电子测量技术2024,Vol.47Issue(3) :166-174.DOI:10.19651/j.cnki.emt.2314716

基于时空特征自适应融合网络的流量分类方法

Traffic classification based on spatiotemporal feature adaptive fusion network

杨宇 唐东明 李驹光 肖宇峰
电子测量技术2024,Vol.47Issue(3) :166-174.DOI:10.19651/j.cnki.emt.2314716

基于时空特征自适应融合网络的流量分类方法

Traffic classification based on spatiotemporal feature adaptive fusion network

杨宇 1唐东明 1李驹光 1肖宇峰1
扫码查看

作者信息

  • 1. 西南科技大学信息工程学院 绵阳 621010
  • 折叠

摘要

针对当前网络流量瞬时涌现导致网络安全事故骤增、网络管理负担加重等问题,基于深度学习技术提出了ResNet和一维 Vision Transformer并行的网络结构对网络流量进行识别并分类.其中 ResNet可以提取到流量数据在空间上深层次的特征,能够保证流量识别的准确率;一维 Vision Transformer 可以提取到更具代表性的时序特征.利用注意力机制将两种特征进行自适应融合得到更全面的特征表示,以提高网络识别流量的能力.在 ISCX VPN-nonVPN数据集上进行实验表明:所提方法在流量的应用程序分类实验中的准确率达到了 99.5%,相较于单独的ResNet和一维 Vision Transformer以及经典的一维CNN和CNN+长短时记忆网络分别提高了 0.9%、3.6%、6.6%和 3.3%.在 USTC-TFC 2016 数据集上,所提方法在能够轻松识别流量是否为恶意流量的基础上,实现了对 13 种应用程序的分类,且平均分类准确率达到了 98.92%,证明了其具有识别恶意流量并完成细粒度分类任务的能力.

Abstract

In response to the current surge in network traffic leading to a sudden increase in network security incidents and an added burden on network management,a network architecture based on deep learning techniques has been proposed.This architecture involves the parallel use of ResNet and one-dimensional Vision Transformer for the identification and classification of network traffic.ResNet is capable of extracting deep spatial features from flow data,ensuring high accuracy in traffic recognition.Meanwhile,the one-dimensional Vision Transformer excels at capturing more representative temporal features.By employing an attention mechanism to adaptively merge these two types of features,a more comprehensive feature representation is obtained to enhance the network's capability in traffic identification.Experiments conducted on the ISCX VPN-nonVPN dataset demonstrate that the proposed method achieves an accuracy of 99.5%in application-based traffic classification experiments.Compared to standalone ResNet and one-dimensional Vision Transformer,as well as classical one-dimensional Convolutional Neural Networks(1 D-CNN)and CNN combined with Long Short-Term Memory(CNN + LSTM),the proposed method shows improvements of 0.9%,3.6%,6.6%,and 3.3%,respectively.On the USTC-TFC 2016 dataset,the proposed method not only easily identifies malicious traffic but also accomplishes the classification of 13 different applications,with an average classification accuracy of 98.92%.This proves its ability to recognize malicious traffic and perform fine-grained classification tasks.

关键词

流量分类/ResNet/vision/Transformer/多头注意力机制/特征融合

Key words

traffic classification/ResNet/vision Transformer/multi-head attention mechanism/feature fusion

引用本文复制引用

基金项目

国家自然科学基金(12175187)

出版年

2024
电子测量技术
北京无线电技术研究所

电子测量技术

CSTPCD北大核心
影响因子:1.166
ISSN:1002-7300
参考文献量23
段落导航相关论文