计算机科学
加密
二元曲线
数据挖掘
交通分类
马尔可夫链
有效载荷(计算)
页眉
隐马尔可夫模型
人工智能
计算机网络
网络数据包
机器学习
三元曲线
作者
Meng Shen,Mingwei Wei,Liehuang Zhu,Mingzhong Wang
标识
DOI:10.1109/tifs.2017.2692682
摘要
With a profusion of network applications, traffic classification plays a crucial role in network management and policy-based security control. The widely used encryption transmission protocols, such as the secure socket layer/transport layer security (SSL/TLS) protocols, lead to the failure of traditional payload-based classification methods. Existing methods for encrypted traffic classification cannot achieve high discrimination accuracy for applications with similar fingerprints. In this paper, we propose an attribute-aware encrypted traffic classification method based on the second-order Markov Chains. We start by exploring approaches that can further improve the performance of existing methods in terms of discrimination accuracy, and make promising observations that the application attribute bigram, which consists of the certificate packet length and the first application data size in SSL/TLS sessions, contributes to application discrimination. To increase the diversity of application fingerprints, we develop a new method by incorporating the attribute bigrams into the second-order homogeneous Markov chains. Extensive evaluation results show that the proposed method can improve the classification accuracy by 29% on the average compared with the state-of-the-art Markov-based method.
科研通智能强力驱动
Strongly Powered by AbleSci AI