Early application identification
Open accessAbstract
The automatic detection of applications associated with network traffic is an essential step for network security and traffic engineering. Unfortunately, simple port-based classification methods are not always efficient and systematic analysis of packet payloads is too slow. Most recent research proposals use flow statistics to classify traffic flows once they are finished, which limit their applicability for online classification. In this paper, we evaluate the feasibility of application identification at the beginning of a TCP connection. Based on an analysis of packet traces collected on eight different networks, we find that it is possible to distinguish the behavior of an application from the observation of the size and the direction of the first few packets of the TCP connection. We apply three techniques to cluster TCP connections: K-Means, Gaussian Mixture Model and spectral clustering. Resulting clusters are used together with assignment and labeling heuristics to design classifiers. We evaluate these classifiers on different packet traces. Our results show that the first four packets of a TCP connection are sufficient to classify known applications with an accuracy over 90% and to identify new applications as unknown with a probability of 60%.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Various classifiers leverage port numbers in conjunction with other techniques to improve the performance of traffic classifiers.
“Nevertheless, various classifiers leverage port numbers in conjunction with other techniques [31,56,244,417] to improve the performance of the traffic classifiers.”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [56]
Cites
Maximum Likelihood from Incomplete Data Via the <i>EM</i> Algorithm
Dempster, A. P., Laird, N. M., & Rubin, D. B. (1977) · Journal of the Royal Statistical Society Series B: Statistical Methodology · doi:10.1111/j.2517-6161.1977.tb01600.x · Cited by 50,444 · see citing works
On Spectral Clustering: Analysis and an algorithm
Ng, A. Y., Jordan, M. I., & Weiss, Y. (2001) · Cited by 8,159 · see citing works
Baum, L. E., Petrie, T., Soules, G., & Weiss, N. (1970) · The Annals of Mathematical Statistics · doi:10.1214/aoms/1177697196 · Cited by 4,299 · see citing works
A fast string searching algorithm
Boyer, R. S., & Moore, J. S. (1977) · Communications of the ACM · doi:10.1145/359842.359859 · Cited by 2,312 · see citing works
Internet traffic classification using bayesian analysis techniques
Moore, A. W., & Zuev, D. V. (2005) · ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems (SIGMETRICS) · doi:10.1145/1064212.1064220 · Cited by 1,216 · see citing works
Karagiannis, T., Papagiannaki, K., & Faloutsos, M. (2005) · ACM SIGCOMM Conference (SIGCOMM) · doi:10.1145/1080091.1080119 · Cited by 997 · see citing works
Traffic classification using clustering algorithms
Erman, J., Arlitt, M. F., & Mahanti, A. (2006) · doi:10.1145/1162678.1162679 · Cited by 712 · see citing works
Traffic classification on the fly
Bernaille, L., Teixeira, R., Akodkenou, I., Soule, A., & Salamatian, K. (2006) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1129582.1129589 · Cited by 585 · see citing works
Self-citationThe changing usage of a mature campus-wide wireless network
Henderson, T., Kotz, D. F., & Abyzov, I. (2004) · Proceedings of the 28th Annual International Conference on Mobile Computing And Networking · doi:10.1145/1023720.1023739 · Cited by 570 · see citing works
Flow Clustering Using Machine Learning Techniques
McGregor, A., Hall, M., Lorier, P., & Brunskill, J. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-24668-8_21 · Cited by 521 · see citing works
Karagiannis, T., Broido, A., Brownlee, N., Claffy, K. C., & Faloutsos, M. (2005) · IEEE Global Telecommunications Conference, 2004. GLOBECOM '04. · doi:10.1109/glocom.2004.1378239 · Cited by 504 · see citing works
Roughan, M., Sen, S., Spatscheck, O., & Duffield, N. (2004) · Proceedings of the 4th ACM SIGCOMM conference on Internet measurement · doi:10.1145/1028788.1028805 · Cited by 494 · see citing works
Clustering Sequences with Hidden Markov Models
Smyth, P. (1996) · Cited by 381 · see citing works
Unexpected means of protocol inference
Ma, J., Levchenko, K., Kreibich, C., Savage, S., & Voelker, G. M. (2006) · Proceedings of the 6th ACM SIGCOMM conference on Internet measurement · doi:10.1145/1177080.1177123 · Cited by 204 · see citing works
Hohn, N., & Veitch, D. (2003) · doi:10.1145/948205.948235 · Cited by 158 · see citing works
Traffic Classification Using a Statistical Approach
Zuev, D., & Moore, A. W. (2005) · Lecture notes in computer science · doi:10.1007/978-3-540-31966-5_25 · Cited by 140 · see citing works
Trajectory Distance Metric Using Hidden Markov Model Based Representation
Porikli, F. (2004) · Cited by 79 · see citing works
New Methods for Spectral Clustering.
