Packet-Level DDoS Data Augmentation Using Dual-Stream Temporal-Field Diffusion

Fuente: arXiv
Enregistré dans:
Détails bibliographiques
Auteurs principaux: Xi, Gongli, Tian, Ye, Hu, Yannan, Zhang, Yuchao, Niu, Yapeng, Gong, Xiangyang
Format: Preprint
Publié: 2025
Sujets:
Accès en ligne:
Tags: Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
_version_ 1866915882257612800
author Xi, Gongli
Tian, Ye
Hu, Yannan
Zhang, Yuchao
Niu, Yapeng
Gong, Xiangyang
author_facet Xi, Gongli
Tian, Ye
Hu, Yannan
Zhang, Yuchao
Niu, Yapeng
Gong, Xiangyang
contents In response to Distributed Denial of Service (DDoS) attacks, recent research efforts increasingly rely on Machine Learning (ML)-based solutions, whose effectiveness largely depends on the quality of labeled training datasets. To address the scarcity of such datasets, data augmentation with synthetic traces is often employed. However, current synthetic trace generation methods struggle to capture the complex temporal patterns and spatial distributions exhibited in emerging DDoS attacks. This results in insufficient resemblance to real traces and unsatisfied detection accuracy when applied to ML tasks. In this paper, we propose Dual-Stream Temporal-Field Diffusion (DSTF-Diffusion), a multi-view, multi-stream network traffic generative model based on diffusion models, featuring two main streams: The field stream utilizes spatial mapping to bridge network data characteristics with pre-trained realms of stable diffusion models, effectively translating complex network interactions into formats that stable diffusion can process, while the spatial stream adopts a dynamic temporal modeling approach, meticulously capturing the intrinsic temporal patterns of network traffic. Extensive experiments demonstrate that data generated by our model exhibits higher statistical similarity to originals compared to current state-of-the-art solutions, and enhance performances on a wide range of downstream tasks.
format Preprint
id arxiv_https___arxiv_org_abs_2507_20115
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Packet-Level DDoS Data Augmentation Using Dual-Stream Temporal-Field Diffusion
Xi, Gongli
Tian, Ye
Hu, Yannan
Zhang, Yuchao
Niu, Yapeng
Gong, Xiangyang
Networking and Internet Architecture
Artificial Intelligence
In response to Distributed Denial of Service (DDoS) attacks, recent research efforts increasingly rely on Machine Learning (ML)-based solutions, whose effectiveness largely depends on the quality of labeled training datasets. To address the scarcity of such datasets, data augmentation with synthetic traces is often employed. However, current synthetic trace generation methods struggle to capture the complex temporal patterns and spatial distributions exhibited in emerging DDoS attacks. This results in insufficient resemblance to real traces and unsatisfied detection accuracy when applied to ML tasks. In this paper, we propose Dual-Stream Temporal-Field Diffusion (DSTF-Diffusion), a multi-view, multi-stream network traffic generative model based on diffusion models, featuring two main streams: The field stream utilizes spatial mapping to bridge network data characteristics with pre-trained realms of stable diffusion models, effectively translating complex network interactions into formats that stable diffusion can process, while the spatial stream adopts a dynamic temporal modeling approach, meticulously capturing the intrinsic temporal patterns of network traffic. Extensive experiments demonstrate that data generated by our model exhibits higher statistical similarity to originals compared to current state-of-the-art solutions, and enhance performances on a wide range of downstream tasks.
title Packet-Level DDoS Data Augmentation Using Dual-Stream Temporal-Field Diffusion
topic Networking and Internet Architecture
Artificial Intelligence
url https://arxiv.org/abs/2507.20115