Network traffic classification based on periodic behavior detection

Result code in IS VaVaI

<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F63839172%3A_____%2F22%3A10133487" target="_blank" >RIV/63839172:_____/22:10133487 - isvavai.cz</a>

Alternative codes found

RIV/68407700:21240/22:00361521

Result on the web

<a href="http://dx.doi.org/10.23919/CNSM55787.2022.9964556" target="_blank" >http://dx.doi.org/10.23919/CNSM55787.2022.9964556</a>

DOI - Digital Object Identifier

<a href="http://dx.doi.org/10.23919/CNSM55787.2022.9964556" target="_blank" >10.23919/CNSM55787.2022.9964556</a>

Result language

angličtina

Original language name

Network traffic classification based on periodic behavior detection

Original language description

Even though encryption hides the content of communication from network monitoring and security systems, this paper shows a feasible way to retrieve useful information about the observed traffic. The paper deals with detection of periodic behavioral patterns of the communication that can be detected using time series created from network traffic by autocorrelation function and Lomb-Scargle periodogram. The revealed characteristics of the periodic behavior can be further exploited to recognize particular applications. We have experimented with the created dataset of 61 classes, and trained a machine learning classifier based on XGBoost that performed the best in our experiments, reaching 90% F1-score.

Czech name

—

Czech description

—

Type

D - Article in proceedings

CEP classification

—

OECD FORD branch

10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)

Project

<a href="/en/project/VJ02010024" target="_blank" >VJ02010024: Flow-based Encrypted Traffic Analysis</a><br>

Continuities

P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year

2022

Confidentiality

S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Article name in the collection

2022 18th International Conference on Network and Service Management (CNSM)

ISBN

978-3-903176-51-5

ISSN

2165-963X

e-ISSN

—

Number of pages

5

Pages from-to

359-363

Publisher name

IEEE

Place of publication

Neuveden

Event location

Thessaloniki, Greece

Event date

Oct 31, 2022

Type of event by nationality

WRD - Celosvětová akce

UT code for WoS article

000903721000048