Return
EETC: An extended encrypted traffic classification algorithm based on variant resnet network
DOI:10.1016/j.cose.2023.103175.png)
Abstract
En 中文
With the advent of big data, encrypted traffic is widely used, and it is gradually becoming a new chal-lenge for network security and management. Many researchers have obtained good results by converting encrypted traffic into images and feeding them to deep learning-based classification models. However, these methods have some limitations in that they cannot do sustainable learning. They have to retrain a new classifier when new traffic is encountered. To tackle this issue, we propose an extended encrypted traffic classification algorithm based on incremental learning. This approach extracts content and statis-tical information from encrypted traffic and supports multi-label prediction for VPN channels and appli-cations. We can add new classes to the model without completely retraining and accelerate the update cycle of the model. The results show that the proposed model performs well in classification experiments, which can achieve 98.1% and 96.0% classification accuracy on ISCXVPN2016 and self-collected dataset re-spectively. In addition, our method can retain high accuracy under the situation of limited memory space while the number of new classes of data increases gradually. It demonstrates the superiority of construct-ing a generic unforgetting basis for classifying encrypted communication.(c) 2023 Elsevier Ltd. All rights reserved.
Keywords:
Encrypted traffic
Network security
Incremental learning
Residual network
Extended classification
Journal
C
IF:
5.4
Papers:
4.6K
Citations:
1.4W
Organization
Cited Papers
I223R Mutation in Influenza A(H1N1)pdm09 Neuraminidase Confers Reduced Susceptibility to Oseltamivir and Zanamivir and Enhanced Resistance with H275Y
PLoS ONE
IF0

