Complex application identification and private network mining algorithm based on traffic-aware model in large-scale networks

Due to the lack of definition and analysis of complex applications in the field of protocol identification research, complex application identification is still attributed to traditional protocol identification, resulting in poor recognition performance. This paper has conducted in-depth research on complex application identification problems. Complex applications are first defined and distinguished from traditional protocols. At the same time, the communication process of complex applications is deeply analyzed, and the communication characteristics of complex applications are summarized. Then, based on the communication characteristics, a traffic-aware model describing the communication process of complex applications is proposed. The communication modes of complex applications are modeled from spatial dimension, time dimension and traffic dimension. Based on the traffic-aware model, spatial dimension awareness is used to filter network traffic. Finally, the traffic dimension is used to cluster the filtered multiple network flows into multiple network flow clusters and extract statistical features. The time dimension is used to construct the behavior state sequence of the complex application based on the statistical characteristics of the network flow cluster, and finally the behavior state is used. Sequences are used as identification features to effectively and accurately identify complex applications. The experimental results show that the accuracy of Skype recognition is improved from 25% to 80% after the original method is improved.