Method and apparatus for automatically constructing application signatures
First Claim
1. A method for generating a final signature for an application, comprising:
- deriving an initial application signature using a model training data set;
testing said initial application signature with a single validation data set;
obtaining at least one cost minimizing parameter;
creating a plurality of trained application signatures using both said at least one cost minimizing parameter and a plurality of preclassified training data sets;
testing each of said plurality of trained application signatures using a plurality of preclassified validation data sets; and
determining said final signature from said plurality of trained application signatures.
1 Assignment
0 Petitions
Accused Products
Abstract
The present invention relates to a method and system for the automated construction of application signatures. In one example, an approach for automatically constructing accurate signatures for individual applications, with minimal human involvement or application domain knowledge, is provided. Given a training data set containing the application traffic, the Automated Construction of Application Signatures (ACAS) system uses a combination of statistical, information theoretic and combinatorial optimization techniques, to derive application-layer signatures from the payload of packets, e.g., IP packets. Evaluations with a range of applications demonstrate that the derived signatures are very accurate and scale to identifying a large number of flows in real time on high-speed links.
-
Citations
20 Claims
-
1. A method for generating a final signature for an application, comprising:
-
deriving an initial application signature using a model training data set; testing said initial application signature with a single validation data set; obtaining at least one cost minimizing parameter; creating a plurality of trained application signatures using both said at least one cost minimizing parameter and a plurality of preclassified training data sets; testing each of said plurality of trained application signatures using a plurality of preclassified validation data sets; and determining said final signature from said plurality of trained application signatures. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A system for generating a final signature for an application, comprising:
-
means for deriving an initial application signature using a model training data set; means for testing said initial application signature with a single validation data set; means for obtaining at least one cost minimizing parameter; means for creating a plurality of trained application signatures using both said at least one cost minimizing parameter and a plurality of preclassified training data sets; means for testing each of said plurality of trained application signatures using a plurality of preclassified validation data sets; and means for determining said final signature from said plurality of trained application signatures. - View Dependent Claims (10, 11, 12, 13, 14)
-
-
15. A computer readable medium having stored thereon instruction that, when executed by a processor, causing the processor to perform a method for generating a final signature using machine learning, comprising:
-
deriving an initial application signature using a model training data set; testing said initial application signature with a single validation data set; obtaining at least one cost minimizing parameter; creating a plurality of trained application signatures using both said at least one cost minimizing parameter and a plurality of preclassified training data sets; testing each of said plurality of trained application signatures using a plurality of preclassified validation data sets; and determining said final signature from said plurality of trained application signatures. - View Dependent Claims (16, 17, 18, 19, 20)
-
Specification