融合注意力机制的加密流量识别研究

ENCRYPTED TRAFFIC RECOGNITION WITH ATTENTION MECHANISM

  • 摘要: 针对加密流量识别技术在特征提取和选择效果不佳的问题,提出采用端到端结构思想,搭建融合注意力机制的Attention-CNN加密流量检测模型。利用卷积神经网络直接从流量数据中自动学习特征,使用经过Softmax激活函数的attention层动态捕捉到的信息对卷积层输出结果进行动态加权,通过全连接神经网络进行识别;实验采用ISCXVPN2016公共数据集,使用十折交叉验证的方法对模型进行验证;对注意力特征图与对应会话字节信息进行详细分析,找到具有特征信息的位置,解释关注的加密流量内容。实验结果表明,该方法相比现有方法有显著提升,同时对各类流量分类的评价指标取得较好效果。

     

    Abstract: For the problem of poor feature extraction and selection in encrypted traffic identification techniques, this paper proposes to adopt the idea of end-to-end structure, and to build an Attention-CNN encrypted traffic detection model with the attention mechanism. The convolutional neural networks were used to automatically learn features directly from traffic data. The information dynamically captured by the attention layer of the Softmax activation function was used to dynamically weighting the output of the convolutional layer. The fully connected neural network was used for recognition. The ISCX VPN2016 public dataset was used for experiments, and the model was verified by ten-fold cross validation method. The attention feature map and the corresponding session byte information were analyzed in detail. Locations with characteristic information were found and explained the content of encrypted traffic of attention. The experiment results show that this method has a significant improvement over the existing methods. At the same time the evaluation indexes for each type of traffic classification achieve better results.

     

/

返回文章
返回