Encrypted traffic classification method based on classifier and network structure

Abstract

The invention discloses an encrypted traffic classification method based on a classifier and a network structure, and belongs to the field of encrypted traffic identification. The method comprises the following steps: S1, carrying out network flow collection through the network flow collection module; S2, carrying out traffic data preprocessing through the traffic data preprocessing module; S3, carrying out traffic aggregation through the traffic analysis module; S4, calculating a cost matrix through the traffic analysis module; S5, performing classifier training through the classifier training and optimization module; and S6, performing classifier optimization through the classifier training and optimization module. According to the method, high performance can be obtained within short training time, and the method is suitable for classification and identification of data sets with unbalanced categories and encrypted traffic with difficult feature extraction.

Description

technical field [0001] The invention relates to the field of encrypted traffic identification, in particular to an encrypted traffic classification method based on a classifier and a network structure. Background technique [0002] The rapid development of Internet technology, while bringing convenience to people's lives, is also used by some criminals for illegal transmission, which has a great impact on the stability and security of cyberspace. As a result, the issue of network security has attracted more and more people's attention. Therefore, the global encrypted network traffic continues to soar. Although the traffic is encrypted and then transmitted, the security of the transmitted data is guaranteed, but it also increases the difficulty of traffic auditing. Without decryption technology, IT teams would not be able to view the information contained within the traffic. This means encryption can hide malicious traffic like other information, leading to a host of worms,...

AI Technical Summary

Problems solved by technology

However, the distribution of incoming and outgoing network traffic in actual network gateways is very uneven. For example, audio and video streams carried by encrypted protocols are much larger than instant messaging and pure web encrypted streams.

Images