摘要：

网络应用的快速增长导致传统基于端口与有效载荷的网络流量分类方法效率大幅降低,并且目前多数网络流分类方法未考虑流之间的相关性。针对上述问题,基于相关信息提出一种改进的网络流量贝叶斯分类法。利用流包模型反映网络流的相关信息,将非参数核密度估计方法引入贝叶斯分类器中,对分布密度函数进行非参数核密度估计。实验结果表明,与使用核密度估计和流包的分类方法相比,该方法的分类准确率更高。

关键词: 网络流量分类, 朴素贝叶斯分类, 核密度估计, 相关信息, 机器学习

Abstract:

With the rapid growth of network applications,the efficiency of traditional network traffic classification method based on ports and payloads is reduced greatly.Meanwhile,most traffic flow classification methods do not consider the correlation among the flows at present.Aiming at these problems,this paper proposes an improved network traffic Bayes classification method based on correlation information.Flow correlation information is modeled by Bag of Flow(BoF),and a method of nonparametric kernel density estimation applied to the Bayes classifier is introduced.The Bayes classification method is improved by performing the nonparametric kernel density estimation to various types of distribution functions.Experimental results show that this improved method can achieve higher classification accuracy compared with KNB and BoF-NB method.

Key words: network traffic classification, naive Bayes classification, kernel density estimation, correlation information, machine learning

中图分类号: 

• TP393