Fischer, I., & Poland, J. (2004) · doi:10.71910/supsi.7027 · Cited by 47 · see citing works
Hohn, N., & Veitch, D. (2003) · doi:10.1145/948234.948235 · Cited by 18 · see citing works
A model-based approach to sequence clustering
Binsztok, H., Artières, T., & Gallinari, P. (2004) · HAL (Le Centre pour la Communication Scientifique Directe) · Cited by 6 · see citing works
Flagged first, then by citations
2 of the 22 references couldn’t be matched to a known paper.
Cited by
Sorted by citations
Boutaba, R., Salahuddin, M. A., Limam, N., Ayoubi, S., Shahriar, N., Estrada-Solano, F., & Caicedo, O. M. (2018) · Journal of Internet Services and Applications · doi:10.1186/s13174-018-0087-2 · Cited by 1,036 · see citing works
Issues and future directions in traffic classification
Dainotti, A., Pescape, A., & Claffy, K. (2012) · IEEE Network · doi:10.1109/mnet.2012.6135854 · Cited by 630 · see citing works
Aceto, G., Ciuonzo, D., Montieri, A., & Pescapè, A. (2019) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2019.2899085 · Cited by 525 · see citing works
Internet traffic classification demystified: myths, caveats, and the best practices
Kim, H., Claffy, K., Fomenkov, M., Barman, D., Faloutsos, M., & Lee, K. (2008) · Proceedings of the 2008 ACM CoNEXT Conference on - CONEXT '08 · doi:10.1145/1544012.1544023 · Cited by 485 · see citing works
Traffic classification through simple statistical fingerprinting
Crotti, M., Dusi, M., Gringoli, F., & Salgarelli, L. (2007) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1198255.1198257 · Cited by 396 · see citing works
A Survey on Internet Traffic Identification
Callado, A. C., Kamienski, C., Szabó, G., Gero, B. P., Kelner, J., Fernandes, S., & Sadok, D. (2009) · IEEE Communications Surveys and Tutorials · doi:10.1109/surv.2009.090304 · Cited by 421 · see citing works
MIMETIC: Mobile encrypted traffic classification using multimodal deep learning
Aceto, G., Ciuonzo, D., Montieri, A., & Pescapè, A. (2019) · Computer Networks · doi:10.1016/j.comnet.2019.106944 · Cited by 291 · see citing works
Offline/realtime traffic classification using semi-supervised learning
Erman, J., Mahanti, A., Arlitt, M., Cohen, I., & Williamson, C. (2007) · Performance Evaluation · doi:10.1016/j.peva.2007.06.014 · Cited by 287 · see citing works
Support Vector Machines for TCP traffic classification
Este, A., Gringoli, F., & Salgarelli, L. (2009) · Computer Networks · doi:10.1016/j.comnet.2009.05.003 · Cited by 270 · see citing works
Identifying and discriminating between web and peer-to-peer traffic in the network core
Erman, J., Mahanti, A., Arlitt, M., & Williamson, C. (2007) · Proceedings of the 16th international conference on World Wide Web · doi:10.1145/1242572.1242692 · Cited by 213 · see citing works
Early Recognition of Encrypted Applications
Bernaille, L., & Teixeira, R. (2007) · Lecture notes in computer science · doi:10.1007/978-3-540-71617-4_17 · Cited by 200 · see citing works
Self-citationDISTILLER: Encrypted traffic classification via multimodal multitask deep learning
Aceto, G., Ciuonzo, D., Montieri, A., & Pescapè, A. (2021) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2021.102985 · Cited by 185 · see citing works
Multi-classification approaches for classifying mobile app traffic
Aceto, G., Ciuonzo, D., Montieri, A., & Pescapè, A. (2017) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2017.11.007 · Cited by 181 · see citing works
