{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/deep-packet-a-novel-approach-for-encrypted","title":"Deep Packet: A Novel Approach For Encrypted Traffic Classification Using Deep Learning","arxiv_id":"1709.02656","date":"2017-09-08","proceeding":null,"authors":["Mohammad Lotfollahi","Ramin Shirali Hossein Zade","Mahdi Jafari Siavoshani","Mohammdsadegh Saberian"],"abstract":"Internet traffic classification has become more important with rapid growth\nof current Internet network and online applications. There have been numerous\nstudies on this topic which have led to many different approaches. Most of\nthese approaches use predefined features extracted by an expert in order to\nclassify network traffic. In contrast, in this study, we propose a \\emph{deep\nlearning} based approach which integrates both feature extraction and\nclassification phases into one system. Our proposed scheme, called \"Deep\nPacket,\" can handle both \\emph{traffic characterization} in which the network\ntraffic is categorized into major classes (\\eg, FTP and P2P) and application\nidentification in which end-user applications (\\eg, BitTorrent and Skype)\nidentification is desired. Contrary to most of the current methods, Deep Packet\ncan identify encrypted traffic and also distinguishes between VPN and non-VPN\nnetwork traffic. After an initial pre-processing phase on data, packets are fed\ninto Deep Packet framework that embeds stacked autoencoder and convolution\nneural network in order to classify network traffic. Deep packet with CNN as\nits classification model achieved recall of $0.98$ in application\nidentification task and $0.94$ in traffic categorization task. To the best of\nour knowledge, Deep Packet outperforms all of the proposed classification\nmethods on UNB ISCX VPN-nonVPN dataset.","url_abs":"http://arxiv.org/abs/1709.02656v3","url_pdf":"http://arxiv.org/pdf/1709.02656v3.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"deep-packet-a-novel-approach-for-encrypted","repo_url":"https://github.com/KimythAnly/deeppacket","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"tf","reach":null},{"paper_slug":"deep-packet-a-novel-approach-for-encrypted","repo_url":"https://github.com/PrivPkt/PrivPkt","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"tf","reach":{"status":"ok","spdx":"MIT"}},{"paper_slug":"deep-packet-a-novel-approach-for-encrypted","repo_url":"https://github.com/YuriBogdanov/DeepPacket","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"pytorch","reach":null},{"paper_slug":"deep-packet-a-novel-approach-for-encrypted","repo_url":"https://github.com/mrazimi99/deep-packet","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"pytorch","reach":null},{"paper_slug":"deep-packet-a-novel-approach-for-encrypted","repo_url":"https://github.com/mhwong2007/Deep-Packet","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":0,"framework":"pytorch","reach":null}],"tasks":[{"task_slug":"classification","task_name":"General Classification"},{"task_slug":"traffic-classification","task_name":"Traffic Classification"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":"https://syntology.ai/paper/1709.02656","atlas_url":"https://app.syntology.ai/?focus=1709.02656","mcp":null,"developers":"https://syntology.ai/developers"},"arxiv_metadata":null,"syntology_extracted_results":null}