arrow
返回

Let model keep evolving: Incremental learning for encrypted traffic classification

delete2024-02-01
delete2
PRE
AI
X
Xiang Li
谢
谢江 (Jiang Xie)
Q
Qige Song
Y
Yafei Sang *
Y
Yongzheng Zhang
S
Shuhao Li
T
Tianning Zang
DOI:10.1016/j.cose.2023.103624delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Encrypted Traffic Classification (ETC) is valuable for many network management and security solutions as it provides insights into applications active on the network. However, the network environment constantly evolves, and new applications emerge in an endless stream daily, which gradually makes well-trained ETC models ineffective. The conventional approach to adapting new applications is to re-train the models on a re-formed dataset with both pre-existing and new application samples. The major limitation is that requiring redundant computing resources and sufficient storage spaces. In this work, we propose an Incremental Learning (IL) framework based on multi-view sequences fusion, MISS, to keep ETC models evolving with new applications. The key novelty of MISS is three-fold: extract cross-view information from multi-view sequences to capture sufficient knowledge; propose an exemplar selection algorithm from communication patterns to reduce redundant consumption; design a pair of branches from the learnability of parameters to mitigate accuracy loss during evolution. MISS outperforms the existing IL methods of ETC, and the state-of-the-art ETC models using the classic IL framework, on the real-world network traffic datasets, which achieves satisfactory improvements of 11.37%1' and 1.58%1'. Furthermore, we comprehensively perform incremental experiments to evaluate the evolution ability of MISS, which is able to select representative exemplars of old applications, counteract the adverse effects of homogeneous applications, and keep evolving with unknown applications.
Keyword:
Encrypted traffic classification
Evolve
Incremental learning
Multi-view sequences
Cross-view information
Exemplar selection

期刊

C
Computers and Security
IF:
5.4
论文数:
4.6K
被引数:
1.4W

机构

U
university of chinese academy of sciences, cas
学者数:
4.1W
论文数: 3.8W
被引数: 75
C
chinese academy of sciences
学者数:
56.7W
论文数: 45.0W
被引数: 704
引用论文

引用论文

A Survey of Payload-Based Traffic Classification Approaches
err2014-01-01
err212
PREAI
errFinsterbusch, Michael; Richter, Chris; Rocha, Eduardo; Mueller, Jean-Alexander; Haenssgen, Klaus
err分享
err收藏
err分享
err收藏
Nickel(II) complexes of 1-methylimidazoline-2(3H)-thione
err1980-01-01
err0
PREAI
errEric S. Raper; Marion E. O'neill; J.Anthony Daniels
err分享
err收藏
Internet Traffic Classification Using Constrained Clustering
err2014-11-01
err91
PREAI
errWang, Yu; Xiang, Yang; Zhang, Jun; Zhou, Wanlei; Wei, Guiyi; Yang, Laurence T.
err分享
err收藏
学者 查看更多内容