paper-with-me

홈 › Papers

Multi-view Multi-label Anomaly Network Traffic Classification based on MLP-Mixer Neural Network

2022-10-30 · Yu Zheng, Zhangxuan Dang, Chunlei Peng, Chao Yang, Xinbo Gao

Network traffic classification is the basis of many network security applications and has attracted enough attention in the field of cyberspace security. Existing network traffic classification based on convolutional neural networks (CNNs) often emphasizes local patterns of traffic data while ignoring global information associations. In this paper, we propose an MLP-Mixer based multi-view multi-label neural network for network traffic classification. Compared with the existing CNN-based methods, our method adopts the MLP-Mixer structure, which is more in line with the structure of the packet than the conventional convolution operation. In our method, one packet is divided into the packet header and the packet body, together with the flow features of the packet as input from different views. We utilize a multi-label setting to learn different scenarios simultaneously to improve the classification performance by exploiting the correlations between different scenarios. Taking advantage of the above characteristics, we propose an end-to-end network traffic classification method. We conduct experiments on three public datasets, and the experimental results show that our method can achieve superior performance.

📄 PDF Abstract BibTeX arXiv:2210.16719

Code (0)

등록된 구현이 없습니다.

Tasks

ClassificationTraffic Classification

Methods 이 논문이 사용한 방법론

Refunds@Expedia|||How do I get a full refund from Expedia? “How do I get a full refund from Expedia? How do I get a full refund from Expedia? – Call ☎️ +1-(888) 829 (0881) or +1-805-330-4056 or +1-805-330-4056 for Quick Help &…
Dense Connections Dense Connections, or Fully Connected Connections, are a type of layer in a deep neural network that use a linear operation where every input is connected to every output…
Layer Normalization Unlike batch normalization, Layer Normalization directly estimates the normalization statistics from the summed inputs…
Residual Connection 설명 없음
Dropout Dropout is a regularization technique for neural networks that drops a unit (along with connections) at training time with a specified probability $p$ (a common value is…
Average Pooling 설명 없음
Convolution A convolution is a type of matrix operation, consisting of a kernel, a small matrix of weights, that slides over input data performing element-wise multiplication with the…
Global Average Pooling Global Average Pooling is a pooling operation designed to replace fully connected layers in classical CNNs. The idea is to generate one feature map for each corresponding…

Similar Papers 제목 키워드 기반

Network Anomaly Traffic Detection via Multi-view Feature Fusion

2024-09-12 · Song Hao, Wentao Fu, Xuanze Chen, Chengxiang Jin 외

Traditional anomalous traffic detection methods are based on single-view analysis, which has obvious limitations in dealing with complex attacks and encrypted communications. In this regard, we propose a Multi-view Featu…

Multi-task Feature Selection based Anomaly Detection

2014-03-17 · Longqi Yang, Yibing Wang, Zhisong Pan, Guyu Hu

Network anomaly detection is still a vibrant research area. As the fast growth of network bandwidth and the tremendous traffic on the network, there arises an extremely challengeable question: How to efficiently and accu…

Anomaly Detectionfeature selectionMulti-Task Learning

Contrastive Self-Supervised Network Intrusion Detection using Augmented Negative Pairs

2025-09-08 · Jack Wilkie, Hanan Hindy, Christos Tachtatzis, Robert Atkinson arxiv

Network intrusion detection remains a critical challenge in cybersecurity. While supervised machine learning models achieve state-of-the-art performance, their reliance on large labelled datasets makes them impractical f…

Network Intrusion DetectionMulti-class ClassificationSelf-Supervised LearningBinary Classification

Explainable Autoencoder-Based Anomaly Detection in IEC 61850 GOOSE Networks

2026-01-14 · Dafne Lozano-Paredes, Luis Bote-Curiel, Juan Ramón Feijóo-Martínez, Ismael Gómez-Talal 외 arxiv

The IEC 61850 Generic Object-Oriented Substation Event (GOOSE) protocol plays a critical role in real-time protection and automation of digital substations, yet its lack of native security mechanisms can expose power sys…

Intrusion DetectionAnomaly Detection

uTRAND: Unsupervised Anomaly Detection in Traffic Trajectories

2024-04-19 · Giacomo D'Amicantonio, Egor Bondarau, Peter H. N. de With

Deep learning-based approaches have achieved significant improvements on public video anomaly datasets, but often do not perform well in real-world applications. This paper addresses two issues: the lack of labeled data …

Anomaly DetectionTrajectory PredictionUnsupervised Anomaly Detection