Geodesic
Primary data processing for constructing network package classifiers in Deep Packet Inspection analysis and in the intrusion detection systems
Informacionnye tehnologii i vyčislitelnye sistemy, no. 4 (2019), pp. 34-42.

Voir la notice de l'article provenant de la source Math-Net.Ru

We consider the procedure for preprocessing the source packet information in a new method for classifying network packets of the application layer in order to determine their belonging to one of the known network protocols. Packets are classified based on the use of machine learning methods and fuzzy logic algorithms in Network Traffic Analysis (NTA) systems, in “deep” packet analysis (Deep Packet Inspection — DPI), in intrusion detection systems (IDS) and in other systems. To define the protocol, the principle of high-speed one-packet classification is used, which consists in analyzing the information transmitted in each particular packet. Elements of behavioral analysis are used, namely, the transition states of information exchange protocols are classified, which allows to achieve a higher level of accuracy of classification and a higher degree of generalization in new test samples.
Keywords: classification of network packets, neural networks, DPI methods, machine learning, definition of network protocols. 
@article{ITVS_2019_4_a3,
     author = {R. N. Ermakov and V. V. Alekseev},
     title = {Primary data processing for constructing network package classifiers in {Deep} {Packet} {Inspection} analysis and in the intrusion detection systems},
     journal = {Informacionnye tehnologii i vy\v{c}islitelnye sistemy},
     pages = {34--42},
     publisher = {mathdoc},
     number = {4},
     year = {2019},
     language = {en},
     url = {http://geodesic.mathdoc.fr/item/ITVS_2019_4_a3/}
}
TY  - JOUR
AU  - R. N. Ermakov
AU  - V. V. Alekseev
TI  - Primary data processing for constructing network package classifiers in Deep Packet Inspection analysis and in the intrusion detection systems
JO  - Informacionnye tehnologii i vyčislitelnye sistemy
PY  - 2019
SP  - 34
EP  - 42
IS  - 4
PB  - mathdoc
UR  - http://geodesic.mathdoc.fr/item/ITVS_2019_4_a3/
LA  - en
ID  - ITVS_2019_4_a3
ER  - 
%0 Journal Article
%A R. N. Ermakov
%A V. V. Alekseev
%T Primary data processing for constructing network package classifiers in Deep Packet Inspection analysis and in the intrusion detection systems
%J Informacionnye tehnologii i vyčislitelnye sistemy
%D 2019
%P 34-42
%N 4
%I mathdoc
%U http://geodesic.mathdoc.fr/item/ITVS_2019_4_a3/
%G en
%F ITVS_2019_4_a3
R. N. Ermakov; V. V. Alekseev. Primary data processing for constructing network package classifiers in Deep Packet Inspection analysis and in the intrusion detection systems. Informacionnye tehnologii i vyčislitelnye sistemy, no. 4 (2019), pp. 34-42. http://geodesic.mathdoc.fr/item/ITVS_2019_4_a3/