:10.1007/978-1-4471-0347-9_3 · Cited by 5,015 · see citing works

Maximum Likelihood from Incomplete Data via the EM Algorithm

Dempster, A. P., Laird, N. M., & Rubin, D. B. (1976) · Cited by 4,517 · see citing works

An Architecture for Differentiated Services

Blake, S. L., Black, D., Carlson, M., Davies, E., Wang, Z., & Weiss, W. (1998) · doi:10.17487/rfc2475 · Cited by 4,064 · see citing works

Integrated Services in the Internet Architecture: an Overview

Braden, R., Clark, D. D., & Shenker, S. J. (1994) · doi:10.17487/rfc1633 · Cited by 3,149 · see citing works

Bro: a system for detecting network intruders in real-time

Paxson, V. (1999) · Computer Networks · doi:10.1016/s1389-1286(99)00112-7 · Cited by 2,636 · see citing works

Pattern Classification (2nd Edition)

Duda, R. O., Hart, P. E., & Stork, D. G. (2000) · Wiley-Interscience eBooks · Cited by 2,064 · see citing works

Objective Criteria for the Evaluation of Clustering Methods

Rand, W. M. (1971) · Journal of the American Statistical Association · doi:10.2307/2284239 · Cited by 1,863 · see citing works

RTP: A Transport Protocol for Real-Time Applications

Audio-Video Transport Working Group, Schulzrinne, H., Casner, S. L., et al. (1996) · doi:10.17487/rfc1889 · Cited by 1,297 · see citing works

Benchmarking attribute selection techniques for discrete class data mining

Hall, M. A., & Holmes, G. (2003) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2003.1245283 · Cited by 1,239 · see citing works

Internet traffic classification using bayesian analysis techniques

Moore, A. W., & Zuev, D. V. (2005) · ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS) · doi:10.1145/1064212.1064220 · Cited by 1,216 · see citing works

BLINC

Karagiannis, T., Papagiannaki, K., & Faloutsos, M. (2005) · ACM SIGCOMM Conference (SIGCOMM) · doi:10.1145/1080091.1080119 · Cited by 997 · see citing works

Bayesian classification (AutoClass): theory and results

Cheeseman, P., & Stutz, J. (1996) · Cited by 963 · see citing works

Accurate, scalable in-network identification of p2p traffic using application signatures

Sen, S. B., Spatscheck, O., & Wang, D. (2004) · International World Wide Web Conference (WWW) · doi:10.1145/988672.988742 · Cited by 807 · see citing works

Toward the Accurate Identification of Network Applications

Moore, A. W., & Papagiannaki, K. (2005) · Lecture Notes in Computer Science · doi:10.1007/978-3-540-31966-5_4 · Cited by 801 · see citing works

Traffic classification using clustering algorithms

Erman, J., Arlitt, M. F., & Mahanti, A. (2006) · doi:10.1145/1162678.1162679 · Cited by 712 · see citing works

A preliminary performance comparison of five machine learning algorithms for practical IP traffic flow classification

Williams, N., Zander, S., & Armitage, G. J. (2006) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1163593.1163596 · Cited by 698 · see citing works

Traffic classification on the fly

Bernaille, L., Teixeira, R., Akodkenou, I., Soule, A., & Salamatian, K. (2006) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1129582.1129589 · Cited by 585 · see citing works

Empirically derived analytic models of wide-area TCP connections

Paxson, V. (1994) · IEEE/ACM Transactions on Networking · doi:10.1109/90.330413 · Cited by 581 · see citing works

Cluster validity methods

Halkidi, M., Batistakis, Y., & Vazirgiannis, M. (2002) · ACM SIGMOD Record · doi:10.1145/565117.565124 · Cited by 538 · see citing works

Flow Clustering Using Machine Learning Techniques

McGregor, A., Hall, M., Lorier, P., & Brunskill, J. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-24668-8_21 · Cited by 521 · see citing works

Automated traffic classification and application identification using machine learning

Zander, S., Nguyen, T., & Armitage, G. (2005) · The IEEE Conference on Local Computer Networks 30th Anniversary (LCN'05)l · doi:10.1109/lcn.2005.35 · Cited by 517 · see citing works

Is P2P dying or just hiding?

