Research on Encrypted Traffic Detection Based on Key Features

Most of the traffic on the Internet is encrypted traffic, and the detection of encrypted traffic is the current difficulty, because the internal features of the data are destroyed after encryption, and it is difficult to detect. Most of the existing detection of encrypted traffic is based on the ext...

Full description

Bibliographic Details
Main Authors: Fangjie Chen, Jingpeng Bai, Weihan Gao
Format: Article
Language:English
Published: IEEE 2024-01-01
Series:IEEE Access
Subjects:
Online Access:https://ieeexplore.ieee.org/document/10375493/
Description
Summary:Most of the traffic on the Internet is encrypted traffic, and the detection of encrypted traffic is the current difficulty, because the internal features of the data are destroyed after encryption, and it is difficult to detect. Most of the existing detection of encrypted traffic is based on the external features of encrypted traffic, which requires the extraction of full-cycle information of traffic, and has poor real-time performance. Therefore, based on the internal features of encrypted traffic, this paper proposes a Key Feature Fusion Detection (KFFD) method based on generative adversarial network, which restores the destroyed internal features by encryption key and generative adversarial network, and then improves the internal feature recognition effect of encrypted traffic. Experiments using the Kaggle dataset show that the KFFD method can improve the detection performance of encrypted traffic to a certain extent.
ISSN:2169-3536