{"id":"https://openalex.org/W2071728865","doi":"https://doi.org/10.1109/icumt.2009.5345539","title":"A statistical-feature-based approach to internet traffic classification using Machine Learning","display_name":"A statistical-feature-based approach to internet traffic classification using Machine Learning","publication_year":2009,"publication_date":"2009-10-01","ids":{"openalex":"https://openalex.org/W2071728865","doi":"https://doi.org/10.1109/icumt.2009.5345539","mag":"2071728865"},"language":"en","primary_location":{"id":"doi:10.1109/icumt.2009.5345539","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icumt.2009.5345539","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2009 International Conference on Ultra Modern Telecommunications &amp; Workshops","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054278998","display_name":"Shijun Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Shijun Huang","raw_affiliation_strings":["School of Information Security Engineering, Shanghai Jiaotong University, Shanghai, China","School of Information Security Engineering, Shanghai Jiao Tong University, China#TAB#"],"affiliations":[{"raw_affiliation_string":"School of Information Security Engineering, Shanghai Jiaotong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]},{"raw_affiliation_string":"School of Information Security Engineering, Shanghai Jiao Tong University, China#TAB#","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027855551","display_name":"Kai Chen","orcid":"https://orcid.org/0000-0002-2436-1420"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kai Chen","raw_affiliation_strings":["School of Information Security Engineering, Shanghai Jiaotong University, Shanghai, China","School of Information Security Engineering, Shanghai Jiao Tong University, China#TAB#"],"affiliations":[{"raw_affiliation_string":"School of Information Security Engineering, Shanghai Jiaotong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]},{"raw_affiliation_string":"School of Information Security Engineering, Shanghai Jiao Tong University, China#TAB#","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100697046","display_name":"Chao Liu","orcid":"https://orcid.org/0000-0001-7540-8092"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chao Liu","raw_affiliation_strings":["School of Information Security Engineering, Shanghai Jiaotong University, Shanghai, China","School of Information Security Engineering, Shanghai Jiao Tong University, China#TAB#"],"affiliations":[{"raw_affiliation_string":"School of Information Security Engineering, Shanghai Jiaotong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]},{"raw_affiliation_string":"School of Information Security Engineering, Shanghai Jiao Tong University, China#TAB#","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108486291","display_name":"Alei Liang","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Alei Liang","raw_affiliation_strings":["School of Software, Shanghai Jiaotong University, Shanghai, China","[School of Software, Shanghai Jiao Tong University, China]"],"affiliations":[{"raw_affiliation_string":"School of Software, Shanghai Jiaotong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]},{"raw_affiliation_string":"[School of Software, Shanghai Jiao Tong University, China]","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5049487451","display_name":"Haibing Guan","orcid":"https://orcid.org/0000-0002-4714-7400"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haibing Guan","raw_affiliation_strings":["Department of Computer Science and Engineering, Shanghai Jiaotong University, Shanghai, China","Department of Computer Science and Engineering, Shanghai Jiao Tong University, China"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Shanghai Jiaotong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]},{"raw_affiliation_string":"Department of Computer Science and Engineering, Shanghai Jiao Tong University, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5054278998"],"corresponding_institution_ids":["https://openalex.org/I183067930"],"apc_list":null,"apc_paid":null,"fwci":0.6857,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.71843755,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7682790160179138},{"id":"https://openalex.org/keywords/header","display_name":"Header","score":0.7671952247619629},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.6683380603790283},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.5808367133140564},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5761223435401917},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5697988867759705},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5663905143737793},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5614942312240601},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5177897214889526},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.49804139137268066},{"id":"https://openalex.org/keywords/estimator","display_name":"Estimator","score":0.48688092827796936},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4855341911315918},{"id":"https://openalex.org/keywords/k-nearest-neighbors-algorithm","display_name":"k-nearest