Next Article in Journal
A Review of PCI Express Protocol-Based Systems in Response to 5G Application Demand
Next Article in Special Issue
Demystifying In-Vehicle Intrusion Detection Systems: A Survey of Surveys and a Meta-Taxonomy
Previous Article in Journal
Analysis and Design Multiple Layer Adaptive Kalman Filter Applied to Electro-Optical Infrared Payload Vision System
Previous Article in Special Issue
Machine Learning for DDoS Attack Detection in Industry 4.0 CPPSs
 
 
Search for Articles:
Title / Keyword
Author / Affiliation / Email
Journal
Article Type
 
 
Advanced Search
 
Section
Special Issue
Volume
Issue
Number
Page
 
Journals
Electronics
Volume 11
Issue 5
10.3390/electronics11050679
electronics-logo
Submit to this Journal Review for this Journal Propose a Special Issue
► Article Menu

Article Menu

share Share announcement Help format_quote Cite question_answer Discuss in SciProfiles
first_page
settings
Order Article Reprints
Font Type:
Arial Georgia Verdana
Font Size:
Aa Aa Aa
Line Spacing:
Column Width:
Background:
Article

Encrypted Malicious Traffic Detection Based on Word2Vec

by
Andrey Ferriyan
1,*,†,
Achmad Husni Thamrin
1,†,
Keiji Takeda
2,† and
Jun Murai
3,†
1
Graduate School of Media and Governance, Keio University, Kanagawa 252-0882, Japan
2
Faculty of Environment and Information Studies, Keio University, Kanagawa 252-0882, Japan
3
Keio University, Tokyo 108-8345, Japan
*
Author to whom correspondence should be addressed.
†
These authors contributed equally to this work.
Electronics 2022, 11(5), 679; https://doi.org/10.3390/electronics11050679
Submission received: 16 January 2022 / Revised: 12 February 2022 / Accepted: 17 February 2022 / Published: 23 February 2022
(This article belongs to the Special Issue Design of Intelligent Intrusion Detection Systems)
Browse Figures
Versions Notes

Abstract

Network-based intrusion detections become more difficult as Internet traffic is mostly encrypted. This paper introduces a method to detect encrypted malicious traffic based on the Transport Layer Security handshake and payload features without waiting for the traffic session to finish while preserving privacy. Our method, called TLS2Vec, creates words from the extracted features and uses Long Short-Term Memory (LSTM) for inference. We evaluated our method using traffic from three malicious applications and a benign application that we obtained from two publicly available datasets. Our results showed that TLS2Vec is promising as a tool to detect such malicious traffic.
Keywords: privacy preserving IDS; TLS; Network Intrusion Detection System; encrypted malicious traffic privacy preserving IDS; TLS; Network Intrusion Detection System; encrypted malicious traffic

Share and Cite

MDPI and ACS Style

Ferriyan, A.; Thamrin, A.H.; Takeda, K.; Murai, J. Encrypted Malicious Traffic Detection Based on Word2Vec. Electronics 2022, 11, 679. https://doi.org/10.3390/electronics11050679

AMA Style

Ferriyan A, Thamrin AH, Takeda K, Murai J. Encrypted Malicious Traffic Detection Based on Word2Vec. Electronics. 2022; 11(5):679. https://doi.org/10.3390/electronics11050679

Chicago/Turabian Style

Ferriyan, Andrey, Achmad Husni Thamrin, Keiji Takeda, and Jun Murai. 2022. "Encrypted Malicious Traffic Detection Based on Word2Vec" Electronics 11, no. 5: 679. https://doi.org/10.3390/electronics11050679

APA Style

Ferriyan, A., Thamrin, A. H., Takeda, K., & Murai, J. (2022). Encrypted Malicious Traffic Detection Based on Word2Vec. Electronics, 11(5), 679. https://doi.org/10.3390/electronics11050679

Note that from the first issue of 2016, this journal uses article numbers instead of page numbers. See further details here.

Article Metrics

Back to TopTop