Identifying and discriminating between web and peer-to-peer traffic in the network core
Abstract
Traffic classification is the ability to identify and categorize network traffic by application type. In this paper, we consider the problem of traffic classification in the network core.Classification at the core is challenging because only partial information about the flows and their contributors is available. We address this problem by developing a framework that can classify a flow using only unidirectional flow information. We evaluated this approach using recent packet traces that we collected and pre-classified to establish a "base truth". From our evaluation, we find that flow statistics for the server-to-client direction of a TCP connection provide greater classification accuracy than the flow statistics for the client-to-server direction. Because collection of the server-to-client flow statistics may not always be feasible, we developed and validated an algorithm that can estimate the missing statistics froma unidirectional packet trace.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
It is cumbersome to manually maintain and adapt the signatures to the ever growing number of applications and their dynamics.
“Also, it is cumbersome to manually maintain and adapt the signatures to the ever growing number of applications and their dynamics [138].”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [138]
With the rise in security and privacy concerns, payload is often encrypted and its access is prohibited due to privacy laws, making it non-trivial to infer a signature for an application class using payload.
“Furthermore, with the rise in security and privacy concerns, payload is often encrypted and its access is prohibited due to privacy laws.This makes it non-trivial to infer a signature for an application class using payload [54,138].”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [138]
Flow feature-based traffic classification has the potential to overcome numerous limitations of other techniques, such as unregistered port numbers, encrypted packet payload, routing asymmetries, and high storage and computational overhead.
“It has the potential to overcome numerous limitations of other techniques, such as unregistered port numbers, encrypted packet payload, routing asymmetries, high storage and computational overhead [55,138,176,347].”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [138]
It is not always possible to collect bidirectional flows due to routing asymmetries.
“It is not always possible to collect bidirectional flows due to routing asymmetries [138,347].”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [138]
Cites
Jain, A. K., Murty, M. N., & Flynn, P. J. (1999) · ACM Computing Surveys · doi:10.1145/331499.331504 · Cited by 13,532 · see citing works
An Introduction to Variable and Feature Selection.
Guyon, I., & Elisseeff, A. (2003) · Cited by 6,576 · see citing works
Bro: a system for detecting network intruders in real-time
Paxson, V. (1999) · Computer Networks · doi:10.1016/s1389-1286(99)00112-7 · Cited by 2,636 · see citing works
Data mining introductory and advanced topics
Dunham, M. H. (2003) · Cited by 1,447 · see citing works
Cluster analysis for gene expression data: a survey
Jiang, D., Tang, C., & Zhang, A. (2004) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2004.68 · Cited by 1,238 · see citing works
Internet traffic classification using bayesian analysis techniques
Moore, A. W., & Zuev, D. V. (2005) · ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS) · doi:10.1145/1064212.1064220 · Cited by 1,216 · see citing works
Karagiannis, T., Papagiannaki, K., & Faloutsos, M. (2005) · ACM SIGCOMM Conference (SIGCOMM) · doi:10.1145/1080091.1080119 · Cited by 997 · see citing works
Accurate, scalable in-network identification of p2p traffic using application signatures
Sen, S. B., Spatscheck, O., & Wang, D. (2004) · International World Wide Web Conference (WWW) · doi:10.1145/988672.988742 · Cited by 807 · see citing works
Toward the Accurate Identification of Network Applications
