• •    

基于相关向量机的在线网络流量分类方法

夏靖波,柏骏   

  1. 空军工程大学信息与导航学院
  • 收稿日期:2012-11-08 修回日期:2013-03-27 发布日期:2013-06-20
  • 通讯作者: 柏骏

Online Network Traffic Classification using Relevant Vector Machine

  • Received:2012-11-08 Revised:2013-03-27 Published:2013-06-20
  • Contact: Jun BAI

摘要: 相关向量机(Relevant Vector Machine, RVM)与支持向量机(Support Vector Machine, SVM)相比,不仅更适用于在线分类,还具有概率预测的优点。在研究、分析分类结果预测概率及其对分类准确率影响的基础上,提出了一种新的基于RVM的在线网络流量分类方法:首先,利用RVM对网络流量分类,输出分类结果预测概率;对于置疑区间[0.1, 0.9]内的网络流,采用“端口号+深度数据包检测(DPI)”相结合的方法重新进行识别;对于预测概率处于[0, 0.1]和[0.9, 1]区间的分类结果则完全采纳。实验表明:该方法的整体分类准确率能达到98%左右,且实时性较好。

关键词: 流量分类, 相关向量机, 流量特征, 置疑区间

Abstract: Compared to support vector machine (SVM), relevant vector machine(RVM) is much more appropriate for online classification, and provides probabilistic classification. Based on the research and analysis of probabilistic classification and its influence on overall accuracy, a new online traffic classification method is proposed. Firstly, the method utilize RVM to classify traffic flows and output probabilistic classification. Then, re-identify the flows, whose classification probability is in douting interval [0.1, 0.9], by using port & DPI. And otherwise, absolutely accept the classifcation when predicted probality is in the interval [0, 0.1] and [0.9, 1]. Experiment studies illustrate that the method can reach the overall accuracy of 98%, and performs well in online network traffic classification.

Key words: traffic classification, relevant vector machine, traffic features, douting interval

[1] 夏靖波, 柏骏, 赵小欢, 吴吉祥. 基于相关向量机的在线网络流量分类方法[J]. 吉林大学学报(工学版), 2014, 44(2): 459-464.
[2] 齐滨, 赵春晖, 王玉磊. 基于支持向量机与相关向量机的高光谱图像分类[J]. 吉林大学学报(工学版), 2013, 43(增刊1): 143-147.
[3] 吴旗, 刘健男, 寇文龙, 张宗升. 改进的单类支持向量机的网络流量检测[J]. 吉林大学学报(工学版), 2013, 43(增刊1): 124-127.
[4] 柳长源, 毕晓君, 韦琦. 基于相关向量机的含噪声人脸图像识别[J]. 吉林大学学报(工学版), 2013, 43(04): 1121-1126.
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
No Suggested Reading articles found!