New Directions in Automated Traffic Analysis
Holland, J., Schmitt, P., Feamster, N., & Mittal, P. (2020) · Conference on Computer and Communications Security · doi:10.1145/3460120.3484758 · Cited by 212 · see citing works
Lashkari, A. H., Kaur, G., & Rahali, A. (2020) · International Conference on Communication and Network Security (ICCNS) · doi:10.1145/3442520.3442521 · Cited by 164 · see citing works
Efficient application identification and the temporal and spatial stability of classification schema
Li, W., Canini, M., Moore, A. W., & Bolla, R. (2008) · Computer Networks · doi:10.1016/j.comnet.2008.11.016 · Cited by 158 · see citing works
A Machine Learning Approach for Efficient Traffic Classification
Li, W., & Moore, A. W. (2007) · 2007 15th International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunication Systems · doi:10.1109/mascots.2007.2 · Cited by 154 · see citing works
Toward effective mobile encrypted traffic classification through deep learning
Aceto, G., Ciuonzo, D., Montieri, A., & Pescapè, A. (2020) · Neurocomputing · doi:10.1016/j.neucom.2020.05.036 · Cited by 147 · see citing works
KISS: Stochastic Packet Inspection Classifier for UDP Traffic
Finamore, A., Mellia, M., Meo, M., & Rossi, D. (2010) · IEEE/ACM Transactions on Networking · doi:10.1109/tnet.2010.2044046 · Cited by 130 · see citing works
A review on machine learning–based approaches for Internet traffic classification
Salman, O., Elhajj, I. H., Kayssi, A., & Chehab, A. (2020) · Annals of Telecommunications · doi:10.1007/s12243-020-00770-7 · Cited by 131 · see citing works
Internet traffic classification demystified
Lim, Y.-S., Kim, H.-C., Jeong, J., Kim, C.-K., Kwon, T. T., & Choi, Y. (2010) · Proceedings of the 6th International Conference · doi:10.1145/1921168.1921180 · Cited by 125 · see citing works
Real-time Video Quality of Experience Monitoring for HTTPS and QUIC
Mazhar, M. H., & Shafiq, Z. (2018) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infocom.2018.8486321 · Cited by 122 · see citing works
Attention-based bidirectional GRU networks for efficient HTTPS traffic classification
Liu, X., You, J., Wu, Y., Li, T., Li, L., Zhang, Z., & Ge, J. (2020) · Information Sciences · doi:10.1016/j.ins.2020.05.035 · Cited by 118 · see citing works
Anonymity Services Tor, I2P, JonDonym: Classifying in the Dark (Web)
Montieri, A., Ciuonzo, D., Aceto, G., & Pescapè, A. (2018) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2018.2804394 · Cited by 116 · see citing works
Byte Segment Neural Network for Network Traffic Classification
Li, R., Xiao, X., Ni, S., Zheng, H.-T., & Xia, S. (2018) · International Workshop on Quality of Service · doi:10.1109/iwqos.2018.8624128 · Cited by 110 · see citing works
Realtime Classification for Encrypted Traffic
Yanai, R. B. , Langberg, M., Peleg, D., & Roditty, L. (2010) · Lecture notes in computer science · doi:10.1007/978-3-642-13193-6_32 · Cited by 107 · see citing works
A Modular Machine Learning System for Flow-Level Traffic Classification in Large Networks
Jin, Y., Duffield, N. G., Erman, J., Haffner, P., Sen, S. B., & Zhang, Z. (2012) · ACM Transactions on Knowledge Discovery from Data · doi:10.1145/2133360.2133364 · Cited by 103 · see citing works
Reviewing Traffic Classification
