Computer Science and Information Systems 2022 Volume 19, Issue 1, Pages: 165-184
https://doi.org/10.2298/CSIS200424038K
Full text (
1186 KB)
Cited by
Deep RNN-based network traffic classification scheme in edge computing system
Kim Kwihoon (Department of Artificial Intelligence Convergence Education, Korea National University of Education, Cheongju, South Korea), kimkh@knue.ac.kr
Lee Joo-Hyung (Department of Software, Gachon University, Seongnam, South Korea), j17.lee@gachon.ac.kr
Lim Hyun-Kyo (Interdisciplinary Program in Creative Engineering, Korea University of Technology and Education, Cheonan, South Korea), glenn89@koreatech.ac.kr
Oh Se Won (Electronics and Telecommunications Research Institute, Daejeon, South Korea), sewonoh@etri.re.kr
Han Youn-Hee (Future Convergence Engineering, Korea University of Technology and Education, Cheonan, South Korea), yhhan@koreatech.ac.kr
This paper proposes a deep recurrent neural network (RNN)-based traffic classification scheme (deep RNN-TCS) for classifying applications from traffic patterns in a hybrid edge computing and cloud computing architecture.We can also classify traffic from a cloud server, but there will be a time delay when packets transfer to the server. Therefore, the traffic classification is possible almost in realtime when it performed on edge computing nodes. However, training takes a lot of time and needs a lot of computing resources to learn traffic patterns. Therefore, it is efficient to perform training on cloud server and to perform serving on edge computing node. Here, a cloud server collects and stores output labels corresponding to the application packets. Then, it trains those data and generates inferred functions. An edge computation node receives the inferred functions and executes classification. Compared to deep packet inspection (DPI), which requires the periodic verification of existing signatures and updated application information (e.g., versions adding new features), the proposed scheme can classify the applications in an automated manner. Also, deep learning can automatically make classifiers for traffic classification when there is enough data. Specifically, input features and output labels are defined for classification as traffic packets and target applications, respectively, which are created as two-dimensional images. As our training data, traffic packets measured at Universitat Politecnica de Catalunya Barcelonatech were utilized. Accordingly, the proposed deep RNN-TCS is implemented using a deep long short-term memory system. Through extensive simulation-based experiments, it is verified that the proposed deep RNN-TCS achieves almost 5% improvement in accuracy (96% accuracy) while operating 500 times faster (elapsed time) compared to the conventional scheme.
Keywords: RNN, Traffic Classification, Edge Computing, Cloud Computing
Show references
Aceto, G., Ciuonzo, D., Montieri, A., Pescap´e, A.: Mobile encrypted traffic classification using deep learning: Experimental evaluation, lessons learned, and challenges. IEEE Transactions on Network and Service Management 16(2), 445-458 (2019)
Bernaille, L., Teixeira, R., Salamatian, K.: Early application identification. in Proceedings of the 2006 ACM CoNEXT Conference pp. 1-12 (2006)
Boutaba, R., Salahuddin, M.A., Limam, N., Ayoubi, S., Shahriar, N., Estrad-solano, F., Caicedo, O.M.: A comprehensive survey on machine learning for networking: evolution, applications and research opportunities. Journal of Internet Services and Applications (2018)
Carela-Espa˜nol, V., Bujlow, T., Barlet-Ros, P.: Is Our Ground-Truth for Traffic Classification Reliable? In Proc. of the Passive and Active Measurements Conference (PAM’14) (Mar 2014)
Connor, J.T., Martin, R.D., Atlas, L.E.: Recurrent neural networks and robust time series prediction. IEEE Transactions on Neural Networks pp. 240-254 (1994)
Deng, W., Xui, J., Zhao, H.: An Improved Ant Colony Optimization Algorithm Based on Hybrid Strategies for Scheduling Problem. IEEE Access pp. 20281-20292 (2019)
