UDFS: Lightweight Representation-Driven Open World Robust Encrypted Traffic Classification

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Xian, Youquan, Zeng, Xueying, Zhou, Aoxiang, Shi, Jinqiao, Hao, Zhiyu, Cui, Lei, Liu, Peng
Format: Preprint
Veröffentlicht: 2025
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866909963881807872
author Xian, Youquan
Zeng, Xueying
Zhou, Aoxiang
Shi, Jinqiao
Hao, Zhiyu
Cui, Lei
Liu, Peng
author_facet Xian, Youquan
Zeng, Xueying
Zhou, Aoxiang
Shi, Jinqiao
Hao, Zhiyu
Cui, Lei
Liu, Peng
contents In recent years, sequence features such as packet length have received considerable attention due to their central role in encrypted traffic analysis. Existing sequence modeling approaches can be broadly categorized into flow-level and trace-level methods: the former suffer from high feature redundancy, limiting their discriminative power, whereas the latter preserve complete information but incur substantial computational and storage overhead. To address these limitations, we propose the \textbf{U}p-\textbf{D}own \textbf{F}low \textbf{S}equence (\textbf{UDFS}) representation, which compresses an entire trace into a two-dimensional sequence and characterizes each flow by the aggregate of its upstream and downstream traffic, reducing complexity while maintaining high discriminability. Furthermore, to address the challenge of class-specific discriminability differences, we propose an adaptive threshold mechanism that dynamically adjusts training weights and rejection boundaries, enhancing the model's classification performance. Experimental results demonstrate that the proposed method achieves superior classification performance and robustness on both coarse-grained and fine-grained datasets, as well as under concept drift and open-world scenarios. Code and Dataset are available at https://github.com/kid1999/UDFS.
format Preprint
id arxiv_https___arxiv_org_abs_2509_11157
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle UDFS: Lightweight Representation-Driven Open World Robust Encrypted Traffic Classification
Xian, Youquan
Zeng, Xueying
Zhou, Aoxiang
Shi, Jinqiao
Hao, Zhiyu
Cui, Lei
Liu, Peng
Networking and Internet Architecture
Cryptography and Security
In recent years, sequence features such as packet length have received considerable attention due to their central role in encrypted traffic analysis. Existing sequence modeling approaches can be broadly categorized into flow-level and trace-level methods: the former suffer from high feature redundancy, limiting their discriminative power, whereas the latter preserve complete information but incur substantial computational and storage overhead. To address these limitations, we propose the \textbf{U}p-\textbf{D}own \textbf{F}low \textbf{S}equence (\textbf{UDFS}) representation, which compresses an entire trace into a two-dimensional sequence and characterizes each flow by the aggregate of its upstream and downstream traffic, reducing complexity while maintaining high discriminability. Furthermore, to address the challenge of class-specific discriminability differences, we propose an adaptive threshold mechanism that dynamically adjusts training weights and rejection boundaries, enhancing the model's classification performance. Experimental results demonstrate that the proposed method achieves superior classification performance and robustness on both coarse-grained and fine-grained datasets, as well as under concept drift and open-world scenarios. Code and Dataset are available at https://github.com/kid1999/UDFS.
title UDFS: Lightweight Representation-Driven Open World Robust Encrypted Traffic Classification
topic Networking and Internet Architecture
Cryptography and Security
url https://arxiv.org/abs/2509.11157