Encrypted traffic identification method based on deep residual capsule network with attention mechanism
With the improvement of users’ security awareness and the development of encryption technology, encrypted traffic has become an important part of network traffic, and identifying encrypted traffic has become an important part of network traffic supervision.The encrypted traffic identification method...
| Main Author: | |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
POSTS&TELECOM PRESS Co., LTD
2023-02-01
|
| Series: | 网络与信息安全学报 |
| Subjects: | |
| Online Access: | https://www.infocomm-journal.com/cjnis/CN/10.11959/j.issn.2096-109x.2023007 |
| _version_ | 1797262558786224128 |
|---|---|
| author | Guozhen SHI, Kunyang LI, Yao LIU, Yongjian YANG |
| author_facet | Guozhen SHI, Kunyang LI, Yao LIU, Yongjian YANG |
| author_sort | Guozhen SHI, Kunyang LI, Yao LIU, Yongjian YANG |
| collection | DOAJ |
| description | With the improvement of users’ security awareness and the development of encryption technology, encrypted traffic has become an important part of network traffic, and identifying encrypted traffic has become an important part of network traffic supervision.The encrypted traffic identification method based on the traditional deep learning model has problems such as poor effect and long model training time.To address these problems, the encrypted traffic identification method based on a deep residual capsule network (DRCN) was proposed.However, the original capsule network was stacked in the form of full connection, which lead to a small model coupling coefficient and it was impossible to build a deep network model.The DRCN model adopted the dynamic routing algorithm based on the three-dimensional convolutional algorithm (3DCNN) instead of the fully-connected dynamic routing algorithm, to reduce the parameters passed between each capsule layer, decrease the complexity of operations, and then build the deep capsule network to improve the accuracy and efficiency of recognition.The channel attention mechanism was introduced to assign different weights to different features, and then the influence of useless features on the recognition results was reduced.The introduction of the residual network into the capsule network layer and the construction of the residual capsule network module alleviated the gradient disappearance problem of the deep capsule network.In terms of data pre-processing, the first 784byte of the intercepted packets was converted into images as input of the DRCN model, to avoid manual feature extraction and reduce the labor cost of encrypted traffic recognition.The experimental results on the ISCXVPN2016 dataset show that the accuracy of the DRCN model is improved by 5.54% and the training time of the model is reduced by 232s compared with the BLSTM model with the best performance.In addition, the accuracy of the DRCN model reaches 94.3% on the small dataset.The above experimental results prove that the proposed recognition scheme has high recognition rate, good performance and applicability. |
| first_indexed | 2024-04-24T23:59:02Z |
| format | Article |
| id | doaj.art-1c16a58e232e4aefbf8c0ec2ebfe9826 |
| institution | Directory Open Access Journal |
| issn | 2096-109X |
| language | English |
| last_indexed | 2024-04-24T23:59:02Z |
| publishDate | 2023-02-01 |
| publisher | POSTS&TELECOM PRESS Co., LTD |
| record_format | Article |
| series | 网络与信息安全学报 |
| spelling | doaj.art-1c16a58e232e4aefbf8c0ec2ebfe98262024-03-14T08:14:45ZengPOSTS&TELECOM PRESS Co., LTD网络与信息安全学报2096-109X2023-02-0191324110.11959/j.issn.2096-109x.2023007Encrypted traffic identification method based on deep residual capsule network with attention mechanismGuozhen SHI, Kunyang LI, Yao LIU, Yongjian YANGWith the improvement of users’ security awareness and the development of encryption technology, encrypted traffic has become an important part of network traffic, and identifying encrypted traffic has become an important part of network traffic supervision.The encrypted traffic identification method based on the traditional deep learning model has problems such as poor effect and long model training time.To address these problems, the encrypted traffic identification method based on a deep residual capsule network (DRCN) was proposed.However, the original capsule network was stacked in the form of full connection, which lead to a small model coupling coefficient and it was impossible to build a deep network model.The DRCN model adopted the dynamic routing algorithm based on the three-dimensional convolutional algorithm (3DCNN) instead of the fully-connected dynamic routing algorithm, to reduce the parameters passed between each capsule layer, decrease the complexity of operations, and then build the deep capsule network to improve the accuracy and efficiency of recognition.The channel attention mechanism was introduced to assign different weights to different features, and then the influence of useless features on the recognition results was reduced.The introduction of the residual network into the capsule network layer and the construction of the residual capsule network module alleviated the gradient disappearance problem of the deep capsule network.In terms of data pre-processing, the first 784byte of the intercepted packets was converted into images as input of the DRCN model, to avoid manual feature extraction and reduce the labor cost of encrypted traffic recognition.The experimental results on the ISCXVPN2016 dataset show that the accuracy of the DRCN model is improved by 5.54% and the training time of the model is reduced by 232s compared with the BLSTM model with the best performance.In addition, the accuracy of the DRCN model reaches 94.3% on the small dataset.The above experimental results prove that the proposed recognition scheme has high recognition rate, good performance and applicability.https://www.infocomm-journal.com/cjnis/CN/10.11959/j.issn.2096-109x.2023007encrypted traffic identificationdeep capsule network3d convolutional algorithmresidual network |
| spellingShingle | Guozhen SHI, Kunyang LI, Yao LIU, Yongjian YANG Encrypted traffic identification method based on deep residual capsule network with attention mechanism 网络与信息安全学报 encrypted traffic identification deep capsule network 3d convolutional algorithm residual network |
| title | Encrypted traffic identification method based on deep residual capsule network with attention mechanism |
| title_full | Encrypted traffic identification method based on deep residual capsule network with attention mechanism |
| title_fullStr | Encrypted traffic identification method based on deep residual capsule network with attention mechanism |
| title_full_unstemmed | Encrypted traffic identification method based on deep residual capsule network with attention mechanism |
| title_short | Encrypted traffic identification method based on deep residual capsule network with attention mechanism |
| title_sort | encrypted traffic identification method based on deep residual capsule network with attention mechanism |
| topic | encrypted traffic identification deep capsule network 3d convolutional algorithm residual network |
| url | https://www.infocomm-journal.com/cjnis/CN/10.11959/j.issn.2096-109x.2023007 |
| work_keys_str_mv | AT guozhenshikunyangliyaoliuyongjianyang encryptedtrafficidentificationmethodbasedondeepresidualcapsulenetworkwithattentionmechanism |