A Modular Two-layer System for Accurate and Fast Traffic Classification

Traffic classification is the basic block of many network management and control operations such as allocating appropriate levels of quality of service to different applications, filtering and intrusion detection. Due to importance of accurately classifying large networks traffic, we have proposed a lightweight two-layer system, which is perfect for today's high-speed links. Considering the trade-off among accuracy and speed, our system is based on a modular architecture and combination of some expert's opinions. Moreover we extract the best features for each application group in order to achieve an accurate system. Experimental results indicates that our proposed system has accuracy comparable to more sophisticated system and its learning cost is 10 times less than these systems. In addition we can customize our proposed system according to the needs and goals of network administrator. Our system is robust and adaptable to network changes such as the appearance of new applications. In such a case, our system labels new flow as "unknown" instead of misclassifying. So the administrator will notice and take necessary actions to improve the classification system.