{"id":"https://openalex.org/W2014236853","doi":"https://doi.org/10.1109/lcn.2012.6423688","title":"Sub-flow packet sampling for scalable ML classification of interactive traffic","display_name":"Sub-flow packet sampling for scalable ML classification of interactive traffic","publication_year":2012,"publication_date":"2012-10-01","ids":{"openalex":"https://openalex.org/W2014236853","doi":"https://doi.org/10.1109/lcn.2012.6423688","mag":"2014236853"},"language":"en","primary_location":{"id":"doi:10.1109/lcn.2012.6423688","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lcn.2012.6423688","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"37th Annual IEEE Conference on Local Computer Networks","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5063641658","display_name":"Sebastian Zander","orcid":"https://orcid.org/0000-0002-2084-7204"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Sebastian Zander","raw_affiliation_strings":["Centre for Advanced Internet Architectures (CAIA), Swinburne University of Technology, Melbourne, Australia","Centre for Advanced Internet Architectures (CAIA), Swinburne University of Technology, Melbourne, Australia#TAB#"],"affiliations":[{"raw_affiliation_string":"Centre for Advanced Internet Architectures (CAIA), Swinburne University of Technology, Melbourne, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Centre for Advanced Internet Architectures (CAIA), Swinburne University of Technology, Melbourne, Australia#TAB#","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100610140","display_name":"Thuy Nguyen Thi Thu","orcid":"https://orcid.org/0000-0002-6991-2791"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Thuy Nguyen","raw_affiliation_strings":["Centre for Advanced Internet Architectures (CAIA), Swinburne University of Technology, Melbourne, Australia","Centre for Advanced Internet Architectures (CAIA), Swinburne University of Technology, Melbourne, Australia#TAB#"],"affiliations":[{"raw_affiliation_string":"Centre for Advanced Internet Architectures (CAIA), Swinburne University of Technology, Melbourne, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Centre for Advanced Internet Architectures (CAIA), Swinburne University of Technology, Melbourne, Australia#TAB#","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075839939","display_name":"Grenville Armitage","orcid":"https://orcid.org/0000-0002-2805-6511"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Grenville Armitage","raw_affiliation_strings":["Centre for Advanced Internet Architectures (CAIA), Swinburne University of Technology, Melbourne, Australia","Centre for Advanced Internet Architectures (CAIA), Swinburne University of Technology, Melbourne, Australia#TAB#"],"affiliations":[{"raw_affiliation_string":"Centre for Advanced Internet Architectures (CAIA), Swinburne University of Technology, Melbourne, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Centre for Advanced Internet Architectures (CAIA), Swinburne University of Technology, Melbourne, Australia#TAB#","institution_ids":["https://openalex.org/I57093077"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5063641658"],"corresponding_institution_ids":["https://openalex.org/I57093077"],"apc_list":null,"apc_paid":null,"fwci":0.4422,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.71955431,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"68","last_page":"75"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8240281343460083},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.7547166347503662},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.7070265412330627},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.6804431080818176},{"id":"https://openalex.org/keywords/quality-of-service","display_name":"Quality of service","score":0.5564810037612915},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5386829376220703},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5104497671127319},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5100625157356262},{"id":"https://openalex.org/keywords/voice-over-ip","display_name":"Voice over IP","score":0.4802132546901703},{"id":"https://openalex.org/keywords/sampling","display_name":"Sampling (signal processing)","score":0.44871124625205994},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.43330106139183044},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.4290730655193329},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3102003335952759},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.28075653314590454},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.09919688105583191},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.09732073545455933},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.08506903052330017}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8240281343460083},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.7547166347503662},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.7070265412330627},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.6804431080818176},{"id":"https://openalex.org/C5119721","wikidata":"https://www.wikidata.org/wiki/Q220501","display_name":"Quality of service","level":2,"score":0.5564810037612915},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5386829376220703},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5104497671127319},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5100625157356262},{"id":"https://openalex.org/C171246234","wikidata":"https://www.wikidata.org/wiki/Q81945","display_name":"Voice over IP","level":3,"score":0.4802132546901703},{"id":"https://openalex.org/C140779682","wikidata":"https://www.wikidata.org/wiki/Q210868","display_name":"Sampling (signal processing)","level":3,"score":0.44871124625205994},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.43330106139183044},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4290730655193329},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3102003335952759},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.28075653314590454},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.09919688105583191},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.09732073545455933},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08506903052330017},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/lcn.2012.6423688","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lcn.2012.6423688","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"37th Annual IEEE Conference on Local Computer Networks","raw_type":"proceedings-article"},{"id":"pmh:oai:researchrepository.murdoch.edu.au:34943","is_oa":false,"landing_page_url":"http://researchrepository.murdoch.edu.au/id/eprint/34943/","pdf_url":null,"source":{"id":"https://openalex.org/S4306400274","display_name":"Murdoch Research Repository (Murdoch University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I176790772","host_organization_name":"Murdoch University","host_organization_lineage":["https://openalex.org/I176790772"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"  Zander, S. &lt;http://researchrepository.murdoch.edu.au/view/author/Zander, Sebastian.html&gt;, Nguyen, T. and Armitage, G.   (2012)  Sub-flow packet sampling for scalable ML classification of interactive traffic.   In: 2012 IEEE 37th Conference on Local Computer Networks (LCN), 22 - 25 Oct 2012, Clearwater, Florida   ","raw_type":"Conference Paper"},{"id":"pmh:oai:researchbank.swinburne.edu.au:668ad1f5-f181-487d-84a2-cd7c2deb142a/1","is_oa":false,"landing_page_url":"http://hdl.handle.net/1959.3/314702","pdf_url":null,"source":{"id":"https://openalex.org/S4306401157","display_name":"Swinburne Research Bank (Swinburne University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I57093077","host_organization_name":"Swinburne University of Technology","host_organization_lineage":["https://openalex.org/I57093077"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"37th IEEE Conference on Local Computer Networks (LCN 2012), Clearwater, Florida, United States, 22-25 October 2012, pp. 68-75","raw_type":""}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320307791","display_name":"Cisco Systems","ror":"https://ror.org/03yt1ez60"},{"id":"https://openalex.org/F4320321015","display_name":"University of Twente","ror":"https://ror.org/006hf6230"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W1572248163","https://openalex.org/W1971584364","https://openalex.org/W1988897678","https://openalex.org/W2012095206","https://openalex.org/W2031794885","https://openalex.org/W2040123650","https://openalex.org/W2055763473","https://openalex.org/W2063142364","https://openalex.org/W2073089243","https://openalex.org/W2096118443","https://openalex.org/W2100049719","https://openalex.org/W2120948237","https://openalex.org/W2122192957","https://openalex.org/W2123845384","https://openalex.org/W2128567487","https://openalex.org/W2134539183","https://openalex.org/W2144312996","https://openalex.org/W2156123711","https://openalex.org/W2159262496","https://openalex.org/W2169636627","https://openalex.org/W3150719513","https://openalex.org/W6683135878"],"related_works":["https://openalex.org/W2074532070","https://openalex.org/W2041550843","https://openalex.org/W2537489883","https://openalex.org/W4287966854","https://openalex.org/W2017644937","https://openalex.org/W1976515580","https://openalex.org/W3011161512","https://openalex.org/W2928278548","https://openalex.org/W32109103","https://openalex.org/W2978828483"],"abstract_inverted_index":{"Machine":[0],"Learning":[1],"(ML)":[2],"classifiers":[3],"have":[4,54],"been":[5],"shown":[6],"to":[7,30,93,116,126],"provide":[8,31],"accurate,":[9],"timely":[10],"and":[11,64,69,87,120],"continuous":[12],"IP":[13],"flow":[14],"classification":[15,49,111,133],"when":[16],"evaluating":[17],"sub-flows":[18],"(short":[19],"moving":[20],"windows":[21],"of":[22,104,135],"packets":[23,57],"within":[24],"flows).":[25],"They":[26],"can":[27,121],"be":[28],"used":[29],"automated":[32],"QoS":[33],"management":[34],"for":[35,73],"interactive":[36],"traffic,":[37],"such":[38],"as":[39],"fast-paced":[40],"multiplayer":[41],"games":[42],"or":[43,79],"VoIP.":[44],"As":[45],"with":[46,101],"other":[47],"ML":[48,96],"approaches,":[50],"previous":[51],"sub-flow":[52,97],"techniques":[53],"assumed":[55],"all":[56,59],"in":[58,76],"flows":[60],"are":[61],"being":[62],"observed":[63],"evaluated.":[65],"This":[66],"limits":[67],"scalability":[68],"poses":[70],"a":[71],"problem":[72],"practical":[74],"deployment":[75],"network":[77],"core":[78],"edge":[80],"routers.":[81],"In":[82],"this":[83],"paper":[84],"we":[85],"propose":[86],"evaluate":[88],"subflow":[89],"packet":[90,108],"sampling":[91,109],"(SPS)":[92],"reduce":[94,122],"an":[95],"classifier's":[98],"resource":[99],"requirements":[100],"minimal":[102],"compromise":[103],"accuracy.":[105,141],"While":[106],"random":[107],"increases":[110],"time":[112],"from":[113,124],"<;1":[114,136],"second":[115,137],"over":[117],"30":[118],"seconds":[119],"accuracy":[123],"98%":[125,140],"<;90%,":[127],"our":[128],"tailored":[129],"SPS":[130],"technique":[131],"retains":[132],"times":[134],"while":[138],"providing":[139]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2014,"cited_by_count":1}],"updated_date":"2026-04-17T18:11:37.981687","created_date":"2025-10-10T00:00:00"}
