Abstract
Internet traffic classification plays a key role in network visibility, Quality of Services (QoS), intrusion detection, Quality of Experience (QoE) and traffic-trend analyses. In order to improve privacy, integrity, confidentiality, and protocol obfuscation, the current traffic is based on encryption protocols, e.g., SSL/TLS. With the increased use of Machine-Learning (ML) and Deep-Learning (DL) models in the literature, comparison between different models and methods has become cumbersome and difficult due to a lack of a standardized framework. In this paper, we propose an open-source framework, named OSF-EIMTC, which can provide the full pipeline of the learning process and simulation reproducibility. From well-known datasets to extracting new and well-known features, it provides implementations of well-known ML and DL models (from the traffic classification literature) as well as experimental test-beds and their evaluation. By providing a standardized platform, OSF-EIMTC enables repeatable, reproducible, and accurate comparisons of both established and novel features and models. As part of our framework evaluation, we demonstrate the reproducibility of a variety of cases where the framework can be of use, utilizing multiple datasets, models, and feature sets. We show analyses of publicly available datasets and invite the community to participate in our open challenges using OSF-EIMTC, fostering collaborative advancements in encrypted traffic classification.
Original language | English |
---|---|
Pages (from-to) | 271-284 |
Number of pages | 14 |
Journal | Computer Communications |
Volume | 213 |
DOIs | |
State | Published - 1 Jan 2024 |
Externally published | Yes |
Bibliographical note
Publisher Copyright:© 2023 Elsevier B.V.
Funding
The authors thank Antonio Montieri for his help in implementing the original DISTILLER system and also want to thank Tal Shapira for his help in implementing the FlowPic feature extraction and its respective model. This work was supported by the Ariel Cyber Innovation Center in conjunction with the Israel National Cyber Directorate in the Prime Minister's Office, Israel. The authors thank Antonio Montieri for his help in implementing the original DISTILLER system and also want to thank Tal Shapira for his help in implementing the FlowPic feature extraction and its respective model. This work was supported by the Ariel Cyber Innovation Center in conjunction with the Israel National Cyber Directorate in the Prime Minister’s Office, Israel .
Funders | Funder number |
---|---|
Prime Minister's Office, Israel | |
Prime Minister’s Office, Israel |
Keywords
- Encrypted traffic
- Experimental test-bed
- Framework
- Machine learning
- Research platform