Encrypted traffic identification method based on deep residual capsule network with attention mechanism
With the improvement of users’ security awareness and the development of encryption technology, encrypted traffic has become an important part of network traffic, and identifying encrypted traffic has become an important part of network traffic supervision.The encrypted traffic identification method...
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
POSTS&TELECOM PRESS Co., LTD
2023-02-01
|
| Series: | 网络与信息安全学报 |
| Subjects: | |
| Online Access: | http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2023007 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1841529696104218624 |
|---|---|
| author | Guozhen SHI Kunyang LI Yao LIU Yongjian YANG |
| author_facet | Guozhen SHI Kunyang LI Yao LIU Yongjian YANG |
| author_sort | Guozhen SHI |
| collection | DOAJ |
| description | With the improvement of users’ security awareness and the development of encryption technology, encrypted traffic has become an important part of network traffic, and identifying encrypted traffic has become an important part of network traffic supervision.The encrypted traffic identification method based on the traditional deep learning model has problems such as poor effect and long model training time.To address these problems, the encrypted traffic identification method based on a deep residual capsule network (DRCN) was proposed.However, the original capsule network was stacked in the form of full connection, which lead to a small model coupling coefficient and it was impossible to build a deep network model.The DRCN model adopted the dynamic routing algorithm based on the three-dimensional convolutional algorithm (3DCNN) instead of the fully-connected dynamic routing algorithm, to reduce the parameters passed between each capsule layer, decrease the complexity of operations, and then build the deep capsule network to improve the accuracy and efficiency of recognition.The channel attention mechanism was introduced to assign different weights to different features, and then the influence of useless features on the recognition results was reduced.The introduction of the residual network into the capsule network layer and the construction of the residual capsule network module alleviated the gradient disappearance problem of the deep capsule network.In terms of data pre-processing, the first 784byte of the intercepted packets was converted into images as input of the DRCN model, to avoid manual feature extraction and reduce the labor cost of encrypted traffic recognition.The experimental results on the ISCXVPN2016 dataset show that the accuracy of the DRCN model is improved by 5.54% and the training time of the model is reduced by 232s compared with the BLSTM model with the best performance.In addition, the accuracy of the DRCN model reaches 94.3% on the small dataset.The above experimental results prove that the proposed recognition scheme has high recognition rate, good performance and applicability. |
| format | Article |
| id | doaj-art-4bcf24d89bb64d8e97980172ae133e9c |
| institution | Kabale University |
| issn | 2096-109X |
| language | English |
| publishDate | 2023-02-01 |
| publisher | POSTS&TELECOM PRESS Co., LTD |
| record_format | Article |
| series | 网络与信息安全学报 |
| spelling | doaj-art-4bcf24d89bb64d8e97980172ae133e9c2025-01-15T03:16:25ZengPOSTS&TELECOM PRESS Co., LTD网络与信息安全学报2096-109X2023-02-019324159576868Encrypted traffic identification method based on deep residual capsule network with attention mechanismGuozhen SHIKunyang LIYao LIUYongjian YANGWith the improvement of users’ security awareness and the development of encryption technology, encrypted traffic has become an important part of network traffic, and identifying encrypted traffic has become an important part of network traffic supervision.The encrypted traffic identification method based on the traditional deep learning model has problems such as poor effect and long model training time.To address these problems, the encrypted traffic identification method based on a deep residual capsule network (DRCN) was proposed.However, the original capsule network was stacked in the form of full connection, which lead to a small model coupling coefficient and it was impossible to build a deep network model.The DRCN model adopted the dynamic routing algorithm based on the three-dimensional convolutional algorithm (3DCNN) instead of the fully-connected dynamic routing algorithm, to reduce the parameters passed between each capsule layer, decrease the complexity of operations, and then build the deep capsule network to improve the accuracy and efficiency of recognition.The channel attention mechanism was introduced to assign different weights to different features, and then the influence of useless features on the recognition results was reduced.The introduction of the residual network into the capsule network layer and the construction of the residual capsule network module alleviated the gradient disappearance problem of the deep capsule network.In terms of data pre-processing, the first 784byte of the intercepted packets was converted into images as input of the DRCN model, to avoid manual feature extraction and reduce the labor cost of encrypted traffic recognition.The experimental results on the ISCXVPN2016 dataset show that the accuracy of the DRCN model is improved by 5.54% and the training time of the model is reduced by 232s compared with the BLSTM model with the best performance.In addition, the accuracy of the DRCN model reaches 94.3% on the small dataset.The above experimental results prove that the proposed recognition scheme has high recognition rate, good performance and applicability.http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2023007encrypted traffic identificationdeep capsule network3D convolutional algorithmresidual network |
| spellingShingle | Guozhen SHI Kunyang LI Yao LIU Yongjian YANG Encrypted traffic identification method based on deep residual capsule network with attention mechanism 网络与信息安全学报 encrypted traffic identification deep capsule network 3D convolutional algorithm residual network |
| title | Encrypted traffic identification method based on deep residual capsule network with attention mechanism |
| title_full | Encrypted traffic identification method based on deep residual capsule network with attention mechanism |
| title_fullStr | Encrypted traffic identification method based on deep residual capsule network with attention mechanism |
| title_full_unstemmed | Encrypted traffic identification method based on deep residual capsule network with attention mechanism |
| title_short | Encrypted traffic identification method based on deep residual capsule network with attention mechanism |
| title_sort | encrypted traffic identification method based on deep residual capsule network with attention mechanism |
| topic | encrypted traffic identification deep capsule network 3D convolutional algorithm residual network |
| url | http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2023007 |
| work_keys_str_mv | AT guozhenshi encryptedtrafficidentificationmethodbasedondeepresidualcapsulenetworkwithattentionmechanism AT kunyangli encryptedtrafficidentificationmethodbasedondeepresidualcapsulenetworkwithattentionmechanism AT yaoliu encryptedtrafficidentificationmethodbasedondeepresidualcapsulenetworkwithattentionmechanism AT yongjianyang encryptedtrafficidentificationmethodbasedondeepresidualcapsulenetworkwithattentionmechanism |