Aiming at the problem that traditional machine methods rely on expert experience and the effect of malicious traffic identification is not ideal, a deep learning hybrid model is proposed to detect malicious TLS traffic. The model combines one-dimensional convolutional neural network and two-way long-term and short-term memory network to compress and extract network traffic features from two dimensions of space and time series. At the same time, attention score of output information is extracted by attention mechanism, and traffic identification is carried out by using mixed features obtained by fully connected neural network. Based on the open data set, the experimental results show that the accuracy, recall and F1 value of the model on the test set reach 94.67%, 89.66% and 91.08% respectively, which has good recognition effect.
Research on Malicious TLS Traffic Detection Based on Spatiotemporal Feature Fusion
Lect. Notes Electrical Eng.
22.03.2022
8 pages
Aufsatz/Kapitel (Buch)
Elektronische Ressource
Englisch
MALICIOUS TRAFFIC DETECTION WITH ANOMALY DETECTION MODELING
Europäisches Patentamt | 2022
|MALICIOUS TRAFFIC DETECTION WITH ANOMALY DETECTION MODELING
Europäisches Patentamt | 2022
|Malicious traffic detection based on GWO-SVM model
IEEE | 2022
|