A Traffic Classification Method Based on Packet Transport Layer Payload by Ensemble Learning

Network traffic classification is an important research topic for computer network, such as QoS detection and admission monitoring. Traditional classification methods, such as port-based and DPI(deep packet inspect)-based, are out-of-date due to the computational expensiveness and inaccuracy. In this paper, we propose a novel traffic classification approach based on packet transport layer payload by ensemble learning. We use three kinds of base neural networks to form a strong classifier. Each model is trained separately and the final prediction result is decided by weight voting. The raw traffic data are reshaped into the format of sequence and matrix as the input, which avoids the TCP stream feature selection and extraction process. Our approach is applicable to both TCP and UDP, which means that it doesn’t require a distinction between transport layer protocols. The experiment results show that our approach can reach the high accuracy of 96.38%, and is better than the state-of-the-art methods based on the same dataset. Besides, our proposed model can select packet samples randomly avoiding tracing the whole stream and the model works well even there’s packet loss and disorder.

[1]  Bo Yang,et al.  Effective packet number for early stage internet traffic identification , 2015, Neurocomputing.

[2]  Ming Zhu,et al.  Malware traffic classification using convolutional neural network for representation learning , 2017, 2017 International Conference on Information Networking (ICOIN).

[3]  Antonio Pescapè,et al.  Mobile Encrypted Traffic Classification Using Deep Learning , 2018, 2018 Network Traffic Measurement and Analysis Conference (TMA).

[4]  Hamed Haddadi,et al.  Deep Learning in Mobile and Wireless Networking: A Survey , 2018, IEEE Communications Surveys & Tutorials.

[5]  Luis Hernández-Callejo,et al.  Ensemble network traffic classification: Algorithm comparison and novel ensemble scheme proposal , 2017, Comput. Networks.

[6]  Yoshua Bengio,et al.  Gradient-based learning applied to document recognition , 1998, Proc. IEEE.

[7]  Andrew W. Moore,et al.  Internet traffic classification using bayesian analysis techniques , 2005, SIGMETRICS '05.

[8]  Ali A. Ghorbani,et al.  Characterization of Encrypted and VPN Traffic using Time-related Features , 2016, ICISSP.

[9]  Ming Zhu,et al.  End-to-end encrypted traffic classification with one-dimensional convolution neural networks , 2017, 2017 IEEE International Conference on Intelligence and Security Informatics (ISI).

[10]  Dumitru Erhan,et al.  Going deeper with convolutions , 2014, 2015 IEEE Conference on Computer Vision and Pattern Recognition (CVPR).

[11]  Eryk Dutkiewicz,et al.  Time Series Analysis for Encrypted Traffic Classification: A Deep Learning Approach , 2018, 2018 18th International Symposium on Communications and Information Technologies (ISCIT).

[12]  Zhitang Chen,et al.  Seq2Img: A sequence-to-image based approach towards IP traffic classification using convolutional neural networks , 2017, 2017 IEEE International Conference on Big Data (Big Data).

[13]  Ayman I. Kayssi,et al.  Mobile Apps identification based on network flows , 2018, Knowledge and Information Systems.