返回
MTL-DoHTA: Multi-Task Learning-Based DNS over HTTPS Traffic Analysis for Enhanced Network Security
DOI:10.3390/s25040993.png)
摘要
En 中文
The adoption of DNS over HTTPS (DoH) has significantly enhanced user privacy and security by encrypting DNS queries. However, it also presents new challenges for detecting malicious activities, such as DNS tunneling, within encrypted traffic. In this study, we propose MTL-DoHTA, a multi-task learning-based framework designed to analyze DoH traffic and classify it into three tasks: (1) DoH vs. non-DoH traffic, (2) benign vs. malicious DoH traffic, and (3) the identification of DNS tunneling tools (e.g., dns2tcp, dnscat2, iodine). Leveraging statistical features derived from network traffic and a 2D-CNN architecture enhanced with GradNorm and attention mechanisms, MTL-DoHTA achieves a macro-averaging F1-score of 0.9905 on the CIRA-CIC-DoHBrw-2020 dataset. Furthermore, the model effectively handles class imbalance and mitigates overfitting using downsampling techniques while maintaining high classification performance. The proposed framework can serve as a reliable tool for monitoring and securing sensor-based network systems against sophisticated threats, while also demonstrating its potential to enhance multi-tasking capabilities in resource-constrained sensor environments.
Keyword:
DNS over HTTPS
DNS covert channel
multi-task learning
deep learning
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.5
论文数:
7.2W
被引数:
20.9W
机构
引用论文
Analysis and assessment of ship collision accidents using Fault Tree and Multiple Correspondence Analysis基于故障树和多重对应分析的船舶碰撞事故分析与评估
The effect of phytoecdysteroid of Cycas revolua, Portulaca oleracea, and Morus sp. on molting period, growth and survival rate of tiger shrimp, Penaeus monodon苏铁、马齿苋和桑属植物蜕皮激素对斑节对虾蜕皮期、生长和存活率的影响
Encrypted and covert DNS queries for botnets: Challenges and countermeasures
COMPUTERS & SECURITY
IF5.4
MASiNet: Network Intrusion Detection for IoT Security Based on Meta-Learning FrameworkMASiNet: 基于元学习框架的物联网安全网络入侵检测
Chemical profile and pharmacological effects of the resin and essential oil from Bursera slechtendalii: A medicinal “copal tree” of southern Mexico
Fitoterapia
IF0

