Identifying Known and Unknown Mobile Application Traffic Using a Multilevel Classifier

Table 2

The details of each layer classifier.

	Model	Features	Output	Classifier Number
Layer 1	Random Forest	First 16 bytes of payload	binary-class	1
Layer 2	Random Forest	First 16 bytes of payload	N+1-class	1
Layer 3	Random Forest	Port, 12 statistical features	binary-class	(N+2)(N+1)/2
	Xgboost [24]			(N+2)(N+1)/2