Online Network Traffic Classification Based on External Attention and Convolution by IP Packet Header

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Hu, Yahui, Zeng, Ziqian, Song, Junping, Xu, Luyang, Zhou, Xu
Format: Preprint
Published: 2023
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866929439212830720
author Hu, Yahui
Zeng, Ziqian
Song, Junping
Xu, Luyang
Zhou, Xu
author_facet Hu, Yahui
Zeng, Ziqian
Song, Junping
Xu, Luyang
Zhou, Xu
contents Network traffic classification is an important part of network monitoring and network management. Three traditional methods for network traffic classification are flow-based, session-based, and packet-based, while flow-based and session-based methods cannot meet the real-time requirements and existing packet-based methods will violate user's privacy. To solve the above problems, we propose a network traffic classification method only by the IP packet header, which satisfies the requirements of both the user's privacy protection and online classification performances. Through statistical analyses, we find that IP packet header information is effective on the network traffic classification tasks and this conclusion is also demonstrated by experiments. Furthermore, we propose a novel external attention and convolution mixed (ECM) model for online network traffic classification. This model adopts both low-computational complexity external attention and convolution to respectively extract the byte-level and packet-level characteristics for traffic classification. Therefore, it can achieve high classification accuracy and low time consumption. The experiments show that ECM can achieve the highest classification accuracy and the lowest delay, compared with other state-of-art models. The accuracy can respectively achieve 98.39% and 95.57% on two datasets and the classification time is shorten to meet the real-time requirements.
format Preprint
id arxiv_https___arxiv_org_abs_2309_09440
institution arXiv
publishDate 2023
record_format arxiv
spellingShingle Online Network Traffic Classification Based on External Attention and Convolution by IP Packet Header
Hu, Yahui
Zeng, Ziqian
Song, Junping
Xu, Luyang
Zhou, Xu
Networking and Internet Architecture
Network traffic classification is an important part of network monitoring and network management. Three traditional methods for network traffic classification are flow-based, session-based, and packet-based, while flow-based and session-based methods cannot meet the real-time requirements and existing packet-based methods will violate user's privacy. To solve the above problems, we propose a network traffic classification method only by the IP packet header, which satisfies the requirements of both the user's privacy protection and online classification performances. Through statistical analyses, we find that IP packet header information is effective on the network traffic classification tasks and this conclusion is also demonstrated by experiments. Furthermore, we propose a novel external attention and convolution mixed (ECM) model for online network traffic classification. This model adopts both low-computational complexity external attention and convolution to respectively extract the byte-level and packet-level characteristics for traffic classification. Therefore, it can achieve high classification accuracy and low time consumption. The experiments show that ECM can achieve the highest classification accuracy and the lowest delay, compared with other state-of-art models. The accuracy can respectively achieve 98.39% and 95.57% on two datasets and the classification time is shorten to meet the real-time requirements.
title Online Network Traffic Classification Based on External Attention and Convolution by IP Packet Header
topic Networking and Internet Architecture
url https://arxiv.org/abs/2309.09440