Valenti, S., Rossi, D., Dainotti, A., Pescapè, A., Finamore, A., & Mellia, M. (2013) · Lecture notes in computer science · doi:10.1007/978-3-642-36784-7_6 · Cited by 103 · see citing works
Analysis of the impact of sampling on NetFlow traffic classification
Carela-Español, V., Barlet‐Ros, P., Cabellos‐Aparicio, A., & Solé‐Pareta, J. (2010) · Computer Networks · doi:10.1016/j.comnet.2010.11.002 · Cited by 102 · see citing works
Conti, M., Mancini, L. V., Spolaor, R., & Verde, N. V. (2015) · ACM Conference on Data and Application Security and Privacy (CODASPY) · doi:10.1145/2699026.2699119 · Cited by 98 · see citing works
A Semantics-Aware Approach to the Automated Network Protocol Identification
Yun, X., Wang, Y., Zhang, Y., & Zhou, Y. (2015) · IEEE/ACM Transactions on Networking · doi:10.1109/tnet.2014.2381230 · Cited by 95 · see citing works
Self-attentive deep learning method for online traffic classification and its interpretability
Xie, G., Li, Q., & Jiang, Y. (2021) · Computer Networks · doi:10.1016/j.comnet.2021.108267 · Cited by 89 · see citing works
On the stability of the information carried by traffic flow features at the packet level
Este, A., Gringoli, F., & Salgarelli, L. (2009) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1568613.1568616 · Cited by 86 · see citing works
Classification of Network Traffic via Packet-Level Hidden Markov Models
Dainotti, A., de Donato, W., Pescapè, A., & Rossi, P. S. (2008) · Globecom · doi:10.1109/glocom.2008.ecp.412 · Cited by 86 · see citing works
Early Classification of Network Traffic through Multi-classification
Dainotti, A., Pescapè, A., & Sansone, C. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-20305-3_11 · Cited by 83 · see citing works
EBSNN: Extended Byte Segment Neural Network for Network Traffic Classification
Xiao, X., Xiao, W., Li, R., Luo, X., Zheng, H.-T., & Xia, S. (2021) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2021.3101311 · Cited by 80 · see citing works
pForest: In-Network Inference with Random ForestsPreprint
Busse-Grawitz, C., Meier, R., Dietmüller, A., Bühler, T., & Vanbever, L. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1909.05680 · Cited by 75 · see citing works
Rule-Based Anomaly Detection on IP Flows
Duffield, N. G., Haffner, P., Krishnamurthy, B., & Ringberg, H. (2009) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infcom.2009.5061947 · Cited by 73 · see citing works
On Internet Traffic Classification: A Two-Phased Machine Learning Approach
Bakhshi, T., & Ghita, B. (2016) · Journal of Computer Networks and Communications · doi:10.1155/2016/2048302 · Cited by 71 · see citing works
Towards self adaptive network traffic classification
Tongaonkar, A., Torres, R. D., Iliofotou, M., Keralapura, R., & Nucci, A. (2014) · Computer Communications · doi:10.1016/j.comcom.2014.03.026 · Cited by 69 · see citing works
Automatic discovery of botnet communities on large-scale communication networks
Lu, W., Tavallaee, M., & Ghorbani, A. A. (2009) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/1533057.1533062 · Cited by 68 · see citing works
SDN/NFV, Machine Learning, and Big Data Driven Network Slicing for 5G
Le, L.-V., Lin, B. P., Tung, L., & Do, S. (2018) · IEEE 5G World Forum (5GWF) · doi:10.1109/5gwf.2018.8516953 · Cited by 68 · see citing works
Abacus: Accurate behavioral classification of P2P-TV traffic
