基于贝叶斯网络的Peer-to-Peer识别方法  

Peer-to-Peer Traffic Identification Using Bayesian Networks

作　　者：李君[1,2] 张顺颐[1] 王浩云[1] 李翠莲[2] 

机构地区：[1]南京邮电大学信息网络技术研究所,南京210003 [2]浙江万里学院通信工程系,浙江宁波315100

出　　处：《应用科学学报》2009年第2期124-130,共7页Journal of Applied Sciences

基　　金：国家“863”高技术研究发展计划基金(No.2005AA121620,No.2006AA01Z232);浙江省自然基金(No.Y1080935);江苏省普通高校研究生创新计划基金(No.CX07B_110z)资助项目

摘　　要：网络业务分类与识别是网络管理、网络规划和安全的必要途径,而Peer-to-Peer(P2P)流量由于采用伪装端口、动态端口以及应用层加密,已成为业务分类与识别的主要难点.该文提出了P2P业务的精确识别方法,通过对流统计特性的分析,提取相关特征属性,应用遗传算法选取最优特征属性子集,并采用贝叶斯网络机器学习方法识别P2P流量.实验表明K2,TAN和BAN能有效快速地识别P2P业务,分类精度高达95%以上,很大程度上优于朴素贝叶斯分类和BP神经网络方法.同时该系统具有可扩展性,能够识别未知的P2P流量,并适用于实时分类识别环境.Accurate traffic classification is vital to numerous network activities, such as security monitoring, quality of service provisioning and network planning. However, current P2P applications, which generate a substantial volume of Internet traffic, use dynamic port numbers, HTTP masquerading and payload encryption to avoid detection. In this paper, we present an accurate P2P identification method using Bayesian networks. Based on the abstracted attributes of flow statistics, the optimal attribute subset is selected using genetic algorithms and P2P traffic is identified using Bayesian networks. We evaluate the algorithms and compare them to the previously used Naive Bayesian model and BP perceptron. Experimental results show that the proposed algorithms achieve better overall accuracy up to 95% with less cost. Further, our result indicates that the approaches are capable of identifying unknown P2P traffic and applicable to the real-time applications.

关 键 词：PEER-TO-PEER 流量识别 朴素贝叶斯 贝叶斯网络 

分 类 号：O212.7[理学—概率论与数理统计]