Georgios Agrafiotis, Eftychia Makri, Antonios Lalas, K. Votis, D. Tzovaras, Nikolaos Tsampieris
{"title":"A Deep Learning-based Malware Traffic Classifier for 5G Networks Employing Protocol-Agnostic and PCAP-to-Embeddings Techniques","authors":"Georgios Agrafiotis, Eftychia Makri, Antonios Lalas, K. Votis, D. Tzovaras, Nikolaos Tsampieris","doi":"10.1145/3590777.3590807","DOIUrl":null,"url":null,"abstract":"As 5G networks become more complex, cyber attacks targeting IoT devices are deemed a serious concern. This work proposes a novel approach to detect 5G malware traffic using a network packet preprocess toolkit and machine learning models. The system can transform packets into images or embeddings, which allows for more accurate representations that can be applied in a commercial Intrusion Detection System application in a protocol agnostic manner. The paper introduces Long Short-Term Memory Autoencoders as the preprocessing method for embeddings generation followed by a Fully-Connected network for classification purposes of a 5G-dedicated dataset. The proposed approach is efficient and adaptable to evolving threats and protocols, achieving enhanced accuracy rates in detecting 5G malware traffic. This new method can facilitate defending against 5G malware attacks and paves the way for future developments in 6G networks.","PeriodicalId":231403,"journal":{"name":"Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference","volume":"22 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2023-06-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Proceedings of the 2023 European Interdisciplinary Cybersecurity Conference","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1145/3590777.3590807","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 0
Abstract
As 5G networks become more complex, cyber attacks targeting IoT devices are deemed a serious concern. This work proposes a novel approach to detect 5G malware traffic using a network packet preprocess toolkit and machine learning models. The system can transform packets into images or embeddings, which allows for more accurate representations that can be applied in a commercial Intrusion Detection System application in a protocol agnostic manner. The paper introduces Long Short-Term Memory Autoencoders as the preprocessing method for embeddings generation followed by a Fully-Connected network for classification purposes of a 5G-dedicated dataset. The proposed approach is efficient and adaptable to evolving threats and protocols, achieving enhanced accuracy rates in detecting 5G malware traffic. This new method can facilitate defending against 5G malware attacks and paves the way for future developments in 6G networks.