Karagiannis, T., Broido, A., Brownlee, N., Claffy, K. C., & Faloutsos, M. (2005) · IEEE Global Telecommunications Conference, 2004. GLOBECOM '04. · doi:10.1109/glocom.2004.1378239 · Cited by 504 · see citing works

Bayesian Neural Networks for Internet Traffic Classification

Auld, T., Moore, A. W., & Gull, S. F. (2007) · IEEE Transactions on Neural Networks · doi:10.1109/tnn.2006.883010 · Cited by 494 · see citing works

Class-of-service mapping for QoS: a statistical signature-based approach to IP traffic classification

Roughan, M., Sen, S., Spatscheck, O., & Duffield, N. (2004) · Proceedings of the 4th ACM SIGCOMM conference on Internet measurement · doi:10.1145/1028788.1028805 · Cited by 494 · see citing works

Clustering validity checking methods

Halkidi, M., Batistakis, Y., & Vazirgiannis, M. (2002) · ACM SIGMOD Record · doi:10.1145/601858.601862 · Cited by 466 · see citing works

Traffic classification through simple statistical fingerprinting

Crotti, M., Dusi, M., Gringoli, F., & Salgarelli, L. (2007) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1198255.1198257 · Cited by 396 · see citing works

ACAS

Haffner, P., Sen, S. B., Spatscheck, O., & Wang, D. (2005) · doi:10.1145/1080173.1080183 · Cited by 376 · see citing works

Revealing skype traffic

Bonfiglio, D., Mellia, M., Meo, M., Rossi, D., & Tofanelli, P. (2007) · ACM SIGCOMM Conference (SIGCOMM) · doi:10.1145/1282380.1282386 · Cited by 268 · see citing works

Why Should Machines Learn?

Simon, H. A. (1983) · Springer eBooks · doi:10.1007/978-3-662-12405-5_2 · Cited by 261 · see citing works

A Longitudinal Study of P2P Traffic Classification

Madhukar, A., & Williamson, C. L. (2006) · doi:10.1109/mascots.2006.6 · Cited by 248 · see citing works

Identifying and discriminating between web and peer-to-peer traffic in the network core

Erman, J., Mahanti, A., Arlitt, M., & Williamson, C. (2007) · Proceedings of the 16th international conference on World Wide Web · doi:10.1145/1242572.1242692 · Cited by 213 · see citing works

Concept formation knowledge and experience in unsupervised learning

Fisher, D., Pazzani, M. J., & Langley, P. (1991) · Cited by 210 · see citing works

Unexpected means of protocol inference

Ma, J., Levchenko, K., Kreibich, C., Savage, S., & Voelker, G. M. (2006) · Proceedings of the 6th ACM SIGCOMM conference on Internet measurement · doi:10.1145/1177080.1177123 · Cited by 204 · see citing works

Artificial intelligence (2nd ed.)

Winston, P. H. (1984) · Addison-Wesley Longman Publishing Co., Inc. eBooks · Cited by 166 · see citing works

An analysis of Internet chat systems

Dewes, C., Wichmann, A., & Feldmann, A. (2003) · doi:10.1145/948205.948214 · Cited by 149 · see citing works

Training on multiple sub-flows to optimise the use of Machine Learning classifiers in real-world IP networks

Thu, T. N. T., & Armitage, G. J. (2006) · Conference on Local Computer Networks · doi:10.1109/lcn.2006.322122 · Cited by 123 · see citing works

Semi-supervised network traffic classification

Erman, J., Mahanti, A., Arlitt, M. F., Cohen, I., & Williamson, C. L. (2007) · ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS) · doi:10.1145/1254882.1254934 · Cited by 93 · see citing works

