计算机应用 ›› 2010, Vol. 30 ›› Issue (10): 2653-2655.

• 网络与通信 • 上一篇    下一篇

混合模式的网络流量分类方法

胡婷1,王勇2,陶晓玲3   

  1. 1. 桂林电子科技大学
    2.
    3. 桂林电子科技大学计算机与控制学院
  • 收稿日期:2010-04-21 修回日期:2010-06-28 发布日期:2010-09-21 出版日期:2010-10-01
  • 通讯作者: 胡婷
  • 基金资助:
    国家自然科学基金资助项目

Network traffic classification based on hybrid model

  • Received:2010-04-21 Revised:2010-06-28 Online:2010-09-21 Published:2010-10-01

摘要: 为了更好地满足用户对各类Internet业务服务质量越来越精细的要求,流量分类是网络管理的重要环节之一。通过分析、对比基于端口号匹配、特征字段分析和流统计特征的机器学习分类方法的应用现状及其优缺点,针对单一分类方法存在的分类准确度不高、分类时间长等问题,提出一种混合模式的网络流量分类方案。此方案结合端口号匹配和机器学习分类方法,采用输出结果可视化的自组织映射网络算法实现网络流量在应用层的分类。实验表明,该方案能有效地实现对网络流量应用类型的分类,分类结果可视化效果好。

关键词: 流量分类, 统计特征, 机器学习, 自组织映射

Abstract: In order to satisfy the requirements of users for more and more precise Internet service quality, the traffic classification is an important link in the network management process. Through analyzing and comparing the application situation and the advantages and disadvantages of each classification method by machine learning, which were separately based on port number matching, feature analysis and traffic characteristics, a hybrid model of network traffic classification method was proposed to solve the problems that rely on a single classification method, such as low accuracy, long classification time. This model combined the port number matching with machine learning, and applied Self-Organizing Map (SOM) of which the output result is visual. The experimental result shows that this method can effectively achieve the application type classification of network traffic, and obtain a good visual effect of classification result.

Key words: traffic classification, statistical characteristic, machine learning, Self-Organizing Map (SOM)

中图分类号: