Network Traffic Classification with Machine Learning Approaches

Today, detection of malware is often done automatically with artificial intelligence supported systems. In this way, this task, which was previously done manually, can be performed more precisely and more quickly. Darknet traffic is an internet network with many different cybercrime threats. It is also fake traffic observed in empty address space. A globally valid set of Internet Protocol (IP) addresses that are not assigned to any host or device. In this study, a deep learning model and pervasive machine learning classification algorithms are compared using the CIC-Darknet2020 dataset to describe Darknet traffic. The ‘Tor’ and ‘Vpn’ classes in the dataset, ‘Darknet’, ‘Non-Tor’ and ‘Non-Vpn’ classes are also specified as harmless. Various adjustments have been made for the unbalanced dataset, which has been performed with multiple classification, various machine learning algorithms. Random Forest Algorithm, Decision Trees and Deep Learning Model were the algorithms with the most successful accuracy values with %97.3, %97.4 %98.2values respectively.