Multi-view Multi-label Anomaly Network Traffic Classification based on MLP-Mixer Neural Network
Network traffic classification is the basis of many network security applications and has attracted enough attention in the field of cyberspace security. Existing network traffic classification based on convolutional neural networks (CNNs) often emphasizes local patterns of traffic data while ignoring global information associations. In this paper, we propose an MLP-Mixer based multi-view multi-label neural network for network traffic classification. Compared with the existing CNN-based methods, our method adopts the MLP-Mixer structure, which is more in line with the structure of the packet than the conventional convolution operation. In our method, one packet is divided into the packet header and the packet body, together with the flow features of the packet as input from different views. We utilize a multi-label setting to learn different scenarios simultaneously to improve the classification performance by exploiting the correlations between different scenarios. Taking advantage of the above characteristics, we propose an end-to-end network traffic classification method. We conduct experiments on three public datasets, and the experimental results show that our method can achieve superior performance.
Code (0)
등록된 구현이 없습니다.
Tasks
ClassificationTraffic ClassificationMethods 이 논문이 사용한 방법론
Similar Papers 제목 키워드 기반
Network Anomaly Traffic Detection via Multi-view Feature Fusion
Traditional anomalous traffic detection methods are based on single-view analysis, which has obvious limitations in dealing with complex attacks and encrypted communications. In this regard, we propose a Multi-view Featu…
Multi-task Feature Selection based Anomaly Detection
Network anomaly detection is still a vibrant research area. As the fast growth of network bandwidth and the tremendous traffic on the network, there arises an extremely challengeable question: How to efficiently and accu…
Anomaly Detectionfeature selectionMulti-Task LearningContrastive Self-Supervised Network Intrusion Detection using Augmented Negative Pairs
Network intrusion detection remains a critical challenge in cybersecurity. While supervised machine learning models achieve state-of-the-art performance, their reliance on large labelled datasets makes them impractical f…
Network Intrusion DetectionMulti-class ClassificationSelf-Supervised LearningBinary ClassificationExplainable Autoencoder-Based Anomaly Detection in IEC 61850 GOOSE Networks
The IEC 61850 Generic Object-Oriented Substation Event (GOOSE) protocol plays a critical role in real-time protection and automation of digital substations, yet its lack of native security mechanisms can expose power sys…
Intrusion DetectionAnomaly DetectionuTRAND: Unsupervised Anomaly Detection in Traffic Trajectories
Deep learning-based approaches have achieved significant improvements on public video anomaly datasets, but often do not perform well in real-world applications. This paper addresses two issues: the lack of labeled data …
Anomaly DetectionTrajectory PredictionUnsupervised Anomaly Detection