{"id":"https://openalex.org/W2073089243","doi":"https://doi.org/10.1145/1163593.1163596","title":"A preliminary performance comparison of five machine learning algorithms for practical IP traffic flow classification","display_name":"A preliminary performance comparison of five machine learning algorithms for practical IP traffic flow classification","publication_year":2006,"publication_date":"2006-10-10","ids":{"openalex":"https://openalex.org/W2073089243","doi":"https://doi.org/10.1145/1163593.1163596","mag":"2073089243"},"language":"en","primary_location":{"id":"doi:10.1145/1163593.1163596","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1163593.1163596","pdf_url":null,"source":{"id":"https://openalex.org/S66039016","display_name":"ACM SIGCOMM Computer Communication Review","issn_l":"0146-4833","issn":["0146-4833","1943-5819"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGCOMM Computer Communication Review","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104069197","display_name":"Nigel Williams","orcid":null},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Nigel Williams","raw_affiliation_strings":["Swinburne University of Technology, Melbourne, Australia","Swinburne Univ. of Technology, Melbourne, Australia#TAB#"],"affiliations":[{"raw_affiliation_string":"Swinburne University of Technology, Melbourne, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Swinburne Univ. of Technology, Melbourne, Australia#TAB#","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063641658","display_name":"Sebastian Zander","orcid":"https://orcid.org/0000-0002-2084-7204"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sebastian Zander","raw_affiliation_strings":["Swinburne University of Technology, Melbourne, Australia","Swinburne Univ. of Technology, Melbourne, Australia#TAB#"],"affiliations":[{"raw_affiliation_string":"Swinburne University of Technology, Melbourne, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Swinburne Univ. of Technology, Melbourne, Australia#TAB#","institution_ids":["https://openalex.org/I57093077"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075839939","display_name":"Grenville Armitage","orcid":"https://orcid.org/0000-0002-2805-6511"},"institutions":[{"id":"https://openalex.org/I57093077","display_name":"Swinburne University of Technology","ror":"https://ror.org/031rekg67","country_code":"AU","type":"education","lineage":["https://openalex.org/I57093077"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Grenville Armitage","raw_affiliation_strings":["Swinburne University of Technology, Melbourne, Australia","Swinburne Univ. of Technology, Melbourne, Australia#TAB#"],"affiliations":[{"raw_affiliation_string":"Swinburne University of Technology, Melbourne, Australia","institution_ids":["https://openalex.org/I57093077"]},{"raw_affiliation_string":"Swinburne Univ. of Technology, Melbourne, Australia#TAB#","institution_ids":["https://openalex.org/I57093077"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5104069197"],"corresponding_institution_ids":["https://openalex.org/I57093077"],"apc_list":null,"apc_paid":null,"fwci":41.4419,"has_fulltext":false,"cited_by_count":691,"citation_normalized_percentile":{"value":0.99846314,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"36","issue":"5","first_page":"5","last_page":"16"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9954000115394592,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8549649715423584},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.655677318572998},{"id":"https://openalex.org/keywords/naive-bayes-classifier","display_name":"Naive Bayes classifier","score":0.6175752282142639},{"id":"https://openalex.org/keywords/bayesian-network","display_name":"Bayesian network","score":0.6147206425666809},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.6042887568473816},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.5719165205955505},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5677763223648071},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5275803804397583},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5240483283996582},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5173815488815308},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5132064819335938},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4784267544746399},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.4701390862464905},{"id":"https://openalex.org/keywords/bayes-theorem","display_name":"Bayes' theorem","score":0.4476991593837738},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.436673641204834},{"id":"https://openalex.org/keywords/network-management","display_name":"Network management","score":0.4362064003944397},{"id":"https://openalex.org/keywords/flow-network","display_name":"Flow network","score":0.4142051935195923},{"id":"https://openalex.org/keywords/bayesian-probability","display_name":"Bayesian probability","score":0.22970545291900635},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.1421644389629364},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.10638466477394104}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8549649715423584},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.655677318572998},{"id":"https://openalex.org/C52001869","wikidata":"https://www.wikidata.org/wiki/Q812530","display_name":"Naive Bayes