Active Learning for Network Traffic Classification: A Technical Study

  title={Active Learning for Network Traffic Classification: A Technical Study},
  author={Amin Shahraki and Mahmoud Abbasi and Amirhosein Taherkordi and Anca Delia Jurcut},
  journal={IEEE Transactions on Cognitive Communications and Networking},
Network Traffic Classification (NTC) has become an important feature in various network management operations, e.g., Quality of Service (QoS) provisioning and security services. Machine Learning (ML) algorithms as a popular approach for NTC can promise reasonable accuracy in classification and deal with encrypted traffic. However, ML-based NTC techniques suffer from the shortage of labeled traffic data which is the case in many real-world applications. This study investigates the applicability… 

Figures and Tables from this paper

Network Traffic Classification using ML: A Comparative Analysis

The approach compares the data characteristics used for evaluating the effectiveness of ML algorithms, namely traffic classification in the context of a live network, and discusses issues concerning the creation and usage of datasets to train the ML algorithms so that their future application in real-time traffic can be similar to the results obtained during offline testing.

From statistical‐ to machine learning‐based network traffic prediction

A study on existing NTP techniques through reviewing, investigating, and classifying the recent relevant works conducted in this field, showing that how ML and statistical techniques can be used to solve challenges of NTP.

Fine-grained TLS Services Classification with Reject Option

This paper focuses on collecting a large up-to-date dataset with almost 200 fine-grained service labels and 140 million network flows extended with packet-level metadata and implemented a neural network with a multi-modal architecture, which is the state-of-the-art approach.

INSOMNIA: Towards Concept-Drift Robustness in Network Intrusion Detection

This work proposes INSOMNIA, a semi-supervised intrusion detector which continuously updates the underlying ML model as network traffic characteristics are affected by concept drift, and uses active learning to reduce latency in the model updates, label estimation to reduce labeling overhead, and apply explainable AI to better interpret how the model reacts to the shifting distribution.

A Survey of techniques for fine-grained web traffic identification and classification.

A comprehensive overview of fine-grained network traffic identification from three perspectives: wired network, mobile network, and malware traffic identification is proposed.

Preservice Training Strategies and Guarantee Mechanisms for Primary and Secondary School Teachers in the Development of Smart Cities by the Internet of Things

  • Yuan Wang
  • Education
    Security and Communication Networks
  • 2022
It aims to perfect the preservice training system and improve the teaching quality of primary schools. The research methods are questionnaire survey and interview, and 154 teachers from 16 primary




Multi class SVM algorithm with active learning for network traffic classification

  • Shi Dong
  • Computer Science
    Expert Syst. Appl.
  • 2021

Towards the Deployment of Machine Learning Solutions in Network Traffic Classification: A Systematic Survey

A systematic review is introduced based on the steps to achieve traffic classification by using ML techniques to identify the procedures followed by the existing works to achieve their goals and to outline future directions for ML-based traffic classification.

A survey of techniques for internet traffic classification using machine learning

This survey paper looks at emerging research into the application of Machine Learning techniques to IP traffic classification - an inter-disciplinary blend of IP networking and data mining techniques.

Network traffic classification for data fusion: A survey

Performance Analysis of Unsupervised Machine Learning Techniques for Network Traffic Classification

  • Hardeep Singh
  • Computer Science
    2015 Fifth International Conference on Advanced Computing & Communication Technologies
  • 2015
Unsupervised K-means and Expectation Maximization algorithm are used to cluster the network traffic application based on similarity between them and performance of these two algorithms is compared in terms of classification accuracy between them.

Internet Traffic Classification Using Constrained Clustering

A constrained clustering scheme that makes decisions with consideration of some background information in addition to the observed traffic statistics improves the quality of traffic clusters in terms of overall accuracy and per-class metrics, and speeds up the convergence.

IoT type-of-traffic forecasting method based on gradient boosting neural networks

A Survey of Payload-Based Traffic Classification Approaches

A survey in which a complete and thorough analysis of the most important open-source DPI modules is performed and the obtained evaluation results enable the proposal of general guidelines for the design and implementation of more adequate D PI modules.

A comprehensive survey on machine learning for networking: evolution, applications and research opportunities

This survey delineates the limitations, give insights, research challenges and future opportunities to advance ML in networking, and jointly presents the application of diverse ML techniques in various key areas of networking across different network technologies.