Deep Packet: A Novel Approach For Encrypted Traffic Classification Using Deep Learning
Not on the map. Why?
Abstract (arXiv)
Internet traffic classification has become more important with rapid growth of current Internet network and online applications. There have been numerous studies on this topic which have led to many different approaches. Most of these approaches use predefined features extracted by an expert in order to classify network traffic. In contrast, in this study, we propose a deep learning based approach which integrates both feature extraction and classification phases into one system. Our proposed scheme, called "Deep Packet," can handle both traffic characterization in which the network traffic is categorized into major classes (eg, FTP and P2P) and application identification in which end-user applications (eg, BitTorrent and Skype) identification is desired. Contrary to most of the current methods, Deep Packet can identify encrypted traffic and also distinguishes between VPN and non-VPN network traffic. After an initial pre-processing phase on data, packets are fed into Deep Packet framework that embeds stacked autoencoder and convolution neural network in order to classify network traffic. Deep packet with CNN as its classification model achieved recall of 0.98 in application identification task and 0.94 in traffic categorization task. To the best of our knowledge, Deep Packet outperforms all of the proposed classification methods on UNB ISCX VPN-nonVPN dataset.
Key facts. Cited by 69 papers in the map (data through 7 Oct 2026). First posted on arXiv 8 Sep 2017.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 10; 2022: 11; 2023: 9; 2024: 19; 2025: 8; 2026: 12.
69 papers.
Sort:
By area:
- 2022ET-BERT: A Contextualized Datagram Representation with Pre-training Transformers for Encrypted Traffic Classificationcited by 66
- 2024NetMamba: Efficient Network Traffic Classification via Pre-training Unidirectional Mambacited by 24
- 2021Deep Learning and Traffic Classification: Lessons learned from a commercial-grade dataset with hundreds of encrypted and zero-day applicationscited by 14
- 2023TFE-GNN: A Temporal Fusion Encoder Using Graph Neural Networks for Fine-grained Encrypted Traffic Classificationcited by 13
- 2022Extensible Machine Learning for Encrypted Network Traffic Application Labeling via Uncertainty Quantificationcited by 9
- 2024Communication-Efficient Large-Scale Distributed Deep Learning: A Comprehensive Surveycited by 9
- 2024Lens: A Knowledge-Guided Foundation Model for Network Trafficcited by 7
- 2021CGNN: Traffic Classification with Graph Neural Networkcited by 6
- 2022A Lightweight, Efficient and Explainable-by-Design Convolutional Neural Network for Internet Traffic Classificationcited by 6
- 2022Machine Learning for Encrypted Malicious Traffic Detection: Approaches, Datasets and Comparative Studycited by 6
- 2022When a RF Beats a CNN and GRU, Together -- A Comparison of Deep Learning and Classical Machine Learning Approaches for Encrypted Malware Traffic Classificationcited by 5
- 2023Deep PackGen: A Deep Reinforcement Learning Framework for Adversarial Network Packet Generationcited by 5
38 more
- 2021Evaluating Resilience of Encrypted Traffic Classification Against Adversarial Evasion Attackscited by 4
- 2021Artificial Neural Network for Cybersecurity: A Comprehensive Reviewcited by 4
- 2021A First Look at Class Incremental Learning in Deep Learning Mobile Traffic Classificationcited by 4
- 2021Explainable Artificial Intelligence for Smart City Application: A Secure and Trusted Platformcited by 4
- 2024A Transformer-Based Framework for Payload Malware Detection and Classificationcited by 4
- 2024Towards Novel Malicious Packet Recognition: A Few-Shot Learning Approachcited by 4
- 2025Respond to Change with Constancy: Instruction-tuning with LLM for Non-I.I.D. Network Traffic Classificationcited by 4
- 2022ARCADE: Adversarially Regularized Convolutional Autoencoder for Network Anomaly Detectioncited by 3
