A Novel Lightweight Anonymous Proxy Traffic Detection Method Based on Spatio-Temporal Features
Anonymous proxies are used by criminals for illegal network activities due to their anonymity, such as data theft and cyber attacks. Therefore, anonymous proxy traffic detection is very essential for network security. In recent years, detection based on deep learning has become a hot research topic,...
| Main Authors: | , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2022-06-01
|
| Series: | Sensors |
| Subjects: | |
| Online Access: | https://www.mdpi.com/1424-8220/22/11/4216 |
| _version_ | 1827663896833425408 |
|---|---|
| author | Yanjie He Wei Li |
| author_facet | Yanjie He Wei Li |
| author_sort | Yanjie He |
| collection | DOAJ |
| description | Anonymous proxies are used by criminals for illegal network activities due to their anonymity, such as data theft and cyber attacks. Therefore, anonymous proxy traffic detection is very essential for network security. In recent years, detection based on deep learning has become a hot research topic, since deep learning can automatically extract and select traffic features. To make (heterogeneous) network traffic adapt to the homogeneous input of typical deep learning algorithms, a major branch of existing studies convert network traffic into images for detection. However, such studies are commonly subject to the limitation of large-sized image representation of network traffic, resulting in very large storage and computational resource overhead. To address this limitation, a novel method for anonymous proxy traffic detection is proposed. The method is one of the solutions to reduce storage and computational resource overhead. Specifically, it converts the sequences of the size and inter-arrival time of the first <i>N</i> packets of a flow into images, and then categorizes the converted images using the one-dimensional convolutional neural network. Both proprietary and public datasets are used to validate the proposed method. The experimental results show that the converted images of the method are at least 90% smaller than that of existing image-based deep learning methods. With substantially smaller image sizes, the method can still achieve F1 scores up to 98.51% in Shadowsocks traffic detection and 99.8% in VPN traffic detection. |
| first_indexed | 2024-03-10T00:51:42Z |
| format | Article |
| id | doaj.art-3df62fd07b4847b6abc2e6598008781f |
| institution | Directory Open Access Journal |
| issn | 1424-8220 |
| language | English |
| last_indexed | 2024-03-10T00:51:42Z |
| publishDate | 2022-06-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Sensors |
| spelling | doaj.art-3df62fd07b4847b6abc2e6598008781f2023-11-23T14:50:26ZengMDPI AGSensors1424-82202022-06-012211421610.3390/s22114216A Novel Lightweight Anonymous Proxy Traffic Detection Method Based on Spatio-Temporal FeaturesYanjie He0Wei Li1School of Computer Science and Technology, Xi’an Jiaotong University, Xi’an 710049, ChinaSchool of Computer Science and Technology, Xi’an Jiaotong University, Xi’an 710049, ChinaAnonymous proxies are used by criminals for illegal network activities due to their anonymity, such as data theft and cyber attacks. Therefore, anonymous proxy traffic detection is very essential for network security. In recent years, detection based on deep learning has become a hot research topic, since deep learning can automatically extract and select traffic features. To make (heterogeneous) network traffic adapt to the homogeneous input of typical deep learning algorithms, a major branch of existing studies convert network traffic into images for detection. However, such studies are commonly subject to the limitation of large-sized image representation of network traffic, resulting in very large storage and computational resource overhead. To address this limitation, a novel method for anonymous proxy traffic detection is proposed. The method is one of the solutions to reduce storage and computational resource overhead. Specifically, it converts the sequences of the size and inter-arrival time of the first <i>N</i> packets of a flow into images, and then categorizes the converted images using the one-dimensional convolutional neural network. Both proprietary and public datasets are used to validate the proposed method. The experimental results show that the converted images of the method are at least 90% smaller than that of existing image-based deep learning methods. With substantially smaller image sizes, the method can still achieve F1 scores up to 98.51% in Shadowsocks traffic detection and 99.8% in VPN traffic detection.https://www.mdpi.com/1424-8220/22/11/4216Shadowsocks traffic detectionVPN traffic detectionspatio-temporal featuresCNN |
| spellingShingle | Yanjie He Wei Li A Novel Lightweight Anonymous Proxy Traffic Detection Method Based on Spatio-Temporal Features Sensors Shadowsocks traffic detection VPN traffic detection spatio-temporal features CNN |
| title | A Novel Lightweight Anonymous Proxy Traffic Detection Method Based on Spatio-Temporal Features |
| title_full | A Novel Lightweight Anonymous Proxy Traffic Detection Method Based on Spatio-Temporal Features |
| title_fullStr | A Novel Lightweight Anonymous Proxy Traffic Detection Method Based on Spatio-Temporal Features |
| title_full_unstemmed | A Novel Lightweight Anonymous Proxy Traffic Detection Method Based on Spatio-Temporal Features |
| title_short | A Novel Lightweight Anonymous Proxy Traffic Detection Method Based on Spatio-Temporal Features |
| title_sort | novel lightweight anonymous proxy traffic detection method based on spatio temporal features |
| topic | Shadowsocks traffic detection VPN traffic detection spatio-temporal features CNN |
| url | https://www.mdpi.com/1424-8220/22/11/4216 |
| work_keys_str_mv | AT yanjiehe anovellightweightanonymousproxytrafficdetectionmethodbasedonspatiotemporalfeatures AT weili anovellightweightanonymousproxytrafficdetectionmethodbasedonspatiotemporalfeatures AT yanjiehe novellightweightanonymousproxytrafficdetectionmethodbasedonspatiotemporalfeatures AT weili novellightweightanonymousproxytrafficdetectionmethodbasedonspatiotemporalfeatures |