Papers
Topics
Authors
Recent
Search
2000 character limit reached

Exploring Emerging Trends in 5G Malicious Traffic Analysis and Incremental Learning Intrusion Detection Strategies

Published 22 Feb 2024 in cs.CR | (2402.14353v1)

Abstract: The popularity of 5G networks poses a huge challenge for malicious traffic detection technology. The reason for this is that as the use of 5G technology increases, so does the risk of malicious traffic activity on 5G networks. Malicious traffic activity in 5G networks not only has the potential to disrupt communication services, but also to compromise sensitive data. This can have serious consequences for individuals and organizations. In this paper, we first provide an in-depth study of 5G technology and 5G security. Next we analyze and discuss the latest malicious traffic detection under AI and their applicability to 5G networks, and compare the various traffic detection aspects addressed by SOTA. The SOTA in 5G traffic detection is also analyzed. Next, we propose seven criteria for traffic monitoring datasets to confirm their suitability for future traffic detection studies. Finally, we present three major issues that need to be addressed for traffic detection in 5G environment. The concept of incremental learning techniques is proposed and applied in the experiments, and the experimental results prove to be able to solve the three problems to some extent.

Definition Search Book Streamline Icon: https://streamlinehq.com
References (85)
  1. Mirage: Mobile-app traffic capture and ground-truth creation. In 2019 4th International Conference on Computing, Communications and Security (ICCCS), pages 1–8, 2019.
  2. Distiller: Encrypted traffic classification via multimodal multitask deep learning. Journal of Network and Computer Applications, 183-184:102985, 2021.
  3. Next generation 5g wireless networks: A comprehensive survey. IEEE communications surveys & tutorials, 18(3):1617–1655, 2016.
  4. Security for 5g and beyond. IEEE Communications Surveys & Tutorials, 21(4):3682–3722, 2019.
  5. Maldist: From encrypted traffic classification to malware traffic detection and classification. pages 527–533, 01 2022.
  6. Detecting malign encrypted network traffic using perlin noise and convolutional neural network. pages 0200–0206, 01 2020.
  7. Unknown malware detection using network traffic classification. In 2015 IEEE Conference on Communications and Network Security (CNS), pages 134–142. IEEE, 2015.
  8. Ralf Bendrath. Global technology trends and national regulation: Explaining variation in the governance of deep packet inspection. In International Studies Annual Convention, volume 15, 2009.
  9. The end of the net as we know it? deep packet inspection and internet governance. New Media & Society, 13(7):1142–1160, 2011.
  10. 5g technology in the digital transformation of healthcare, a systematic review. Sustainability, 15(4):3178, 2023.
  11. Machine learning 5g attack detection in programmable logic. In 2022 IEEE Globecom Workshops (GC Wkshps), pages 1365–1370. IEEE, 2022.
  12. 5GTN. [Online]. Available: https://5gtnf.fi/.
  13. Awid dataset - wireless security datasets project, 2014. [Online]. Available: http://icsdweb.aegean.gr/ awid/.
  14. First.org, Hands-on Network Forensics - Training PCAP dataset from FIRST 2015. from www.first.org/ assets/conf2015/networkforensics virtualbox.zip.
  15. KDD Cup 1999 Data. (1999) [Online]. Available: http://kdd.ics.uci.edu/ databases/kddcup99/kddcup99.html.
  16. M. L. Lab. (1998) 1998 DARPA Intrusion Detection Evaluation Dataset. [Online]. Available: https://www.ll.mit.edu/r-d/datasets/1998-darpa-intrusion-detection-evaluation-dataset.
  17. SCAIDA DDoS 2007 Attack Dataset. (2007) [Online]. Available: https://www.impactcybertrust.org/dataset_view?idDataset=117.
  18. Traffic Data from Kyoto University’s Honeypots. from http://www.takakura.com/Kyoto data/.
  19. Detection of encrypted malicious network traffic using machine learning. In MILCOM 2019-2019 IEEE Military Communications Conference (MILCOM), pages 1–6. IEEE, 2019.
  20. Your smart home can’t keep a secret: Towards automated fingerprinting of iot traffic. pages 47–59, 10 2020.
  21. 5g security challenges and opportunities: A system approach. In 2020 IEEE 3rd 5G world forum (5GWF), pages 109–114. IEEE, 2020.
  22. A survey on deep packet inspection. In 2017 12th International Conference on Computer Engineering and Systems (ICCES), pages 188–197. IEEE, 2017.
  23. Encrypted malicious traffic detection based on word2vec. Electronics (Switzerland), 11(5), March 2022. Funding Information: Our sincere appreciation for the Indonesia government, particularly LPDP (Lembaga Pengelola Dana Pendidikan Indonesia = Indonesia Endowment Fund for Education) that provides the scholarship to study at Keio University. Publisher Copyright: © 2022 by the authors. Licensee MDPI, Basel, Switzerland.
