Metrics
1 File views/ downloads
14 Record Views
Journal article
Packet Inspection Transformer: A Self-Supervised Journey to Unseen Malware Detection with Few Samples
IEEE access, Vol.13, p.1
2025
Abstract
As networks continue to expand and become more interconnected, the need for novel malware detection methods becomes more pronounced. Traditional security measures are increasingly inadequate against the sophistication of modern cyber attacks. Deep Packet Inspection (DPI) has been pivotal in enhancing network security, offering an in-depth analysis of network traffic that surpasses conventional monitoring techniques. DPI not only examines the metadata of network packets, but also dives into the actual content being carried within the packet payloads, providing a comprehensive view of the data flowing through networks. While the integration of advanced deep learning techniques with DPI has introduced modern methodologies into malware detection and network traffic classification, state-of-the-art supervised learning approaches are limited by their reliance on large amounts of annotated data and their inability to generalize to novel, unseen malware threats. To address these limitations, this paper leverages the recent advancements in self-supervised learning (SSL) and few-shot learning (FSL). Our proposed self-supervised approach trains a transformer via SSL to learn the embeddings of packet content, including payload, from vast amounts of unlabeled data by masking portions of packets, leading to a learned representation that generalizes to various downstream tasks. Once the representation is extracted from the packets, they are used to train a malware detection algorithm. The representation obtained from the transformer is then used to adapt the malware detector to novel types of attacks using few-shot learning approaches. Our experimental results demonstrate that our method achieves classification accuracies of up to 94.76% on the UNSW-NB15 dataset and 83.25% on the CIC-IoT23 dataset.
Files and links (2)
Related links
Details
- Title
- Packet Inspection Transformer
- Publication Details
- IEEE access, Vol.13, p.1
- Resource Type
- Journal article
- Publisher
- Institute of Electrical and Electronics Engineers (IEEE)
- Number of pages
- 1
- Grant note
- This work was supported in part by the University of West Florida (UWF) Argo Cyber Emerging Scholars (ACES) Program funded by the National Science Foundation (NSF) CyberCorps Scholarship for Service (SFS) Award under Grant 1946442
- Copyright
- © 2025 The Authors
- Identifiers
- 99381548820906600
- Academic Unit
- Center for Cybersecurity; Division of Academic Affairs
- Language
- English