| 注册
首页|期刊导航|电子学报|基于梯度协同与特征融合的加密流量检测

基于梯度协同与特征融合的加密流量检测

卢嘉中 余坤 刘小垒 张小松

电子学报2026,Vol.54Issue(2):532-543,12.
电子学报2026,Vol.54Issue(2):532-543,12.DOI:10.12263/DZXB.20251021

基于梯度协同与特征融合的加密流量检测

Encrypted Traffic Detection Based on Gradient Collaboration and Feature Fusion

卢嘉中 1余坤 2刘小垒 3张小松4

作者信息

  • 1. 成都信息工程大学网络空间安全学院(芯谷产业学院),四川 成都 610225||先进密码技术与系统安全四川省重点实验室,四川 成都 610225||先进微处理器技术国家工程研究中心(工业控制与安全分中心),四川 成都 610225||成都信息工程大学人工智能学院,四川 成都 610225
  • 2. 成都信息工程大学网络空间安全学院(芯谷产业学院),四川 成都 610225||先进密码技术与系统安全四川省重点实验室,四川 成都 610225||先进微处理器技术国家工程研究中心(工业控制与安全分中心),四川 成都 610225
  • 3. 国家工程物理交叉科学研究中心,四川 绵阳 621000
  • 4. 电子科技大学信息与软件工程学院,四川 成都 611731
  • 折叠

摘要

Abstract

With the widespread deployment of Internet of Things(IoT)devices and the rapid development of network communications,encrypted traffic has become the mainstream transmission form.However,it also provides covert channels for advanced threats such as backdoor attacks and targeted poisoning attacks.To address the critical security challenge of encrypted malicious traffic detection,this paper proposes an encrypted traffic detection model based on gradient collabora⁃tion and feature fusion networks,specifically designed to enhance the detection capability of encrypted malicious traffic in networks.The model consists of two core modules:the feature fusion module and the gradient collaboration module,which significantly improve the model's ability to learn representations of complex encrypted traffic patterns.In the feature fusion module,the model fully leverages the local feature extraction advantages of convolutional neural networks(CNN)and the global feature modeling capabilities of knowledge-augmented networks(KAN)to achieve efficient deep fusion of local and global features.To further enhance the collaboration and robustness among sub-models,the gradient collaboration mecha⁃nism enables multiple sub-models to dynamically share gradients in real-time and jointly optimize the loss function,thereby guiding and correcting each other during training,and strengthening the capture of diverse encrypted malicious traffic pat⁃terns.This mechanism not only alleviates conflicts between local and global feature learning but also significantly improves the model's sensitivity to covert encrypted attack traffic.Experimental results on multiple public encrypted traffic datasets show that the proposed model achieves an improvement of approximately 7%in F1 score compared to existing methods,en⁃abling high-precision classification of encrypted malicious traffic.

关键词

加密流量/流量检测/特征融合/梯度协同

Key words

encrypted traffic/traffic detection/feature fusion/gradient collaboration

分类

信息技术与安全科学

引用本文复制引用

卢嘉中,余坤,刘小垒,张小松..基于梯度协同与特征融合的加密流量检测[J].电子学报,2026,54(2):532-543,12.

基金项目

国家自然科学基金(No.62102049) (No.62102049)

四川省自然科学基金(No.2025ZNSFSC0507) (No.2025ZNSFSC0507)

先进密码技术与系统安全四川省重点实验室开放基金(No.SKLACSS-202402,No.SKLACSS-202307) National Natural Science Foundation of China(No.62102049) (No.SKLACSS-202402,No.SKLACSS-202307)

Natural Science Foundation of Sichuan Province(No.2025ZNSFSC0507) (No.2025ZNSFSC0507)

Open Fund of Advanced Cryptography and System Security Key Laboratory of Sichuan Province(No.SKLACSS-202402,No.SKLACSS-202307) (No.SKLACSS-202402,No.SKLACSS-202307)

电子学报

0372-2112

访问量0
|
下载量0
段落导航相关论文