Technical reports

Network traffic classification via neural networks

Ang Kun Joo Michael, Emma Valla, Natinael Solomon Neggatu, Andrew W. Moore

September 2017, 25 pages

DOI: 10.48456/tr-912

Abstract

The importance of network traffic classification has grown over the last decade. Coupled with advances in software and theory, the range of classification techniques has also increased. Network operators can predict demands in future traffic to high accuracy and better identify anomalous behavior. Multiple machine learning tools have been developed in this field and each have had varying degrees of success. In this paper we use supervised machine learning within a frequentist neural network to develop a model capable of achieving high classification accuracy and maintaining low system throughput. We will compare our model to previous work on Bayesian neural networks and other standard classification techniques in the context of real-time classification. The spatial and temporal stabilities of the different models will also be compared. Finally, we investigate the relationship between the convergence times of each model and the size of training dataset. Emphasis will be placed on experimental design and methodology to adequately justify and contextualize our analysis, as well as clarify the limitations of our results. Challenges in the field and areas for further work will also be discussed.

Full text

PDF (0.8 MB)

BibTeX record

@TechReport{UCAM-CL-TR-912,
  author =	 {Michael, Ang Kun Joo and Valla, Emma and Neggatu, Natinael
          	  Solomon and Moore, Andrew W.},
  title = 	 {{Network traffic classification via neural networks}},
  year = 	 2017,
  month = 	 sep,
  url = 	 {https://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-912.pdf},
  institution =  {University of Cambridge, Computer Laboratory},
  doi = 	 {10.48456/tr-912},
  number = 	 {UCAM-CL-TR-912}
}