FastTraffic: A lightweight method for encrypted traffic fast classification

被引:27
作者
Xu, Yuwei [1 ,2 ,3 ]
Cao, Jie [1 ,3 ]
Song, Kehui [3 ,4 ]
Xiang, Qiao [5 ]
Cheng, Guang [1 ,2 ,3 ]
机构
[1] Southeast Univ, Sch Cyber Sci & Engn, Nanjing 211189, Peoples R China
[2] Purple Mt Labs, Nanjing 211111, Peoples R China
[3] Jiangsu Prov Engn Res Ctr Secur Ubiquitous Network, Nanjing 211189, Peoples R China
[4] NanKai Univ, Coll Comp Sci, Tianjin 300071, Peoples R China
[5] Xiamen Univ, Sch Informat, Xiamen 361005, Peoples R China
关键词
Encrypted traffic classification; Lightweight model; N-gram feature; Deep learning;
D O I
10.1016/j.comnet.2023.109965
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
Nowadays, most Internet communications have adopted encrypted network access technology for privacy protection, so encrypted traffic classification (ETC) has become a crucial research point to support network management and ensure cyberspace security. Meanwhile, off-the-shelf deep learning (DL)-based approaches suffer from long preprocessing time, large input size, and a trade-off between model complexity and accuracy. There is a tough challenge to deploy them on mainstream network devices and achieve fast and accurate traffic classification. In this paper, we design FastTraffic, a lightweight DL-based method for ETC on low-configuration network devices. To speed up processing, we set an IP packet as the granularity of FastTraffic, truncate the informative parts in packets as inputs, and utilize a text-like packet tokenization method. For a lightweight and effective model, we propose an N-gram feature embedding method to represent structured and sequential features of packets and design a three-layer MLP to complete fast classification. We compare FastTraffic with eight state-of-the-art ETC methods on three public benchmark datasets. The experimental results show that FastTraffic obtains better classification performance than the other seven methods with only 0.43M model parameters. Besides, it can also achieve high throughput on low-configuration devices and consume a small amount of computing and storage resources. Therefore, FastTraffic is a lightweight ETC method capable of large-scale deployment on Internet devices.
引用
收藏
页数:14
相关论文
共 43 条
[1]   DISTILLER: Encrypted traffic classification via multimodal multitask deep learning [J].
Aceto, Giuseppe ;
Ciuonzo, Domenico ;
Montieri, Antonio ;
Pescape, Antonio .
JOURNAL OF NETWORK AND COMPUTER APPLICATIONS, 2021, 183
[2]   MIMETIC: Mobile encrypted traffic classification using multimodal deep learning [J].
Aceto, Giuseppe ;
Ciuonzo, Domenico ;
Montieri, Antonio ;
Pescape, Antonio .
COMPUTER NETWORKS, 2019, 165
[3]   Mobile Encrypted Traffic Classification Using Deep Learning: Experimental Evaluation, Lessons Learned, and Challenges [J].
Aceto, Giuseppe ;
Ciuonzo, Domenico ;
Montieri, Antonio ;
Pescape, Antonio .
IEEE TRANSACTIONS ON NETWORK AND SERVICE MANAGEMENT, 2019, 16 (02) :445-458
[4]  
Barut O., 2022, IEEE Trans. Netw. Serv. Manag.
[5]  
Bergstra J, 2012, J MACH LEARN RES, V13, P281
[6]  
Bojanowski P, 2017, T ASSOC COMPUT LING, V5, P135, DOI [10.1162/tacl_a_00051, 10.1162/tacla00051, DOI 10.1162/TACLA00051, DOI 10.1162/TACL_A_00051]
[7]   MATEC: A lightweight neural network for online encrypted traffic classification [J].
Cheng, Jin ;
Wu, Yulei ;
Yuepeng, E. ;
You, Junling ;
Li, Tong ;
Li, Hui ;
Ge, Jingguo .
COMPUTER NETWORKS, 2021, 199
[8]  
Devlin J, 2019, Arxiv, DOI [arXiv:1810.04805, DOI 10.48550/ARXIV.1810.04805]
[9]  
Draper-Gil Gerard, 2016, ICISSP 2016. 2nd International Conference on Information Systems Security and Privacy. Proceedings, P407
[10]   I Know What You Saw Last Minute-Encrypted HTTP Adaptive Video Streaming Title Classification [J].
Dubin, Ran ;
Dvir, Amit ;
Pele, Ofir ;
Hadar, Ofer .
IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY, 2017, 12 (12) :3039-3049