Fine-grained TLS Services Classification with Reject Option

by   Jan Luxemburk, et al.

The recent success and proliferation of machine learning and deep learning have provided powerful tools, which are also utilized for encrypted traffic analysis, classification, and threat detection. These methods, neural networks in particular, are often complex and require a huge corpus of training data. Therefore, this paper focuses on collecting a large up-to-date dataset with almost 200 fine-grained service labels and 140 million network flows extended with packet-level metadata. The number of flows is three orders of magnitude higher than in other existing public labeled datasets of encrypted traffic. The number of service labels, which is important to make the problem hard and realistic, is four times higher than in the public dataset with the most class labels. The published dataset is intended as a benchmark for identifying services in encrypted traffic. Service identification can be further extended with the task of "rejecting" unknown services, i.e., the traffic not seen during the training phase. Neural networks offer superior performance for tackling this more challenging problem. To showcase the dataset's usefulness, we implemented a neural network with a multi-modal architecture, which is the state-of-the-art approach, and achieved 97.04 detected 91.94


page 7

page 14


Deep Learning for Network Traffic Classification

Monitoring network traffic to identify content, services, and applicatio...

TFE-GNN: A Temporal Fusion Encoder Using Graph Neural Networks for Fine-grained Encrypted Traffic Classification

Encrypted traffic classification is receiving widespread attention from ...

Feature Mining for Encrypted Malicious Traffic Detection with Deep Learning and Other Machine Learning Algorithms

The popularity of encryption mechanisms poses a great challenge to malic...

White Mirror: Leaking Sensitive Information from Interactive Netflix Movies using Encrypted Traffic Analysis

Privacy leaks from Netflix videos/movies is well researched. Current sta...

A Study of Deep Learning for Network Traffic Data Forecasting

We present a study of deep learning applied to the domain of network tra...

Classification of Mobile Services and Apps through Physical Channel Fingerprinting: a Deep Learning Approach

The automatic classification of applications and services is an invaluab...

Activity Detection from Encrypted Remote Desktop Protocol Traffic

An increasing amount of Internet traffic has its content encrypted. We a...

Please sign up or login with your details

Forgot password? Click here to reset