journal article·2025Open access

TB-Graph: Enhancing Encrypted Malicious Traffic Classification through Relational Graph Attention Networks

Ming Liu, Qichao Yang, Wenqing Wang, Shengli Liu

Computers, Materials & Continua· Volume 82· Issue 2

Abstract

The proliferation of internet traffic encryption has become a double-edged sword. While it significantly enhances user privacy, it also inadvertently shields cyber-attacks from detection, presenting a formidable challenge to ... | Find, read and cite all the research you need on Tech Science Press
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Internet Traffic Analysis and Secure E-voting · Network Security and Intrusion Detection · Spam and Phishing Detection

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (35)

Show source-provided references
1. TCGNN: Packet-grained network traffic classification via graph neural networks10.1016/j.engappai.2023.106531 ↗
2. DE-GNN: Dual embedding with graph neural network for fine-grained encrypted traffic classification10.1016/j.comnet.2024.110372 ↗
3. SSL malicious traffic detection based on multi-view features
4. Meta-TFEN: A multi-modal deep learning approach for encrypted malicious traffic detection
5. Toward identifying malicious encrypted traffic with a causality detection system
6. A malicious network traffic detection model based on bidirectional temporal convolutional network with multi-head self-attention mechanism10.1016/j.cose.2023.103580 ↗
7. CBSeq: A channel-level behavior sequence for encrypted malware traffic detection10.1109/TIFS.2023.3300521 ↗
8. CMTSNN: A deep learning model for multiclassification of abnormal and encrypted traffic of Internet of Things10.1109/JIOT.2023.3244544 ↗
9. ER-ERT: A method of ensemble representation learning of encrypted RAT traffic
10. TLS-MHSA: An efficient detection model for encrypted malicious traffic based on multi-head self-attention mechanism10.1145/3613960 ↗
11. Accurate decentralized application identification via encrypted traffic analysis using graph neural networks10.1109/TIFS.2021.3050608 ↗
12. Accurate encrypted malicious traffic identification via traffic interaction pattern using graph convolutional network
13. Characterization of tor traffic using time based features
14. Graph based encrypted malicious traffic detection with hybrid analysis of multi-view features10.1016/j.ins.2023.119229 ↗
15. Encrypted malware traffic detection via graph-based network analysis
16. TGPrint: Attack fingerprint classification on encrypted network traffic based graph convolution attention networks10.1016/j.cose.2023.103466 ↗
17. Accurate mobile-app fingerprinting using flow-level relationship with graph neural networks10.1016/j.comnet.2022.109309 ↗
18. Graph-based detection of encrypted malicious traffic with spatio-temporal features
19. DGNN: Accurate darknet application classification adopting attention graph neural network10.1109/TNSM.2023.3344580 ↗
20. Flow topology-based graph convolutional network for intrusion detection in label-limited IoT networks10.1109/TNSM.2022.3213807 ↗
21. MateGraph: Toward mobile malware detection through traffic behavior graph
22. MAppGraph: Mobile-app classification on encrypted network traffic using deep graph convolution neural networks
23. Interaction matters: Encrypted traffic classification via status-based interactive behavior graph10.1016/j.asoc.2024.111423 ↗
24. Combine intra- and inter-flow: A multimodal encrypted traffic classification model driven by diverse features10.1016/j.comnet.2024.110403 ↗
25. Beauty and the burst: Remote identification of encrypted video streams
26. FA-Net: More accurate encrypted network traffic classification based on burst with self-attention
27. Detection of encrypted malicious network traffic using machine learning
28. B. Duncan, “Malware traffic analysis,” 2024. Accessed: Jun. 10, 2024. [Online]. Available: https://malware-traffic-analysis.net/
29. AppScanner: Automatic fingerprinting of smartphone apps from encrypted network traffic
30. Website fingerprinting at internet scale
31. FlowPrint: Semi-supervised mobile-app fingerprinting on encrypted network traffic
32. Seeing traffic paths: Encrypted traffic classification with path signature features10.1109/TIFS.2022.3179955 ↗
33. FS-Net: A flow sequence network for encrypted traffic classification
34. Deep packet: A novel approach for encrypted traffic classification using deep learning10.1007/s00500-019-04030-2 ↗
35. Encrypted network traffic classification using a geometric learning model