Abstract:Encrypted traffic classification (ETC) requires differentiated and robust traffic representation captured from content-agnostic and imbalanced traffic data for accurate classification, which is challenging but indispensable for enabling network security and network management. Some existing deep-learning based ETC approaches have achieved promising results, but have limitations in real-world network environments: 1) label bias caused by traffic class imbalance and 2) traffic homogeneity due to component sharing. How to leverage open-domain unlabeled imbalanced traffic data to learn representation with strong generalization ability remains a key challenge. In this paper, we propose a novel imbalanced traffic representation model, called C ontrastive E ncrypted T raffic P re-training ( CETP ), which pre-trains deep multi-granularity traffic representation from imbalanced data without directly using application labels. The pre-trained model can be further mitigated against label bias due to imbalance by semi-supervised continual fine-tuning via pseudo-label iterations and dynamic loss-weighting algorithms. CETP achieves state-of-the-art performance across four imbalanced encrypted traffic classification tasks, remarkably improving the F1 to 96.31% (2.74% ↑ ) for CP-Android, 93.86% (3.58% ↑ ) for CIC-2019, and 84.16% (10.19% ↑ ) for ISCX-VPN. Meanwhile, we further validate the effectiveness of CETP in QUIC-based imbalanced encrypted traffic. Notably, we verify through analytical experiments that CETP not only effectively relieves label bias and homogeneous flow misclassification, but also extends to ETC methods with diverse feature extractors.

SSCMT-ETC: A Semi-Supervised Contrastive Mean Teacher Model for Encrypted Traffic Classification

CL-ETC: A Contrastive Learning Method for Encrypted Traffic Classification

DCS: Debiased Contrastive Learning with Weak Supervision for Time Series Classification

One Train for Two Tasks: An Encrypted Traffic Classification Framework Using Supervised Contrastive Learning

CETP: A novel semi-supervised framework based on contrastive pre-training for imbalanced encrypted traffic classification

EETC: an Extended Encrypted Traffic Classification Algorithm Based on Variant Resnet Network

A Novel Malware Traffic Classification Method Using Semi-Supervised Learning.

MT-FlowFormer: A Semi-Supervised Flow Transformer for Encrypted Traffic Classification

Tabular-based Self-Supervised Learning Approach for Encrypted Traffic Classification

Semi-Supervised Encrypted Malicious Traffic Detection Based on Multimodal Traffic Characteristics

BSTFNet: An Encrypted Malicious Traffic Classification Method Integrating Global Semantic and Spatiotemporal Features

MATEC: A lightweight neural network for online encrypted traffic classification

Many or Few Samples? Comparing Transfer, Contrastive and Meta-Learning in Encrypted Traffic Classification

Class-Aware Contrastive Semi-Supervised Learning

End-to-end encrypted network traffic classification method based on deep learning

CSCNN: Cost-Sensitive Convolutional Neural Network for Encrypted Traffic Classification

BFSN: A Novel Method of Encrypted Traffic Classification Based on Bidirectional Flow Sequence Network

Network Traffic Classification Model Based on Spatio-Temporal Feature Extraction

An Novel Hybrid Method for Effectively Classifying Encrypted Traffic

Few-shot encrypted traffic classification via multi-task representation enhanced meta-learning

CM-UTC: A Cost-sensitive Matrix based Method for Unknown Encrypted Traffic Classification