Multi-ARCL: Multimodal adaptive relay-based distributed continual learning for encrypted traffic classification

Zeyi Li

doi:10.1016/j.jpdc.2025.105083

Multi-ARCL: Multimodal adaptive relay-based distributed continual learning for encrypted traffic classification

2025-04-01

0

PRE

AI

DOI：10.1016/j.jpdc.2025.105083

Original

Original request for help

Save

Abstract

En 中文

Encrypted Traffic Classification (ETC) using Deep Learning (DL) faces two bottlenecks: homogeneous network traffic representation and ineffective model updates. Currently, multimodal-based DL combined with the Continual Learning (CL) approaches mitigate the above problems but overlook silent applications, whose traffic is absent due to guideline violations leading developers to cease their operation and maintenance. Specifically, silent applications accelerate the decay of model stability, while new and active applications challenge model plasticity. This paper presents Multi-ARCL, a multimodal adaptive replay-based distributed CL framework for ETC. The framework prioritizes using crypto-semantic information from flows' payload and flows' statistical features to represent. Additionally, the framework proposes an adaptive relay-based continual learning method that effectively eliminates silent neurons and retrains new samples and a limited subset of old ones. Exemplars of silent applications are selectively removed during new task training. To enhance training efficiency, the framework uses distributed learning to quickly address the stability-plasticity dilemma and reduce the cost of storing silent applications. Experiments show that ARCL outperforms state-of-the-art methods, with an accuracy improvement of over 8.64% on the NJUPT2023 dataset.

Keywords:

Encrypted traffic classification

Continual learning

Machine unlearning

Distributed learning

Multimodal learning

Multi-ARCL: Multimodal adaptive relay-based distributed continual learning for encrypted traffic classification

Abstract

Journal

Organization