Moore, A. W., & Papagiannaki, K. (2005) · Lecture Notes in Computer Science · doi:10.1007/978-3-540-31966-5_4 · Cited by 801 · see citing works
Traffic classification using clustering algorithms
Erman, J., Arlitt, M. F., & Mahanti, A. (2006) · doi:10.1145/1162678.1162679 · Cited by 712 · see citing works
Self-citationTransport layer identification of P2P traffic
Karagiannis, T., Broido, A., Faloutsos, M., & claffy, K. (2004) · ACM Internet Measurement Conference (IMC) · doi:10.1145/1028788.1028804 · Cited by 708 · see citing works
Empirically derived analytic models of wide-area TCP connections
Paxson, V. (1994) · IEEE/ACM Transactions on Networking · doi:10.1109/90.330413 · Cited by 581 · see citing works
Flow Clustering Using Machine Learning Techniques
McGregor, A., Hall, M., Lorier, P., & Brunskill, J. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-24668-8_21 · Cited by 521 · see citing works
Automated traffic classification and application identification using machine learning
Zander, S., Nguyen, T., & Armitage, G. (2005) · The IEEE Conference on Local Computer Networks 30th Anniversary (LCN'05)l · doi:10.1109/lcn.2005.35 · Cited by 517 · see citing works
Karagiannis, T., Broido, A., Brownlee, N., Claffy, K. C., & Faloutsos, M. (2005) · IEEE Global Telecommunications Conference, 2004. GLOBECOM '04. · doi:10.1109/glocom.2004.1378239 · Cited by 504 · see citing works
Roughan, M., Sen, S., Spatscheck, O., & Duffield, N. (2004) · Proceedings of the 4th ACM SIGCOMM conference on Internet measurement · doi:10.1145/1028788.1028805 · Cited by 494 · see citing works
Haffner, P., Sen, S. B., Spatscheck, O., & Wang, D. (2005) · doi:10.1145/1080173.1080183 · Cited by 376 · see citing works
Early application identification
Bernaille, L., Teixeira, R., & Salamatian, K. (2006) · Proceedings of the 2006 ACM CoNEXT conference on - CoNEXT '06 · doi:10.1145/1368436.1368445 · Cited by 374 · see citing works
Estan, C., Keys, K., Moore, D., & Varghese, G. (2004) · ACM SIGCOMM Conference (SIGCOMM) · doi:10.1145/1015467.1015495 · Cited by 359 · see citing works
Profiling internet backbone traffic
Xu, K., Zhang, Z.-L., & Bhattacharyya, S. (2005) · ACM SIGCOMM Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM) · doi:10.1145/1080091.1080112 · Cited by 337 · see citing works
A Longitudinal Study of P2P Traffic Classification
Madhukar, A., & Williamson, C. L. (2006) · doi:10.1109/mascots.2006.6 · Cited by 248 · see citing works
Self-citationProperties and prediction of flow statistics from sampled packet streams
Duffield, N. G., Lund, C., & Thorup, M. (2002) · doi:10.1145/637201.637225 · Cited by 212 · see citing works
What TCP/IP protocol headers can tell us about the web
Smith, F. D., Hernández-Campos, F., Kevin Jeffay, B., & Ott, D. E. (2001) · ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS) · doi:10.1145/378420.378789 · Cited by 181 · see citing works
An analysis of Internet chat systems
Dewes, C., Wichmann, A., & Feldmann, A. (2003) · doi:10.1145/948205.948214 · Cited by 149 · see citing works
Flow sampling under hard resource constraints
Duffield, N. G., Lund, C., & Thorup, M. (2004) · ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS) · doi:10.1145/1005686.1005699 · Cited by 110 · see citing works
QRP05-4: Internet Traffic Identification using Machine Learning
Erman, J., Mahanti, A., & Arlitt, M. F. (2006) · Globecom · doi:10.1109/glocom.2006.443 · Cited by 106 · see citing works
Self-citationSemi-supervised network traffic classification
Erman, J., Mahanti, A., Arlitt, M. F., Cohen, I., & Williamson, C. L. (2007) · ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS) · doi:10.1145/1254882.1254934 · Cited by 93 · see citing works
Self-citationThe Power of Slicing in Internet Flow Measurement
Kompella, R. R., & Estan, C. (2005) · Cited by 55 · see citing works
Content-aware Internet application traffic measurement and analysis
Choi, T., Kim, C., Yoon, S., Park, J., Lee, B. J., Kim, H., Chung, H., & Jeong, T. S. (2004) · IEEE/IFIP Network Operations and Management Symposium (NOMS) · doi:10.1109/noms.2004.1317737 · Cited by 45 · see citing works
Flagged first, then by citations
2 of the 31 references couldn’t be matched to a known paper.
