Loading...

ACoPE: An adaptive semi-supervised learning approach for complex-policy enforcement in high-bandwidth networks

Noferesti, M ; Sharif University of Technology | 2020

425 Viewed
  1. Type of Document: Article
  2. DOI: 10.1016/j.comnet.2019.106943
  3. Publisher: Elsevier B.V , 2020
  4. Abstract:
  5. Today's high-bandwidth networks require adaptive analyzing approaches to recognize the network variable behaviors. The analyzing approaches should be robust against the lack of prior knowledge and provide data to impose more complex policies. In this paper, ACoPE is proposed as an adaptive semi-supervised learning approach for complex-policy enforcement in high-bandwidth networks. ACoPE detects and maintains inter-flows relationships to impose complex-policies. It employs a statistical process control technique to monitor accuracy. Whenever the accuracy decreased, ACoPE considers it as a changed behavior and uses data from a deep packet inspection module to adapt itself with the change. The performance of ACoPE in analyzing network traffic is evaluated through UNB ISCX VPN-nonVPN and UNB ISCX Tor-nonTor datasets. The performance is compared with 10 different stream and traditional classification algorithms. ACoPE outperforms the stream classifiers, with 95.92% accuracy, 86.21% precision, and 73.29% recall in VPN dataset, and with 81.12% accuracy, 73.59% precision, and 61.08% recall in Tor dataset. The effectiveness of ACoPE to address the main constraints in analyzing of high-bandwidth networks to enforce security policies, namely comprehensive processing and adaptive learning, are confirmed through three different scenarios. Efficiency and accuracy of ACoPE in real high-bandwidth networks are evaluated by a pilot study, which indicates its efficiency and accuracy in analyzing high-bandwidth networks. © 2019
  6. Keywords:
  7. Adaptive learning ; Complex-policy ; High-bandwidth network analyzing ; Semi-supervised learning ; Bandwidth ; Classification (of information) ; Efficiency ; Machine learning ; Network security ; Statistical process control ; Supervised learning ; Virtual private networks ; Classification algorithm ; Data stream processing ; Deep packet inspection ; High-bandwidth networks ; Network variables ; Policy enforcement ; Complex networks
  8. Source: Computer Networks ; Volume 166 , 2020
  9. URL: https://www.sciencedirect.com/science/article/abs/pii/S1389128619304074