Classification Method of Encrypted Traffic Based on Deep Neural Network

With the widespread use of network traffic encryption technology, the traditional traffic classification method has gradually become invalid, which increases the difficulty of network management and poses a serious threat to network security. This paper analyzes the traffic encrypted and transmitted by VPN and explores its classification method. By extracting the timing characteristics of the encrypted traffic, the classification model of the deep neural network was used to classify the traffic of seven different categories in the encrypted traffic, and compared with the commonly used naive Bayesian classification algorithm. At the same time, the batch size that affects the training of deep neural network models was studied. Experiments show that the classification ability of encrypted traffic classification model based on deep neural network is much better than the naive Bayesian method. During training, the batch size has different effects on the deep neural network model. When the batch size is 40, the deep neural network model has the best classification ability.

[1]  Andrew W. Moore,et al.  A Machine Learning Approach for Efficient Traffic Classification , 2007, 2007 15th International Symposium on Modeling, Analysis, and Simulation of Computer and Telecommunication Systems.

[2]  Blake Anderson,et al.  Machine Learning for Encrypted Malware Traffic Classification: Accounting for Noisy Labels and Non-Stationarity , 2017, KDD.

[3]  Feng Xiao,et al.  NTCA: A High-Performance Network Traffic Classification Architecture , 2013 .

[4]  Pan Wang,et al.  Datanet: Deep Learning Based Encrypted Network Traffic Classification in SDN Home Gateway , 2018, IEEE Access.

[5]  Antonio Pescapè,et al.  Mobile Encrypted Traffic Classification Using Deep Learning , 2018, 2018 Network Traffic Measurement and Analysis Conference (TMA).

[6]  Jürgen Schmidhuber,et al.  Multi-column deep neural network for traffic sign classification , 2012, Neural Networks.

[7]  Bo Yang,et al.  Traffic classification using probabilistic neural networks , 2010, 2010 Sixth International Conference on Natural Computation.

[8]  Sylvia Ratnasamy,et al.  BlindBox: Deep Packet Inspection over Encrypted Traffic , 2015, SIGCOMM.

[9]  Judith Kelner,et al.  Multi-objective optimization of a hybrid model for network traffic classification by combining machine learning techniques , 2014, 2014 International Joint Conference on Neural Networks (IJCNN).

[10]  Liehuang Zhu,et al.  Classification of Encrypted Traffic With Second-Order Markov Chains and Application Attribute Bigrams , 2017, IEEE Transactions on Information Forensics and Security.

[11]  Ali A. Ghorbani,et al.  Characterization of Encrypted and VPN Traffic using Time-related Features , 2016, ICISSP.

[12]  Hongzhi Wang,et al.  Efficient Currency Determination Algorithms for Dynamic Data , 2017 .

[13]  SchmidhuberJürgen Deep learning in neural networks , 2015 .

[14]  Yingshu Li,et al.  An energy efficient privacy-preserving content sharing scheme in mobile social networks , 2016, Personal and Ubiquitous Computing.

[15]  Guang Cheng,et al.  WENC: HTTPS Encrypted Traffic Classification Using Weighted Ensemble Learning and Markov Chain , 2017, 2017 IEEE Trustcom/BigDataSE/ICESS.

[16]  CireşAnDan,et al.  2012 Special Issue , 2012 .

[17]  Ming Zhu,et al.  End-to-end encrypted traffic classification with one-dimensional convolution neural networks , 2017, 2017 IEEE International Conference on Intelligence and Security Informatics (ISI).

[18]  Jürgen Schmidhuber,et al.  Deep learning in neural networks: An overview , 2014, Neural Networks.

[19]  Guanglu Sun,et al.  Internet Traffic Classification Based on Incremental Support Vector Machines , 2018, Mob. Networks Appl..

[20]  Jinfu Chen,et al.  A novel algorithm for encrypted traffic classification based on sliding window of flow's first N packets , 2017, 2017 2nd IEEE International Conference on Computational Intelligence and Applications (ICCIA).

[21]  Andrzej Duda,et al.  Markov chain fingerprinting to classify encrypted traffic , 2014, IEEE INFOCOM 2014 - IEEE Conference on Computer Communications.

[22]  Mahdi Jafari Siavoshani,et al.  Deep packet: a novel approach for encrypted traffic classification using deep learning , 2017, Soft Computing.