Cited by
Sorted by citations
A survey of techniques for internet traffic classification using machine learning
Nguyen, T. T. T., & Armitage, G. (2008) · IEEE Communications Surveys & Tutorials · doi:10.1109/surv.2008.080406 · Cited by 1,664 · see citing works
Boutaba, R., Salahuddin, M. A., Limam, N., Ayoubi, S., Shahriar, N., Estrada-Solano, F., & Caicedo, O. M. (2018) · Journal of Internet Services and Applications · doi:10.1186/s13174-018-0087-2 · Cited by 1,036 · see citing works
FS-Net: A Flow Sequence Network For Encrypted Traffic Classification
Liu, C., He, L., Xiong, G., Cao, Z., & Li, Z. (2019) · IEEE INFOCOM 2019 - IEEE Conference on Computer Communications · doi:10.1109/infocom.2019.8737507 · Cited by 630 · see citing works
Internet traffic classification demystified: myths, caveats, and the best practices
Kim, H., Claffy, K., Fomenkov, M., Barman, D., Faloutsos, M., & Lee, K. (2008) · Proceedings of the 2008 ACM CoNEXT Conference on - CONEXT '08 · doi:10.1145/1544012.1544023 · Cited by 485 · see citing works
Robust Network Traffic Classification
Zhang, J., Chen, X., Xiang, Y., Zhou, W., & Wu, J. (2015) · IEEE/ACM Transactions on Networking · doi:10.1109/tnet.2014.2320577 · Cited by 391 · see citing works
Silva, S. S. C., Silva, R. M. P., Pinto, R. C. G., & Salles, R. M. (2012) · Computer Networks · doi:10.1016/j.comnet.2012.07.021 · Cited by 364 · see citing works
Network Traffic Classification Using Correlation Information
Zhang, J., Xiang, Y., Wang, Y., Zhou, W., Xiang, Y., & Guan, Y. (2012) · IEEE Transactions on Parallel and Distributed Systems · doi:10.1109/tpds.2012.98 · Cited by 329 · see citing works
Offline/realtime traffic classification using semi-supervised learning
Erman, J., Mahanti, A., Arlitt, M., Cohen, I., & Williamson, C. (2007) · Performance Evaluation · doi:10.1016/j.peva.2007.06.014 · Cited by 287 · see citing works
Self-citationInternet Traffic Classification by Aggregating Correlated Naive Bayes Predictions
Zhang, J., Chen, C., Xiang, Y., Zhou, W., & Xiang, Y. (2013) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2012.2223675 · Cited by 175 · see citing works
Timely and Continuous Machine-Learning-Based Classification for Interactive IP Traffic
Nguyen, T. T. T., Armitage, G., Branch, P., & Zander, S. (2012) · IEEE/ACM Transactions on Networking · doi:10.1109/tnet.2012.2187305 · Cited by 156 · see citing works
Botnet detection techniques: review, future trends, and issues
Karim, A., Salleh, R., Shiraz, M., Shah, S. A. A., Awan, I. U., & Anuar, N. B. (2014) · Frontiers of Information Technology & Electronic Engineering · doi:10.1631/jzus.c1300242 · Cited by 133 · see citing works
A comparative analysis of web and peer-to-peer traffic
Basher, N., Mahanti, A., Mahanti, A., Williamson, C. L., & Arlitt, M. F. (2008) · International World Wide Web Conference (WWW) · doi:10.1145/1367497.1367537 · Cited by 129 · see citing works
Self-citationA review on machine learning–based approaches for Internet traffic classification
Salman, O., Elhajj, I. H., Kayssi, A., & Chehab, A. (2020) · Annals of Telecommunications · doi:10.1007/s12243-020-00770-7 · Cited by 131 · see citing works
Internet traffic classification demystified
Lim, Y.-S., Kim, H.-C., Jeong, J., Kim, C.-K., Kwon, T. T., & Choi, Y. (2010) · Proceedings of the 6th International Conference · doi:10.1145/1921168.1921180 · Cited by 125 · see citing works
An Effective Network Traffic Classification Method with Unknown Flow Detection
Zhang, J., Chen, C., Xiang, Y., Zhou, W., & Vasilakos, A. V. (2013) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2013.022713.120250 · Cited by 125 · see citing works
Bagui, S. S., Fang, X., Kalaimannan, E., Bagui, S., & Sheehan, J. (2017) · Journal of Cyber Security Technology · doi:10.1080/23742917.2017.1321891 · Cited by 111 · see citing works
Reviewing Traffic Classification
Valenti, S., Rossi, D., Dainotti, A., Pescapè, A., Finamore, A., & Mellia, M. (2013) · Lecture notes in computer science · doi:10.1007/978-3-642-36784-7_6 · Cited by 103 · see citing works
