Communication Dans Un Congrès Année : 2024

FlowChronicle: synthetic network flow generation through pattern set mining

Résumé

Network traffic datasets are regularly criticized, notably for the lack of realism and diversity in their attack or benign traffic. Generating synthetic network traffic using generative machine learning techniques is a recent area of research that could complement experimental test beds and help assess the efficiency of network security tools such as network intrusion detection systems. Most methods generating synthetic network flows disregard the temporal dependencies between them, leading to unrealistic traffic. To address this issue, we introduce FlowChronicle, a novel synthetic network flow generation tool from mined patterns and Bayesian networks. As a core component, we propose a novel pattern miner in combination with statistical models to preserve temporal dependencies. We empirically compare our method against state-of-the-art techniques on several criteria, namely realism, diversity, compliance, and novelty. This evaluation demonstrates the capability of FlowChronicle to achieve high-quality generation while significantly outperforming the other methods in preserving temporal dependencies between flows. Besides, in contrast to deep learning methods, the patterns identified by FlowChronicle are explainable, and experts can verify their soundness. Our work substantially advances synthetic network traffic generation, offering a method that enhances both the utility and trustworthiness of the generated network flows.
Fichier principal
Vignette du fichier
tmptkq69tly_FlowChronicle.pdf (639.82 Ko) Télécharger le fichier
Origine Publication financée par une institution
Licence

Dates et versions

hal-04871198 , version 1 (08-01-2025)

Licence

Identifiants

Citer

Joscha Cüppers, Adrien Schoen, Gregory Blanc, Pierre-Francois Gimenez. FlowChronicle: synthetic network flow generation through pattern set mining. The 20th International Conference on emerging Networking EXperiments and Technologies (CoNEXT), Dec 2024, Los Angeles (CA), United States. pp.1 - 20, ⟨10.1145/3696407⟩. ⟨hal-04871198⟩
2 Consultations
1 Téléchargements

Altmetric

Partager

More