Network traffic classification method based on constraint fuzzy clustering and granular computing

Abstract

The invention belongs to the technical field of network traffic classification, and discloses a network traffic classification method based on constraint fuzzy clustering and granular computing, whichcomprises the following steps of: in a training stage, merging a data set with a label with a data set without a label by using traffic information; performing operation on the merged data set through a CCFCM, and outputting a group of clustering centers in a numerical format; constructing network traffic granules around a numerical clustering center, and continuously optimizing the network traffic granules under the guidance of a reasonable granularity criterion; mapping each traffic granule to a respective traffic category by means of the obtained optimal NTG by means of the marked stream;extracting data packet level and flow level features from the NTG, and constructing a classification rule base; in a test phase, enabling a granule classifier to identify new network flows or networkanomalies by means of classification rules. Because the network traffic granules can describe the potential structure of the traffic data in detail, the classification precision of the traffic is greatly improved.

Description

technical field [0001] The invention belongs to the technical field of network traffic classification, in particular to a network traffic classification method based on constrained fuzzy clustering and granular computing. Background technique [0002] Currently, network traffic classification aims to identify the category of traffic generated by different applications and protocols, which can provide network administrators with a fine-grained or coarse-grained view of network conditions, such as quality of service measurement, resource allocation, and intrusion detection, and then Help it manage the network conveniently. With the emergence of more and more new types of network services and network access devices, network traffic classification has attracted increasing attention to manage networks in an intelligent manner. [0003] The current traffic classification methods are mainly divided into five types: the first is correlation-based classification, which first aggrega...

AI Technical Summary

Problems solved by technology

This will greatly affect the classification accuracy

The second problem is that some methods are not always reliable. For example, the load-based classification method will become ineffective when dealing with encrypted data; the port-based classification method will also become ineffective in the face of dynamic port mechanisms.

A third problem is that they cannot be used in conjunction with packet-level and flow-level features to perform traffic classification

This will greatly affect the accuracy of classification;

[0008] (2) Some methods are not always reliable

When the network fluctuates or the network environment changes, the accuracy of most methods will become lower;

[0009] (3) They cannot be used in conjunction with packet-level and flow-level features to perform traffic classification

[0010] The difficulty in solving the above problems and defects is as follows: Although there are many methods that are constantly trying to improve the accuracy and reliability of classification, reliable and stable traffic classification still faces many difficulties

First of all, due to the continuous development of the network, more and more applications bring massive data traffic, and many unknown traffic and even malicious traffic are mixed in, which brings great difficulties to classification

Secondly, the collection of data sets and labels is also a difficult problem for traffic classification

Images