Analyzing the characteristics of application traffic behavior based on chi-square statistics

被引：0
|
作者：
Chen L. [1 ,2 ]
Gong J. [1 ,2 ]
机构：
[1] School of Computer Science and Engineering, Southeast University
[2] Key Laboratory of Computer Network Technology of Jiangsu Province
来源：
Ruan Jian Xue Bao/Journal of Software | 2010年 / 21卷 / 11期
关键词：
Application-level protocol; Behavior characteristic; Chi-square statistics; Network behavior; Packet sampling; Traffic identification;
D O I：
10.3724/SP.J.1001.2010.03747
中图分类号：
学科分类号：
摘要：
Based on the Chi-Square Statistics and Test, this paper proposes a method named ABSA (application behavior significance assessment) to analyze the traffic behavior characteristics of applications. The ABSA method does not focus on any certain applications; in contrast, it aims at providing a quantitative standard for describing the behavior distribution differences among applications, so that the traffic behavior characteristics and their corresponding significances can be determined. The theoretical analysis and experiments results show that 1) ABSA can present the information about characteristics more precisely and copiously to improve the accuracy of application identification; 2) the significance of characteristic is independent of its proportion in sample totals; 3) ABSA can keep the relative significance sequence of behavior characteristics unchanged in a packet sampling environment, which is often used by NetFlow and many other flow information collecting systems to simplify the characteristic re-selecting process when sampling ratio is changed. © by Institute of Software, the Chinese Academy of Sciences. All rights reserved.
引用
收藏
页码：2852 / 2865
页数：13
相关论文
共 21 条
  • [1] Moore A.W., Papagiannaki K., Toward the accurate identification of network applications, Proc. of the PAM 2005, pp. 41-54, (2005)
  • [2] Kim M.S., Won Y.J., Hong J.W.K., Application-Level traffic monitoring and an analysis on IP networks, ETRI Journal, 27, 11, pp. 22-42, (2005)
  • [3] Karagiannis T., Papagiannaki K., Faloutsos M., BLINC: Multilevel traffic classification in the dark, Proc. of the ACM SIGCOMM 2005, pp. 229-240, (2005)
  • [4] Erman J., Arlitt M., Mahanti A., Traffic classification using clustering algorithms, Proc. of the ACM SIGCOMM 2006, pp. 281-286, (2006)
  • [5] Moore A.W., Zuev D., Internet traffic classification using Bayesian analysis techniques, Proc. of the ACM SIGMETRICS 2005, pp. 50-60, (2005)
  • [6] Auld T., Moore A.W., Gull S.F., Bayesian neural networks for Internet traffic classification, IEEE Trans. on Neural Networks, 18, 1, pp. 223-239, (2007)
  • [7] Li W., Canini M., Moore A.W., Bolla R., Efficient application identification and the temporal and spatial stability of classification schema, Computer Networks, 53, 6, pp. 790-809, (2009)
  • [8] Witten I.H., Frank E., Data Mining: Practical Machine Learning Tools and Techniques, (2005)
  • [9] Cisco IOS NetFlow introduction, (2006)
  • [10] Claffy K.C., Internet traffic characterization, (1994)
123