Abstract:Encrypted traffic classification (ETC) requires differentiated and robust traffic representation captured from content-agnostic and imbalanced traffic data for accurate classification, which is challenging but indispensable for enabling network security and network management. Some existing deep-learning based ETC approaches have achieved promising results, but have limitations in real-world network environments: 1) label bias caused by traffic class imbalance and 2) traffic homogeneity due to component sharing. How to leverage open-domain unlabeled imbalanced traffic data to learn representation with strong generalization ability remains a key challenge. In this paper, we propose a novel imbalanced traffic representation model, called C ontrastive E ncrypted T raffic P re-training ( CETP ), which pre-trains deep multi-granularity traffic representation from imbalanced data without directly using application labels. The pre-trained model can be further mitigated against label bias due to imbalance by semi-supervised continual fine-tuning via pseudo-label iterations and dynamic loss-weighting algorithms. CETP achieves state-of-the-art performance across four imbalanced encrypted traffic classification tasks, remarkably improving the F1 to 96.31% (2.74% ↑ ) for CP-Android, 93.86% (3.58% ↑ ) for CIC-2019, and 84.16% (10.19% ↑ ) for ISCX-VPN. Meanwhile, we further validate the effectiveness of CETP in QUIC-based imbalanced encrypted traffic. Notably, we verify through analytical experiments that CETP not only effectively relieves label bias and homogeneous flow misclassification, but also extends to ETC methods with diverse feature extractors.

CL-ETC: A Contrastive Learning Method for Encrypted Traffic Classification

One Train for Two Tasks: An Encrypted Traffic Classification Framework Using Supervised Contrastive Learning

Detecting Anomalies In Encrypted Traffic Via Deep Dictionary Learning

CETP: A novel semi-supervised framework based on contrastive pre-training for imbalanced encrypted traffic classification

DCS: Debiased Contrastive Learning with Weak Supervision for Time Series Classification

CLECG: A Novel Contrastive Learning Framework for Electrocardiogram Arrhythmia Classification

MATEC: A lightweight neural network for online encrypted traffic classification

FedETC: Encrypted traffic classification based on federated learning

An Encrypted Traffic Classification Method Combining Graph Convolutional Network and Autoencoder

CBD: A Deep-Learning-Based Scheme for Encrypted Traffic Classification with a General Pre-Training Method

CM-UTC: A Cost-sensitive Matrix based Method for Unknown Encrypted Traffic Classification

LAMBERT: Leveraging Attention Mechanisms to Improve the BERT Fine-Tuning Model for Encrypted Traffic Classification

An Encrypted Traffic Classification Framework Based on Higher-Interaction-Graph Neural Network

Network Traffic Classification Model Based on Spatio-Temporal Feature Extraction

Many or Few Samples? Comparing Transfer, Contrastive and Meta-Learning in Encrypted Traffic Classification

A Multi-Channel Contrastive Learning Network Based Intrusion Detection Method

Few-Shot Encrypted Traffic Classification: A Survey

ILETC: Incremental learning for encrypted traffic classification using generative replay and exemplar

End-to-end encrypted traffic classification with one-dimensional convolution neural networks

BSTFNet: An Encrypted Malicious Traffic Classification Method Integrating Global Semantic and Spatiotemporal Features

Encrypted Application Classification with Convolutional Neural Network