Abstract:Encrypted network traffic is the principal foundation of secure network communication, and it can help ensure the privacy and integrity of confidential information. However, it hides the characteristics of the data, increases the difficulty of detecting malicious traffic, and protects such malicious behavior. Therefore, encryption alone cannot fundamentally guarantee information security. It is also necessary to monitor traffic to detect malicious actions. At present, the more commonly used traffic classification methods are the method based on statistical features and the method based on graphs. However, these two methods are not always reliable when they are applied to the problem of encrypted malicious traffic detection due to their limitations. The former only focuses on the internal information of the network flow itself and ignores the external connections between the network flows. The latter is just the opposite. This paper proposes an encrypted malicious traffic detection method based on a graph convolutional network (GCN) called GCN-ETA, which considers the statistical features (internal information) of network flows and the structural information (external connections) between them. GCN-ETA consists of two parts: a feature extractor that uses an improved GCN and a classifier that uses a decision tree. Improving on the traditional GCN, the effect and speed of encrypted malicious traffic detection can be effectively improved and the deployment of the detection model in the real environment is increased, which provides a reference for the application of GCN in similar scenarios. This method has achieved excellent performance in experiments using real-world encrypted network traffic data for malicious traffic detection, with the accuracy, AUC, and F1-score exceeding 98% and more than 1,300 flows detected per second.

GCN-TC: Combining Trace Graph with Statistical Features for Network Traffic Classification

A Spatial-Temporal Gated Hypergraph Convolution Network for Traffic Prediction

TCGNN: Packet-grained Network Traffic Classification Via Graph Neural Networks

CGNN: Traffic Classification with Graph Neural Network

Attention Based Graph Covolution Networks for Intelligent Traffic Flow Analysis

An Encrypted Traffic Classification Method Combining Graph Convolutional Network and Autoencoder

GCN-ETA: High-Efficiency Encrypted Malicious Traffic Detection

Network traffic grant classification based on 1DCNN-TCN-GRU hybrid model

GATR: A Road Network Traffic Violation Prediction Method Based on Graph Attention Network

Dual Dynamic Spatial-Temporal Graph Convolution Network for Traffic Prediction

T-GCN: A Temporal Graph ConvolutionalNetwork for Traffic Prediction

A Network Traffic Classification Method Based on Graph Convolution and LSTM

Hierarchical Graph Convolution Network for Traffic Forecasting

Spatial–Temporal-Correlation-Constrained Dynamic Graph Convolutional Network for Traffic Flow Forecasting

T-GCN: A Temporal Graph Convolutional Network for Traffic Prediction

Graph learning-based spatial-temporal graph convolutional neural networks for traffic forecasting

LSGCN: Long Short-Term Traffic Prediction with Graph Convolutional Networks.

A New Network Traffic Classification Method Based on Classifier Integration

FD-TGCN: Fast and dynamic temporal graph convolution network for traffic flow prediction

Traffic Graph Convolutional Recurrent Neural Network: A Deep Learning Framework for Network-Scale Traffic Learning and Forecasting

Attention Mechanism Based on Temporal Graph Convolutional Neural Network for Traffic Flow Prediction