Abstract:Encrypted traffic classification (ETC) requires differentiated and robust traffic representation captured from content-agnostic and imbalanced traffic data for accurate classification, which is challenging but indispensable for enabling network security and network management. Some existing deep-learning based ETC approaches have achieved promising results, but have limitations in real-world network environments: 1) label bias caused by traffic class imbalance and 2) traffic homogeneity due to component sharing. How to leverage open-domain unlabeled imbalanced traffic data to learn representation with strong generalization ability remains a key challenge. In this paper, we propose a novel imbalanced traffic representation model, called C ontrastive E ncrypted T raffic P re-training ( CETP ), which pre-trains deep multi-granularity traffic representation from imbalanced data without directly using application labels. The pre-trained model can be further mitigated against label bias due to imbalance by semi-supervised continual fine-tuning via pseudo-label iterations and dynamic loss-weighting algorithms. CETP achieves state-of-the-art performance across four imbalanced encrypted traffic classification tasks, remarkably improving the F1 to 96.31% (2.74% ↑ ) for CP-Android, 93.86% (3.58% ↑ ) for CIC-2019, and 84.16% (10.19% ↑ ) for ISCX-VPN. Meanwhile, we further validate the effectiveness of CETP in QUIC-based imbalanced encrypted traffic. Notably, we verify through analytical experiments that CETP not only effectively relieves label bias and homogeneous flow misclassification, but also extends to ETC methods with diverse feature extractors.

Multi-Granularity Feature Fusion for Enhancing Encrypted Traffic Classification

An encrypted traffic identification method based on multi-scale feature fusion

Multi-Task Scenario Encrypted Traffic Classification and Parameter Analysis

LAMBERT: Leveraging Attention Mechanisms to Improve the BERT Fine-Tuning Model for Encrypted Traffic Classification

BSTFNet: An Encrypted Malicious Traffic Classification Method Integrating Global Semantic and Spatiotemporal Features

FusionTC: Encrypted App Traffic Classification Using Decision-Level Multimodal Fusion Learning of Flow Sequence

FedETC: Encrypted traffic classification based on federated learning

TFE-GNN: A Temporal Fusion Encoder Using Graph Neural Networks for Fine-grained Encrypted Traffic Classification

An Encrypted Traffic Classification Framework Based on Higher-Interaction-Graph Neural Network

Network Traffic Classification Model Based on Spatio-Temporal Feature Extraction

Encrypted Traffic Classification of Decentralized Applications on Ethereum Using Feature Fusion

Optimizing Feature Selection for Efficient Encrypted Traffic Classification: A Systematic Approach

MATEC: A lightweight neural network for online encrypted traffic classification

Rethinking Encrypted Traffic Classification: A Multi-Attribute Associated Fingerprint Approach

MPAF: Encrypted Traffic Classification With Multi-Phase Attribute Fingerprint

CBD: A Deep-Learning-Based Scheme for Encrypted Traffic Classification with a General Pre-Training Method

An Encrypted Traffic Classification Method Combining Graph Convolutional Network and Autoencoder

End-to-end encrypted traffic classification with one-dimensional convolution neural networks

One Train for Two Tasks: An Encrypted Traffic Classification Framework Using Supervised Contrastive Learning

Efficiently and Effectively: A Two-stage Approach to Balance Plaintext and Encrypted Text for Traffic Classification

CETP: A novel semi-supervised framework based on contrastive pre-training for imbalanced encrypted traffic classification