Bermolen, P., Mellia, M., Meo, M., Rossi, D., & Valenti, S. (2011) · Computer Networks · doi:10.1016/j.comnet.2010.12.004 · Cited by 67 · see citing works
Krishnamoorthi, V., Carlsson, N. F., Halepovic, E., & Petajan, E. D. (2017) · ACM Multimedia Systems Conference (MMSys) · doi:10.1145/3083187.3083193 · Cited by 65 · see citing works
NetDiffusion: Network Data Augmentation Through Protocol-Constrained Traffic Generation
Jiang, X., Liu, S., Gember-Jacobson, A., Bhagoji, A. N., Schmitt, P., Bronzino, F., & Feamster, N. (2024) · Proceedings of the ACM on Measurement and Analysis of Computing Systems · doi:10.1145/3639037 · Cited by 69 · see citing works
Ensemble network traffic classification: Algorithm comparison and novel ensemble scheme proposal
Gómez, S. E., Carro, B., Sánchez-Esguevillas, A., & Hernández-Callejo, L. (2017) · Computer Networks · doi:10.1016/j.comnet.2017.07.018 · Cited by 65 · see citing works
Graption: A graph-based P2P traffic classification framework for the internet backbone
Iliofotou, M., Kim, H.-C., Faloutsos, M., Mitzenmacher, M., Pappu, P., & Varghese, G. (2011) · Computer Networks · doi:10.1016/j.comnet.2011.01.020 · Cited by 64 · see citing works
Fine-grained traffic classification with netflow data
Rossi, D., & Valenti, S. (2010) · International Wireless Communications and Mobile Computing Conference (IWCMC) · doi:10.1145/1815396.1815507 · Cited by 63 · see citing works
Traffic identification engine: an open platform for traffic classification
de Donato, W., Pescapè, A., & Dainotti, A. (2014) · IEEE Network · doi:10.1109/mnet.2014.6786614 · Cited by 62 · see citing works
Application traffic classification at the early stage by characterizing application rounds
Huang, N.-F., Jai, G.-Y., Chao, H., Tzang, Y., & Chang, H. (2013) · Information Sciences · doi:10.1016/j.ins.2012.12.039 · Cited by 62 · see citing works
A nonlinear, recurrence-based approach to traffic classification
Palmieri, F., & Fiore, U. (2008) · Computer Networks · doi:10.1016/j.comnet.2008.12.015 · Cited by 61 · see citing works
Exploiting dynamicity in graph-based traffic analysis
Iliofotou, M., Faloutsos, M., & Mitzenmacher, M. (2009) · ACM International Conference on emerging Networking EXperiments and Technologies (CoNEXT) · doi:10.1145/1658939.1658967 · Cited by 61 · see citing works
Challenging statistical classification for operational usage
Pietrzyk, M., Costeux, J., Urvoy-Keller, G., & En-Najjary, T. (2009) · ACM Internet Measurement Conference (IMC) · doi:10.1145/1644893.1644908 · Cited by 57 · see citing works
Exploratory study on Class Imbalance and solutions for Network Traffic Classification
Gómez, S. E., Hernández-Callejo, L., Carro, B., & Sánchez-Esguevillas, A. (2019) · Neurocomputing · doi:10.1016/j.neucom.2018.07.091 · Cited by 55 · see citing works
Quantifying the accuracy of the ground truth associated with Internet traffic traces
Dusi, M., Gringoli, F., & Salgarelli, L. (2010) · Computer Networks · doi:10.1016/j.comnet.2010.11.006 · Cited by 54 · see citing works
Abnormal Traffic Detection: Traffic Feature Extraction and DAE-GAN With Efficient Data Augmentation
Li, Z., Chen, S., Dai, H., Xu, D., Chu, C., & Xiao, B. (2022) · IEEE Transactions on Reliability · doi:10.1109/tr.2022.3204349 · Cited by 53 · see citing works
Regularized Linear Models in Stacked Generalization
