OASIcs.KiVS.2011.61.pdf
- Filesize: 1.06 MB
- 12 pages
Document
Improving Markov-based TCP Traffic Classification
Authors
-
Part of:
Volume:
17th GI/ITG Conference on Communication in Distributed Systems (KiVS 2011)
Series: Open Access Series in Informatics (OASIcs) - License:
Creative Commons Attribution-NonCommercial-NoDerivs 3.0 Unported license
- Publication Date: 2011-02-25
Cite AsGet BibTex
Gerhard Münz, Stephan Heckmüller, Lothar Braun, and Georg Carle. Improving Markov-based TCP Traffic Classification. In 17th GI/ITG Conference on Communication in Distributed Systems (KiVS 2011). Open Access Series in Informatics (OASIcs), Volume 17, pp. 61-72, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2011)
https://doi.org/10.4230/OASIcs.KiVS.2011.61
https://doi.org/10.4230/OASIcs.KiVS.2011.61
Abstract
This paper presents an improved variant of our Markov-based TCP traffic classifier and demonstrates its performance using traffic captured in a university network. Payload length, flow direction, and position of the first data packets of a TCP connection are reflected in the states of the Markov models. In addition, we integrate a new "end of connection" state to further improve the classification accuracy. Using 10-fold cross validation, we identify appropriate settings for the payload length intervals and the number of data packets considered in the models. Finally, we discuss the classification results for the different applications.
Keywords
- Markov model
- TCP Traffic Classification
- network
Metrics
- Access Statistics
-
Total Accesses (updated on a weekly basis)
0PDF Downloads