Hybrid Traffic Classification Approach Based on Decision Tree

Date Added: Oct 2009
Format: PDF

Classifying network traffic is very challenging and is still an issue yet to be solved due to the increase of new applications and traffic encryption. In this paper, the authors propose a novel hybrid approach for the network flow classification, in which they first apply the payload signature based classifier to identify the flow applications and unknown flows are then identified by a decision tree based classifier in parallel. They evaluate their approach with over 100 million flows collected over three consecutive days on a large-scale WiFi ISP network and results show the proposed approach successfully classifies all the flows with an accuracy approaching 93%.