{"id":"https://openalex.org/W1489953270","doi":null,"title":"Identification of anomalies on encrypted communications based on multi-scale behavior modeling","display_name":"Identification of anomalies on encrypted communications based on multi-scale behavior modeling","publication_year":2011,"publication_date":"2011-01-01","ids":{"openalex":"https://openalex.org/W1489953270","mag":"1489953270"},"language":"en","primary_location":{"id":"mag:3148908170","doi":null,"is_oa":false,"landing_page_url":"http://yadda.icm.edu.pl/yadda/element/bwmeta1.element.ieee-000006078872","pdf_url":null,"source":{"id":"https://openalex.org/S7407087497","display_name":"International Congress on Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"International Conference on Ultra Modern Telecommunications","raw_type":null},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085931578","display_name":"Eduardo Rocha","orcid":"https://orcid.org/0000-0003-0883-3245","observed_orcids":["https://orcid.org/0000-0003-0883-3245"]},"institutions":[{"id":"https://openalex.org/I60858718","display_name":"University of Aveiro","ror":"https://ror.org/00nt41z93","country_code":"PT","type":"education","lineage":["https://openalex.org/I60858718"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Eduardo Rocha","raw_affiliation_strings":["Instituto de Telecomunica\u00e7\u00f5es, Dep. of Electronics, Telecom. and Informatics, U. of Aveiro, 3810-193 Aveiro, Portugal"],"raw_orcid":"https://orcid.org/0000-0003-0883-3245","affiliations":[{"raw_affiliation_string":"Instituto de Telecomunica\u00e7\u00f5es, Dep. of Electronics, Telecom. and Informatics, U. of Aveiro, 3810-193 Aveiro, Portugal","institution_ids":["https://openalex.org/I60858718"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012996391","display_name":"Paulo Salvador","orcid":"https://orcid.org/0000-0001-6832-9417","observed_orcids":["https://orcid.org/0000-0001-6832-9417"]},"institutions":[{"id":"https://openalex.org/I60858718","display_name":"University of Aveiro","ror":"https://ror.org/00nt41z93","country_code":"PT","type":"education","lineage":["https://openalex.org/I60858718"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Paulo Salvador","raw_affiliation_strings":["Instituto de Telecomunica\u00e7\u00f5es, Dep. of Electronics, Telecom. and Informatics, U. of Aveiro, 3810-193 Aveiro, Portugal"],"raw_orcid":"https://orcid.org/0000-0001-6832-9417","affiliations":[{"raw_affiliation_string":"Instituto de Telecomunica\u00e7\u00f5es, Dep. of Electronics, Telecom. and Informatics, U. of Aveiro, 3810-193 Aveiro, Portugal","institution_ids":["https://openalex.org/I60858718"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079608666","display_name":"Ant\u00f3nio Nogueira","orcid":"https://orcid.org/0000-0001-7916-1429","observed_orcids":["https://orcid.org/0000-0001-7916-1429"]},"institutions":[{"id":"https://openalex.org/I60858718","display_name":"University of Aveiro","ror":"https://ror.org/00nt41z93","country_code":"PT","type":"education","lineage":["https://openalex.org/I60858718"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Ant\u00f3nio Nogueira","raw_affiliation_strings":["Instituto de Telecomunica\u00e7\u00f5es, Dep. of Electronics, Telecom. and Informatics, U. of Aveiro, 3810-193 Aveiro, Portugal"],"raw_orcid":"https://orcid.org/0000-0001-7916-1429","affiliations":[{"raw_affiliation_string":"Instituto de Telecomunica\u00e7\u00f5es, Dep. of Electronics, Telecom. and Informatics, U. of Aveiro, 3810-193 Aveiro, Portugal","institution_ids":["https://openalex.org/I60858718"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076776322","display_name":"Joel J. P. C. Rodrigues","orcid":"https://orcid.org/0000-0001-8657-3800","observed_orcids":["https://orcid.org/0000-0001-8657-3800"]},"institutions":[{"id":"https://openalex.org/I161321875","display_name":"University of Beira Interior","ror":"https://ror.org/03nf36p02","country_code":"PT","type":"education","lineage":["https://openalex.org/I161321875"]},{"id":"https://openalex.org/I4210120471","display_name":"Instituto de Telecomunica\u00e7\u00f5es","ror":"https://ror.org/02ht4fk33","country_code":"PT","type":"nonprofit","lineage":["https://openalex.org/I4210120471"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Joel J. P. C. Rodrigues","raw_affiliation_strings":["Instituto de Telecomunica\u00e7\u00f5es, Department of Informatics, U. of Beira Interior, 6201-001 Covilh\u00e3, Portugal"],"raw_orcid":"https://orcid.org/0000-0001-8657-3800","affiliations":[{"raw_affiliation_string":"Instituto de Telecomunica\u00e7\u00f5es, Department of Informatics, U. of Beira Interior, 6201-001 Covilh\u00e3, Portugal","institution_ids":["https://openalex.org/I161321875","https://openalex.org/I4210120471"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11165","display_name":"Image and Video Quality Assessment","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encrypted-traffic-identification","display_name":"encrypted traffic identification","score":0.699999988079071},{"id":"https://openalex.org/keywords/multiscale-analysis","display_name":"multiscale analysis","score":0.7429999709129333},{"id":"https://openalex.org/keywords/traffic-flow-classification","display_name":"traffic flow classification","score":0.6399999856948853},{"id":"https://openalex.org/keywords/traffic-encryption","display_name":"traffic encryption","score":0.5019999742507935},{"id":"https://openalex.org/keywords/gaussian-distribution-assumption","display_name":"Gaussian distribution assumption","score":0.6819999814033508},{"id":"https://openalex.org/keywords/network-traffic-analysis","display_name":"network traffic