返回
MPAF: Encrypted Traffic Classification With Multi-Phase Attribute Fingerprint
DOI:10.1109/TIFS.2024.3428839.png)
摘要
En 中文
The widespread use of cryptographic protocols such as Transport Layer Security (TLS) has necessitated the development of effective methods for encrypted traffic classification. The existing methods relying on a single feature source face challenges in achieving high accuracy and efficiency simultaneously. Additionally, there is a decrease in accuracy in complex scenarios, posing significant challenges for networks and security services based on application-level traffic classification. In this paper, we propose Multi-Phase Attribute Fingerprint (MPAF), an encrypted traffic classification system that overcomes these limitations. MPAF leverages three phases to separately leverage attributes that emerge at different time periods of encrypted traffic communication. Additionally, we transform discrete attributes into computable vectors through embedding and design a classifier for the multi-phase mechanism based on a leaf node masking tree. The experimental results show that MPAF achieves a classification accuracy ranging from 96.33% to 99.42% and an average waiting time (AWT) ranging from 0.18s to 0.45s. MPAF outperforms other approaches in scenarios with high robustness requirements, including small-scale training datasets, cross-dataset classification, and unknown application recognition.
Keyword:
Cryptography
Deep learning
Telecommunication traffic
Mobile applications
Fingerprint recognition
Payloads
Accuracy
Encrypted traffic classification
multi-phase
TLS messages
network management
期刊
IF:
8
论文数:
5.3K
被引数:
2.3W
机构
引用论文
Seeing Traffic Paths: Encrypted Traffic Classification With Path Signature Features查看流量路径: 具有路径签名功能的加密流量分类
Sources of priority substances entering an urban wastewater catchment—trace organic chemicals
Chemosphere
IF0