A synthetic traffic model for Quake3

Lang, T., Branch, P., & Armitage, G. J. (2004) · ACM SIGCHI International Conference on Advances in Computer Entertainment Technology (ACE) · doi:10.1145/1067343.1067373 · Cited by 88 · see citing works

BLINC: Multilevel Traffic Classification in the Dark

Karagiannis, T., Papagiannaki, K., & Faloutsos, M. (2005) · eScholarship (California Digital Library) · Cited by 88 · see citing works

The Formation and Use of Abstract Concepts in Design

Reich, Y., & Fenves, S. J. (1991) · Elsevier eBooks · doi:10.1016/b978-1-4832-0773-5.50018-3 · Cited by 79 · see citing works

A synthetic traffic model for Half-Life

Armitage, G. J., Branch, P., Lang, T., et al. (2003) · Swinburne figshare (Swinburne University of Technology) · doi:10.25916/sut.26286766 · Cited by 68 · see citing works

Quality of service in IP networks: foundations for a multi-service Internet

Armitage, G. J. (2000) · Swinburne figshare (Swinburne University of Technology) · Cited by 68 · see citing works

Cisco Architecture for Lawful Intercept in IP Networks

Baker, F., Foster, B., & Sharp, C. (2004) · doi:10.17487/rfc3924 · Cited by 61 · see citing works

Internet Traffic Classification for Scalable QOS Provision

Park, J., Tyan, H.-R., & Kuo, C.-C. (2006) · 2006 IEEE International Conference on Multimedia and Expo · doi:10.1109/icme.2006.262757 · Cited by 56 · see citing works

Shape-based recognition of wiry objects

Carmichael, O. T., & Hebert, M. (2004) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/tpami.2004.128 · Cited by 52 · see citing works

Byte me

Erman, J., Mahanti, A., & Arlitt, M. F. (2007) · doi:10.1145/1269880.1269890 · Cited by 51 · see citing works

Beyond technology

Burgstahler, L., Dolzer, K., Hauser, C., et al. (2003) · doi:10.1145/944592.944597 · Cited by 38 · see citing works

Machine learning: principles and techniques

Michie, D. (1990) · Knowledge-Based Systems · doi:10.1016/0950-7051(90)90044-i · Cited by 36 · see citing works

GA-Based Internet Traffic Classification Technique for QoS Provisioning

Park, J. H., Tyan, H.-R., & Kuo, C. ‐. J. (2006) · Information Hiding · doi:10.1109/iih-msp.2006.103 · Cited by 32 · see citing works

GA-Based Internet Traffic Classification Technique for QoS Provisioning

Park, J., Tyan, H.-R., & Kuo, C. ‐. J. (2006) · doi:10.1109/iih-msp.2006.264991 · Cited by 28 · see citing works

An Architecture for Automated Network Control of QoS over Consumer Broadband Links

Stewart, L., Armitage, G. J., Branch, P., & Zander, S. (2005) · IEEE Region 10 Conference (TENCON) · doi:10.1109/tencon.2005.301139 · Cited by 25 · see citing works

Principles of machine learning

Shi, Z. (1992) · International Academic Publishers eBooks · Cited by 23 · see citing works

Synthetic sub-flow pairs for timely and stable IP traffic identification

Nguyen, T. T. T., & Armitage, G. J. (2006) · Swinburne figshare (Swinburne University of Technology) · doi:10.25916/sut.26275438 · Cited by 18 · see citing works

Netman: a learning network traffic controller

Silver, B. (1990) · International Conference on Industrial and Engineering Applications of Artificial Intelligence and Expert Systems (IEA/AIE) · doi:10.1145/98894.99101 · Cited by 16 · see citing works

Evaluating machine learning methods for online game traffic identification

Williams, N., Zander, S., & Armitage, G. J. (2006) · Swinburne figshare (Swinburne University of Technology) · doi:10.25916/sut.26270206 · Cited by 12 · see citing works

ANGEL - Automated Network Games Enhancement Layer

But, J., Williams, N., Zander, S., et al. (2006) · Murdoch University Research Portal · Cited by 3 · see citing works

