Abstract:The proliferation of smart devices in the 5G era of industrial IoT (IIoT) produces significant traffic data, some of which is encrypted malicious traffic, creating a significant problem for malicious traffic detection. Malicious traffic classification is one of the most efficient techniques for detecting malicious traffic. Although it is a labor-intensive and time-consuming process to gather large labeled datasets, the majority of prior studies on the classification of malicious traffic use supervised learning approaches and provide decent classification results when a substantial quantity of labeled data is available. This paper proposes a semi-supervised learning approach for classifying malicious IIoT traffic. The approach utilizes the encoder–decoder model framework to classify the traffic, even with a limited amount of labeled data available. We sample and normalize the data during the data-processing stage. In the semi-supervised model-building stage, we first pre-train a model on a large unlabeled dataset. Subsequently, we transfer the learned weights to a new model, which is then retrained using a small labeled dataset. We also offer an edge intelligence model that considers aspects such as computation latency, transmission latency, and privacy protection to improve the model's performance. To achieve the lowest total latency and to reduce the risk of privacy leakage, we first create latency and privacy-protection models for each local, edge, and cloud. Then, we optimize the total latency and overall privacy level. In the study of IIoT malicious traffic classification, experimental results demonstrate that our method reduces the model training and classification time with 97.55% accuracy; moreover, our approach boosts the privacy-protection factor.

Research on the Construction Method of Encrypted Malicious Traffic Detection System Based on Machine Learning

Feature Mining for Encrypted Malicious Traffic Detection with Deep Learning and Other Machine Learning Algorithms

A Survey of Encrypted Malicious Traffic Detection*

Semi-Supervised Encrypted Malicious Traffic Detection Based on Multimodal Traffic Characteristics

A Novel Malware Encrypted Traffic Detection Framework Based on Ensemble Learning

TLS-MHSA: An Efficient Detection Model for Encrypted Malicious Traffic based on Multi-Head Self-Attention Mechanism

A Novel Framework Design of Network Intrusion Detection Based on Machine Learning Techniques

An LSTM Based Malicious Traffic Attack Detection in Industrial Internet

Malicious Traffic Classification via Edge Intelligence in IIoT

Feature Analysis of Encrypted Malicious Traffic

Detecting While Accessing:A Semi-Supervised Learning-Based Approach for Malicious Traffic Detection in Internet of Things

Graph based Encrypted Malicious Traffic Detection with Hybrid Analysis of Multi-view Features

HMMED: A Multimodal Model with Separate Head and Payload Processing for Malicious Encrypted Traffic Detection

A Comprehensive Review of Machine Learning Approaches for Detecting Malicious Software

Low-Quality Training Data Only? A Robust Framework for Detecting Encrypted Malicious Network Traffic

Analyzing Learning-based Encrypted Malware Traffic Classification with AutoML

Machine Learning-Powered Encrypted Network Traffic Analysis: A Comprehensive Survey.

Research on computer network information security based on improved machine learning

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

ECNet: Robust Malicious Network Traffic Detection With Multi-View Feature and Confidence Mechanism

Transformer-Based Malicious Traffic Detection for Internet of Things