Abstract:The proliferation of smart devices in the 5G era of industrial IoT (IIoT) produces significant traffic data, some of which is encrypted malicious traffic, creating a significant problem for malicious traffic detection. Malicious traffic classification is one of the most efficient techniques for detecting malicious traffic. Although it is a labor-intensive and time-consuming process to gather large labeled datasets, the majority of prior studies on the classification of malicious traffic use supervised learning approaches and provide decent classification results when a substantial quantity of labeled data is available. This paper proposes a semi-supervised learning approach for classifying malicious IIoT traffic. The approach utilizes the encoder–decoder model framework to classify the traffic, even with a limited amount of labeled data available. We sample and normalize the data during the data-processing stage. In the semi-supervised model-building stage, we first pre-train a model on a large unlabeled dataset. Subsequently, we transfer the learned weights to a new model, which is then retrained using a small labeled dataset. We also offer an edge intelligence model that considers aspects such as computation latency, transmission latency, and privacy protection to improve the model's performance. To achieve the lowest total latency and to reduce the risk of privacy leakage, we first create latency and privacy-protection models for each local, edge, and cloud. Then, we optimize the total latency and overall privacy level. In the study of IIoT malicious traffic classification, experimental results demonstrate that our method reduces the model training and classification time with 97.55% accuracy; moreover, our approach boosts the privacy-protection factor.

An LSTM Based Malicious Traffic Attack Detection in Industrial Internet

LSTM-DAM: Malicious Network Traffic Prediction for Cloud Manufacturing System

Data-Driven Intrusion Detection for Intelligent Internet of Vehicles: A Deep Convolutional Neural Network-Based Method

Encrypted Malicious Traffic Detection Based on Natural Language Processing and Deep Learning

Research and Evaluation of Intelligent Threat Detection Under Industrial Internet

Detection of Low-Frequency and Multi-Stage Attacks in Industrial Internet of Things

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

Using a Recurrent Neural Network and Restricted Boltzmann Machines for Malicious Traffic Detection

Deep Learning for Securing Software-Defined Industrial Internet of Things: Attacks and Countermeasures

Detecting Abnormal Traffic in Large-Scale Networks

Traffic Load Learning Towards Early Detection of Intrusion in Industrial Mmtc Networks

Industrial Anomaly Detection and Attack Classification Method Based on Convolutional Neural Network.

Malware Traffic Classification Using Domain Adaptation and Ladder Network for Secure Industrial Internet of Things

Malicious Traffic Classification via Edge Intelligence in IIoT

On a Hybrid BiLSTM-GCNN-Based Approach for Attack Detection in SDN

Deep Learning Based Covert Attack Identification for Industrial Control Systems

Transformer-Based Malicious Traffic Detection for Internet of Things

A Novel Approach Based on Adaptive Online Analysis of Encrypted Traffic for Identifying Malware in IIoT

A novel fully convolutional neural network approach for detection and classification of attacks on industrial IoT devices in smart manufacturing systems

Detecting While Accessing:A Semi-Supervised Learning-Based Approach for Malicious Traffic Detection in Internet of Things