Abstract:Network traffic classification, which can map network traffic to protocols in the application layer, is a fundamental technique for network management and security issues such as Quality of Service, network measurement, and network monitoring. Recent researchers focus on extracting features for traditional machine learning methods from flows or datagrams of the specific protocol. However, as the rapid growth of network applications, previous works cannot handle complex novel protocols well. In this paper, we introduce the recurrent neural network to network traffic classification and design a novel neural network, the Byte Segment Neural Network (BSNN). BSNN treats network datagrams as input and gives the classification results directly. In BSNN, a datagram is firstly broken into serval byte segments. Then, these segments are fed to encoders which are based on the recurrent neural network. The information extracted by encoders is combined to a representation vector of the whole datagram. Finally, we apply the softmax function to use this vector for predicting the application protocol of this datagram. There are several key advantages of BSNN: 1) no need for prior knowledge of target applications; 2) can handle both connection-oriented protocols and connection-less protocols; 3) supports multi-classification for protocols; 4) shows outstanding accuracy in both traditional protocols and complex novel protocols. Our thorough experiments on real-world data with different protocols indicate that BSNN gains average F1-measure about 95.82% in multi-classification for five protocols including QQ, PPLive, DNS, 360 and BitTorrent. And it also shows excellent performance for detection of novel protocols. Furthermore, compared with two recent state-of-the-art works, BSNN has superiority over the traditional machine learning-based method and the packet inspection method.

Noise-Resistant Statistical Traffic Classification.

A Cost-Sensitive Deep Learning-Based Approach for Network Traffic Classification

Noise is the Fatal Poison: A Noise-aware Network for Noisy Dataset Classification

CBF-IDS: Addressing Class Imbalance Using CNN-BiLSTM with Focal Loss in Network Intrusion Detection System

Traffic Classification Using Probabilistic Neural Networks.

Practical and Configurable Network Traffic Classification Using Probabilistic Machine Learning

Network Traffic Classification Algorithm Based on Spectral Clustering

RBLJAN: Robust Byte-Label Joint Attention Network for Network Traffic Classification

Method of Data Cleaning for Network Traffic Classification

Novel Dynamic Multiple Classification System for Network Traffic

Traffic Classification - Towards Accurate Real Time Network Applications

Composite Lightweight Traffic Classification System for Network Management

A Statistical-Feature-based Approach to Internet Traffic Classification Using Machine Learning.

SmoteAdaNL: a learning method for network traffic classification

Internet Traffic Classification Using Feed-Forward Neural Network

AN-Net: an Anti-Noise Network for Anonymous Traffic Classification

TSFN: A Novel Malicious Traffic Classification Method Using BERT and LSTM

BSTFNet: An Encrypted Malicious Traffic Classification Method Integrating Global Semantic and Spatiotemporal Features

Network traffic classification based on federated semi-supervised learning

MATEC: A lightweight neural network for online encrypted traffic classification

Byte Segment Neural Network for Network Traffic Classification