基于相关信息的网络流量贝叶斯分类法改进  

Improving for Network Traffic Bayes Classification Method Based on Correlation Information

作　　者：赵英[1] 谭杨[1] 

机构地区：[1]北京化工大学信息中心,北京100029

出　　处：《计算机工程》2016年第3期80-83,88,共5页Computer Engineering

基　　金：国家科技支撑计划基金资助项目(2010BAC67B05)

摘　　要：网络应用的快速增长导致传统基于端口与有效载荷的网络流量分类方法效率大幅降低,并且目前多数网络流分类方法未考虑流之间的相关性。针对上述问题,基于相关信息提出一种改进的网络流量贝叶斯分类法。利用流包模型反映网络流的相关信息,将非参数核密度估计方法引入贝叶斯分类器中,对分布密度函数进行非参数核密度估计。实验结果表明,与使用核密度估计和流包的分类方法相比,该方法的分类准确率更高。With the rapid growth of network applications,the efficiency of traditional network traffic classification method based on ports and payloads is reduced greatly. Meanwhile,most traffic flowclassification methods do not consider the correlation among the flows at present. Aiming at these problems,this paper proposes an improved network traffic Bayes classification method based on correlation information. Flowcorrelation information is modeled by Bag of Flow（ Bo F）,and a method of nonparametric kernel density estimation applied to the Bayes classifier is introduced. The Bayes classification method is improved by performing the nonparametric kernel density estimation to various types of distribution functions. Experimental results showthat this improved method can achieve higher classification accuracy compared with KNB and Bo F-NB method.

关 键 词：网络流量分类 朴素贝叶斯分类 核密度估计 相关信息 机器学习 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]