Internet traffic analysis in a large university town: A graphical and clustering approach

Weitao Weng, Kai Lei, Kuai Xu, Xiaoyou Liu, Tao Sun

Research output: Chapter in Book/Report/Conference proceedingConference contribution


Campus networks consist of a rich diversity of end hosts including wired desktops, servers, and wireless BYOD devices such as laptops and smartphones, which are often compromised in insecure networks. Making sense of traffic behaviors of end hosts in campus networks is a daunting task due to the open nature of the network, heterogeneous devices, high mobility of end users, and a wide range of applications. To address these challenges, this paper applies a combination of graphical approaches and spectral clustering to group the Internet traffic of campus networks into distinctive traffic clusters in a divide-and-conquer manner. Specifically, we first model the data communication between a particular subnet of campus networks and the Internet on a specific application port via bipartite graphs, and subsequently use the one-mode projection to capture behavior similarity of end hosts in the same subnet for the same network applications. Finally we apply a spectral clustering algorithm to explore the behavior similarity to identify distinctive application clusters within each subnet. Our experimental results have demonstrated the benefits of our proposed method for analyzing Internet traffic of a large university town to discover anomalous behaviors and to uncover distinctive temporal and spatial traffic patterns.

Original languageEnglish (US)
Title of host publicationWeb-Age Information Management - 17th International Conference, WAIM 2016, Proceedings
EditorsJianliang Xu, Nan Zhang, Dexi Liu, Bin Cui, Xiang Lian
PublisherSpringer Verlag
Number of pages12
ISBN (Print)9783319399362
StatePublished - 2016
Event17th International Conference on Web-Age Information Management, WAIM 2016 - Nanchang, China
Duration: Jun 3 2016Jun 5 2016

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349


Other17th International Conference on Web-Age Information Management, WAIM 2016


  • Bipartite graph
  • Campus network
  • Spectral clustering
  • Traffic analysis

ASJC Scopus subject areas

  • Theoretical Computer Science
  • Computer Science(all)


Dive into the research topics of 'Internet traffic analysis in a large university town: A graphical and clustering approach'. Together they form a unique fingerprint.

Cite this