0

I am hoping for suggestions or advice as to whether ML offers a suitable solution to the below problem. I am not so familiar with ML techniques so apologies if this is a straight forward question.

I have a capture of network traffic which represents API calls to a host in a network. Some of these requests serve as a "trigger" for the host to make outgoing API calls to another host, I also have packet captures for this. I am trying to detect and classify the triggers based purely on the packet size (this is possible because the finite set of API calls used have unique packet sizes). Assuming that once an outgoing API call is detected from the host I want to analyse the previously received packets in order to identify the "trigger packet" and classify it as the trigger based on the packet size.

Any ideas what sort of algorithm might be suitable for this problem? In general is machine learning suitable for this problem? The purpose would be that as more APIs are introduced it is still possible to classify triggers based on unique packet size of received packets by the host and therefore predict when an outgoing API call should be made.

Thanks

rp259
  • 1
  • 1

0 Answers0