计算机与现代化 ›› 2022, Vol. 0 ›› Issue (02): 45-51.

• 网络与通信 • 上一篇    下一篇

基于RBF神经网络的可信加密流量分类方法

  

  1. (1.中国电科网络通信研究院,河北石家庄050081;2.天津工业大学电气与电子工程学院,天津300387;
    3.天津大学智能与计算学部,天津300072)
  • 出版日期:2022-03-31 发布日期:2022-03-31
  • 作者简介:张晓航(1996—),女,河北石家庄人,硕士研究生,研究方向:机器学习,网络流量分析,E-mail: zxh100happy@126.com。
  • 基金资助:
    国家重点研发计划项目(2019QY0706)

Trustworthy Encryption Traffic Classification Method Based on RBF Neural Network

  1. (1. Academy for Network & Communication of CETC, Shijiazhuang 050081, China;
    2. School of Electrical and Electronics Engineering, Tiangong University, Tianjin 300387, China;
    3. College of Intelligence and Computing, Tianjin University, Tianjin 300072, China)
  • Online:2022-03-31 Published:2022-03-31

摘要: 网络流量分类广泛应用于网络资源分配、流量调度、入侵检测系统等研究领域。随着加密协议的普及和网络流量快速发展,基于深度学习的流量分类器由于其自动提取特征的特性和较高的分类准确性,逐渐受到科研人员的重视,但是面向网络流量分类的可信程度方面却不曾有研究。本文提出一种基于RBF神经网络对加密网络流量进行可信分类的方法。所提算法建立在RBF网络的思想上并采用一种新的损失函数和质心更新方案来进行训练,通过使用梯度惩罚强制检测输入的变化,能够有效地检测分布外的数据。在2个公共的ISCX VPN-nonVPN和USTC-TFC2016流量数据集上,与同类算法相比,所提算法取得了最好的分布外检测结果,在AUROC指标上达到98.55%。实验结果表明所提算法在具有较高分类性能的同时,能够有效地检测出分布外的流量数据,从而提高流量分类的可信性。

关键词: 流量分类, 深度学习, 不确定性估计, 梯度惩罚, 分布外检测

Abstract: Network traffic classification is widely used in research fields such as network resource allocation, traffic scheduling and intrusion detection systems. With the popularization of encryption protocols and the rapid development of network traffic, the traffic classifier based on deep learning has gradually attracted the attention of researchers due to its feature of automatically extracting features and high classification accuracy. But there has been no research on the credibility of network traffic classification. This article proposes a trustworthy deep learning model to classify encrypted network traffic. The proposed algorithm is based on the idea of RBF network and uses a new loss function and centroid update scheme for training. By using gradient penalty to force detection of input changes, it can effectively detect out-of-distribution data. On the two public ISCX VPN-nonVPN and USTC-TFC2016 traffic data sets, the proposed algorithm achieves 98.55% of the AUROC index, and has achieved the best out-of-distribution detection effect compared with similar algorithms. Extensive experimental results show that the proposed algorithm has high classification performance and can effectively detect out-of-distribution traffic data, which improves the credibility of the traffic classification model.

Key words: traffic classification, deep learning, uncertainty estimate, gradient penalty, out-of-distribution detection