A Survey of Data Mining and Machine Learning Methods for Cyber Security Intrusion Detection

Buczak, A. L., & Guven, E. (2016) · IEEE Communications Surveys &amp; Tutorials · doi:10.1109/comst.2015.2494502 · Cited by 3,332 · see citing works

Towards the development of realistic botnet dataset in the Internet of Things for network forensic analytics: Bot-IoT dataset

Koroniotis, N., Moustafa, N., Sitnikova, E., & Turnbull, B. (2019) · Future Generation Computer Systems · doi:10.1016/j.future.2019.05.041 · Cited by 1,983 · see citing works

A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities

Boutaba, R., Salahuddin, M. A., Limam, N., Ayoubi, S., Shahriar, N., Estrada-Solano, F., & Caicedo, O. M. (2018) · Journal of Internet Services and Applications · doi:10.1186/s13174-018-0087-2 · Cited by 1,036 · see citing works

State-of-the-Art Deep Learning: Evolving Machine Intelligence Toward Tomorrow’s Intelligent Network Traffic Control Systems

Fadlullah, Z. M., Tang, F., Mao, B., Kato, N., Akashi, O., Inoue, T., & Mizutani, K. (2017) · IEEE Communications Surveys &amp; Tutorials · doi:10.1109/comst.2017.2707140 · Cited by 810 · see citing works

A survey of machine learning techniques applied to software defined networking (sdn): research issues and challenges

Xie, J., Yu, F. R., Huang, T., Xie, R., Liu, J., Wang, C., & Liu, Y. (2019) · IEEE Communications Surveys &amp; Tutorials · doi:10.1109/comst.2018.2866942 · Cited by 700 · see citing works

Issues and future directions in traffic classification

Dainotti, A., Pescape, A., & Claffy, K. (2012) · IEEE Network · doi:10.1109/mnet.2012.6135854 · Cited by 630 · see citing works

A Very Brief Introduction to Machine Learning With Applications to Communication Systems

Simeone, O. (2018) · IEEE Transactions on Cognitive Communications and Networking · doi:10.1109/tccn.2018.2881442 · Cited by 516 · see citing works

Internet traffic classification demystified: myths, caveats, and the best practices

Kim, H., Claffy, K., Fomenkov, M., Barman, D., Faloutsos, M., & Lee, K. (2008) · Proceedings of the 2008 ACM CoNEXT Conference on - CONEXT '08 · doi:10.1145/1544012.1544023 · Cited by 485 · see citing works

Robust Smartphone App Identification via Encrypted Network Traffic Analysis

Taylor, V. F., Spolaor, R., Conti, M., & Martinovic, I. (2018) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2017.2737970 · Cited by 439 · see citing works

Robust Network Traffic Classification

Zhang, J., Chen, X., Xiang, Y., Zhou, W., & Wu, J. (2015) · IEEE/ACM Transactions on Networking · doi:10.1109/tnet.2014.2320577 · Cited by 391 · see citing works

“Alexa, Can I Trust You?”

Chung, H., Iorga, M., Voas, J., & Lee, S. (2017) · Computer · doi:10.1109/mc.2017.3571053 · Cited by 230 · see citing works

When Machine Learning Meets Privacy in 6G: A Survey

Sun, Y., Liu, J., Wang, J., Cao, Y., & Kato, N. (2020) · IEEE Communications Surveys &amp; Tutorials · doi:10.1109/comst.2020.3011561 · Cited by 211 · see citing works

Internet Traffic Classification by Aggregating Correlated Naive Bayes Predictions

Zhang, J., Chen, C., Xiang, Y., Zhou, W., & Xiang, Y. (2013) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2012.2223675 · Cited by 175 · see citing works

Machine Learning in Software Defined Networks: Data collection and traffic classification

Amaral, P., Dinis, J., Pinto, P., Bernardo, L., Tavares, J., & Mamede, H. S. (2016) · 2016 IEEE 24th International Conference on Network Protocols (ICNP) · doi:10.1109/icnp.2016.7785327 · Cited by 172 · see citing works