Analysis of the impact of sampling on NetFlow traffic classification
Carela-Español, V., Barlet‐Ros, P., Cabellos‐Aparicio, A., & Solé‐Pareta, J. (2010) · Computer Networks · doi:10.1016/j.comnet.2010.11.002 · Cited by 102 · see citing works
Taurus: a data plane architecture for per-packet ML
Swamy, T., Rucker, A., Shahbaz, M., Gaur, I., & Olukotun, K. (2022) · International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS) · doi:10.1145/3503222.3507726 · Cited by 98 · see citing works
Semi-supervised network traffic classification
Erman, J., Mahanti, A., Arlitt, M. F., Cohen, I., & Williamson, C. L. (2007) · ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS) · doi:10.1145/1254882.1254934 · Cited by 93 · see citing works
Self-citationToward an efficient and scalable feature selection approach for internet traffic classification
Fahad, A., Tari, Z., Khalil, I., Habib, I., & Alnuweiri, H. (2013) · Computer Networks · doi:10.1016/j.comnet.2013.04.005 · Cited by 89 · see citing works
In-Network Machine Learning Using Programmable Network Devices: A Survey
Zheng, C., Hong, X., Ding, D., Vargaftik, S., Ben-Itzhak, Y., & Zilberman, N. (2023) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2023.3344351 · Cited by 90 · see citing works
Ranking web sites with real user traffic
Meiss, M., Menczer, F., Fortunato, S., Flammini, A., & Vespignani, A. (2008) · ACM International Conference on Web Search and Data Mining (WSDM) · doi:10.1145/1341531.1341543 · Cited by 83 · see citing works
Unsupervised traffic classification using flow statistical properties and IP packet payload
Zhang, J., Xiang, Y., Zhou, W., & Wang, Y. (2012) · Journal of Computer and System Sciences · doi:10.1016/j.jcss.2012.11.004 · Cited by 84 · see citing works
ATVITSC: A Novel Encrypted Traffic Classification Method Based on Deep Learning
Liu, Y., Wang, X., Qu, B., & Zhao, F. (2024) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2024.3433446 · Cited by 75 · see citing works
On Internet Traffic Classification: A Two-Phased Machine Learning Approach
Bakhshi, T., & Ghita, B. (2016) · Journal of Computer Networks and Communications · doi:10.1155/2016/2048302 · Cited by 71 · see citing works
Wang, Y., Xiang, Y., Zhou, W., & Yu, S. (2011) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2011.03.017 · Cited by 69 · see citing works
A new approach for internet traffic classification: GA-WK-ELM
Ertam, F., & Avcı, E. (2016) · Measurement · doi:10.1016/j.measurement.2016.10.001 · Cited by 69 · see citing works
Abacus: Accurate behavioral classification of P2P-TV traffic
Bermolen, P., Mellia, M., Meo, M., Rossi, D., & Valenti, S. (2011) · Computer Networks · doi:10.1016/j.comnet.2010.12.004 · Cited by 67 · see citing works
Krishnamoorthi, V., Carlsson, N. F., Halepovic, E., & Petajan, E. D. (2017) · ACM Multimedia Systems Conference (MMSys) · doi:10.1145/3083187.3083193 · Cited by 65 · see citing works
THE DYNAMICS OF INTERNET TRAFFIC: SELF-SIMILARITY, SELF-ORGANIZATION, AND COMPLEX PHENOMENAPreprint
Smith, R. D. (2009) · Cited by 65 · see citing works
Anomaly detection in traffic using L1-norm minimization extreme learning machine
Wang, Y., Li, D., Du, Y., & Pan, Z. (2014) · Neurocomputing · doi:10.1016/j.neucom.2014.04.073 · Cited by 61 · see citing works
Exploiting dynamicity in graph-based traffic analysis
Iliofotou, M., Faloutsos, M., & Mitzenmacher, M. (2009) · ACM International Conference on emerging Networking EXperiments and Technologies (CoNEXT) · doi:10.1145/1658939.1658967 · Cited by 61 · see citing works
Procedures, Criteria, and Machine Learning Techniques for Network Traffic Classification: A Survey
Sheikh, M. S., & Peng, Y. (2022) · IEEE Access · doi:10.1109/access.2022.3181135 · Cited by 59 · see citing works
Semi-supervised network traffic classification
Erman, J., Mahanti, A., Arlitt, M. F., Cohen, I., & Williamson, C. L. (2007) · ACM SIGMETRICS Performance Evaluation Review · doi:10.1145/1269899.1254934 · Cited by 52 · see citing works
Self-citationErman, J., Mahanti, A., & Arlitt, M. F. (2007) · doi:10.1145/1269880.1269890 · Cited by 51 · see citing works
