Granular network traffic classification for streaming traffic using incremental learning and classifier chain

Mohd Zaki, Muhammad Faiz and Afifi, Firdaus and Gani, Abdullah and Juma'at, Nor Badrul Anuar (2022) Granular network traffic classification for streaming traffic using incremental learning and classifier chain. Malaysian Journal of Computer Science, 35 (3). pp. 264-280. ISSN 0127-9084, DOI https://doi.org/10.22452/mjcs.vol35no3.5.

Full text not available from this repository.

Abstract

In modern networks, network visibility is of utmost importance to network operators. Accordingly, granular network traffic classification quickly rises as an essential technology due to its ability to provide high network visibility. Granular network traffic classification categorizes traffic into detailed classes like application names and services. Application names represent parent applications, such as Facebook, while application services are the individual actions within the parent application, such as Facebook-comment. Most studies on granular classification focus on classification at the application name level. Besides that, evaluations in existing studies are also limited and utilize only static and immutable datasets, which are insufficient to reflect the continuous and evolving nature of real -world traffic. Therefore, this paper aims to introduce a granular classification technique, which is evaluated on streaming traffic. The proposed technique implements two Adaptive Random Forest classifiers linked together using a classifier chain to simultaneously produce classification at two granularity levels. Performance evaluation on a streaming testbed setup using Apache Kafka showed that the proposed technique achieved an average F1 score of 99% at the application name level and 88% at the application service level. Additionally, the performance benchmark on ISCX VPN non-VPN public dataset also maintained comparable results, besides recording classification time as low as 2.6 ms per packet. The results conclude that the proposed technique proves its advantage and feasibility for a granular classification in streaming traffic.

Item Type: Article
Funders: Fundamental Research Grant Scheme under the Ministry of Education Malaysia (Grant No: FRGS/1/2018/ICT03/UM/02/3)
Uncontrolled Keywords: Network traffic classification; Streaming traffic; Network management; Incremental learning; Classifier chain; Granular; Encrypted
Subjects: Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Divisions: Faculty of Computer Science & Information Technology > Department of Computer System & Technology
Depositing User: Ms. Juhaida Abd Rahim
Date Deposited: 23 Oct 2023 06:21
Last Modified: 23 Oct 2023 06:21
URI: http://eprints.um.edu.my/id/eprint/41801

Actions (login required)

View Item View Item