Deng, W., Zhao, H., Yang, X., Xiong, J., Sun, M., Li, B.: Study on an improved adaptive PSO algorithm for solvingmulti-objective gate assignment. Applied Soft Computing pp. 288-302 (2017)
Deng, W., Zhao, H., Zou, L., Li, G., Yang, X., Wu, D.: A novel collaborative optimization algorithm in solving complex optimization problems. Soft Computing pp. 4387-4398 (2017)
Erman, J., Mahanti, A., Arlitt, M.,Williamson, C.: Identifying and discriminating between web and peer-to-peer traffic in the network core. in Proceedings of the 16th International Conference on World Wide Web pp. 883-892 (2007)
Finsterbusch, M., Richter, C., Rocha, E., Muller, J.A., Hanssgen, K.: A survey of payload-based traffic classification approaches. IEEE Communications Surveys & Tutorials pp. 1135-1156 (2014)
Gupta, P., McKeown, N.: Algorithms for packet classification. IEEE Network: The Magazine of Global Internetworking pp. 24-32 (2001)
Haffner, P., Sen, S., Spatscheck, O., Wang, D.: automated construction of application signatures. in MineNet (2005)
Hatcher, W.G., Yu, W.: A survey of deep learning: platforms, applications and emerging research trends. IEEE Access. pp. 24411-24432 (2018)
He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. IEEE Conference on Computer Vision and Pattern Recognition 2016 pp. 770-778 (2016)
Hochreiter, S., Schmidhuber, J.: Long short-term memory. Neural Computation pp. 1735-1780 (1997)
Kohavi, R.: A study of cross-validation and bootstrap for accuracy estimation and model selection. in Proceedings of the 14th International Joint Conference on Artificial Intelligence pp. 1137-1143 (1995)
Krizhevsky, A., Sutskever, I., Hinton, G.E.: ImageNet classification with deep convolutional neural networks. Advances in Neural Information Processing Systems 25 (NIPS 2012) pp. 1097-1105 (2012)
Lan, K., Heidemann, J.: On the correlation of Internet flow characteristics. Technical Report ISI-TR-574, USC/Information Sciences Institute (2003)
Lecun, Y., Bottou, L., Bengio, Y., Haffner, P.: Gradient-based learning applied to document recognition. in Proceedings of the IEEE vol. 86(11), 2278-2324 (Nov 1998)
LeCun, Y., Bengio, Y., Hinton, G.: Deep Learning. Nature International Journal of science pp. 436-444 (May 2015)
Li, F., Kakhki, A.M., Choffnes, D., Gill, P., Mislove, A.: Classifiers unclassified: An efficient approach to revealing IP traffic classification rules. in proceedings of the 2016 Internet Measurement Conference pp. 239-245 (2016)
Li, L., Kianmehr, K.: Internet traffic classification based on associative classifiers. IEEE International Conference on Cyber Technology in Automation, Control, and Intelligent Systems (CYBER) pp. 263-268 (2012)
Lim, H., Kim, J., Heo, J., Kim, K., Hong, Y., Han, Y.: Packet-based Network Traffic Classification Using Deep Learning. In Proceedings of the 2019 International Conference on Artificial Intelligence in Information and Communication (ICAIIC) pp. 46-51 (2019)
Liu, Y., Wang, X., Zhai, Z., Chen, R., Zhang, B., Jiang, Y.: Timely daily activity recognition from headmost sensor events. ISA Transactions pp. 379-390 (2019)
Lopez-Martin, M., Carro, B., Sanchez-Esguevillas, A., Lloret, J.: Network traffic classifier with convolutional and recurrent neural networks for internet of things. IEEE Access. pp. 18042- 18050 (2017)
McGregor, A., Hall, M., Lorier, P., Brunskill, J.: Flow clustering using machine learning techniques. in Passive and Active Network Measurement. Berlin, Heidelberg: Springer Berlin Heidelberg pp. 205-214 (2004)
Meidan, Y., Bohadana, M., Shabtai, A., Guarnizo, J.D., Ochoa, M., Tippenhauer, N.O., Elovici, Y.P.: A machine learning approach for IoT device identification based on network traffic analysis. in proceedings of the Symposium on Applied Computing pp. 506-509 (2017)
Mikolov, T., Kombrink, S., Burget, L., Cernocky, J., Khudanpur, S.: Extensions of recurrent neural network language model. 2011 IEEE International Conference on Acoustics, Speech and Signal Processing(ICASSP) pp. 5528-5531 (2011)