Self-citationNakao, A., & Du, P. (2018) · IEICE Transactions on Communications · doi:10.1587/transcom.2017cqi0002 · Cited by 51 · see citing works
Fahad, A., Tari, Z., Khalil, I., Almalawi, A., & Zomaya, A. Y. (2013) · Future Generation Computer Systems · doi:10.1016/j.future.2013.09.015 · Cited by 50 · see citing works
Payload-Based Traffic Classification Using Multi-Layer LSTM in Software Defined Networks
Lim, H.-K., Kim, J.-B., Kim, K., Hong, Y.-G., & Han, Y. (2019) · Applied Sciences · doi:10.3390/app9122550 · Cited by 47 · see citing works
Yang, Y., Yan, Y., Gao, Z., Rui, L., Lyu, R., Gao, B., & Yu, P. (2023) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2023.3262246 · Cited by 46 · see citing works
Detection and classification of peer-to-peer traffic
Gomes, J. V., Inácio, P. R. M., Pereira, M., Freire, M. M., & Monteiro, P. P. (2013) · ACM Computing Surveys · doi:10.1145/2480741.2480747 · Cited by 42 · see citing works
Browser Fingerprinting from Coarse Traffic Summaries: Techniques and Implications
Yen, T.-F., Huang, X., Monrose, F., & Reiter, M. K. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-02918-9_10 · Cited by 39 · see citing works
State of the Art in Traffic Classification: A Research Review
Zhang, M., John, W., claffy, K., & Brownlee, N. (2009) · Cited by 38 · see citing works
On the efficiency of collaborative caching in ISP-aware P2P networks
Dai, J., Li, B., Liu, F., Li, B., & Jin, H. (2011) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infcom.2011.5934903 · Cited by 35 · see citing works
What's in a Session: Tracking Individual Behavior on the WebPreprint
Meiss, M., Duncan, J. F., Gonçalves, B., Ramasco, J. J., & Menczer, F. (2010) · arXiv (Cornell University) · doi:10.48550/arxiv.1003.5325 · Cited by 35 · see citing works
Fine‐grained traffic classification based on functional separation
Park, B., Won, Y., Chung, J., Kim, M., & Hong, J. W. (2013) · International Journal of Network Management · doi:10.1002/nem.1837 · Cited by 34 · see citing works
Real-Time Traffic Classification Based on Statistical and Payload Content Features
Dehghani, F., Movahhedinia, N., Khayyambashi, M. R., & Kianian, S. (2010) · International Workshop on Intelligent Systems and Applications (ISA) · doi:10.1109/iwisa.2010.5473467 · Cited by 34 · see citing works
Optimizing Deep Packet Inspection for High-Speed Traffic Analysis
Cascarano, N., Ciminiera, L., & Risso, F. (2010) · Journal of Network and Systems Management · doi:10.1007/s10922-010-9181-x · Cited by 34 · see citing works
Deep RNN-based network traffic classification scheme in edge computing system
Kim, K., Lee, J.-H., Lim, H.-K., Oh, S. W., & Han, Y. (2021) · Computer Science and Information Systems · doi:10.2298/csis200424038k · Cited by 34 · see citing works
Iliofotou, M., Gallagher, B. J., Eliassi‐Rad, T., Xie, G., & Faloutsos, M. (2010) · Proceedings of the 6th International Conference · doi:10.1145/1921168.1921171 · Cited by 33 · see citing works
Network traffic application identification based on message size analysis
Hajjar, A. F., Khalife, J., & Dı́az-Verdejo, J. E. (2015) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2015.10.003 · Cited by 32 · see citing works
Genetic optimization and hierarchical clustering applied to encrypted traffic identification
Bacquet, C., Zincir-Heywood, N., & Heywood, M. I. (2011) · IEEE Symposium on Computational Intelligence in Cyber Security (CICS) · doi:10.1109/cicybs.2011.5949391 · Cited by 30 · see citing works
TrojanFlow: A Neural Backdoor Attack to Deep Learning-based Network Traffic Classifiers
Ning, R., Xin, C., & Wu, H. (2022) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infocom48880.2022.9796878 · Cited by 29 · see citing works
VoIP traffic classification in IPSec tunnels
Yildirim, T., & Radcliffe, P. (2010) · International Conference on Electronics and Information Engineering · doi:10.1109/iceie.2010.5559900 · Cited by 29 · see citing works
K-Dimensional Trees for Continuous Traffic Classification
