Encrypted traffic classification method based on convolutional neural network
Aiming at the problems of low accuracy, weak generality, and easy privacy violation of traditional encrypted network traffic classification methods, an encrypted traffic classification method based on convolutional neural network was proposed, which avoided relying on original traffic data and preve...
| Main Author: | |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
POSTS&TELECOM PRESS Co., LTD
2022-12-01
|
| Series: | 网络与信息安全学报 |
| Subjects: | |
| Online Access: | https://www.infocomm-journal.com/cjnis/CN/10.11959/j.issn.2096-109x.2022077 |
| _version_ | 1797262594152595456 |
|---|---|
| author | Rongna XIE, Zhuhong MA, Zongyu LI, Ye TIAN |
| author_facet | Rongna XIE, Zhuhong MA, Zongyu LI, Ye TIAN |
| author_sort | Rongna XIE, Zhuhong MA, Zongyu LI, Ye TIAN |
| collection | DOAJ |
| description | Aiming at the problems of low accuracy, weak generality, and easy privacy violation of traditional encrypted network traffic classification methods, an encrypted traffic classification method based on convolutional neural network was proposed, which avoided relying on original traffic data and prevented overfitting of specific byte structure of the application.According to the data packet size and arrival time information of network traffic, a method to convert the original traffic into a two-dimensional picture was designed.Each cell in the histogram represented the number of packets with corresponding size that arrive at the corresponding time interval, avoiding reliance on packet payloads and privacy violations.The LeNet-5 convolutional neural network model was optimized to improve the classification accuracy.The inception module was embedded for multi-dimensional feature extraction and feature fusion.And the 1*1 convolution was used to control the feature dimension of the output.Besides, the average pooling layer and the convolutional layer were used to replace the fully connected layer to increase the calculation speed and avoid overfitting.The sliding window method was used in the object detection task, and each network unidirectional flow was divided into equal-sized blocks, ensuring that the blocks in the training set and the blocks in the test set in a single session do not overlap and expanding the dataset samples.The classification experiment results on the ISCX dataset show that for the application traffic classification task, the average accuracy rate reaches more than 95%.The comparative experimental results show that the traditional classification method has a significant decrease in accuracy or even fails when the types of training set and test set are different.However, the accuracy rate of the proposed method still reaches 89.2%, which proves that the method is universally suitable for encrypted traffic and non-encrypted traffic.All experiments are based on imbalanced datasets, and the experimental results may be further improved if balanced processing is performed. |
| first_indexed | 2024-04-24T23:59:35Z |
| format | Article |
| id | doaj.art-b04309450a79486c99524658ca36ce96 |
| institution | Directory Open Access Journal |
| issn | 2096-109X |
| language | English |
| last_indexed | 2024-04-24T23:59:35Z |
| publishDate | 2022-12-01 |
| publisher | POSTS&TELECOM PRESS Co., LTD |
| record_format | Article |
| series | 网络与信息安全学报 |
| spelling | doaj.art-b04309450a79486c99524658ca36ce962024-03-14T07:30:09ZengPOSTS&TELECOM PRESS Co., LTD网络与信息安全学报2096-109X2022-12-0186849110.11959/j.issn.2096-109x.2022077Encrypted traffic classification method based on convolutional neural networkRongna XIE, Zhuhong MA, Zongyu LI, Ye TIANAiming at the problems of low accuracy, weak generality, and easy privacy violation of traditional encrypted network traffic classification methods, an encrypted traffic classification method based on convolutional neural network was proposed, which avoided relying on original traffic data and prevented overfitting of specific byte structure of the application.According to the data packet size and arrival time information of network traffic, a method to convert the original traffic into a two-dimensional picture was designed.Each cell in the histogram represented the number of packets with corresponding size that arrive at the corresponding time interval, avoiding reliance on packet payloads and privacy violations.The LeNet-5 convolutional neural network model was optimized to improve the classification accuracy.The inception module was embedded for multi-dimensional feature extraction and feature fusion.And the 1*1 convolution was used to control the feature dimension of the output.Besides, the average pooling layer and the convolutional layer were used to replace the fully connected layer to increase the calculation speed and avoid overfitting.The sliding window method was used in the object detection task, and each network unidirectional flow was divided into equal-sized blocks, ensuring that the blocks in the training set and the blocks in the test set in a single session do not overlap and expanding the dataset samples.The classification experiment results on the ISCX dataset show that for the application traffic classification task, the average accuracy rate reaches more than 95%.The comparative experimental results show that the traditional classification method has a significant decrease in accuracy or even fails when the types of training set and test set are different.However, the accuracy rate of the proposed method still reaches 89.2%, which proves that the method is universally suitable for encrypted traffic and non-encrypted traffic.All experiments are based on imbalanced datasets, and the experimental results may be further improved if balanced processing is performed.https://www.infocomm-journal.com/cjnis/CN/10.11959/j.issn.2096-109x.2022077encrypted trafficconvolution neural networkdeep learningfeature fusionmodel optimization |
| spellingShingle | Rongna XIE, Zhuhong MA, Zongyu LI, Ye TIAN Encrypted traffic classification method based on convolutional neural network 网络与信息安全学报 encrypted traffic convolution neural network deep learning feature fusion model optimization |
| title | Encrypted traffic classification method based on convolutional neural network |
| title_full | Encrypted traffic classification method based on convolutional neural network |
| title_fullStr | Encrypted traffic classification method based on convolutional neural network |
| title_full_unstemmed | Encrypted traffic classification method based on convolutional neural network |
| title_short | Encrypted traffic classification method based on convolutional neural network |
| title_sort | encrypted traffic classification method based on convolutional neural network |
| topic | encrypted traffic convolution neural network deep learning feature fusion model optimization |
| url | https://www.infocomm-journal.com/cjnis/CN/10.11959/j.issn.2096-109x.2022077 |
| work_keys_str_mv | AT rongnaxiezhuhongmazongyuliyetian encryptedtrafficclassificationmethodbasedonconvolutionalneuralnetwork |