Abstract:Network traffic classification, which can map network traffic to protocols in the application layer, is a fundamental technique for network management and security issues such as Quality of Service, network measurement, and network monitoring. Recent researchers focus on extracting features for traditional machine learning methods from flows or datagrams of the specific protocol. However, as the rapid growth of network applications, previous works cannot handle complex novel protocols well. In this paper, we introduce the recurrent neural network to network traffic classification and design a novel neural network, the Byte Segment Neural Network (BSNN). BSNN treats network datagrams as input and gives the classification results directly. In BSNN, a datagram is firstly broken into serval byte segments. Then, these segments are fed to encoders which are based on the recurrent neural network. The information extracted by encoders is combined to a representation vector of the whole datagram. Finally, we apply the softmax function to use this vector for predicting the application protocol of this datagram. There are several key advantages of BSNN: 1) no need for prior knowledge of target applications; 2) can handle both connection-oriented protocols and connection-less protocols; 3) supports multi-classification for protocols; 4) shows outstanding accuracy in both traditional protocols and complex novel protocols. Our thorough experiments on real-world data with different protocols indicate that BSNN gains average F1-measure about 95.82% in multi-classification for five protocols including QQ, PPLive, DNS, 360 and BitTorrent. And it also shows excellent performance for detection of novel protocols. Furthermore, compared with two recent state-of-the-art works, BSNN has superiority over the traditional machine learning-based method and the packet inspection method.

High-performance Network Traffic Classification Based on Graph Neural Network

CGNN: Traffic Classification with Graph Neural Network

A Spatial-Temporal Gated Hypergraph Convolution Network for Traffic Prediction

TCGNN: Packet-grained Network Traffic Classification Via Graph Neural Networks

Abnormal Network Traffic Detection Algorithm Based on Improved Convolutional Neural Network

Internet Traffic Classification Using Feed-Forward Neural Network

GATR: A Road Network Traffic Violation Prediction Method Based on Graph Attention Network

A Network Traffic Classification Method Based on Graph Convolution and LSTM

An Encrypted Traffic Classification Method Combining Graph Convolutional Network and Autoencoder

Flow-based Encrypted Network Traffic Classification with Graph Neural Networks

Tree-RNN: Tree structural recurrent neural network for network traffic classification

Network traffic grant classification based on 1DCNN-TCN-GRU hybrid model

GCN-TC: Combining Trace Graph with Statistical Features for Network Traffic Classification

An Encrypted Traffic Classification Framework Based on Higher-Interaction-Graph Neural Network

Optimized Graph Convolution Recurrent Neural Network for Traffic Prediction

GraphMal: A Network Malicious Traffic Identification Method Based on Graph Neural Network

Traffic Load Prediction of Power Communication Network Based on Graph Neural Network

THREE-DIMENSIONAL CONVOLUTIONAL NEURAL NETWORK BASED TRAFFIC CLASSIFICATION FOR WIRELESS COMMUNICATIONS

Network Traffic Classification Algorithm Based on Spectral Clustering

Graph structure reforming framework enhanced by commute time distance for graph classification

Byte Segment Neural Network for Network Traffic Classification