Submit

Login Login

Register Register

Home / Journals / CMC / Online First / doi:10.32604/cmc.2026.083419
Journal Menu
Special Issues
Table of Content

All issues

Online First

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Open Access

ARTICLE

DVG-GNN: Dual-View Graph Representation Learning for Encrypted Traffic Classification

Guan Yang1, Haozhen Wang2, Yu Wang3,*, Weiguang Liu4, Bo Chen5,6
1 Intelligent Perception and Instrumentation College, Zhongyuan University of Technology, Zhengzhou, China
2 School of Computer Science, Zhongyuan University of Technology, Zhengzhou, China
3 School of Software, Henan University of Engineering, Zhengzhou, China
4 School of Software, Zhongyuan University of Technology, Zhengzhou, China
5 School of Mathematical Sciences, Shenzhen University, Shenzhen, China
6 Guangdong Provincial Key Laboratory of Intelligent Information Processing, Shenzhen University, Shenzhen, China
* Corresponding Author: Yu Wang. Email: email

Computers, Materials & Continua https://doi.org/10.32604/cmc.2026.083419

Received 03 April 2026; Accepted 17 June 2026; Published online 07 July 2026

Abstract

The rapid proliferation of encrypted communication technologies, such as TLS, VPNs, and Tor, has significantly limited the effectiveness of traditional traffic classification methods that rely on port numbers or deep packet inspection. While handcrafted statistical features provide partial solutions, they often lack robustness and generalization in complex traffic scenarios. Although deep learning models such as CNNs and RNNs can capture local and sequential patterns, they typically overlook higher-order structural dependencies among bytes. To address these challenges, we propose DVG-GNN, a Dual-View Graph representation learning framework for encrypted traffic classification. The framework decomposes each packet into header and payload views, leveraging distinct byte embeddings and multi-scale one-dimensional convolutions to extract fine-grained contextual features. View-specific graphs are constructed using Pointwise Mutual Information (PMI) to model byte-level relationships, and a GraphSAGE-based encoder with attention pooling is employed to learn global structural representations. A gated fusion mechanism further integrates the dual-view features to enhance discriminative capability. Extensive experiments on ISCX-VPN2016, ISCX-Tor2016, and USTC-TFC2016 demonstrate that the proposed method consistently outperforms state-of-the-art approaches across multiple evaluation metrics, validating its effectiveness and generalization ability in diverse encrypted traffic classification tasks.

Keywords

Encrypted traffic classification; graph neural networks; dual-view representation learning; pointwise mutual information; traffic graph modeling

  • 128

    View

  • 30

    Download

  • 0

    Like

Related articles
Copyright© 2026 Tech Science Press
© 1997-2026 TSP (Henderson, USA) unless otherwise stated

Share Link