Real-time multi-application network flow identification method based on support vector machine

Abstract

The invention provides a real-time network flow identification method based on a support vector machine, wherein the method has low complexity and a high identification accuracy rate and aims to solve problems of an existing network flow identification method. According to the method, the time window method is adopted, it is only required that simple and effective characteristics are obtained from data packet headers of a network flow, the support vector machine algorithm with low algorithm complexity and small computation amount is adopted, and therefore rapid modeling can be carried out to generate a classifier, the high identification accuracy rate can be achieved under the circumstance of small samples, measurement and identification can be carried out on multiple applications of the network flow at any time point, and the real-time multi-application requirement is met.

Description

technical field [0001] The invention relates to a network flow identification method, which belongs to the technical field of network measurement. Background technique [0002] With the rapid development of computer network technology and the advent of the information age, the continuous popularization of the Internet has also caused problems such as network congestion, P2P applications wantonly occupying bandwidth and network security. Network operators and network service providers need to adopt a suitable network The measurement method manages the network. In recent years, more and more attention has been paid to the research of network traffic identification methods in the academic and application fields, and more and more attention has been paid to the feasibility and effectiveness of traffic identification, that is, how to quickly process massive data and how to correctly identify various types of traffic in the network. application. Therefore, the traffic identifica...

AI Technical Summary

Problems solved by technology

[0004] The present invention aims at the deficiencies in the existing network flow identification methods, and provides a method based on support vector machine (SVM) that can identify multiple application types in the network environment in real time. This method adopts the "time window method" only from network flow The data packet header obtains simple and effective features, and selects the support vector machine algorithm with low algorithm complexity and small amount of calculation, so that it can not only quickly model and generate classifiers, but also achieve high recognition accuracy in the case of small samples , and can also measure and identify multiple applications of network flows at any point in time to meet the needs of real-time multiple applications

Images