neighbors algorithm","score":0.4578366279602051},{"id":"https://openalex.org/keywords/statistical-classification","display_name":"Statistical classification","score":0.4295973777770996},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.2761589288711548},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.0770648717880249}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7682790160179138},{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.7671952247619629},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.6683380603790283},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.5808367133140564},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5761223435401917},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5697988867759705},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5663905143737793},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5614942312240601},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5177897214889526},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.49804139137268066},{"id":"https://openalex.org/C185429906","wikidata":"https://www.wikidata.org/wiki/Q1130160","display_name":"Estimator","level":2,"score":0.48688092827796936},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4855341911315918},{"id":"https://openalex.org/C113238511","wikidata":"https://www.wikidata.org/wiki/Q1071612","display_name":"k-nearest neighbors algorithm","level":2,"score":0.4578366279602051},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.4295973777770996},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.2761589288711548},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0770648717880249},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icumt.2009.5345539","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icumt.2009.5345539","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2009 International Conference on Ultra Modern Telecommunications &amp; Workshops","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.49000000953674316,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W1495633614","https://openalex.org/W1516506771","https://openalex.org/W1521553548","https://openalex.org/W1524496078","https://openalex.org/W1661871015","https://openalex.org/W1978977724","https://openalex.org/W1996118086","https://openalex.org/W2012095206","https://openalex.org/W2035060716","https://openalex.org/W2096118443","https://openalex.org/W2122226347","https://openalex.org/W2157349061","https://openalex.org/W2171634548","https://openalex.org/W2172189177","https://openalex.org/W3150719513","https://openalex.org/W6631453533","https://openalex.org/W6636914306"],"related_works":["https://openalex.org/W3044308011","https://openalex.org/W4212842074","https://openalex.org/W1602622186","https://openalex.org/W4300427221","https://openalex.org/W2904326537","https://openalex.org/W2349835884","https://openalex.org/W2027795982","https://openalex.org/W2746859044","https://openalex.org/W2138449377","https://openalex.org/W1491268446"],"abstract_inverted_index":{"This":[0],"Internet":[1],"traffic":[2],"classification":[3,25,50,140],"using":[4],"Machine":[5],"Learning":[6],"is":[7,17,68,109,145],"an":[8],"emerging":[9],"research":[10],"field":[11],"since":[12],"1990's,":[13],"and":[14,31,47,74,90,121],"now":[15],"it":[16],"widely":[18],"used":[19],"in":[20,83,103],"numerous":[21],"network":[22],"activities.":[23],"The":[24],"technique":[26],"focuses":[27],"on":[28,53,78,138],"modeling":[29],"attributes":[30],"features":[32,124],"of":[33,40,76,92,114],"data":[34],"flows":[35],"to":[36,71,127],"accomplish":[37],"the":[38,43,49,60,63,112,119,128],"identification":[39],"applications.":[41],"In":[42],"paper":[44],"we":[45],"design":[46],"implement":[48],"model":[51,64],"based":[52],"header-derived":[54],"flow":[55],"statistical":[56,123],"features.":[57],"Compared":[58],"with":[59,118],"traditional":[61,150],"methods,":[62],"designed":[65],"here,":[66],"which":[67,144],"totally":[69],"insensitive":[70],"port":[72,88],"numbers":[73,89],"contents":[75],"payload":[77,93],"application":[79],"level,":[80],"overcomes":[81],"difficulty":[82],"operation":[84],"caused":[85],"by":[86],"unreliable":[87],"complexity":[91],"interpretation.":[94],"Rather":[95],"than":[96],"relatively":[97],"complex":[98],"ML":[99],"algorithms":[100],"or":[101],"even":[102],"mixture,":[104],"supervised":[105],"k-Nearest":[106],"Neighbor":[107],"estimator":[108],"adopted":[110],"for":[111],"sake":[113],"computational":[115],"efficiency,":[116],"along":[117],"effective":[120],"easy-to-calculate":[122],"selected":[125],"according":[126],"operational":[129],"background.":[130],"Our":[131],"results":[132],"indicate":[133],"that":[134,152],"about":[135],"90%":[136],"accuracy":[137],"per-flow":[139],"can":[141],"be":[142],"achieved,":[143],"a":[146],"vast":[147],"improvement":[148],"over":[149],"techniques":[151],"achieve":[153],"50-70%.":[154]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1},{"year":2012,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