Nguyen, T.T.T., Armitage, G.: A survey of techniques for internet traffic classification using machine learning. IEEE Communications Surveys Tutorials pp. 56-76 (2008)
Park, J.: Statistics signiture based application traffic classification. Korea Communication Journal 34, 1234-1244 (Nov 2009)
Parsaei, M.R., Sobouti, M.J., Khayami, S.R., Javidan, R.: Network traffic classification using machine learning techniques over software defined networks. International Journal of Advanced Computer Science and Applications (2017)
Pedregosa, F., Varoquaux, G., Gramfort, A.: Scikit-learn: Machine Learning in Python. Journal of Machine Learning Research pp. 2825-2830 (2011)
Powers, D.M.W.: Evaluation: From precision, recall and f-measure to ROC, informedness, markedness & correlation. Journal of Machine Learning Technologies pp. 37-63 (2011)
Rezaeij, S., Liu, X.: Deep learning for encrypted traffic classification: An overview. IEEE Communications Magazine pp. 76-81 (2019)
Risso, F., Baldi, M., Morandi, O., Baldini, A., Monclus, P.L.: Lightweight, payload-based traffic classification: An experimental evaluation. IEEE International Conference on Communications pp. 5869-5875 (2008)
Sak, H., Senior, A., Beaufays, F.: Long short-term memory recurrent neural network architectures for large scale acoustic modeling. Proceedings of the Annual Conference of the International Speech Communication Association(INTERSPEECH) pp. 338-342 (Jan 2014)
Shafiq, M., Yu, X.,Wang, D.: Network traffic classification using machine learning algorithms. Advances in Intelligent Systems and Computing pp. 621-627 (2018)
Singh, H.: Performance analysis of unsupervised machine learning techniques for network traffic classification. 2015 Fifth International Conference on Advanced Computing & Communication Technologies pp. 401-404 (2015)
Trivedi, U., Patel, M.: A fully automated deep packet inspection verification system with machine learning. 2016 IEEE International Conference on Advanced Networks and Telecommunications Systems (ANTS) (Nov 2016)
Udrea, O., Lumezanu, C., Foster, J.S.: Rule-based static analysis of network protocol implementations. Information and Computation p. 130-157 (2008)
Wang, W., Sheng, Y., Wang, J., Zeng, X., Ye, X., Huang, Y., Zhu, M.: Hast-ids: Learning hierarchical spatial-temporal features using deep neural networks to improve intrusion detection. IEEE Access 6, 1792-1806 (2018)
Wang,W., Zhu, M., Zeng, X., Ye, X., Sheng, Y.: Malware trac classification using convolutional neural network for representation learning. In Proceedings of the 2017 International Conference on Information Networking (ICOIN) pp. 712-717 (2017)
Wang, W., Zhu, M., Zeng, X., Ye, X., Sheng, Y.: Malware Traffic Classification Using Convolutional Neural Network for Representation Learning. IEEE ICOIN 2017 (2017)
Yu, C., Lan, J., Xie, J., Hu, Y.: QoS-aware traffic classification architecture using machine learning and deep packet inspection in SDNs. Procedia Computer Science pp. 1209-1216 (2018)
Zander, S., Nguyen, T., Armitage, G.: Automated traffic classification and application identification using machine learning. The IEEE Conference on Local Computer Networks 30th Anniversary (LCN’05) pp. 250-257 (2005)
Zhang, J., Xiang, Y., Wang, Y., Zhou, W., Xiang, Y., Guan, Y.: Network traffic classification using correlation information. IEEE Transactions on Parallel and Distributed Systems pp. 104- 117 (2013)
Zhang, Y., Breslau, L., Paxson, V., Shenker, S.: On the characteristics and origins of internet flow rates. SIGCOMM 02 Proceedings of the 2002 conference on Applications pp. 309-322 (2002)
Zhao, H., Liu, H., Xu, J., Deng, W.: Performance Prediction Using High-Order Differential Mathematical Morphology Gradient Spectrum Entropy and Extreme Learning Machine. IEEE Transactions on Instrumentation and Measurement pp. 379-390 (2019)
Zhao, H., Zheng, J., Xu, J., Deng, W.: Fault Diagnosis Method Based on Principal Component Analysis and Broad Learning System. IEEE Access pp. 99263-99272 (2019)