Internet Traffic Behavior Profiling for Network Security Monitoring

Kuai Xu, Zhi Li Zhang, Supratik Bhattacharyya

Research output: Contribution to journalArticlepeer-review

87 Scopus citations


Recent spates of cyber-attacks and frequent emergence of applications affecting Internet traffic dynamics have made it imperative to develop effective techniques that can extract, and make sense of, significant communication patterns from Internet traffic data for use in network operations and security management. In this paper, we present a general methodology for building comprehensive behavior profiles of Internet backbone traffic in terms of communication patterns of end-hosts and services. Relying on data mining and entropy-based techniques, the methodology consists of significant cluster extraction, automatic behavior classification and structural modeling for in-depth interpretive analyses. We validate the methodology using data sets from the core of the Internet.

Original languageEnglish (US)
Pages (from-to)1241-1252
Number of pages12
JournalIEEE/ACM Transactions on Networking
Issue number6
StatePublished - Dec 2008
Externally publishedYes


  • Anomaly behavior
  • monitoring
  • traffic profiling

ASJC Scopus subject areas

  • Software
  • Computer Science Applications
  • Computer Networks and Communications
  • Electrical and Electronic Engineering


Dive into the research topics of 'Internet Traffic Behavior Profiling for Network Security Monitoring'. Together they form a unique fingerprint.

Cite this