基于流统计特性的网络流量分类算法-北京邮电大学学报.PDFVIP

2008 年 4 月 北 京 邮 电 大 学 学 报 Apr .2008 第 31 卷 第 2期 Journal of Beijing University of Posts and Telecommunications Vol .31 No .2 文章编号 :1007-5321(2008)02-0015-05 基于流统计特性的网络流量分类算法 林 平, 余循宜 , 刘 芳, 雷振明 (北京邮电大学 信息处理与智能技术重点实验室 , 北京 100876) 摘要 :针对传统基于单个流统计特性的网络流量分类算法识别率低、分类算法复杂的问题 ,在分析各类应用协议的 基础上 ,发现了一组易于获取、可有效区分不同业务的网络流量特征 .将这一组特征应用于网络流量分类 ,可以有 效解决以往对等网络(P2P)业务识别率低下的问题 ;同时利用该组特征仅需采用多项逻辑斯谛回归算法即可实现 网络流量的分类 ,较传统流量分类算法有较低的复杂度 .实验结果表明 ,该组特征用于分类还具有较好的泛化特 性 ,只需较少量训练样本即可在较长时间内保持较高的识别率 . 关 键 词 :网络流量分类 ;流 ;统计特征;多项逻辑斯谛回归 中图分类号 :TP393.06 文献标识码 :A A Network Traffic Classification Algorithm Based on Flow Statistical Characteristics LIN Ping , YU Xun-yi , LIU Fang , LEI Zhen-ming (Key Laboratory of Information Processing and Intelligent Technology ,Beijing University of Posts and Telecommunications ,Beijing 100876 ,China) Abstract :Based on analysis of application protocols , a group of multi-flow characteristics with low complexity ,high quality is proposed to mitigate the problem of low recognition rate and high imple- mentation complexity associated with the traditional flow classification algorithms using single flow statistics .These characteristics can effectively identify peer-to-peer (P2P) traffic in network flow clas- sification ,and improve the recognition rate of the traditional algorithms .They also enable the use of multinomial logistic regression algorithm toclassify the network flow ,and reduce the complexity of the traditional algorithms . Experiment results show that the proposed characteristics can achieve good generalization ,and only need a small number of training samples to get a model that