The DOI matches its Crossref record; 52 of the 56 references it cites were found in a registry or an index.
Robust Network Traffic Classification
Open accessAbstract
As a fundamental tool for network management and security, traffic classification has attracted increasing attention in recent years. A significant challenge to the robustness of classification performance comes from zero-day applications previously unknown in traffic classification systems. In this paper, we propose a new scheme of Robust statistical Traffic Classification (RTC) by combining supervised and unsupervised machine learning techniques to meet this challenge. The proposed RTC scheme has the capability of identifying the traffic of zero-day applications as well as accurately discriminating predefined application classes. In addition, we develop a new method for automating the RTC scheme parameters optimization process. The empirical study on real-world traffic data confirms the effectiveness of the proposed scheme. When zero-day applications are present, the classification performance of the new scheme is significantly better than four state-of-the-art methods: random forest, correlation-based classification, semi-supervised clustering, and one-class SVM.
Overview
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“Therefore, even with small labeled training datasets, RTC can achieve a higher flow and byte accuracy of up to 15% and 10%, respectively, in comparison to the second best technique.”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [497]
In the citing paper
“Consequentially, joint application of supervised and unsupervised ML for traffic classification [137, 497] has demonstrated success.”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [497]
Citations
Cites
Breiman, L. (2001) · Machine Learning · doi:10.1023/a:1010933404324 · Cited by 133,538
Book Review: Pattern Recognition and Machine Learning
Nasrabadi, N. M. (2007) · Journal of Electronic Imaging · doi:10.1117/1.2819119 · Cited by 22,066
(2006) · Springer eBooks · Cited by 8,123
Information theory, inference, and learning algorithms
(2004) · Choice Reviews Online · doi:10.5860/choice.41-5949 · Cited by 6,536
Estimating the Support of a High-Dimensional Distribution
Schölkopf, B., Platt, J. C., Shawe-Taylor, J., Smola, A. J., & Williamson, R. C. (2001) · Neural Computation · doi:10.1162/089976601750264965 · Cited by 6,168
Kittler, J., Hatef, M., Duin, R. P. W., & Matas, J. (1998) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/34.667881 · Cited by 5,394
Information Theory, Inference, and Learning Algorithms
(2004) · Kybernetes · doi:10.1108/03684920410534506 · Cited by 4,937
Pattern Recognition and Machine Learning
Neal, R. M. (2007) · Technometrics · doi:10.1198/tech.2007.s518 · Cited by 4,629
(2000) · Applied Physics Letters · doi:10.1162/153244303322753616 · Cited by 3,581
A survey of techniques for internet traffic classification using machine learning
Nguyen, T. T. T., & Armitage, G. (2008) · IEEE Communications Surveys & Tutorials · doi:10.1109/surv.2008.080406 · Cited by 1,664
Internet traffic classification using bayesian analysis techniques
Moore, A. W., & Zuev, D. V. (2005) · ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS) · doi:10.1145/1064212.1064220 · Cited by 1,216
Traffic classification using clustering algorithms
Erman, J., Arlitt, M. F., & Mahanti, A. (2006) · doi:10.1145/1162678.1162679 · Cited by 712
Williams, N., Zander, S., & Armitage, G. J. (2006) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1163593.1163596 · Cited by 698
Rahbar, A. G., & Yang, O. W. W. (2008) · IEEE Communications Surveys & Tutorials · doi:10.1109/surv.2008.080408 · Cited by 676
Traffic classification on the fly
Bernaille, L., Teixeira, R., Akodkenou, I., Soule, A., & Salamatian, K. (2006) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1129582.1129589 · Cited by 585
Flow Clustering Using Machine Learning Techniques
McGregor, A., Hall, M., Lorier, P., & Brunskill, J. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-24668-8_21 · Cited by 521
Automated traffic classification and application identification using machine learning
Zander, S., Nguyen, T., & Armitage, G. (2005) · The IEEE Conference on Local Computer Networks 30th Anniversary (LCN'05)l · doi:10.1109/lcn.2005.35 · Cited by 517
Bayesian Neural Networks for Internet Traffic Classification
Auld, T., Moore, A. W., & Gull, S. F. (2007) · IEEE Transactions on Neural Networks · doi:10.1109/tnn.2006.883010 · Cited by 494
Roughan, M., Sen, S., Spatscheck, O., & Duffield, N. (2004) · Proceedings of the 4th ACM SIGCOMM conference on Internet measurement · doi:10.1145/1028788.1028805 · Cited by 494
Internet traffic classification demystified: myths, caveats, and the best practices
Kim, H., Claffy, K., Fomenkov, M., Barman, D., Faloutsos, M., & Lee, K. (2008) · Proceedings of the 2008 ACM CoNEXT Conference on - CONEXT '08 · doi:10.1145/1544012.1544023 · Cited by 485
Internet traffic classification using bayesian analysis techniques
Moore, A. W., & Zuev, D. (2005) · ACM SIGMETRICS Performance Evaluation Review · doi:10.1145/1071690.1064220 · Cited by 460
Traffic classification through simple statistical fingerprinting
Crotti, M., Dusi, M., Gringoli, F., & Salgarelli, L. (2007) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1198255.1198257 · Cited by 396
Network Traffic Classification Using Correlation Information
Zhang, J., Xiang, Y., Wang, Y., Zhou, W., Xiang, Y., & Guan, Y. (2012) · IEEE Transactions on Parallel and Distributed Systems · doi:10.1109/tpds.2012.98 · Cited by 333
Self-citationOffline/realtime traffic classification using semi-supervised learning
Erman, J., Mahanti, A., Arlitt, M., Cohen, I., & Williamson, C. (2007) · Performance Evaluation · doi:10.1016/j.peva.2007.06.014 · Cited by 287
Support Vector Machines for TCP traffic classification
Este, A., Gringoli, F., & Salgarelli, L. (2009) · Computer Networks · doi:10.1016/j.comnet.2009.05.003 · Cited by 270
Bonfiglio, D., Mellia, M., Meo, M., Rossi, D., & Tofanelli, P. (2007) · ACM SIGCOMM Conference (SIGCOMM) · doi:10.1145/1282380.1282386 · Cited by 268
Identifying and discriminating between web and peer-to-peer traffic in the network core
Erman, J., Mahanti, A., Arlitt, M., & Williamson, C. (2007) · Proceedings of the 16th international conference on World Wide Web · doi:10.1145/1242572.1242692 · Cited by 213
Unexpected means of protocol inference
Ma, J., Levchenko, K., Kreibich, C., Savage, S., & Voelker, G. M. (2006) · Proceedings of the 6th ACM SIGCOMM conference on Internet measurement · doi:10.1145/1177080.1177123 · Cited by 204
Early Recognition of Encrypted Applications
Bernaille, L., & Teixeira, R. (2007) · Lecture notes in computer science · doi:10.1007/978-3-540-71617-4_17 · Cited by 200
Timely and Continuous Machine-Learning-Based Classification for Interactive IP Traffic
Nguyen, T. T. T., Armitage, G., Branch, P., & Zander, S. (2012) · IEEE/ACM Transactions on Networking · doi:10.1109/tnet.2012.2187305 · Cited by 156
Internet traffic classification demystified
Lim, Y.-S., Kim, H.-C., Jeong, J., Kim, C.-K., Kwon, T. T., & Choi, Y. (2010) · Proceedings of the 6th International Conference · doi:10.1145/1921168.1921180 · Cited by 125
Thu, T. N. T., & Armitage, G. J. (2006) · Conference on Local Computer Networks · doi:10.1109/lcn.2006.322122 · Cited by 123
Revealing skype traffic: when randomness plays with you
Bonfiglio, D., Mellia, M., Meo, M., Rossi, D., & Tofanelli, P. (2007) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1282427.1282386 · Cited by 112
A Modular Machine Learning System for Flow-Level Traffic Classification in Large Networks
Jin, Y., Duffield, N. G., Erman, J., Haffner, P., Sen, S. B., & Zhang, Z. (2012) · ACM Transactions on Knowledge Discovery from Data · doi:10.1145/2133360.2133364 · Cited by 103
Analysis of the impact of sampling on NetFlow traffic classification
Carela-Español, V., Barlet‐Ros, P., Cabellos‐Aparicio, A., & Solé‐Pareta, J. (2010) · Computer Networks · doi:10.1016/j.comnet.2010.11.002 · Cited by 102
Abacus: Accurate behavioral classification of P2P-TV traffic
Bermolen, P., Mellia, M., Meo, M., Rossi, D., & Valenti, S. (2011) · Computer Networks · doi:10.1016/j.comnet.2010.12.004 · Cited by 67
Better network traffic identification through the independent combination of techniques
Callado, A. C., Kelner, J., Sadok, D. F. H., Kamienski, C., & Fernandes, S. (2010) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2010.02.002 · Cited by 64
Lee, S., Kim, H., Barman, D., Lee, S., Kim, C.-K., Kwon, T. T., & Choi, Y. (2011) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1925861.1925865 · Cited by 46
A novel semi-supervised approach for network traffic clustering
Wang, Y., Xiang, Y., Zhang, J., & Yu, S. (2011) · International Conference on Network and System Security (NSS) · doi:10.1109/icnss.2011.6059997 · Cited by 45
Self-citationAn automatic application signature construction system for unknown traffic
Wang, Y., Xiang, Y., & Yu, S. (2010) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.1603 · Cited by 42
Self-citationEarly Identification of Peer-to-Peer Traffic
Hullár, B., Laki, S., & György, A. (2011) · International Conference on Communications · doi:10.1109/icc.2011.5963023 · Cited by 38
