FastTraffic: A lightweight method for encrypted traffic fast classification

被引:27
作者
Xu, Yuwei [1 ,2 ,3 ]
Cao, Jie [1 ,3 ]
Song, Kehui [3 ,4 ]
Xiang, Qiao [5 ]
Cheng, Guang [1 ,2 ,3 ]
机构
[1] Southeast Univ, Sch Cyber Sci & Engn, Nanjing 211189, Peoples R China
[2] Purple Mt Labs, Nanjing 211111, Peoples R China
[3] Jiangsu Prov Engn Res Ctr Secur Ubiquitous Network, Nanjing 211189, Peoples R China
[4] NanKai Univ, Coll Comp Sci, Tianjin 300071, Peoples R China
[5] Xiamen Univ, Sch Informat, Xiamen 361005, Peoples R China
关键词
Encrypted traffic classification; Lightweight model; N-gram feature; Deep learning;
D O I
10.1016/j.comnet.2023.109965
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
Nowadays, most Internet communications have adopted encrypted network access technology for privacy protection, so encrypted traffic classification (ETC) has become a crucial research point to support network management and ensure cyberspace security. Meanwhile, off-the-shelf deep learning (DL)-based approaches suffer from long preprocessing time, large input size, and a trade-off between model complexity and accuracy. There is a tough challenge to deploy them on mainstream network devices and achieve fast and accurate traffic classification. In this paper, we design FastTraffic, a lightweight DL-based method for ETC on low-configuration network devices. To speed up processing, we set an IP packet as the granularity of FastTraffic, truncate the informative parts in packets as inputs, and utilize a text-like packet tokenization method. For a lightweight and effective model, we propose an N-gram feature embedding method to represent structured and sequential features of packets and design a three-layer MLP to complete fast classification. We compare FastTraffic with eight state-of-the-art ETC methods on three public benchmark datasets. The experimental results show that FastTraffic obtains better classification performance than the other seven methods with only 0.43M model parameters. Besides, it can also achieve high throughput on low-configuration devices and consume a small amount of computing and storage resources. Therefore, FastTraffic is a lightweight ETC method capable of large-scale deployment on Internet devices.
引用
收藏
页数:14
相关论文
共 43 条
[21]   Interpreting Deep Learning-Based Networking Systems [J].
Meng, Zili ;
Wang, Minhu ;
Bai, Jiasong ;
Xu, Mingwei ;
Mao, Hongzi ;
Hu, Hongxin .
SIGCOMM '20: PROCEEDINGS OF THE 2020 ANNUAL CONFERENCE OF THE ACM SPECIAL INTEREST GROUP ON DATA COMMUNICATION ON THE APPLICATIONS, TECHNOLOGIES, ARCHITECTURES, AND PROTOCOLS FOR COMPUTER COMMUNICATION, 2020, :154-171
[22]  
Mikolov T, 2013, Arxiv, DOI arXiv:1301.3781
[23]   Online NetFPGA decision tree statistical traffic classifier [J].
Monemi, Alireza ;
Zarei, Roozbeh ;
Marsono, Muhammad N. .
COMPUTER COMMUNICATIONS, 2013, 36 (12) :1329-1340
[24]  
Nascita A., 2023, IEEE Trans. Netw. Serv. Manag.
[25]   Website Fingerprinting at Internet Scale [J].
Panchenko, Andriy ;
Lanze, Fabian ;
Zinnen, Andreas ;
Henze, Martin ;
Pennekamp, Jan ;
Wehrle, Klaus ;
Engel, Thomas .
23RD ANNUAL NETWORK AND DISTRIBUTED SYSTEM SECURITY SYMPOSIUM (NDSS 2016), 2016,
[26]   A Survey on Encrypted Network Traffic Analysis Applications, Techniques, and Countermeasures [J].
Papadogiannaki, Eva ;
Ioannidis, Sotiris .
ACM COMPUTING SURVEYS, 2021, 54 (06)
[27]   Tree-RNN: Tree structural recurrent neural network for network traffic classification [J].
Ren, Xinming ;
Gu, Huaxi ;
Wei, Wenting .
EXPERT SYSTEMS WITH APPLICATIONS, 2021, 167
[28]   Multitask Learning for Network Traffic Classification [J].
Rezaei, Shahbaz ;
Liu, Xin .
2020 29TH INTERNATIONAL CONFERENCE ON COMPUTER COMMUNICATIONS AND NETWORKS (ICCCN 2020), 2020,
[29]   Deep Learning for Encrypted Traffic Classification: An Overview [J].
Rezaei, Shahbaz ;
Liu, Xin .
IEEE COMMUNICATIONS MAGAZINE, 2019, 57 (05) :76-81
[30]  
Saltaformaggio B., 2016, 10 USENIX WORKSHOP O