Carela-Español, V., Barlet‐Ros, P., Solé-Simó, M., Dainotti, A., de Donato, W., & Pescapè, A. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-12365-8_11 · Cited by 28 · see citing works
Clustering to Assist Supervised Machine Learning for Real-Time IP Traffic Classification
Nguyen, T. T. T., & Armitage, G. (2008) · International Conference on Communications · doi:10.1109/icc.2008.1095 · Cited by 28 · see citing works
Few-shot encrypted traffic classification via multi-task representation enhanced meta-learning
Yang, C., Xiong, G., Zhang, Q., Shi, J., Gou, G., Li, Z., & Liu, C. (2023) · Computer Networks · doi:10.1016/j.comnet.2023.109731 · Cited by 27 · see citing works
Early Online Classification of Encrypted Traffic Streams using Multi-fractal Features
Areström, E., & Carlsson, N. F. (2019) · IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS) · doi:10.1109/infcomw.2019.8845127 · Cited by 27 · see citing works
Nfsight: netflow-based network awareness tool
Berthier, R., Cukier, M., Hiltunen, M. A., Kormann, D., Vesonder, G., & Sheleheda, D. (2010) · Cited by 24 · see citing works
Encrypted Traffic Classification Based on an Improved Clustering Algorithm
Zhang, M., Zhang, H., Zhang, B., & Lü, G. (2013) · Communications in computer and information science · doi:10.1007/978-3-642-35795-4_16 · Cited by 23 · see citing works
P2P and P2P botnet traffic classification in two stages
Ye, W., & Cho, K. (2015) · Soft Computing · doi:10.1007/s00500-015-1863-6 · Cited by 23 · see citing works
A predictive load balancing technique for software defined networked cloud services
Yang, C., Chen, S.-T., Liu, J., Su, Y.-W., Puthal, D., & Ranjan, R. K. (2018) · Computing · doi:10.1007/s00607-018-0665-y · Cited by 23 · see citing works
Meiss, M., Duncan, J. F., Gonçalves, B., Ramasco, J. J., & Menczer, F. (2009) · ACM Conference on Hypertext and Social Media (HT) · doi:10.1145/1557914.1557946 · Cited by 23 · see citing works
Inferring undesirable behavior from P2P traffic analysis
Torres, R. D., Hajjat, M. Y., Rao, S., Mellia, M., & Munafò, M. M. (2009) · ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS) · doi:10.1145/1555349.1555353 · Cited by 22 · see citing works
An Experimental Evaluation of the Computational Cost of a DPI Traffic Classifier
Cascarano, N., Este, A., Gringoli, F., Risso, F., & Salgarelli, L. (2009) · Globecom · doi:10.1109/glocom.2009.5425469 · Cited by 22 · see citing works
An optimal deployable bandwidth aggregation system
Habak, K., Youssef, M. A., & Harras, K. A. (2013) · Computer Networks · doi:10.1016/j.comnet.2013.07.012 · Cited by 21 · see citing works
Luo, P., Chu, J., & Yang, G. (2023) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2023.103519 · Cited by 21 · see citing works
Unknown network protocol classification method based on semi-supervised learning
Lin, R., Li, O., Li, Q., & Liu, Y. (2015) · IEEE International Conference on Computer and Communications (ICCC) · doi:10.1109/compcomm.2015.7387586 · Cited by 21 · see citing works
Internet Traffic Classification Using DBSCAN
Yang, C., Wang, F., & Huang, B. (2009) · WASE International Conference on Information Engineering · doi:10.1109/icie.2009.97 · Cited by 21 · see citing works
Network traffic classification based on semi-supervised clustering
Lin, G.-Z., Xin, Y., Niu, X., & JIANG, H.-B. (2010) · 中国邮电高校学报:英文版 · doi:10.1016/s1005-8885(09)60577-x · Cited by 20 · see citing works
Taurus: An Intelligent Data Plane.Preprint
Swamy, T., Rucker, A., Shahbaz, M., & Olukotun, K. (2020) · arXiv (Cornell University) · Cited by 20 · see citing works
AN-Net: an Anti-Noise Network for Anonymous Traffic Classification
Deng, X.-W., Wang, Y.-J., & Xue, Z. (2024) · The Web Conference · doi:10.1145/3589334.3645691 · Cited by 22 · see citing works
Going Beyond DiffServ in IP Traffic Classification
Aureli, D., Cianfrani, A., Diamanti, A., Vílchez, J. M. S., & Secci, S. (2020) · IEEE/IFIP Network Operations and Management Symposium (NOMS) · doi:10.1109/noms47738.2020.9110430 · Cited by 19 · see citing works