analysis","score":0.37400001287460327}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7987391948699951},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6665824055671692},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.6391347050666809},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.615618109703064},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.6059017181396484},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.5375933051109314},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5209335684776306},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.4826105833053589},{"id":"https://openalex.org/C63969886","wikidata":"https://www.wikidata.org/wiki/Q3536440","display_name":"Internet traffic","level":3,"score":0.4230389893054962},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2859894931316376},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"mag:3148908170","doi":null,"is_oa":false,"landing_page_url":"http://yadda.icm.edu.pl/yadda/element/bwmeta1.element.ieee-000006078872","pdf_url":null,"source":{"id":"https://openalex.org/S7407087497","display_name":"International Congress on Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"International Conference on Ultra Modern Telecommunications","raw_type":null},{"id":"mag:1489953270","doi":null,"is_oa":false,"landing_page_url":"http://ieeexplore.ieee.org/document/6078872/","pdf_url":null,"source":{"id":"https://openalex.org/S7407087497","display_name":"International Congress on Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"International Conference on Ultra Modern Telecommunications","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W202500387","https://openalex.org/W1509130105","https://openalex.org/W1551705282","https://openalex.org/W1559810148","https://openalex.org/W1607632979","https://openalex.org/W1814370559","https://openalex.org/W1922851884","https://openalex.org/W1982782621","https://openalex.org/W1994373811","https://openalex.org/W2041855183","https://openalex.org/W2104209065","https://openalex.org/W2112639538","https://openalex.org/W2112843381","https://openalex.org/W2121511513","https://openalex.org/W2133473417","https://openalex.org/W2136356141","https://openalex.org/W2168761028"],"related_works":["https://openalex.org/W887335121","https://openalex.org/W2103989326","https://openalex.org/W1542245979","https://openalex.org/W2138919426","https://openalex.org/W2000535746","https://openalex.org/W2118887004","https://openalex.org/W2135088779","https://openalex.org/W4408634651","https://openalex.org/W7096976728","https://openalex.org/W2168480477"],"abstract_inverted_index":{"Internet":[0,30,53,253,274],"usage":[1],"has":[2],"increased":[3,47],"drastically":[4],"in":[5,48,202],"the":[6,11,27,33,97,111,115,155,170,177,187,190,203,211,214,217,222,236,249,261,266],"past":[7],"years":[8],"due":[9],"to":[10,88,106,128,246,271],"emergence":[12],"of":[13,29,35,68,100,126,150,157,173,179,216,248],"new":[14,118],"services":[15],"and":[16,41,176,230,255,260,276],"applications":[17,54,254],"such":[18,63],"as":[19,64],"voice,":[20],"video":[21],"streaming,":[22],"video-conference,":[23],"e-banking,":[24],"etc.":[25],"As":[26],"number":[28,34],"users":[31],"increased,":[32],"illegal":[36],"activities,":[37],"like":[38,85,92],"spam,":[39],"data":[40],"identity":[42],"theft,":[43],"among":[44],"others,":[45],"also":[46],"an":[49,123,141],"exponential":[50],"way.":[51],"Identifying":[52],"became":[55],"a":[56,147,226],"very":[57],"important":[58],"task":[59],"for":[60,117],"several":[61],"purposes,":[62],"traffic":[65,101,127,135,152,275],"engineering,":[66],"quality":[67],"service,":[69],"network":[70],"optimization":[71],"and,":[72],"obviously,":[73],"security.":[74],"Several":[75,164],"identification":[76,142,156],"methodologies":[77,87,119],"have":[78],"been":[79],"proposed,":[80],"ranging":[81],"from":[82,169],"simple":[83],"approaches":[84,199],"port-based":[86],"more":[89],"generic":[90,227],"approaches,":[91],"protocol":[93],"statistical":[94],"analysis.":[95],"However,":[96],"frequent":[98],"use":[99],"encryption":[102],"does":[103],"not":[104],"allow":[105],"perform":[107],"inspection":[108],"based":[109,132,184,209],"on":[110,134,146,160,185,210],"packet":[112],"payload,":[113],"triggering":[114],"need":[116],"that":[120,144,207,221,233,235,265],"can":[121],"provide":[122],"accurate":[124],"mapping":[125],"their":[129],"generating":[130],"protocols":[131],"only":[133],"flow":[136],"statistics.":[137],"This":[138],"paper":[139],"presents":[140],"methodology":[143,232,243],"relies":[145],"multi-scale":[148,165,171,192,223,237],"analysis":[149,172],"sampled":[151],"flows,":[153],"enabling":[154],"illicit":[158,258,278],"activities":[159],"encrypted":[161],"communications":[162],"scenarios.":[163],"quantifiers":[166,193,224,238],"are":[167,194,200],"obtained":[168,263],"captured":[174],"flows":[175,181],"classification":[178,204],"these":[180],"is":[182,208,269],"then":[183],"identifying":[186],"time-scales":[188],"where":[189],"different":[191,198],"better":[195],"discriminated.":[196],"Two":[197],"used":[201,251],"procedure:":[205],"one":[206],"distances":[212],"between":[213],"quantiles":[215],"empirical":[218],"distributions,":[219],"assuming":[220],"follow":[225,239],"probability":[228],"distribution,":[229],"another":[231],"assumes":[234],"Gaussian":[240],"Distributions.":[241],"The":[242],"was":[244],"applied":[245],"some":[247],"mostly":[250],"licit":[252],"two":[256],"popular":[257],"applications,":[259],"results":[262],"show":[264],"proposed":[267],"approach":[268],"able":[270],"accurately":[272],"classify":[273],"identify":[277],"activities.":[279]},"counts_by_year":[],"updated_date":"2026-10-31T12:09:11.096373","created_date":"2016-06-24T00:00:00"}