Reid, S., & Grudić, G. Z. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-02326-2_12 · Cited by 52 · see citing works
Effective packet number for early stage internet traffic identification
Peng, L., Yang, B., & Chen, Y. (2015) · Neurocomputing · doi:10.1016/j.neucom.2014.12.053 · Cited by 52 · see citing works
Erman, J., Mahanti, A., & Arlitt, M. F. (2007) · doi:10.1145/1269880.1269890 · Cited by 51 · see citing works
Hierarchical learning for fine grained internet traffic classification
Grimaudo, L., Mellia, M., & Baralis, E. (2012) · International Wireless Communications and Mobile Computing Conference (IWCMC) · doi:10.1109/iwcmc.2012.6314248 · Cited by 51 · see citing works
Unconstrained endpoint profiling (googling the internet)
Trestian, I., Ranjan, S., Kuzmanovi, A., & Nucci, A. (2008) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1402946.1402991 · Cited by 51 · see citing works
Identification of Traffic Flows Hiding behind TCP Port 80
Dainotti, A., Gargiulo, F., Kuncheva, L. I., Pescapè, A., & Sansone, C. (2010) · International Conference on Communications · doi:10.1109/icc.2010.5502266 · Cited by 50 · see citing works
Digging into HTTPS: flow-based classification of webmail traffic
Schatzmann, D., Mühlbauer, W., Spyropoulos, T., & Dimitropoulos, X. (2010) · Proceedings of the 10th ACM SIGCOMM conference on Internet measurement · doi:10.1145/1879141.1879184 · Cited by 47 · see citing works
Payload-Based Traffic Classification Using Multi-Layer LSTM in Software Defined Networks
Lim, H.-K., Kim, J.-B., Kim, K., Hong, Y.-G., & Han, Y. (2019) · Applied Sciences · doi:10.3390/app9122550 · Cited by 47 · see citing works
TIE: A Community-Oriented Traffic Classification Platform
Dainotti, A., de Donato, W., & Pescapè, A. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-01645-5_8 · Cited by 47 · see citing works
SeLeCT: Self-Learning Classifier for Internet Traffic
Grimaudo, L., Mellia, M., Baralis, E., & Keralapura, R. (2014) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2014.011714.130505 · Cited by 43 · see citing works
Wire-speed statistical classification of network traffic on commodity hardware
del Río, P. M. S., Rossi, D., Gringoli, F., Nava, L., Salgarelli, L., & Aracil, J. (2012) · ACM Internet Measurement Conference (IMC) · doi:10.1145/2398776.2398784 · Cited by 42 · see citing works
Detection and classification of peer-to-peer traffic
Gomes, J. V., Inácio, P. R. M., Pereira, M., Freire, M. M., & Monteiro, P. P. (2013) · ACM Computing Surveys · doi:10.1145/2480741.2480747 · Cited by 42 · see citing works
Active learning to detect DDoS attack using ranked features
Deka, R. K., Bhattacharyya, D. K., & Kalita, J. K. (2019) · Computer Communications · doi:10.1016/j.comcom.2019.06.010 · Cited by 40 · see citing works
Unconstrained endpoint profiling (googling the internet)
Trestian, I., Ranjan, S., Kuzmanovi, A., & Nucci, A. (2008) · ACM SIGCOMM Conference (SIGCOMM) · doi:10.1145/1402958.1402991 · Cited by 42 · see citing works
Alalousi, A., Othman, R. R., Abualhaj, M. M., Anbar, M., & Nizam, S. (2016) · International Journal of Electrical and Computer Engineering (IJECE) · doi:10.11591/ijece.v6i2.pp778-784 · Cited by 41 · see citing works
Estimating routing symmetry on single links by passive flow measurements
John, W., Dusi, M., & claffy, K. (2010) · International Wireless Communications and Mobile Computing Conference (IWCMC) · doi:10.1145/1815396.1815506 · Cited by 40 · see citing works