classifier","level":3,"score":0.6175752282142639},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.6147206425666809},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.6042887568473816},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.5719165205955505},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5677763223648071},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5275803804397583},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5240483283996582},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5173815488815308},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5132064819335938},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4784267544746399},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.4701390862464905},{"id":"https://openalex.org/C207201462","wikidata":"https://www.wikidata.org/wiki/Q182505","display_name":"Bayes' theorem","level":3,"score":0.4476991593837738},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.436673641204834},{"id":"https://openalex.org/C129763632","wikidata":"https://www.wikidata.org/wiki/Q1454667","display_name":"Network management","level":2,"score":0.4362064003944397},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.4142051935195923},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.22970545291900635},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.1421644389629364},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.10638466477394104},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/1163593.1163596","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1163593.1163596","pdf_url":null,"source":{"id":"https://openalex.org/S66039016","display_name":"ACM SIGCOMM Computer Communication Review","issn_l":"0146-4833","issn":["0146-4833","1943-5819"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGCOMM Computer Communication Review","raw_type":"journal-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.108.247","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.108.247","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.sigcomm.org/ccr/drupal/files/p7-williams.pdf","raw_type":"text"},{"id":"pmh:oai:researchbank.swinburne.edu.au:6ec98a65-f6d6-46fb-9963-c15a1b495ab4/1","is_oa":false,"landing_page_url":"http://hdl.handle.net/1959.3/5509","pdf_url":null,"source":{"id":"https://openalex.org/S4306401157","display_name":"Swinburne Research Bank (Swinburne University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I57093077","host_organization_name":"Swinburne University of Technology","host_organization_lineage":["https://openalex.org/I57093077"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Computer Communications Review, Vol. 36 (2006), pp. 7-15","raw_type":""}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W178169250","https://openalex.org/W1481277647","https://openalex.org/W1495061682","https://openalex.org/W1559060276","https://openalex.org/W1559810148","https://openalex.org/W1576271900","https://openalex.org/W1912123407","https://openalex.org/W2012095206","https://openalex.org/W2119271160","https://openalex.org/W2122226347","https://openalex.org/W2149274049","https://openalex.org/W2161349318","https://openalex.org/W2169038408","https://openalex.org/W2171634548","https://openalex.org/W4210774122"],"related_works":["https://openalex.org/W2349835884","https://openalex.org/W2972991241","https://openalex.org/W4220688378","https://openalex.org/W3171671300","https://openalex.org/W3045016378","https://openalex.org/W2012610719","https://openalex.org/W2009699504","https://openalex.org/W1987909119","https://openalex.org/W4388533926","https://openalex.org/W235411870"],"abstract_inverted_index":{"The":[0,66],"identification":[1,31],"of":[2,7,17,35,69],"network":[3,18,48],"applications":[4,49],"through":[5],"observation":[6],"associated":[8],"packet":[9,60],"traffic":[10],"flows":[11],"is":[12,39,79,97,118],"vital":[13],"to":[14,40,99],"the":[15,116],"areas":[16],"management":[19],"and":[20,29,46,62,75,87],"surveillance.":[21],"Currently":[22],"popular":[23],"methods":[24],"such":[25,58],"as":[26,59,111],"port":[27],"number":[28,34],"payload-based":[30],"exhibit":[32],"a":[33],"shortfalls.":[36],"An":[37],"alternative":[38],"use":[41],"machine":[42],"learning":[43],"(ML)":[44],"techniques":[45],"identify":[47],"based":[50,102],"on":[51,81,103],"per-flow":[52],"statistics,":[53],"derived":[54],"from":[55],"payload-independent":[56],"features":[57],"length":[61],"inter-arrival":[63],"time":[64],"distributions.":[65],"performance":[67,105,121],"impact":[68],"feature":[70,77],"set":[71],"reduction,":[72],"using":[73],"Consistency-based":[74],"Correlation-based":[76],"selection,":[78],"demonstrated":[80],"Na\u00efve":[82,88],"Bayes,":[83],"C4.5,":[84],"Bayesian":[85],"Network":[86],"Bayes":[89],"Tree":[90],"algorithms.":[91],"We":[92],"then":[93],"show":[94],"that":[95],"it":[96],"useful":[98],"differentiate":[100],"algorithms":[101,117],"computational":[104,120],"rather":[106],"than":[107],"classification":[108,113],"accuracy":[109,114],"alone,":[110],"although":[112],"between":[115],"similar,":[119],"can":[122],"differ":[123],"significantly.":[124]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":21},{"year":2023,"cited_by_count":27},{"year":2022,"cited_by_count":26},{"year":2021,"cited_by_count":44},{"year":2020,"cited_by_count":49},{"year":2019,"cited_by_count":59},{"year":2018,"cited_by_count":54},{"year":2017,"cited_by_count":33},{"year":2016,"cited_by_count":36},{"year":2015,"cited_by_count":33},{"year":2014,"cited_by_count":38},{"year":2013,"cited_by_count":42},{"year":2012,"cited_by_count":43}],"updated_date":"2026-04-17T18:11:37.981687","created_date":"2025-10-10T00:00:00"}