arXiv:2601.19315cs.LG2026-01被引 1

无监督学习物联网流量表征,跨环境识别设备准确率超90%

Generalizable IoT Traffic Representations for Cross-Network Device Identification

  • 从无标签流量中学习紧凑表征,用重建质量评估
  • 冻结嵌入后用轻量分类器实现设备类型识别,宏F1超0.9
  • 验证大模型未必更鲁棒,适合跨环境部署的设备发现

机器学习在分类网络流量和识别物联网(IoT)设备方面表现优异,助力运营商规模化发现与管理物联网资产。然而,现有方法多依赖端到端有监督流程或特定任务微调,导致流量表征与标注数据集及部署环境紧密耦合,限制了泛化能力。本文研究如何学习通用的物联网流量表征以实现设备识别。我们设计了紧凑的编码器架构,从未标注的物联网流量中学习每流嵌入,并采用冻结编码器协议结合简单监督分类器进行评估。具体贡献包括:(1) 开发无监督编码器-解码器模型,从无标签物联网网络流中学习紧凑表征,并通过重建分析评估其质量;(2) 证明这些学习到的表征可有效用于物联网设备类型分类,仅需在冻结嵌入上训练轻量级分类器即可;(3) 系统性地对比现有预训练流量编码器,发现更大模型并不一定产生更鲁棒的物联网流量表征。基于跨越多年、多种部署环境收集的超过1800万条真实物联网流量,我们在互斥标注子集上学习表征并评估设备类型分类,宏观F1得分超过0.9,且在跨环境部署下表现稳健。

原文摘要 · Abstract (English)

Machine learning models have demonstrated strong performance in classifying network traffic and identifying Internet-of-Things (IoT) devices, enabling operators to discover and manage IoT assets at scale. However, many existing approaches rely on end-to-end supervised pipelines or task-specific fine-tuning, resulting in traffic representations that are tightly coupled to labeled datasets and deployment environments, which can limit generalizability. In this paper, we study the problem of learning generalizable traffic representations for IoT device identification. We design compact encoder architectures that learn per-flow embeddings from unlabeled IoT traffic and evaluate them using a frozen-encoder protocol with a simple supervised classifier. Our specific contributions are threefold. (1) We develop unsupervised encoder--decoder models that learn compact traffic representations from unlabeled IoT network flows and assess their quality through reconstruction-based analysis. (2) We show that these learned representations can be used effectively for IoT device-type classification using simple, lightweight classifiers trained on frozen embeddings. (3) We provide a systematic benchmarking study against the state-of-the-art pretrained traffic encoders, showing that larger models do not necessarily yield more robust representations for IoT traffic. Using more than 18 million real IoT traffic flows collected across multiple years and deployment environments, we learn traffic representations from unlabeled data and evaluate device-type classification on disjoint labeled subsets, achieving macro F1-scores exceeding 0.9 for device-type classification and demonstrating robustness under cross-environment deployment.

物联网无监督学习设备识别流量表征

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。