Machine Learning Based Encrypted Command and Control Traffic Classification
DOI:
https://doi.org/10.68104/ijasit.v1.i3.37Keywords:
Energy Usage, Sustainable Software Engineering, Cloud Data Centers, Green Computing, Smart Grids, IoT Security, Behavioral FeaturesAbstract
As cyber-attacks evolve and the use of encrypted command and control (C2) channels grows, it presents a real challenge for modern network security. The classifiers that are currently available for detecting malicious traffic in encrypted traffic streams are not sufficiently effective, and require more sophisticated methods to reliably classify this traffic. The study examines the use of machine learning methods for identifying encrypted C2 traffic, enabling proactively fighting the new cyberattacks. The proposed framework uses supervised and unsupervised learning models to analyze statistical and behavioral information of the network traffic flows without the need for decryption to maintain privacy and efficiency. The adaptation of lightweight algorithms enables scalability and energy efficiency, aligning with sustainable software engineering practices. This will not only improve the cybersecurity resilience but also help create sustainable computing environments, help reduce downtime, help prevent misuse of resources, and helps protect critical infrastructure including smart grids, IoT systems, and data centers. The results underline the dual nature of machine learning, both in terms of network security and sustainable, resilient digital ecosystems.
Downloads
References
W. Long et al., “TrojanFormer: A Behavior-aware Model for Detecting Trojan-style Encrypted Traffic,” in Proc. IEEE AICIT (IEEE, 2025).
F. M. Ramos and X. Wang, “Detecting Stealthy Cobalt Strike C&C Activities via Multi-Flow based Machine Learning,” in Proc. ICMLA (IEEE, 2023).
“Hybrid Spatial-Temporal Deep Learning for Privacy-Preserving Encrypted Traffic Intrusion Detection,” TechRxiv (2024).
A. Mazloum et al., “Offloading Encrypted C2 Traffic Mitigation to SmartNICs,” in Proc. IEEE BlackSeaCom (IEEE, 2025).
“Toward fingerprinting encrypted C2 traffic in the data plane,” CEC Research (2025).
D. Oškera et al., “Botnet Detection Through Periodic Patterns in Command-and-Control Network Traffic,” in Proc. CNSM (IEEE, 2025).
N. Aljammaz et al., “Real-Time Detection of Command-and-Control Communications Using Deep Learning Models,” J. Posthumanism (2025).
“Cybersecurity classification using Siam-BLA and small-sample data,” SN Appl. Sci. (2026).
L. Gehri et al., “Towards Generalizing Machine Learning Models to Detect Command and Control Attack Traffic,” in Proc. CyCon (2023).
A. Mazinani et al., “Performance Assessment of DL for Network Intrusion Detection on a Constrained IoT Device,” Future Internet 18, 1 (2026).
M. S. Mahmood, “A Hybrid CNN–LSTM Framework for Network Intrusion Detection with SMOTE Balancing,” Qadisiyah J. Comp. Sci. Math. 17 (2025).
Y. Chen et al., “EO-EPTC: End-to-End Original Traffic-Based Encrypted Proxy Traffic Classification Framework,” IEEE Trans. Inf. Forensics Security (2025).
B. Ahuja and N. V. Doohan, “Comparative Evaluation of Machine Learning Models for Intrusion Detection on the CIC-IDS Dataset,” in Proc. IEEE ICTBIG (IEEE, 2025).
S. Depuru et al., “Malware Traffic Pattern Recognition using Self-Supervised Transformer Encoders,” in Proc. ICACRS (2025).
S. Almuhammadi et al., “Privacy-Preserving Machine Learning for Encrypted Traffic Classification in Secure Cloud Services,” in Proc. ACM Workshop (2025).
V. R. Joshi et al., “Hybrid AI Intrusion Detection: Balancing Accuracy and Efficiency,” Sensors 25, 24 (2025).
C. Chakravorty and P. S. D., “Anomaly Detection in Encrypted Network Traffic Using Deep Learning,” in Proc. CSITSS (2025).
B. V. V. Siva Prasad et al., “Comparative Study of Machine Learning and Deep Learning Models for Cyberattack Detection,” in Proc. ICCES (2025).
J. A. Adjei et al., “IoT Botnet Detection with Drift-Aligned Learning and DNS-Based C2 Identification,” in Proc. CNSM (IEEE, 2025).
T. Wang et al., “A Survey on Encrypted Traffic Classification: Methods, Datasets, and Challenges,” IEEE Access (2024).
R. Kumar et al., “Deep Learning for C2 Traffic Detection in Encrypted Channels: A Review,” Cybersecurity Reviews (2025).
H. Liu et al., “Adversarial Machine Learning in Encrypted Traffic Analysis,” IEEE Network (2024).
S. Khan et al., “Behavioral Analysis of Encrypted Botnet Traffic using RNNs,” in Proc. IEEE Globecom (IEEE, 2024).
J. Doe and B. Smith, “Real-time mitigation of C2 traffic using eBPF,” Network Security Journal (2025).
Z. Zhang, “Feature selection for encrypted traffic classification using genetic algorithms,” Expert Syst. Appl. (2026).
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Manikandan S, Sumithra M, Vaishalini V
This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.
