期刊
INTERNATIONAL JOURNAL OF EMERGING TECHNOLOGIES IN LEARNING
卷 13, 期 4, 页码 4-20出版社
INT ASSOC ONLINE ENGINEERING
DOI: 10.3991/ijet.v13i04.8466
关键词
Machine learning; Automatic learning systems; Multi-task learning; End-to-end learning; Network anomaly detection
资金
- First-Action Program of Institute of Acoustics, Chinese Academy of Sciences [SXJH201609]
Since the last decade of the 20th century, the Internet had become flourishing, which drew great interest in the detection of abnormal network traffic. Particularly, it's impossible to manually detect the abnormal patterns from enormous traffic flow in real time. Therefore, multiple machine learning methods are adopted to solve this learning problem. Those methods differ in mathematical models, knowledge models, application scenarios and target flows. In recent years, as a consequence of the technological breakthrough of Web 3.0, the traditional types of traffic classifiers are getting outdated and people start to focus on deep learning methods. Deep learning provides the potential for end-to-end learning systems to automatically learn the abnormal patterns without massive feature engineering, saving plenty of detecting time. In this study, to further save both memory and times of learning systems, we propose a novel multi-task learning system based on convolutional neural network, which can simultaneously solve the tasks of malware detection, VPN-capsulation recognition and Trojan classification. To the best of our knowledge, it's the first time to apply an end-to-end multi-task learning system in traffic classification. In order to validate this method, we establish experiments on public malware dataset CTU-13 and VPN traffic dataset ISCX. Our system found a synergy among all these tasks and managed to achieve the state-of-the-art output for most of the experiments.
作者
我是这篇论文的作者
点击您的名字以认领此论文并将其添加到您的个人资料中。
推荐
暂无数据