- 2022Visualization Of Class Activation Maps To Explain AI Classification Of Network Packet Capturescited by 3
- 2024Semi-Supervised Learning for Anomaly Traffic Detection via Bidirectional Normalizing Flowscited by 3
- 2025Energy-Efficient Deep Learning for Traffic Classification on Microcontrollerscited by 3
- 2025FlowletFormer: Network Behavioral Semantic Aware Pre-training Model for Traffic Classificationcited by 3
- 2022Multi-view Multi-label Anomaly Network Traffic Classification based on MLP-Mixer Neural Networkcited by 2
- 2023Towards the Visualization of Aggregated Class Activation Maps to Analyse the Global Contribution of Class Featurescited by 2
- 2023Enhancing IoT Security via Automatic Network Traffic Analysis: The Transition from Machine Learning to Deep Learningcited by 2
- 2024Resource Allocation and Workload Scheduling for Large-Scale Distributed Deep Learning: A Surveycited by 2
- 2024Packet Inspection Transformer: A Self-Supervised Journey to Unseen Malware Detection with Few Samplescited by 2
- 2025Revolutionizing Encrypted Traffic Classification with MH-Net: A Multi-View Heterogeneous Graph Modelcited by 2
- 2025Hardware-Aware Neural Architecture Search for Encrypted Traffic Classification on Resource-Constrained Devicescited by 2
- 2021Encrypted Internet traffic classification using a supervised Spiking Neural Networkcited by 1
- 2021Federated Traffic Synthesizing and Classification Using Generative Adversarial Networkscited by 1
- 2021Detecting Attacks on IoT Devices using Featureless 1D-CNNcited by 1
- 2021Time-Distributed Feature Learning in Network Traffic Classification for Internet of Thingscited by 1
- 2022Deep Learning for Encrypted Traffic Classification and Unknown Data Detectioncited by 1
- 2022Can You Still See Me?: Reconstructing Robot Operations Over End-to-End Encrypted Channelscited by 1
- 2023AutoML4ETC: Automated Neural Architecture Search for Real-World Encrypted Traffic Classificationcited by 1
- 2023Listen to Minority: Encrypted Traffic Classification for Class Imbalance with Contrastive Pre-Trainingcited by 1
- 2024ServeFlow: A Fast-Slow Model Architecture for Network Traffic Analysiscited by 1
- 2024One Train for Two Tasks: An Encrypted Traffic Classification Framework Using Supervised Contrastive Learningcited by 1
- 2024Generic Multi-modal Representation Learning for Network Traffic Analysiscited by 1
- 2024Non-uniformity is All You Need: Efficient and Timely Encrypted Traffic Classification With ECHOcited by 1
- 2024Efficiently and Effectively: A Two-stage Approach to Balance Plaintext and Encrypted Text for Traffic Classificationcited by 1
- 2024MERLOT: A Distilled LLM-based Mixture-of-Experts Framework for Scalable Encrypted Traffic Classificationcited by 1
- 2026NetMamba+: A Framework of Pre-trained Models for Efficient and Accurate Network Traffic Classificationcited by 1
- 2026TrafficMoE: Heterogeneity-aware Mixture of Experts for Encrypted Traffic Classificationcited by 1
- 2026UniAlign: A Model-Agnostic Framework for Robust Network Traffic Classification under Distribution Shiftscited by 1
- 2026Interactive Analysis of Global Explanations using Aggregated Class Activation Maps for Network Datacited by 1
- 2026Pruned Traffic Trees: Native Semantic Compression with a Protocol-Structured Model Family for Encrypted Traffic Classificationcited by 1
50 most cited of 69 All 69 (JSON)
- 2026Beyond Measurement Metrics: A Human-Centered Framework for Semantic Validation of Network Traffic Classification15 Sep 2026
- 2026TDDM-Melatt: A Decoupled Memory and Diffusion Framework for Generalizable Encrypted Traffic Classification31 Aug 2026
- 2026Adapter-Based Few-Shot Continual Learning for Malicious Packet Recognition24 Aug 2026
- 2026Pruned Traffic Trees: Native Semantic Compression with a Protocol-Structured Model Family for Encrypted Traffic Classification22 Aug 2026
- 2026PERO: Efficient Robust Post-Training Foundation Models for Encrypted Traffic Classification16 Aug 2026
