Abstract:The Internet of Things (IoT) has been extensively utilized in domains such as smart homes, healthcare, and other industries. With the exponential growth of Internet of Things (IoT) devices, they have become prime targets for malicious cyber-attacks. Effective classification of IoT traffic is, therefore, imperative to enable robust intrusion detection systems. However, IoT traffic data contain intricate spatial relationships and topological information, which traditional methods for traffic identification lack the capability to fully extract features and capture crucial characteristics. We propose a multi-scale convolutional feature fusion network augmented with a Convolutional Block Attention Module (MCF-CBAM) for accurate IoT traffic classification. The network incorporates three critical innovations: (1) Parallel convolution extracts multi-scale spatial features from traffic data. The 1 × 1 convolution operation reduces the amount of parameters and calculations of the network, thereby improving work efficiency. (2) The attention module suppresses less informative features while highlighting the most discriminative ones, enabling focused learning on decisive features. (3) Cross-scale connections with channel jumps reuse features from prior layers to enhance generalization. We evaluate the method extensively on three widely adopted public datasets. Quantitative results demonstrate MCF-CBAM establishes new state-of-the-art performance benchmarks for IoT traffic classification, surpassing existing methods by a significant margin. Qualitative visualizations of the learned attention weights provide intuitive insights into how the network automatically discovers the most decisive spatial features for identification. With its strong empirical performance and interpretable attention mechanisms, this work presents a promising deep learning solution to augment real-world IoT intrusion detection systems against growing cybersecurity threats.

L2-BiTCN-CNN: Spatio-temporal features fusion-based multi-classification model for various internet applications identification

Network Traffic Classification Via Non-Convex Multi-Task Feature Learning

CBF-IDS: Addressing Class Imbalance Using CNN-BiLSTM with Focal Loss in Network Intrusion Detection System

A Cost-Sensitive Deep Learning-Based Approach for Network Traffic Classification

Network Traffic Classification Model Based on Spatio-Temporal Feature Extraction

An encrypted traffic identification method based on multi-scale feature fusion

Multi-scale Convolutional Feature Fusion Network Based on Attention Mechanism for IoT Traffic Classification

Network traffic grant classification based on 1DCNN-TCN-GRU hybrid model

A novel detection model for abnormal network traffic based on bidirectional temporal convolutional network

A Multi-Modal Approach For Context-Aware Network Traffic Classification

THREE-DIMENSIONAL CONVOLUTIONAL NEURAL NETWORK BASED TRAFFIC CLASSIFICATION FOR WIRELESS COMMUNICATIONS

I $^{2}$ RNN: an Incremental and Interpretable Recurrent Neural Network for Encrypted Traffic Classification

MF-CNN: Traffic Flow Prediction Using Convolutional Neural Network and Multi-Features Fusion

Time-Distributed Feature Learning in Network Traffic Classification for Internet of Things

A Network Traffic Classification Method Based on Graph Convolution and LSTM

BSTFNet: An Encrypted Malicious Traffic Classification Method Integrating Global Semantic and Spatiotemporal Features

TSCRNN: A novel classification scheme of encrypted traffic based on flow spatiotemporal features for efficient management of IIoT

Multitask Learning for Network Traffic Classification

An Industrial Intrusion Detection Method Based on Hybrid Convolutional Neural Networks with Improved TCN

EBSNN: Extended Byte Segment Neural Network for Network Traffic Classification

A Joint Convolutional Cross ViT Network for Hyperspectral and Light Detection and Ranging Fusion Classification