首页|基于核函数的SOM网络流量分类方法

基于核函数的SOM网络流量分类方法

扫码查看
由于网络流量数据高度非线性,传统的自组织映射(self-organizing maps,SOM)网络对此分类的鲁棒性和可靠性较差,提出了一种基于核函数的SOM(kernel SOM,KSOM)网络流量分类方法.该方法用核函数代替原始数据在特征空间中映射值的内积,使输入空间中复杂的流量样本结构在特征空间中得到简化,实现对有多个统计特征属性的网络流量在应用层的分类.实验结果表明,KSOM 能识别新应用类型的流量,较传统的SOM更适合对网络流量进行分类,其分类准确率高于NB方法.
Network traffic classification method based on kernel self-organizing maps
Due to network traffic is highly nonlinear, classical self-organizing maps (SOM) is worse robustness and reliability because it adopts Euclidean distance. A network traffic classification method named kernel-SOM (KSOM) is proposed, which adopts kernel function to replace Euclidean distance. This method can simplify the complicated flow sample from input space to feature space, so achieve good classification of network traffic that has several statistic feature attributes in application layer. Experimental results demonstrate that KSOM can identify flows which represent new application protocol. This method has more excellent performance than traditional SOM, and achieves higher classify accuracy than NB algorithm.

self-organizing maps networkkernel functionnonlinearitynetwork trafficclassification

胡婷、王勇、陶晓玲

展开 >

桂林电子科技大学,计算机科学与工程学院,广西,桂林,541004

桂林电子科技大学CSIP广西分中心,广西,桂林,541004

桂林电子科技大学,信息与通信学院,广西,桂林,541004

自组织映射网络 核函数 非线性 网络流量 分类

国家自然科学基金广西研究生创新基金

608720222010105950812M21

2011

计算机工程与设计
中国航天科工集团二院706所

计算机工程与设计

CSTPCDCSCD北大核心
影响因子:0.617
ISSN:1000-7024
年,卷(期):2011.32(4)
  • 4
  • 1