With the widespread deployment of TLS protocols, encrypted traffic detection faces dual challenges of feature-space homogenization and dynamic attack patterns. Existing deep learning-based detection methods are constrained by flattened data representation and supervised learning paradigms, struggling to capture topological correlations in encrypted traffic. This study proposes the GSC-SAGE framework, which models traffic topology through IP-port graph construction and innovatively integrates generative subgraph contrastive learning with an enhanced graph neural network. The method employs breadth-first sampling for subgraph generation, constructs contrastive loss functions via Wasserstein Distance metrics for self-supervised graph representation learning, and synchronizes node-edge feature propagation through the E-GraphSAGE mechanism. In summary, this research provides a novel technical pathway for unsupervised graph representation learning in cybersecurity applications.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

GSC-SAGE: A Generative Subgraph Contrastive Framework for Encrypted Traffic Detection

  • Hongyuan Cheng,
  • Weizhe Chen,
  • Zhiguang Yan,
  • Weixiang Jiang,
  • Dexin Zhu,
  • Lihua Yin

摘要

With the widespread deployment of TLS protocols, encrypted traffic detection faces dual challenges of feature-space homogenization and dynamic attack patterns. Existing deep learning-based detection methods are constrained by flattened data representation and supervised learning paradigms, struggling to capture topological correlations in encrypted traffic. This study proposes the GSC-SAGE framework, which models traffic topology through IP-port graph construction and innovatively integrates generative subgraph contrastive learning with an enhanced graph neural network. The method employs breadth-first sampling for subgraph generation, constructs contrastive loss functions via Wasserstein Distance metrics for self-supervised graph representation learning, and synchronizes node-edge feature propagation through the E-GraphSAGE mechanism. In summary, this research provides a novel technical pathway for unsupervised graph representation learning in cybersecurity applications.