TCS: Classification of Network Flows Through Application Level Protocol Analysis

The Traffic Classifier System (TCS) is designed to label Netflows based on application layer protocols (a Netflow is defined as a series of network packets originating from a specified host, destined for another specified host within a certain time range). To achieve this, TCS leverages both Deep Packet Inspection (DPI) and Statistical Packet Inspection (SPI). TCS also uses ML to automatically improve the accuracy of DPI, allowing it to identify never before seen application protocols.

PhD Candidate/Security Researcher