Timely and Continuous Machine-Learning-Based Classification for Interactive IP Traffic

Nguyen, T. T. T., Armitage, G., Branch, P., & Zander, S. (2012) · IEEE/ACM Transactions on Networking · doi:10.1109/tnet.2012.2187305 · Cited by 156 · see citing works

A Survey of Techniques for Mobile Service Encrypted Traffic Classification Using Deep Learning

Wang, P., Chen, X., Ye, F., & Sun, Z. (2019) · IEEE Access · doi:10.1109/access.2019.2912896 · Cited by 148 · see citing works

A survey of AIOps methods for failure management

Notaro, P., Cardoso, J., & Gerndt, M. (2021) · ACM Transactions on Intelligent Systems and Technology · doi:10.1145/3483424 · Cited by 142 · see citing works

KISS: Stochastic Packet Inspection Classifier for UDP Traffic

Finamore, A., Mellia, M., Meo, M., & Rossi, D. (2010) · IEEE/ACM Transactions on Networking · doi:10.1109/tnet.2010.2044046 · Cited by 130 · see citing works

Abacus: Accurate behavioral classification of P2P-TV traffic

Bermolen, P., Mellia, M., Meo, M., Rossi, D., & Valenti, S. (2011) · Computer Networks · doi:10.1016/j.comnet.2010.12.004 · Cited by 67 · see citing works

A new perspective towards the development of robust data-driven intrusion detection for industrial control systems

Ayodeji, A., Liu, Y.-K., Chao, N., & Yang, L.-Q. (2020) · Nuclear Engineering and Technology · doi:10.1016/j.net.2020.05.012 · Cited by 66 · see citing works

A multi-level framework to identify HTTPS services

Shbair, W. M., Cholez, T., Francois, J., & Chrisment, I. (2016) · NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium · doi:10.1109/noms.2016.7502818 · Cited by 69 · see citing works

Exploiting Diversity in Android TLS Implementations for Mobile App Traffic Classification

Sengupta, S., Ganguly, N., De, P., & Chakraborty, S. (2019) · The World Wide Web Conference · doi:10.1145/3308558.3313738 · Cited by 45 · see citing works

Internet Traffic Classification Using Machine Learning: A Token-based Approach

Wang, Y., Xiang, Y., & Yu, S. (2011) · 2011 14th IEEE International Conference on Computational Science and Engineering · doi:10.1109/cse.2011.58 · Cited by 15 · see citing works

Inferring applications at the network layer using collective traffic statistics

Jin, Y., Duffield, N., Haffner, P., Sen, S., & Zhang, Z.-L. (2010) · 2010 22nd International Teletraffic Congress (lTC 22) · doi:10.1109/itc.2010.5608729 · Cited by 7 · see citing works

Network Traffic Classification Techniques-A Review

Goli, Y. D., & Ambika, R. (2018) · International Conference on Computational Techniques, Electronics and Mechanical Systems (CTEMS) · doi:10.1109/ctems.2018.8769309 · Cited by 22 · see citing works

Video Traffic Classification : A Machine Learning approach with Packet Based Features using Support Vector Machine

Westlinder, S. (2016) · Cited by 4 · see citing works

Internet Traffic Classification Using the Index of Variability

Rottondi, C., & Verticale, G. (2012) · IEEE Latin America Transactions · doi:10.1109/tla.2012.6222589 · Cited by 2 · see citing works

A Heuristic-Based Co-clustering Algorithm for the Internet Traffic Classification

Lu, W., & Xue, L. (2014) · International Conference on Advanced Information Networking and Applications Workshops (WAINA) · doi:10.1109/waina.2014.16 · Cited by 24 · see citing works

Using host profiling to refine statistical application identification

Jaber, M., Cascella, R. G., & Barakat, C. (2012) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infcom.2012.6195692 · Cited by 18 · see citing works