返回
A graph representation framework for encrypted network traffic classification
DOI:10.1016/j.cose.2024.104134.png)
摘要
En 中文
Network Traffic Classification (NTC) is crucial for ensuring internet security, but encryption presents significant challenges to this task. While Machine Learning (ML) and Deep Learning (DL) methods have shown promise, issues such as limited representativeness leading to sub-optimal generalizations and performance remain prevalent. These problems become more pronounced with advanced obfuscation, network security, and privacy technologies, indicating a need for improved model robustness. To address these issues, we focus on feature extraction and representation in NTC by leveraging the expressive power of graphs to represent network traffic at various granularity levels. By modeling network traffic as interconnected graphs, we can analyze both flow-level and packet-level data. Our graph representation method for encrypted NTC effectively preserves crucial information despite encryption and obfuscation. We enhance the robustness of our approach by using cosine similarity to exploit correlations between encrypted network flows and packets, defining relationships between abstract entities. This graph structure enables the creation of structural embeddings that accurately define network traffic across different encryption levels. Our end-to-end process demonstrates significant improvements where traditional NTC methods struggle, such as in Tor classification, which employs anonymization to further obfuscate traffic. Our packet-level classification approach consistently outperforms existing methods, achieving accuracies exceeding 96%.
Keyword:
Network traffic classification
Neural Networks
Internet security
Encryption
Graphs
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
How Many Packets Are Most Effective for Early Stage Traffic Identification: An Experimental Study
CHINA COMMUNICATIONS
IF3.1
Seeing Traffic Paths: Encrypted Traffic Classification With Path Signature Features查看流量路径: 具有路径签名功能的加密流量分类
Feature mining for encrypted malicious traffic detection with deep learning and other machine learning algorithms基于深度学习和其他机器学习算法的加密恶意流量检测特征挖掘
COMPUTERS & SECURITY
IF5.4
Effect of Religiosity, Perceived Risk, and Attitude on Tax Compliant Intention Moderated by e-Filing
EETC: An extended encrypted traffic classification algorithm based on variant resnet network
COMPUTERS & SECURITY
IF5.4