Profiling and identification of P2P traffic
Hu, Y., Chiu, D. M., & Lui, J. C. S. (2008) · Computer Networks · doi:10.1016/j.comnet.2008.11.005 · Cited by 39 · see citing works
Real-Time Classification of Multimedia Traffic Using FPGA
Jiang, W., & Gokhale, M. B. (2010) · International Conference on Field Programmable Logic and Applications (FPL) · doi:10.1109/fpl.2010.22 · Cited by 39 · see citing works
Salgarelli, L., Gringoli, F., & Karagiannis, T. (2007) · ACM SIGCOMM Computer Communication Review · doi:10.1145/1273445.1273454 · Cited by 39 · see citing works
Early Identification of Peer-to-Peer Traffic
Hullár, B., Laki, S., & György, A. (2011) · International Conference on Communications · doi:10.1109/icc.2011.5963023 · Cited by 38 · see citing works
Accurate, Fine-Grained Classification of P2P-TV Applications by Simply Counting Packets
Valenti, S., Rossi, D., Meo, M., Mellia, M., & Bermolen, P. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-01645-5_10 · Cited by 38 · see citing works
Breaking and Improving Protocol Obfuscation
Hjelmvik, E., & John, W. (2010) · Chalmers Publication Library (Chalmers University of Technology) · Cited by 37 · see citing works
GGFAST: Automating Generation of Flexible Network Traffic Classifiers
Piet, J., Nwoji, D., & Paxson, V. (2023) · ACM SIGCOMM Conference (SIGCOMM) · doi:10.1145/3603269.3604840 · Cited by 35 · see citing works
SubFlow: Towards practical flow-level traffic classification
Xie, G., Iliofotou, M., Keralapura, R., Faloutsos, M., & Nucci, A. (2012) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infcom.2012.6195649 · Cited by 35 · see citing works
VoIP Traffic Detection in Tunneled and Anonymous Networks Using Deep Learning
Islam, F. U., Liu, G., Zhai, J., & Liu, W. (2021) · IEEE Access · doi:10.1109/access.2021.3073967 · Cited by 35 · see citing works
Fine‐grained traffic classification based on functional separation
Park, B., Won, Y., Chung, J., Kim, M., & Hong, J. W. (2013) · International Journal of Network Management · doi:10.1002/nem.1837 · Cited by 34 · see citing works
Optimizing Deep Packet Inspection for High-Speed Traffic Analysis
Cascarano, N., Ciminiera, L., & Risso, F. (2010) · Journal of Network and Systems Management · doi:10.1007/s10922-010-9181-x · Cited by 34 · see citing works
Deep RNN-based network traffic classification scheme in edge computing system
Kim, K., Lee, J.-H., Lim, H.-K., Oh, S. W., & Han, Y. (2021) · Computer Science and Information Systems · doi:10.2298/csis200424038k · Cited by 34 · see citing works
CUTE: Traffic Classification Using TErms
Yeganeh, S. H., Eftekhar, M., Ganjali, Y., Keralapura, R., & Nucci, A. (2012) · International Conference on Computer Communications and Networks (ICCCN) · doi:10.1109/icccn.2012.6289207 · Cited by 34 · see citing works
Iliofotou, M., Gallagher, B. J., Eliassi‐Rad, T., Xie, G., & Faloutsos, M. (2010) · Proceedings of the 6th International Conference · doi:10.1145/1921168.1921171 · Cited by 33 · see citing works
Challenges and opportunities in securing industrial control systems
Hadžiosmanović, D., Bolzoni, D., Etalle, S., & Hartel, P. (2012) · Complexity in Engineering (COMPENG) · doi:10.1109/compeng.2012.6242970 · Cited by 33 · see citing works
Can We Trust the Inter-Packet Time for Traffic Classification?