Traffic Classification Based on Flow Similarity
Chung, J. Y., Park, B., Won, Y. J., Strassner, J., & Hong, J. W. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-04968-2_6 · Cited by 19 · see citing works
Network application profiling with traffic causality graphs
Asai, H., Fukuda, K., Abry, P., Borgnat, P., & Esaki, H. (2014) · International Journal of Network Management · doi:10.1002/nem.1865 · Cited by 18 · see citing works
Machine Learning and Its Applicability in Networking
Jain, A., & Nayyar, A. (2020) · Apple Academic Press eBooks · doi:10.1201/9781003007210-3 · Cited by 17 · see citing works
The Performance of a Bare Machine Email Server
Ford, G. H., Karne, R. K., Wijesinha, A. L., & Appiah-Kubi, P. (2009) · International Symposium on Computer Architecture and High Performance Computing (SBAC-PAD) · doi:10.1109/sbac-pad.2009.11 · Cited by 17 · see citing works
Impact of Asymmetric Routing on Statistical Traffic Classification
Crotti, M., Gringoli, F., & Salgarelli, L. (2009) · Globecom · doi:10.1109/glocom.2009.5426255 · Cited by 17 · see citing works
Network Traffic Analysis for Android Malware Detection
de la Puerta, J. G., Pastor-López, I., Sanz, B., & Bringas, P. G. (2019) · Lecture notes in computer science · doi:10.1007/978-3-030-29859-3_40 · Cited by 16 · see citing works
Iterative-tuning support vector machine for network traffic classification
Hong, Y., Huang, C., Nandy, B., & Seddigh, N. (2015) · IFIP/IEEE International Symposium on Integrated Network Management (IM) · doi:10.1109/inm.2015.7140323 · Cited by 16 · see citing works
Liao, L. X., Chao, H., & Chen, M. (2020) · Journal of Parallel and Distributed Computing · doi:10.1016/j.jpdc.2020.07.008 · Cited by 16 · see citing works
Detecting VoIP Traffic Based on Human Conversation Patterns
Wu, C., Chen, K.-T., Chang, Y.-C., & Lei, C. (2008) · Lecture notes in computer science · doi:10.1007/978-3-540-89054-6_14 · Cited by 15 · see citing works
A two‐layer model for improving the energy efficiency of file sharing peer‐to‐peer networks
Paolo Trunfio, A. (2014) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.3213 · Cited by 15 · see citing works
Explaining Class-of-Service Oriented Network Traffic Classification with Superfeatures
Chowdhury, S., Liang, B., & Tizghadam, A. (2019) · doi:10.1145/3359992.3366767 · Cited by 15 · see citing works
Intelligent Network Slicing With Edge Computing for Internet of Vehicles
Du, P., Nakao, A., Zhong, L., & Onishi, R. (2021) · IEEE Access · doi:10.1109/access.2021.3112210 · Cited by 15 · see citing works
Network traffic classification based on ensemble learning and co-training
He, H., Luo, X., Ma, F., Che, C., & Wang, J. (2009) · Science in China Series F Information Sciences · doi:10.1007/s11432-009-0050-8 · Cited by 15 · see citing works
OPERETTA: An optimal energy efficient bandwidth aggregation system
Habak, K., Harras, K. A., & Youssef, M. A. (2012) · IEEE International Conference on Sensing, Communication, and Networking (SECON) · doi:10.1109/secon.2012.6275768 · Cited by 14 · see citing works
What Goes Around Comes Around: Mobile Bandwidth Sharing and Aggregation
Habak, K., Harras, K. A., & Youssef, M. A. (2015) · IEEE International Conference on Mobile Ad-Hoc and Sensor Systems (MASS) · doi:10.1109/mass.2015.42 · Cited by 14 · see citing works
Asai, H., Fukuda, K., & Esaki, H. (2011) · International Teletraffic Congress · doi:10.5555/2043468.2043484 · Cited by 14 · see citing works
Improving cost and accuracy of DPI traffic classifiers
Cascarano, N., Ciminiera, L., & Risso, F. (2010) · ACM Symposium on Applied Computing · doi:10.1145/1774088.1774223 · Cited by 13 · see citing works
Detecting Stealthy Malware Using Behavioral Features in Network Traffic
Yen, T.-F. (2011) · Cited by 12 · see citing works
Traffic classification for managing Applications’ networking profiles
Alizadeh, H., & Zúquete, A. (2016) · Security and Communication Networks · doi:10.1002/sec.1516 · Cited by 12 · see citing works
Multilayer Feedforward Neural Network for Internet Traffic Classification.
