In this paper, we evaluate the performance of several flow features to classify the network application that produced the flow. Correlating network traffic to network applications can assist with the critical network management tasks of performance assessment and network utilization accounting. Specifically, in this work we evaluate three engineered flow features and three inherent flow features (number of bytes, number of packets, and duration). For engineered features, we evaluate three host communication behavior features proposed by the authors of BLINC. Our experiments uncover the classification power of all combinations of the three engineered features in conjunction with the three inherent features. We utilize supervised machine learning algorithms such as k-nearest neighbors and decision trees. We utilize confidence intervals to uncover statistically significant classification differences among the combinations of flow features.
Access to the requested content is limited to institutions that have purchased or subscribe to SPIE eBooks.
You are receiving this notice because your organization may not have SPIE eBooks access.*
*Shibboleth/Open Athens users─please
sign in
to access your institution's subscriptions.
To obtain this item, you may purchase the complete book in print or electronic format on
SPIE.org.
INSTITUTIONAL Select your institution to access the SPIE Digital Library.
PERSONAL Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.