- 2026Interactive Analysis of Global Explanations using Aggregated Class Activation Maps for Network Data5 Jul 2026
- 2026Traffic-CBM: A Structurally Interpretable Multimodal Framework for Encrypted Traffic Classification29 Jun 2026
- 2026TraceCodec: A Compiler-Backed Neural Codec for Stateful Multi-Flow Network Traffic Traces28 May 2026
- 2026UniAlign: A Model-Agnostic Framework for Robust Network Traffic Classification under Distribution Shifts17 May 2026
- 2026TrafficMoE: Heterogeneity-aware Mixture of Experts for Encrypted Traffic Classification31 Mar 2026
- 2026NetMamba+: A Framework of Pre-trained Models for Efficient and Accurate Network Traffic Classification29 Jan 2026
- 2026Learning QoE from Packet-Level Measurements in Encrypted Video Conferencing Traffic11 Jan 2026
38 more
- 2025FlowletFormer: Network Behavioral Semantic Aware Pre-training Model for Traffic Classification27 Aug 2025
- 2025Versatile yet Efficient Network Traffic Analysis: Offloading Network Foundation Model to SmartNIC4 Aug 2025
- 2025Hardware-Aware Neural Architecture Search for Encrypted Traffic Classification on Resource-Constrained Devices12 Jun 2025
- 2025Energy-Efficient Deep Learning for Traffic Classification on Microcontrollers12 Jun 2025
- 2025Respond to Change with Constancy: Instruction-tuning with LLM for Non-I.I.D. Network Traffic Classification27 May 2025
- 2025Network Traffic Classification Using Machine Learning, Transformer, and Large Language Models4 Mar 2025
- 2025A Pipeline of Augmentation and Sequence Embedding for Classification of Imbalanced Network Traffic26 Feb 2025
- 2025Revolutionizing Encrypted Traffic Classification with MH-Net: A Multi-View Heterogeneous Graph Model5 Jan 2025
- 2024MERLOT: A Distilled LLM-based Mixture-of-Experts Framework for Scalable Encrypted Traffic Classification20 Nov 2024
- 2024Estimating the Number of HTTP/3 Responses in QUIC Using Deep Learning8 Oct 2024
- 2024SwiftQueue: Optimizing Low-Latency Applications with Swift Packet Queuing8 Oct 2024
- 2024Group & Reweight: A Novel Cost-Sensitive Approach to Mitigating Class Imbalance in Network Traffic Classification28 Sep 2024
- 2024Packet Inspection Transformer: A Self-Supervised Journey to Unseen Malware Detection with Few Samples26 Sep 2024
- 2024ConvLSTMTransNet: A Hybrid Deep Learning Approach for Internet Traffic Telemetry20 Sep 2024
- 2024Towards Novel Malicious Packet Recognition: A Few-Shot Learning Approach17 Sep 2024
- 2024Efficiently and Effectively: A Two-stage Approach to Balance Plaintext and Encrypted Text for Traffic Classification29 Jul 2024
- 2024Characterizing Encrypted Application Traffic through Cellular Radio Interface Protocol10 Jul 2024
- 2024Resource Allocation and Workload Scheduling for Large-Scale Distributed Deep Learning: A Survey12 Jun 2024
- 2024Non-uniformity is All You Need: Efficient and Timely Encrypted Traffic Classification With ECHO3 Jun 2024
- 2024NetMamba: Efficient Network Traffic Classification via Pre-training Unidirectional Mamba19 May 2024
- 2024Generic Multi-modal Representation Learning for Network Traffic Analysis4 May 2024
- 2024Communication-Efficient Large-Scale Distributed Deep Learning: A Comprehensive Survey9 Apr 2024
- 2024A Transformer-Based Framework for Payload Malware Detection and Classification27 Mar 2024
- 2024Semi-Supervised Learning for Anomaly Traffic Detection via Bidirectional Normalizing Flows13 Mar 2024
- 2024One Train for Two Tasks: An Encrypted Traffic Classification Framework Using Supervised Contrastive Learning12 Feb 2024
- 2024ServeFlow: A Fast-Slow Model Architecture for Network Traffic Analysis6 Feb 2024
- 2024Lens: A Knowledge-Guided Foundation Model for Network Traffic6 Feb 2024
- 2023Enhancing IoT Security via Automatic Network Traffic Analysis: The Transition from Machine Learning to Deep Learning20 Nov 2023
- 2023Towards Intelligent Network Management: Leveraging AI for Network Service Detection14 Oct 2023
