Inferring applications at the network layer using collective traffic statistics

Yu Jin, Nick Duffield, Patrick Haffner, Subhabrata Sen, Zhi-Li Zhang

Research output: Chapter in Book/Report/Conference proceedingConference contribution

4 Scopus citations

Abstract

In this paper, we propose a novel technique for inferring the distribution of application classes present in the aggregated traffic flows between endpoints, which exploits both the statistics of the traffic flows, and the spatial distribution of those flows across the network. Our method employs a two-step supervised model, where the boot-strapping step provides initial (inaccurate) inference on the traffic application classes, and the graph-based calibration step adjusts the initial inference through the collective spatial traffic distribution. In evaluations using real traffic flow measurements from a large ISP, we show how our method can accurately classify application types within aggregate traffic between endpoints, even without the knowledge of ports and other traffic features. While the bootstrap estimate classifies the aggregates with 80% accuracy, incorporating spatial distributions through calibration increases the accuracy to 92%, i.e., roughly halving the number of errors.

Original languageEnglish (US)
Title of host publicationSIGMETRICS'10 - Proceedings of the 2010 ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems
Pages351-352
Number of pages2
Edition1 SPEC. ISSUE
DOIs
StatePublished - Jul 30 2010
Event2010 ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems, SIGMETRICS'10 - New York, NY, United States
Duration: Jun 14 2010Jun 18 2010

Publication series

NamePerformance Evaluation Review
Number1 SPEC. ISSUE
Volume38
ISSN (Print)0163-5999

Conference

Conference2010 ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems, SIGMETRICS'10
CountryUnited States
CityNew York, NY
Period6/14/106/18/10

Keywords

  • Design
  • Measurement

Fingerprint Dive into the research topics of 'Inferring applications at the network layer using collective traffic statistics'. Together they form a unique fingerprint.

  • Cite this

    Jin, Y., Duffield, N., Haffner, P., Sen, S., & Zhang, Z-L. (2010). Inferring applications at the network layer using collective traffic statistics. In SIGMETRICS'10 - Proceedings of the 2010 ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems (1 SPEC. ISSUE ed., pp. 351-352). (Performance Evaluation Review; Vol. 38, No. 1 SPEC. ISSUE). https://doi.org/10.1145/1811099.1811082