Manju, N., Harish, B. S., & Nagadarshan, N. (2019) · International Journal of Interactive Multimedia and Artificial Intelligence · doi:10.9781/ijimai.2019.11.002 · Cited by 12 · see citing works
Fault diagnosis in DSL networks using support vector machines
Marnerides, A. K., Malinowski, S., Morla, R., & Kim, H. S. (2015) · Computer Communications · doi:10.1016/j.comcom.2015.01.006 · Cited by 12 · see citing works
An efficient hybrid deep learning approach for internet security
Ertam, F. (2019) · Physica A Statistical Mechanics and its Applications · doi:10.1016/j.physa.2019.122492 · Cited by 12 · see citing works
DBAS: A Deployable Bandwidth Aggregation System
Habak, K., Youssef, M. A., & Harras, K. A. (2012) · IFIP International Conference on New Technologies, Mobility and Security (NTMS) · doi:10.1109/ntms.2012.6208735 · Cited by 11 · see citing works
Timely Classification and Verification of Network Traffic Using Gaussian Mixture Models
Alizadeh, H., Vranken, H., Zúquete, A., & Miri, A. (2020) · IEEE Access · doi:10.1109/access.2020.2992556 · Cited by 11 · see citing works
Streaming Video Classification Using Machine Learning
Shaout, A., & Crispin, B. (2020) · The International Arab Journal of Information Technology · doi:10.34028/iajit/17/4a/13 · Cited by 11 · see citing works
Improve Flow Accuracy and Byte Accuracy in Network Traffic Classification
He, H., Che, C., Ma, F., Luo, X., & Wang, J. (2008) · Lecture notes in computer science · doi:10.1007/978-3-540-85984-0_54 · Cited by 11 · see citing works
OSCAR: A Collaborative Bandwidth Aggregation SystemPreprint
Habak, K., Harras, K. A., & Youssef, M. A. (2014) · arXiv (Cornell University) · doi:10.48550/arxiv.1401.1258 · Cited by 10 · see citing works
- Authors
- Erman, J., Mahanti, A., Arlitt, M., & Williamson, C.
- Affiliations
- University of Calgary (CA)
- Venue
- Proceedings of the 16th international conference on World Wide Web
- Publisher
- ACM
- Published
- 2007-05-08
- Pages
- 883-892
- OpenAlex
- W2120955848
- Cited by
- 213
- References
- 31
- Citations by year
- 2026: 3 · 2025: 4 · 2024: 5 · 2023: 7 · 2022: 7 · 2021: 7 · 2020: 12 · 2019: 10 · 2018: 3 · 2017: 3 · 2016: 6 · 2015: 10 · 2014: 12 · 2013: 21 · 2012: 21
- FWCI
- 13.86
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- International World Wide Web Conference (WWW) (publishedVersion)
- Funders
- Natural Sciences and Engineering Research Council of Canada
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Internet Traffic Analysis and Secure E-voting
- Physical Sciences › Computer Science › Hardware and Architecture › Network Packet Processing and Optimization
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Keywords
- network traffic classification, website traffic, peer-to-peer traffic, core network, packet traces
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review