- 2023Listen to Minority: Encrypted Traffic Classification for Class Imbalance with Contrastive Pre-Training31 Aug 2023
- 2023AutoML4ETC: Automated Neural Architecture Search for Real-World Encrypted Traffic Classification4 Aug 2023
- 2023TFE-GNN: A Temporal Fusion Encoder Using Graph Neural Networks for Fine-grained Encrypted Traffic Classification31 Jul 2023
- 2023Towards the Visualization of Aggregated Class Activation Maps to Analyse the Global Contribution of Class Features29 Jul 2023
- 2023Deep PackGen: A Deep Reinforcement Learning Framework for Adversarial Network Packet Generation18 May 2023
- 2023CNN-based IoT Device Identification: A Comparative Study on Payload vs. Fingerprint27 Apr 2023
- 2023Efficient Attack Detection in IoT Devices using Feature Engineering-Less Machine Learning9 Jan 2023
- 2022Multi-view Multi-label Anomaly Network Traffic Classification based on MLP-Mixer Neural Network30 Oct 2022
- 2022Visualization Of Class Activation Maps To Explain AI Classification Of Network Packet Captures5 Sep 2022
50 newest of 69 All 69 (JSON)
- 2022ET-BERT: A Contextualized Datagram Representation with Pre-training Transformers for Encrypted Traffic Classificationcited by 66
- 2021Deep Learning and Traffic Classification: Lessons learned from a commercial-grade dataset with hundreds of encrypted and zero-day applicationscited by 14
- 2023TFE-GNN: A Temporal Fusion Encoder Using Graph Neural Networks for Fine-grained Encrypted Traffic Classificationcited by 13
- 2022Extensible Machine Learning for Encrypted Network Traffic Application Labeling via Uncertainty Quantificationcited by 9
- 2024Communication-Efficient Large-Scale Distributed Deep Learning: A Comprehensive Surveycited by 9
- 2024Lens: A Knowledge-Guided Foundation Model for Network Trafficcited by 7
- 2021CGNN: Traffic Classification with Graph Neural Networkcited by 6
- 2022A Lightweight, Efficient and Explainable-by-Design Convolutional Neural Network for Internet Traffic Classificationcited by 6
- 2022Machine Learning for Encrypted Malicious Traffic Detection: Approaches, Datasets and Comparative Studycited by 6
- 2022When a RF Beats a CNN and GRU, Together -- A Comparison of Deep Learning and Classical Machine Learning Approaches for Encrypted Malware Traffic Classificationcited by 5
- 2023Deep PackGen: A Deep Reinforcement Learning Framework for Adversarial Network Packet Generationcited by 5
- 2021Evaluating Resilience of Encrypted Traffic Classification Against Adversarial Evasion Attackscited by 4
12 most cited of 66 All 66 (JSON)
- 2026Beyond Measurement Metrics: A Human-Centered Framework for Semantic Validation of Network Traffic Classification15 Sep 2026
- 2026TDDM-Melatt: A Decoupled Memory and Diffusion Framework for Generalizable Encrypted Traffic Classification31 Aug 2026
- 2026Adapter-Based Few-Shot Continual Learning for Malicious Packet Recognition24 Aug 2026
- 2026Pruned Traffic Trees: Native Semantic Compression with a Protocol-Structured Model Family for Encrypted Traffic Classification22 Aug 2026
- 2026PERO: Efficient Robust Post-Training Foundation Models for Encrypted Traffic Classification16 Aug 2026
- 2026Interactive Analysis of Global Explanations using Aggregated Class Activation Maps for Network Data5 Jul 2026
- 2026Traffic-CBM: A Structurally Interpretable Multimodal Framework for Encrypted Traffic Classification29 Jun 2026
- 2026TraceCodec: A Compiler-Backed Neural Codec for Stateful Multi-Flow Network Traffic Traces28 May 2026
- 2026UniAlign: A Model-Agnostic Framework for Robust Network Traffic Classification under Distribution Shifts17 May 2026
- 2026NetMamba+: A Framework of Pre-trained Models for Efficient and Accurate Network Traffic Classification29 Jan 2026
- 2026Learning QoE from Packet-Level Measurements in Encrypted Video Conferencing Traffic11 Jan 2026
- 2025FlowletFormer: Network Behavioral Semantic Aware Pre-training Model for Traffic Classification27 Aug 2025
12 newest of 66 All 66 (JSON)