Accurate, Fine-Grained Classification of P2P-TV Applications by Simply Counting Packets
Valenti, S., Rossi, D., Meo, M., Mellia, M., & Bermolen, P. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-01645-5_10 · Cited by 38
SubFlow: Towards practical flow-level traffic classification
Xie, G., Iliofotou, M., Keralapura, R., Faloutsos, M., & Nucci, A. (2012) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infcom.2012.6195649 · Cited by 35
Challenges in network application identification
Tongaonkar, A., Keralapura, R., & Nucci, A. (2012) · USENIX conference on Large-scale exploits and emergent threats · Cited by 32
Classifying internet one-way traffic
Glatz, E., & Dimitropoulos, X. A. (2012) · doi:10.1145/2254756.2254821 · Cited by 30
Mining Unclassified Traffic Using Automatic Clustering Techniques
Finamore, A., Mellia, M., & Meo, M. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-20305-3_13 · Cited by 29
Semi-supervised Encrypted Traffic Classification Using Composite Features Set
Liu, H., Wang, Z., & Wang, Y. (2012) · Journal of Networks · doi:10.4304/jnw.7.8.1195-1200 · Cited by 26
MINETRAC: Mining flows for unsupervised analysis & semi-supervised classification
Casas, P., Mazel, J., & Owezarski, P. (2011) · International Teletraffic Congress · doi:10.5555/2043468.2043483 · Cited by 23
Comparing P2PTV Traffic Classifiers
Cascarano, N., Risso, F., Este, A., Gringoli, F., Salgarelli, L., Finamore, A., & Mellia, M. (2010) · International Conference on Communications · doi:10.1109/icc.2010.5501744 · Cited by 21
P2P traffic identification and optimization using fuzzy c-means clustering
Liu, D., & Lung, C. (2011) · Proceedings of ... IEEE International Conference on Fuzzy Systems · doi:10.1109/fuzzy.2011.6007613 · Cited by 19
Service-based traffic classification: Principles and validation
Baldi, M., Baldini, A., Cascarano, N., & Risso, F. (2009) · IEEE Sarnoff Symposium · doi:10.1109/sarnof.2009.4850330 · Cited by 18
Classifying internet one-way traffic
Glatz, E., & Dimitropoulos, X. A. (2012) · ACM SIGMETRICS Performance Evaluation Review · doi:10.1145/2318857.2254821 · Cited by 11
Research works printed but not linked: 2
- 2008, ?Cisco WAN and application optimization solution guide ?
- erman, 2006, Internet traffic identification using machine learning, Proc IEEE Global Telecommun Conf, 1
Cited by
Sorted by citations
Boutaba, R., Salahuddin, M. A., Limam, N., Ayoubi, S., Shahriar, N., Estrada-Solano, F., & Caicedo, O. M. (2018) · Journal of Internet Services and Applications · doi:10.1186/s13174-018-0087-2 · Cited by 1,036
Network Traffic Classifier With Convolutional and Recurrent Neural Networks for Internet of Things
López‐Martín, M., Carro, B., Sánchez-Esguevillas, A., & Lloret, J. (2017) · IEEE Access · doi:10.1109/access.2017.2747560 · Cited by 772
Deep Learning for Encrypted Traffic Classification: An Overview
Rezaei, S., & Liu, X. (2019) · IEEE Communications Magazine · doi:10.1109/mcom.2019.1800819 · Cited by 670
Machine Learning for Networking: Workflow, Advances and Opportunities
Wang, M., Cui, Y., Wang, X., Xiao, S., & Jiang, J. (2017) · IEEE Network · doi:10.1109/mnet.2017.1700200 · Cited by 448
Deep Learning Based Attack Detection for Cyber-Physical System Cybersecurity: A Survey
Zhang, J., Pan, L., Han, Q., Chen, C., Wen, S., & Xiang, Y. (2021) · IEEE/CAA Journal of Automatica Sinica · doi:10.1109/jas.2021.1004261 · Cited by 450
Self-citation
Metadata
- Authors
- Zhang, J., Chen, X., Xiang, Y., Zhou, W., & Wu, J.
- Affiliations
- Deakin University (AU)
- Temple University (US)
- Venue
- IEEE/ACM Transactions on Networking
- Published
- 2015-08
- Volume
- 23
- Issue
- 4
- Pages
- 1257-1270
- ISSN
- 1063-6692 (ISSN-L)
- 1558-2566
- OpenAlex
- W2161251616
- Cited by
- 391
- References
- 56
- Citations by year
- 2026: 15 · 2025: 26 · 2024: 22 · 2023: 34 · 2022: 38 · 2021: 48 · 2020: 58 · 2019: 54 · 2018: 40 · 2017: 30 · 2016: 18 · 2015: 7
- FWCI
- 18.61
- Type
- journal article
- Language
- en
- Open access
- green
- figshare.com
- Locations
- IEEE/ACM Transactions on Networking (publishedVersion)
- Figshare (submittedVersion, cc-by)
- Swinburne figshare (Swinburne University of Technology) (submittedVersion)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Internet Traffic Analysis and Secure E-voting
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Computer Networks and Communications › Software-Defined Networks and 5G
- Keywords
- network traffic classification, hybrid supervised and unsupervised learning, application identification, parameter optimization, network security, network management
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
