A Survey on the Use of Traffic Traces to Battle Internet Threats

Network security study has been developing methods for discovering anomalies and for recognizing malignant patterns for intrusion detection. On the other hand, network traffic study has been investigating methods for traffic classification mainly for traffic engineering. Intuitively, combining these two fields of study is expected to achieve an innovative solution for various issues in intrusion detection as well as in bots attack mitigation recently proliferating. To this end, we conduct a survey on the existing methods for applying traffic measurement to resolving network security issues and attempt to identify a list of challenges in classifying malicious traffic.