Title
Encrypted traffic classification based on Gaussian mixture models and Hidden Markov Models
Abstract
To protect user privacy (e.g., IP address and sensitive data in a packet), many traffic protection methods, like traffic obfuscation and encryption technologies, are introduced. However, these methods have been used by attackers to transmit malicious traffic, posing a serious threat to network security. To enhance network traffic supervision, this paper proposes a new traffic classification model based on Gaussian mixture models and hidden Markov models, named MGHMM. To evaluate the effectiveness of the proposed model, we first classify protocols and identify the obfuscated traffic by experiments. Then, we compare the classification performance of MGHMM with that of the latest Vector Quantiser-based traffic classification algorithm. On the basis of the experiment, the relation between the classification and the number of hidden Markov states, and the number of mixture of Gaussian distributions required to describe the hidden states, are analyzed.
Year
DOI
Venue
2020
10.1016/j.jnca.2020.102711
Journal of Network and Computer Applications
Keywords
DocType
Volume
Traffic classification,Encrypted traffic,Gaussian mixture model,Hidden Markov model
Journal
166
ISSN
Citations 
PageRank 
1084-8045
1
0.36
References 
Authors
0
6
Name
Order
Citations
PageRank
Zhongjiang Yao171.80
Jingguo Ge2304.90
Yulei Wu348051.95
Xiaosheng Lin410.36
Runkang He510.36
Yuxiang Ma610.36