Jaber, M., Cascella, R. G., & Barakat, C. (2011) · International Conference on Communications · doi:10.1109/icc.2011.5963024 · Cited by 33 · see citing works
Early Identifying Application Traffic with Application Characteristics
Huang, N.-F., Jai, G.-Y., & Chao, H. (2008) · International Conference on Communications · doi:10.1109/icc.2008.1083 · Cited by 32 · see citing works
Experience with high-speed automated application-identification for network-management
Canini, M., Li, W., Žádník, M., & Moore, A. W. (2009) · ACM/IEEE Symposium on Architectures for Networking and Communications Systems (ANCS) · doi:10.1145/1882486.1882539 · Cited by 32 · see citing works
SLIC: Self-Learning Intelligent Classifier for network traffic
Divakaran, D. M., Su, L., Liau, Y. S., & Thing, V. L. L. (2015) · Computer Networks · doi:10.1016/j.comnet.2015.08.021 · Cited by 32 · see citing works
A Signal Processing View on Packet Sampling and Anomaly Detection
Brauckhoff, D., Salamatian, K., & May, M. (2010) · IEEE Conference on Computer Communications (INFOCOM) · doi:10.1109/infcom.2010.5462154 · Cited by 32 · see citing works
Self-citationA markovian signature-based approach to IP traffic classification
Dahmouni, H., Vaton, S., & Rossé, D. (2007) · doi:10.1145/1269880.1269889 · Cited by 32 · see citing works
On Traffic Characteristics of a Broadband Wireless Internet Access
Pries, R., Wamser, F., Staehle, D., Heck, K., & Tran‐Gia, P. (2009) · Next Generation Internet Networks (NGI) · doi:10.1109/ngi.2009.5175772 · Cited by 31 · see citing works
Early traffic classification using support vector machines
Sena, G. G., & Belzarena, P. (2009) · doi:10.1145/1636682.1636693 · Cited by 31 · see citing works
Chen, J., Song, L., Cai, S., Xie, H., Yin, S., & Ahmad, B. (2023) · ACM Transactions on Privacy and Security · doi:10.1145/3613960 · Cited by 30 · see citing works
Traffic characterization of a residential wireless Internet access
Wamser, F., Pries, R., Staehle, D., Heck, K., & Tran‐Gia, P. (2010) · Telecommunication Systems · doi:10.1007/s11235-010-9324-0 · Cited by 30 · see citing works
Traffic Classification Based on Zero-Length Packets
Kampeas, J., Cohen, A., & Gurewitz, O. (2018) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2018.2825881 · Cited by 30 · see citing works
Per flow packet sampling for high-speed network monitoring
Canini, M., Fay, D., Miller, D. J., Moore, A. W., & Bolla, R. (2009) · doi:10.1109/comsnets.2009.4808888 · Cited by 30 · see citing works
Genetic optimization and hierarchical clustering applied to encrypted traffic identification
Bacquet, C., Zincir-Heywood, N., & Heywood, M. I. (2011) · IEEE Symposium on Computational Intelligence in Cyber Security (CICS) · doi:10.1109/cicybs.2011.5949391 · Cited by 30 · see citing works
- Authors
- Bernaille, L., Teixeira, R., & Salamatian, K.
- Affiliations
- Université Pierre-et-Marie-Curie (FR)
- ORCID
- Teixeira, Renata
- Venue
- Proceedings of the 2006 ACM CoNEXT conference on - CoNEXT '06
- Publisher
- ACM Press
- Published
- 2006
- Pages
- 1
- OpenAlex
- W2055261595
- Cited by
- 374
- References
- 22
- Citations by year
- 2026: 4 · 2025: 5 · 2024: 9 · 2023: 7 · 2022: 12 · 2021: 14 · 2020: 11 · 2019: 10 · 2018: 16 · 2017: 14 · 2016: 10 · 2015: 19 · 2014: 26 · 2013: 32 · 2012: 23
- FWCI
- 19.89
- Type
- conference paper
- Language
- en
- Open access
- green
- inria.hal.science
- Locations
- ACM International Conference on emerging Networking EXperiments and Technologies (CoNEXT) (publishedVersion)
- HAL (submittedVersion, other-oa)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Internet Traffic Analysis and Secure E-voting
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Hardware and Architecture › Network Packet Processing and Optimization
- Keywords
- application identification, TCP connections, network traffic classification, online classification, Gaussian mixture model, spectral clustering, K-means clustering, packet traces, network security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