  24. Gerhard Fettweis. 5g and the future of iot. pages 21–24, 09 2016.
  25. Detecting unknown encrypted malicious traffic in real time via flow interaction graph analysis. arXiv preprint arXiv:2301.13686, 2023.
  26. Christian Fuchs. Implications of deep packet inspection (dpi) internet surveillance for society. PACT, 2012.
  27. Link homophily in the application layer and its usage in traffic classification. pages 221–225, 03 2010.
  28. Toward developing a systematic approach to generate benchmark android malware datasets and classification. pages 1–7, 10 2018.
  29. Characterization of encrypted and vpn traffic using time-related features. 02 2016.
  30. Autonomous vehicles in 5g and beyond: A survey. Vehicular Communications, 39:100551, 2023.
  31. Detecting volumetric attacks on lot devices via sdn-based monitoring of mud activity. pages 36–48, 04 2019.
  32. Network function virtualization: Challenges and opportunities for innovations. IEEE communications magazine, 53(2):90–97, 2015.
  33. Machine Learning Based IoT Intrusion Detection System: An MQTT Case Study (MQTT-IoT-IDS2020 Dataset), pages 73–84. 01 2021.
  34. A survey on software-defined network and openflow: From concept to implementation. IEEE Communications Surveys & Tutorials, 16(4):2181–2206, 2014.
  35. A simple lightweight authentic bootstrapping protocol for ipv6-based low rate wireless personal area networks (6lowpans). In Proceedings of the 2009 International Conference on Wireless Communications and Mobile Computing: Connecting the World Wirelessly, pages 937–941, 2009.
  36. Opportunities, challenges, and solutions in the 5g era. IEICE Transactions on Communications, 105(11):1291–1298, 2022.
  37. Towards the development of realistic botnet dataset in the internet of things for network forensic analytics: Bot-iot dataset. Future Generation Computer Systems, 100:779–796, 11 2019.
  38. User privacy, identity and trust in 5g. A Comprehensive Guide to 5G Security, pages 267–279, 2018.
  39. Dirk Kutscher. It’s the network: Towards better security and transport performance in 5g. In 2016 IEEE conference on computer communications workshops (INFOCOM WKSHPS), pages 656–661. IEEE, 2016.
  40. Machine learning based anomaly detection for 5g networks. arXiv preprint arXiv:2003.03474, 2020.
  41. Encrypted malware traffic detection using incremental learning. In IEEE INFOCOM 2020-IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS), pages 1348–1349. IEEE, 2020.
  42. An anomaly detection algorithm based on ensemble learning for 5g environment. Sensors, 22(19):7436, 2022.
  43. Learning without forgetting. IEEE Transactions on Pattern Analysis and Machine Intelligence, PP:1–1, 11 2017.
  44. Correntropy-based robust multilayer extreme learning machines. Pattern Recognition, 84:357–370, 2018.
  45. Inferring the source of encrypted http connections. pages 255–263, 10 2006.
  46. Spatial-temporal feature with dual-attention mechanism for encrypted malicious traffic detection. Security and Communication Networks, 2023, 2023.
  47. A distance-based method for building an encrypted malware traffic identification framework. IEEE Access, 7:100014–100028, 2019.
  48. Nt-gnn: Network traffic graph for 5g mobile iot android malware detection. Electronics, 12(4):789, 2023.
  49. A self-adaptive deep learning-based system for anomaly detection in 5g networks. Ieee Access, 6:7700–7712, 2018.
  50. Incognito: A method for obfuscating web data. In Proceedings of the 2018 world wide web conference, pages 267–276, 2018.
  51. The development of 5g technology and its implications for the industry. Devotion Journal of Community Service, 4(2):631–635, 2023.
  52. Cross-layer profiling of encrypted network data for anomaly detection. In 2020 IEEE 7th International Conference on Data Science and Advanced Analytics (DSAA), pages 469–478. IEEE, 2020.
  53. 5g mobile technology: A survey. ICT express, 1(3):132–137, 2015.
  54. Detection of doh tunnels using time-series classification of encrypted traffic. 2020 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech), pages 63–70, 2020.
  55. Unsw-nb15: a comprehensive data set for network intrusion detection systems (unsw-nb15 network data set). In 2015 military communications and information systems conference (MilCIS), pages 1–6. IEEE, 2015.
  56. Ericsson forecasts 5 billion 5G subscriptions by end of 2028. https://www.ericsson.com/en/press-releases/2022/11/ericsson-mobility-report-global-5g-growth-amid-macroeconomic-challenges.
