Traffic Classification Based on Flow Similarity

Due to the various masquerading strategies adopted by newer P2P applications to avoid detection and filtering, well-known port mapping techniques cannot guarantee their accuracy any more. Alternative approaches, application-signature mapping, behavior-based analysis, and machine learning based classification methods, show more promising accuracy. However, these methods still have complexity issues. This paper provides a new classification method which utilizes cosine similarity between network flows.

• Type: Conference
• Year: 2009
• Where: IPOM
• Authors: Jae Yoon Chung, Byungchul Park, Young J. Won, John Strassner, James W. Hong
• Keywords: Classification Method, Computer Networks, IPOM 2009, Port Mapping Techniques, Various Masquerading Strategies