Abstract:The Internet of Things (IoT) has been extensively utilized in domains such as smart homes, healthcare, and other industries. With the exponential growth of Internet of Things (IoT) devices, they have become prime targets for malicious cyber-attacks. Effective classification of IoT traffic is, therefore, imperative to enable robust intrusion detection systems. However, IoT traffic data contain intricate spatial relationships and topological information, which traditional methods for traffic identification lack the capability to fully extract features and capture crucial characteristics. We propose a multi-scale convolutional feature fusion network augmented with a Convolutional Block Attention Module (MCF-CBAM) for accurate IoT traffic classification. The network incorporates three critical innovations: (1) Parallel convolution extracts multi-scale spatial features from traffic data. The 1 × 1 convolution operation reduces the amount of parameters and calculations of the network, thereby improving work efficiency. (2) The attention module suppresses less informative features while highlighting the most discriminative ones, enabling focused learning on decisive features. (3) Cross-scale connections with channel jumps reuse features from prior layers to enhance generalization. We evaluate the method extensively on three widely adopted public datasets. Quantitative results demonstrate MCF-CBAM establishes new state-of-the-art performance benchmarks for IoT traffic classification, surpassing existing methods by a significant margin. Qualitative visualizations of the learned attention weights provide intuitive insights into how the network automatically discovers the most decisive spatial features for identification. With its strong empirical performance and interpretable attention mechanisms, this work presents a promising deep learning solution to augment real-world IoT intrusion detection systems against growing cybersecurity threats.

Passive browser identification with multi-scale Convolutional Neural Networks

An encrypted traffic identification method based on multi-scale feature fusion

Seamless Website Fingerprinting in Multiple Environments

L2-BiTCN-CNN: Spatio-temporal features fusion-based multi-classification model for various internet applications identification

DeepFPD: Browser Fingerprinting Detection via Deep Learning With Multimodal Learning and Attention

Automated Website Fingerprinting through Deep Learning

Deep learning-based real-time VPN encrypted traffic identification methods

Convolutional neural network-based identification of malicious traffic for TLS encryption

Automatic IoT device identification: a deep learning based approach using graphic traffic characteristics

Efficient Fine-Grained Website Fingerprinting Via Encrypted Traffic Analysis with Deep Learning

CSCNN: Cost-Sensitive Convolutional Neural Network for Encrypted Traffic Classification

Real Network Traffic Collection and Deep Learning for Mobile App Identification

Fine-Grained Webpage Fingerprinting Using Only Packet Length Information of Encrypted Traffic

Deep Packet: A Novel Approach For Encrypted Traffic Classification Using Deep Learning

SINet: A Scale-Insensitive Convolutional Neural Network for Fast Vehicle Detection

MATEC: A lightweight neural network for online encrypted traffic classification

Image Processing Operations Identification via Convolutional Neural Network

Large-Scale Mobile App Identification Using Deep Learning

DarknetSec: A novel self-attentive deep learning method for darknet traffic classification and application identification

Multi-scale Convolutional Feature Fusion Network Based on Attention Mechanism for IoT Traffic Classification