  57. GSMA sets out vision for world radio communication conference 2023 to maximise benefits of scarce spectrum for billions of people worldwide, Newsroom. Available at: https://www.gsma.com/newsroom/press-release/gsma-sets-out-vision-for-world-radiocommunication-conference-2023-to-maximise-benefits-of-scarce-spectrum-for-billions-of-people-worldwide/.
  58. A heuristic statistical testing based approach for encrypted network traffic identification. IEEE Transactions on Vehicular Technology, 68(4):3843–3853, 2019.
  59. Cybersecurity and network forensics: Analysis of malicious traffic towards a honeynet with deep packet inspection. Applied Sciences, 7(10):1082, 2017.
  60. 5gtn: A test network for 5g application development and testing. In 2016 European Conference on Networks and Communications (EuCNC), pages 313–318. IEEE, 2016.
  61. The quest for privacy in the internet of things. IEEE Cloud Computing, 3(2):36–45, 2016.
  62. An efficient deep learning model for intrusion classification and prediction in 5g and iot networks. pages 1–6, 03 2019.
  63. Cloud technologies for flexible 5g radio access networks. IEEE Communications Magazine, 52(5):68–76, 2014.
  64. Security in 5g and beyond recent advances and future challenges. Security and Privacy, 6(1):e271, 2023.
  65. 5g-nidd: A comprehensive network intrusion detection dataset generated over 5g wireless network. arXiv preprint arXiv:2212.01298, 2022.
  66. Toward generating a new intrusion detection dataset and intrusion traffic characterization. pages 108–116, 01 2018.
  67. Toward developing a systematic approach to generate benchmark datasets for intrusion detection. Computers & Security, 31:357–374, 05 2012.
  68. Spicy: a unified deep packet inspection framework for safely dissecting all your data. In Proceedings of the 32nd Annual Conference on Computer Security Applications, pages 558–569, 2016.
  69. Efficient and anti-interference method of synchronising information extraction for cideo leaking signal. IET Signal Processing, 10(1):63–68, 2016.
  70. Security challenges in 5g-based iot middleware systems. Internet of Things (IoT) in 5G Mobile Technologies, pages 399–418, 2016.
  71. Bro. Intrusion detection system. http://www.broids.org/.
  72. L7-filter. Application layer packet classifier. http://l7-filter.sourceforge.net/.
  73. Network Intrusion Detection & Prevention System. Snort. https://www.snort.org/.
  74. ZEEK INTRUSION DETECTION SERIES. Retrieved 2020. from http://ce.sc.edu/cyberinfra/docs/workshop/Zeek Lab Series.pdf.
  75. Machine learning for encrypted malicious traffic detection: Approaches, datasets and comparative study. Computers & Security, 113:102542, 2022.
  76. Feature mining for encrypted malicious traffic detection with deep learning and other machine learning algorithms. Computers & Security, 128:103143, 2023.
  77. Traffic analysis for 5g network slice based on machine learning. EURASIP Journal on Wireless Communications and Networking, 2021(1):108, 2021.
  78. Self-evolving malware detection for cyber security using network traffic and incremental learning. In 2022 9th International Conference on Dependable Systems and Their Applications (DSA), pages 454–463. IEEE, 2022.
  79. Intrusion detection system on iot with 5g network using deep learning. Wireless Communications and Mobile Computing, 2022:1–13, 2022.
  80. Identification of encrypted traffic through attention mechanism based long short term memory. IEEE Transactions on Big Data, 8(1):241–252, 2019.
  81. d⁢e⁢e⁢p−f⁢u⁢l⁢l−r⁢a⁢n⁢g⁢e𝑑𝑒𝑒𝑝𝑓𝑢𝑙𝑙𝑟𝑎𝑛𝑔𝑒deep-full-rangeitalic_d italic_e italic_e italic_p - italic_f italic_u italic_l italic_l - italic_r italic_a italic_n italic_g italic_e: a deep learning based network encrypted traffic classification and intrusion detection framework. IEEE Access, 7:45182–45190, 2019.
  82. 5g-network-enabled smart ambulance: architecture, application, and evaluation. IEEE Network, 35(1):190–196, 2021.
  83. Transfer learning for encrypted malicious traffic detection based on efficientnet. pages 72–76, 04 2021.
  84. Deep-forest-based encrypted malicious traffic detection. Electronics, 11:977, 03 2022.
  85. Gcn-eta: High-efficiency encrypted malicious traffic detection. Security and Communication Networks, 2022:1–11, 01 2022.

Summary

No one has generated a summary of this paper yet.

Sign Up to Summarize

Paper to Video (Beta)

No one has generated a video about this paper yet.

Sign Up to Generate All Videos Subscribe on YouTube

Whiteboard

No one has generated a whiteboard explanation for this paper yet.

Sign Up to Generate

Open Problems

We haven't generated a list of open problems mentioned in this paper yet.

Generate Now

Continue Learning

We haven't generated follow-up questions for this paper yet.

Generate Now

Collections

Sign up for free to add this paper to one or more collections.

Sign Up