信息安全研究2025，Vol.11Issue(8)：702-709,8.DOI:10.12379/j.issn.2096-1057.2025.08.03
基于知识蒸馏的加密流量检测方法
Encrypted Traffic Detection Method Based on Knowledge Distillation
摘要
Abstract
In recent years,with the rapid growth of Internet traffic,especially the popularity of encrypted communication,malicious traffic detection is facing a huge challenge,due to the limited resources and performance of mobile devices,which makes it more difficult to identify malicious behaviors in encrypted traffic on mobile.Therefore this paper proposes a knowledge distillation based encrypted traffic detection method.First,the traffic is transformed into images through visualization techniques;second,based on the ConvNeXt network architecture,the SK_SwiGLU_ConvNeXt network is constructed as the teacher network by introducing the SKNet attention mechanism and replacing the activation function GELU with SwiGLU;finally,the lightweight MobileNetV2 is selected as the student network and the use the teacher network to guide the student network training.The experimental results of this paper's detection method on the publicly available dataset ISCX VPN-NonVPN show that even in the resource-constrained mobile device environment,the student network can improve the detection effect of the teacher model while reducing the model complexity,which proves that this method has efficient deployment potential on mobile devices.关键词
加密流量识别/知识蒸馏/ConvNeXt/SKNet/MobileNetV2/深度学习Key words
encrypted traffic identification/knowledge distillation/ConvNeXt/SKNet/MobileNetV2/deep learning分类
信息技术与安全科学引用本文复制引用
戴熙来,汤艳君,邱雨蝶,王子昂..基于知识蒸馏的加密流量检测方法[J].信息安全研究,2025,11(8):702-709,8.基金项目
中国刑事警察学院研究生创新能力提升项目(2024YCYB36) （2024YCYB36）
辽宁省教育厅高校基本科研项目(LJ212410175002) （LJ212410175002）
