Neural Packet Classification
Packet classification is a fundamental problem in computer networking. This problem exposes a hard tradeoff between the computation and state complexity, which makes it particularly challenging. To navigate this tradeoff, existing solutions rely on complex hand-tuned heuristics, which are brittle and hard to optimize. In this paper, we propose a deep reinforcement learning (RL) approach to solve the packet classification problem. There are several characteristics that make this problem a good fit for Deep RL. First, many of the existing solutions are iteratively building a decision tree by splitting nodes in the tree. Second, the effects of these actions (e.g., splitting nodes) can only be evaluated once we are done with building the tree. These two characteristics are naturally captured by the ability of RL to take actions that have sparse and delayed rewards. Third, it is computationally efficient to generate data traces and evaluate decision trees, which alleviate the notoriously high sample complexity problem of Deep RL algorithms. Our solution, NeuroCuts, uses succinct representations to encode state and action space, and efficiently explore candidate decision trees to optimize for a global objective. It produces compact decision trees optimized for a specific set of rules and a given performance metric, such as classification time, memory footprint, or a combination of the two. Evaluation on ClassBench shows that NeuroCuts outperforms existing hand-crafted algorithms in classification time by 18% at the median, and reduces both time and memory footprint by up to 3x.
Code (0)
등록된 구현이 없습니다.
Tasks
ClassificationDeep Reinforcement LearningGeneral ClassificationNavigateReinforcement LearningReinforcement Learning (RL)Similar Papers 제목 키워드 기반
A Federated Learning Approach for Mobile Packet Classification
In order to improve mobile data transparency, a number of network-based approaches have been proposed to inspect packets generated by mobile devices and detect personally identifiable information (PII), ad requests, or o…
Classificationfeature selectionFederated LearningGeneral ClassificationFastFlow: Early Yet Robust Network Flow Classification using the Minimal Number of Time-Series Packets
Network traffic classification is of great importance for network operators in their daily routines, such as analyzing the usage patterns of multimedia applications and optimizing network configurations. Internet service…
ClassificationTime SeriesTraffic ClassificationPacketCLIP: Multi-Modal Embedding of Network Traffic and Language for Cybersecurity Reasoning
Traffic classification is vital for cybersecurity, yet encrypted traffic poses significant challenges. We present PacketCLIP, a multi-modal framework combining packet data with natural language semantics through contrast…
Anomaly DetectionClassificationGraph Neural NetworkIntrusion Detection+2Deep Packet: A Novel Approach For Encrypted Traffic Classification Using Deep Learning
Internet traffic classification has become more important with rapid growth of current Internet network and online applications. There have been numerous studies on this topic which have led to many different approaches.…
General ClassificationTraffic ClassificationFlow-Packet Hybrid Traffic Classification for Class-Aware Network Routing
Network traffic classification using machine learning techniques has been widely studied. Most existing schemes classify entire traffic flows, but there are major limitations to their practicality. At a network router, t…
BIG-bench Machine LearningClassificationGeneral ClassificationTraffic Classification