CBS: A Deep Learning Approach for Encrypted Traffic Classification With Mixed Spatio-Temporal and Statistical Features
With the rapid advancement of the internet and online applications, traffic classification has become an increasingly significant topic in computer networks. Managing network resources, improving service quality, and enhancing cybersecurity are critical. Due to traffic encryption techniques, traditi...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2023-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/10359509/ |
| _version_ | 1827398955865997312 |
|---|---|
| author | Mehdi Seydali Farshad Khunjush Behzad Akbari Javad Dogani |
| author_facet | Mehdi Seydali Farshad Khunjush Behzad Akbari Javad Dogani |
| author_sort | Mehdi Seydali |
| collection | DOAJ |
| description | With the rapid advancement of the internet and online applications, traffic classification has become an increasingly significant topic in computer networks. Managing network resources, improving service quality, and enhancing cybersecurity are critical. Due to traffic encryption techniques, traditional traffic classification approaches have become ineffective and inaccurate. Therefore, the scientific community considers deep learning a high-performance approach for classifying encrypted traffic. This paper proposes an encrypted traffic classification approach, CBS, based on a deep learning technique. CBS can classify encrypted traffic at two levels using 1D-CNN, attention-based Bi-LSTM, and SAE deep network models. The proposed model classifies traffic types and applications based on a comprehensive set of session and packet-level features. CBS accurately distinguishes traffic classes using spatial, temporal, and statistical features extracted from packet content relationships, temporal relationships between packets in a session, and statistical characteristics of a work session. A traffic data augmentation technique based on a GAN network is employed to mitigate the impact of data imbalance on traffic classes. The proposed platform’s performance is evaluated on the public ISCX VPN-Non VPN 2016 dataset. The results demonstrate that the platform accurately and efficiently identifies applications and classifies encrypted traffic. Compared to state-of-the-art methods, the proposed traffic classification model improves precision by 21.3%, accuracy by 13.1%, recall by 18.11%, and F1 score by 19.79%. |
| first_indexed | 2024-03-08T19:37:19Z |
| format | Article |
| id | doaj.art-6887ae1319414b78b648911d6980fa87 |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2024-03-08T19:37:19Z |
| publishDate | 2023-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-6887ae1319414b78b648911d6980fa872023-12-26T00:07:50ZengIEEEIEEE Access2169-35362023-01-011114167414170210.1109/ACCESS.2023.334318910359509CBS: A Deep Learning Approach for Encrypted Traffic Classification With Mixed Spatio-Temporal and Statistical FeaturesMehdi Seydali0https://orcid.org/0000-0002-9473-7876Farshad Khunjush1https://orcid.org/0000-0002-3339-6051Behzad Akbari2Javad Dogani3Department of Computer Science and Engineering and Information Technology, School of Electrical and Computer Engineering, Shiraz University, Shiraz, IranDepartment of Computer Science and Engineering and Information Technology, School of Electrical and Computer Engineering, Shiraz University, Shiraz, IranDepartment of Electrical and Computer Engineering, Tarbiat Modares University, Tehran, IranDepartment of Computer Science and Engineering and Information Technology, School of Electrical and Computer Engineering, Shiraz University, Shiraz, IranWith the rapid advancement of the internet and online applications, traffic classification has become an increasingly significant topic in computer networks. Managing network resources, improving service quality, and enhancing cybersecurity are critical. Due to traffic encryption techniques, traditional traffic classification approaches have become ineffective and inaccurate. Therefore, the scientific community considers deep learning a high-performance approach for classifying encrypted traffic. This paper proposes an encrypted traffic classification approach, CBS, based on a deep learning technique. CBS can classify encrypted traffic at two levels using 1D-CNN, attention-based Bi-LSTM, and SAE deep network models. The proposed model classifies traffic types and applications based on a comprehensive set of session and packet-level features. CBS accurately distinguishes traffic classes using spatial, temporal, and statistical features extracted from packet content relationships, temporal relationships between packets in a session, and statistical characteristics of a work session. A traffic data augmentation technique based on a GAN network is employed to mitigate the impact of data imbalance on traffic classes. The proposed platform’s performance is evaluated on the public ISCX VPN-Non VPN 2016 dataset. The results demonstrate that the platform accurately and efficiently identifies applications and classifies encrypted traffic. Compared to state-of-the-art methods, the proposed traffic classification model improves precision by 21.3%, accuracy by 13.1%, recall by 18.11%, and F1 score by 19.79%.https://ieeexplore.ieee.org/document/10359509/Deep learningencrypted trafficimbalanced datapacket featurestraffic classification |
| spellingShingle | Mehdi Seydali Farshad Khunjush Behzad Akbari Javad Dogani CBS: A Deep Learning Approach for Encrypted Traffic Classification With Mixed Spatio-Temporal and Statistical Features IEEE Access Deep learning encrypted traffic imbalanced data packet features traffic classification |
| title | CBS: A Deep Learning Approach for Encrypted Traffic Classification With Mixed Spatio-Temporal and Statistical Features |
| title_full | CBS: A Deep Learning Approach for Encrypted Traffic Classification With Mixed Spatio-Temporal and Statistical Features |
| title_fullStr | CBS: A Deep Learning Approach for Encrypted Traffic Classification With Mixed Spatio-Temporal and Statistical Features |
| title_full_unstemmed | CBS: A Deep Learning Approach for Encrypted Traffic Classification With Mixed Spatio-Temporal and Statistical Features |
| title_short | CBS: A Deep Learning Approach for Encrypted Traffic Classification With Mixed Spatio-Temporal and Statistical Features |
| title_sort | cbs a deep learning approach for encrypted traffic classification with mixed spatio temporal and statistical features |
| topic | Deep learning encrypted traffic imbalanced data packet features traffic classification |
| url | https://ieeexplore.ieee.org/document/10359509/ |
| work_keys_str_mv | AT mehdiseydali cbsadeeplearningapproachforencryptedtrafficclassificationwithmixedspatiotemporalandstatisticalfeatures AT farshadkhunjush cbsadeeplearningapproachforencryptedtrafficclassificationwithmixedspatiotemporalandstatisticalfeatures AT behzadakbari cbsadeeplearningapproachforencryptedtrafficclassificationwithmixedspatiotemporalandstatisticalfeatures AT javaddogani cbsadeeplearningapproachforencryptedtrafficclassificationwithmixedspatiotemporalandstatisticalfeatures |