Abstract:As an important direction for the evolution of next-generation wireless communication technology, 6G will comprehensively promote the wave of economic and social digitization. Services carried by 6G network will rely heavily on the sharing and processing of massive amounts of data between entities, data security is therefore of great importance. Currently, most network applications utilize SSL/TLS protocols to ensure the confidentiality and security of network communications, while encryption mechanism also brings huge challenges to network security supervision. Though encrypted malicious traffic detection in traditional networks has become a research hotspot, existing technologies cannot be directly applied in 6G networks. In a 6G network with massive, instant and unlimited communications between heterogeneous terminals, network communication behavior patterns are much more diversified, which makes the boundary between normal traffic and malicious traffic more blurred in 6G networks than in traditional networks. Existing studies either analyze encrypted traffic in isolation or aggregation, while they all ignore the rich correlations among encrypted traffic. To this end, we propose an encrypted malicious traffic detection framework based on the graph neural network towards the network security problem of future 6G networks, ET-RSGAT. First, considering the characteristics of super high speed and super large connection of 6G network, we design a simple feature extraction method of encrypted traffic: extracting the TLS handshake raw bytes and TLS record length sequence for one single encrypted session. Second, in view of the correlations of large numbers of heterogeneous terminals and the coexistence of multi-source heterogeneous data communication in 6G networks, we analyze the correlations between encrypted sessions from 2 aspects, which are service correlations and communication behavior correlations. Then we construct an encrypted traffic graph, named ETG. On the basis of ETG, we introduce a graph attention network to utilize the correlations between encrypted sessions to enrich the feature representation of nodes. With rich representation, we build the detection model based on a multi-layer perceptron to identify threats. Considering that the simulation environment of 6G networks is immature, we deploy a variety of heterogeneous terminal nodes and run various network services to simulate the 6G communication scenario, and design related experiments for the interconnection of many heterogeneous terminals in 6G networks. The evaluation and experimental results show that our method can obtain satisfactory detection results in both traditional network and simulated environment datasets.

Spatio-Temporal Feature Encryption Malicious Traffic Detection Via Attention Mechanism

Spatial-Temporal Feature with Dual-Attention Mechanism for Encrypted Malicious Traffic Detection

An Encrypted Malicious Traffic Detection System Based on Neural Network

Detecting Anomalies In Encrypted Traffic Via Deep Dictionary Learning

Feature Mining for Encrypted Malicious Traffic Detection with Deep Learning and Other Machine Learning Algorithms

Encrypted Malicious Traffic Detection Based on Natural Language Processing and Deep Learning

Network Traffic Classification Model Based on Spatio-Temporal Feature Extraction

BSTFNet: An Encrypted Malicious Traffic Classification Method Integrating Global Semantic and Spatiotemporal Features

TLS-MHSA: An Efficient Detection Model for Encrypted Malicious Traffic based on Multi-Head Self-Attention Mechanism

A Deep‐learning‐ and Reinforcement‐learning‐based System for Encrypted Network Malicious Traffic Detection

Encrypted Malicious Traffic Detection Based on Ensemble Learning

Semi-Supervised Encrypted Malicious Traffic Detection Based on Multimodal Traffic Characteristics

A Survey of Encrypted Malicious Traffic Detection*

Malicious Encrypted Traffic Features Extraction Model Based on Unsupervised Feature Adaptive Learning

A Novel Malware Encrypted Traffic Detection Framework Based on Ensemble Learning

Enhanced Encrypted Traffic Analysis Leveraging Graph Neural Networks and Optimized Feature Dimensionality Reduction

Adversarial Malicious Encrypted Traffic Detection Based on Refined Session Analysis

Research on Malicious Traffic Detection Based on Word Embedding Algorithms and Neural Networks

Graph based Encrypted Malicious Traffic Detection with Hybrid Analysis of Multi-view Features

Towards traffic supervision in 6G:a graph neural network-based encrypted malicious traffic detection method

Identification of Encrypted Traffic Through Attention Mechanism Based Long Short Term Memory