Abstract:Encrypted traffic classification is of great significance for advanced network services. Though encryption methods seem unbroken in protecting users' privacy, existing studies have demonstrated that with sophisticated designed approaches utilizing the methods of machine learning or deep learning, the traffic can be identified as generated from which application type or even the specific application. However, most of the previous approaches either lack the generalization ability in different tasks or can hardly achieve the precise performance. One of the reasons is that they perform the classification from an incomplete perspective. To our best knowledge, none of which consider combing the payload content and payload statistics for encrypted traffic classification. Hence, in this paper, we propose the comprehensive effective traffic information analytics (CETAnalytics) framework to tackle the problem. Firstly, the comprehensive effective traffic information is specified and the motivation for combing the two aspects of the traffic is introduced. Based on the specification, the CETAnalytics framework utilizing the consolidated information and its devising implementation details are elaborated. Briefly, the implementation is totally built on the neural network for its high flexibility and powerful functionality to integrate the two dimensional analytics. Among the challenges tackled in the implementation, a substructure network Attract designed with the purpose of matching the traffic structure is proposed to realize the payload content analytics, which is one of the highlights of our work. For evaluation, several solid experiments are conducted using three designed tasks originated from the ISCXVPN2016 dataset. The experiment results show that (i) the effectiveness of the framework design for encrypted traffic classification; (ii) our implementation can achieve both high precision and robust generalization performance at the same time.

BehavSniffer: Sniff User Behaviors from the Encrypted Traffic by Traffic Burst Graphs

Interaction Matters: Encrypted Traffic Classification Via Status-Based Interactive Behavior Graph

Encrypted Network Behaviors Identification Based on Dynamic Time Warping and K-Nearest Neighbor

Encrypted Network Traffic Classification: A Data Driven Approach

BSTFNet: An Encrypted Malicious Traffic Classification Method Integrating Global Semantic and Spatiotemporal Features

ActiveTracker: Uncovering the Trajectory of App Activities over Encrypted Internet Traffic Streams

Identifying Fine-Grained Douyin User Behaviors Via Analyzing Encrypted Network Traffic

App Trajectory Recognition over Encrypted Internet Traffic Based on Deep Neural Network.

CETAnalytics: Comprehensive Effective Traffic Information Analytics for Encrypted Traffic Classification

A Novel Behavior-Based Tracking Attack for User Identification

Encrypted Malicious Traffic Detection Based on Natural Language Processing and Deep Learning

Trustworthy Deep Learning for Encrypted Traffic Classification

An Encrypted Malicious Traffic Detection System Based on Neural Network

Smart Spying via Deep Learning: Inferring Your Activities from Encrypted Wireless Traffic

An Encrypted Traffic Classification Framework Based on Higher-Interaction-Graph Neural Network

Encrypted Voice Traffic Fingerprinting: an Adaptive Network Traffic Feature Encoding Model.

Effective and Real-time In-App Activity Analysis in Encrypted Internet Traffic Streams.

EETC: an Extended Encrypted Traffic Classification Algorithm Based on Variant Resnet Network

Enhanced Encrypted Traffic Analysis Leveraging Graph Neural Networks and Optimized Feature Dimensionality Reduction

Optimizing Feature Selection for Efficient Encrypted Traffic Classification: A Systematic Approach

Network Traffic Classification Model Based on Spatio-Temporal Feature Extraction