关键词: 匿名网络, Tor, 流量识别, XGBoost

Abstract:

Anonymous communication network is becoming a hidden space for criminals, which brings serious challenges to network supervision. The effective identification of anonymous network traffic is a prerequisite for its effective supervision. In terms of Tor anonymous traffic, Histogram-XGBoost, an effective traffic identification model is proposed. The Histogram-XGBoost model calculates the time-dependent features of the traffic on the flow granularity, and then performs discretization-like preprocessing on these features to improve the robustness. Finally, combined with the idea of integrated learning, the model realizes the identification of Tor anonymous traffic in the smaller feature dimension by XGBoost. Experimental results show that compared with the existing recognition methods, the model proposed in this paper has a greater improvement in accuracy and stability.

Key words: anonymous network, Tor, traffic identification, XGBoost