{"id":"https://openalex.org/W3208904656","doi":"https://doi.org/10.1109/tnsm.2021.3122940","title":"Deep Learning and Zero-Day Traffic Classification: Lessons Learned From a Commercial-Grade Dataset","display_name":"Deep Learning and Zero-Day Traffic Classification: Lessons Learned From a Commercial-Grade Dataset","publication_year":2021,"publication_date":"2021-10-26","ids":{"openalex":"https://openalex.org/W3208904656","doi":"https://doi.org/10.1109/tnsm.2021.3122940","mag":"3208904656"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2021.3122940","doi":"https://doi.org/10.1109/tnsm.2021.3122940","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2021.3122940","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-c","cwts-core","dongbi-b","jufo-1","ki-jl-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2104.03182","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005807223","display_name":"Lixuan Yang","orcid":"https://orcid.org/0000-0003-1973-383X","observed_orcids":["https://orcid.org/0000-0003-1973-383X"]},"institutions":[{"id":"https://openalex.org/I4210123571","display_name":"Huawei Technologies (France)","ror":"https://ror.org/02rbzf697","country_code":"FR","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210123571"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Lixuan Yang","raw_affiliation_strings":["Data Communication Department, Huawei Technologies, Boulogne Billancourt, France"],"raw_orcid":"https://orcid.org/0000-0003-1973-383X","affiliations":[{"raw_affiliation_string":"Data Communication Department, Huawei Technologies, Boulogne Billancourt, France","institution_ids":["https://openalex.org/I4210123571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002388358","display_name":"Alessandro Finamore","orcid":"https://orcid.org/0000-0003-2226-2506","observed_orcids":["https://orcid.org/0000-0003-2226-2506"]},"institutions":[{"id":"https://openalex.org/I4210123571","display_name":"Huawei Technologies (France)","ror":"https://ror.org/02rbzf697","country_code":"FR","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210123571"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Alessandro Finamore","raw_affiliation_strings":["Data Communication Department, Huawei Technologies, Boulogne Billancourt, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data Communication Department, Huawei Technologies, Boulogne Billancourt, France","institution_ids":["https://openalex.org/I4210123571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101640534","display_name":"Feng Jun","orcid":"https://orcid.org/0000-0002-8414-3521","observed_orcids":["https://orcid.org/0000-0002-8414-3521"]},"institutions":[{"id":"https://openalex.org/I4210123571","display_name":"Huawei Technologies (France)","ror":"https://ror.org/02rbzf697","country_code":"FR","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210123571"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Feng Jun","raw_affiliation_strings":["Data Communication Department, Huawei Technologies, Boulogne Billancourt, France"],"raw_orcid":"https://orcid.org/0000-0002-8414-3521","affiliations":[{"raw_affiliation_string":"Data Communication Department, Huawei Technologies, Boulogne Billancourt, France","institution_ids":["https://openalex.org/I4210123571"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052449763","display_name":"Dario Rossi","orcid":"https://orcid.org/0000-0003-3936-8876","observed_orcids":["https://orcid.org/0000-0003-3936-8876"]},"institutions":[{"id":"https://openalex.org/I4210123571","display_name":"Huawei Technologies (France)","ror":"https://ror.org/02rbzf697","country_code":"FR","type":"company","lineage":["https://openalex.org/I2250955327","https://openalex.org/I4210123571"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Dario Rossi","raw_affiliation_strings":["Data Communication Department, Huawei Technologies, Boulogne Billancourt, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data Communication Department, Huawei Technologies, Boulogne Billancourt, France","institution_ids":["https://openalex.org/I4210123571"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210123571"],"apc_list":{"value":2045,"currency":"USD","value_usd":2045},"apc_paid":null,"fwci":3.1166,"has_fulltext":true,"cited_by_count":82,"citation_normalized_percentile":{"value":0.92940807,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":100},"biblio":{"volume":"18","issue":"4","first_page":"4103","last_page":"4118"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-traffic-classification","display_name":"network traffic classification","score":0.8349999785423279},{"id":"https://openalex.org/keywords/backpropagation","display_name":"backpropagation","score":0.8519999980926514},{"id":"https://openalex.org/keywords/application-level-traffic-classification","display_name":"application-level traffic classification","score":0.4339999854564667},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"feature extraction","score":0.4399999976158142}],"concepts":[{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7067831158638},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6990915536880493},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.62400221824646},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.5482755303382874},{"id":"https://openalex.org/C2780813799","wikidata":"https://www.wikidata.org/wiki/Q3274237","display_name":"Zero (linguistics)","level":2,"score":0.46830475330352783},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.44631844758987427},{"id":"https://openalex.org/C8038995","wikidata":"https://www.wikidata.org/wiki/Q1152135","display_name":"Unsupervised learning","level":2,"score":0.43326523900032043},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.42052918672561646},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tnsm.2021.3122940","doi":"https://doi.org/10.1109/tnsm.2021.3122940","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2021.3122940","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-c","cwts-core","dongbi-b","jufo-1","ki-jl-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2104.03182","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2104.03182","pdf_url":"https://arxiv.org/pdf/2104.03182","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2104.03182","doi":"https://doi.org/10.48550/arxiv.2104.03182","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2104.03182","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2104.03182","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2104.03182","pdf_url":"https://arxiv.org/pdf/2104.03182","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3208904656.pdf","grobid_xml":"https://content.openalex.org/works/W3208904656.grobid-xml"},"referenced_works_count":73,"referenced_works":["https://openalex.org/W572355794","https://openalex.org/W1521553548","https://openalex.org/W1678356000","https://openalex.org/W1821462560","https://openalex.org/W2011628134","https://openalex.org/W2012095206","https://openalex.org/W2087405576","https://openalex.org/W2096118443","https://openalex.org/W2106100348","https://openalex.org/W2110153733","https://openalex.org/W2119271160","https://openalex.org/W2150779517","https://openalex.org/W2153794195","https://openalex.org/W2157349061","https://openalex.org/W2161251616","https://openalex.org/W2163605009","https://openalex.org/W2171634548","https://openalex.org/W2187089797","https://openalex.org/W2190207511","https://openalex.org/W2272331516","https://openalex.org/W2284008484","https://openalex.org/W2295598076","https://openalex.org/W2296570230","https://openalex.org/W2531327146","https://openalex.org/W2535838896","https://openalex.org/W2606697812","https://openalex.org/W2606722458","https://openalex.org/W2608862709","https://openalex.org/W2624172162","https://openalex.org/W2743678626","https://openalex.org/W2750674396","https://openalex.org/W2753434589","https://openalex.org/W2767414122","https://openalex.org/W2772303842","https://openalex.org/W2783000019","https://openalex.org/W2784189535","https://openalex.org/W2784962210","https://openalex.org/W2786712888","https://openalex.org/W2787720882","https://openalex.org/W2809684781","https://openalex.org/W2867167548","https://openalex.org/W2881747041","https://openalex.org/W2883780447","https://openalex.org/W2885311373","https://openalex.org/W2895752198","https://openalex.org/W2896827527","https://openalex.org/W2898413119","https://openalex.org/W2900853407","https://openalex.org/W2904509905","https://openalex.org/W2930926105","https://openalex.org/W2953212265","https://openalex.org/W2962852342","https://openalex.org/W2963875483","https://openalex.org/W2967001080","https://openalex.org/W2976836186","https://openalex.org/W2978116268","https://openalex.org/W2981731882","https://openalex.org/W2987849745","https://openalex.org/W3016494398","https://openalex.org/W3028986890","https://openalex.org/W3031511079","https://openalex.org/W3034942609","https://openalex.org/W3038898937","https://openalex.org/W3047014424","https://openalex.org/W3048617095","https://openalex.org/W3093348380","https://openalex.org/W3102405732","https://openalex.org/W3102476541","https://openalex.org/W3134514250","https://openalex.org/W3138781081","https://openalex.org/W3185459395","https://openalex.org/W3200538799","https://openalex.org/W3214897310"],"related_works":["https://openalex.org/W3149988673","https://openalex.org/W119611611","https://openalex.org/W2431812255","https://openalex.org/W4360996659","https://openalex.org/W3045576254","https://openalex.org/W4388479025","https://openalex.org/W2967001080","https://openalex.org/W4400391391","https://openalex.org/W7096233692","https://openalex.org/W6885153828"],"abstract_inverted_index":{"The":[0],"increasing":[1],"success":[2],"of":[3,71,130,133,145,166,192,219,227,237],"Machine":[4],"Learning":[5,9],"(ML)":[6],"and":[7,73,103,109,125,164,179,199,205],"Deep":[8],"(DL)":[10],"has":[11],"recently":[12],"re-sparked":[13],"interest":[14],"towards":[15],"traffic":[16,30,55,83,97,136,146],"classification.":[17],"While":[18],"supervised":[19,66,72,102],"techniques":[20,46,75,105],"provide":[21,213],"satisfactory":[22],"performance":[23,187,215],"when":[24],"classifyingknowntraffic,":[25],"the":[26,37,54,69,82,134,143,156,162,193,217,222,235],"detection":[27,236],"ofzero-day(i.e.,":[28],"unknown)":[29],"is":[31,161],"a":[32,94,117,127,168],"more":[33,60],"challenging":[34],"task.":[35],"At":[36],"same":[38],"time,":[39],"zero-day":[40,110,172],"detection,":[41],"generally":[42],"tackled":[43],"with":[44,188],"unsupervised":[45,74,104],"such":[47],"as":[48],"clustering,":[49],"received":[50],"less":[51],"coverage":[52],"by":[53,81],"classification":[56,84,98,218],"literature":[57],"which":[58],"focuses":[59],"on":[61,93,116,176],"deriving":[62],"DL":[63,96,182,206,228],"models":[64,207,229],"via":[65],"techniques.":[67],"Moreover,":[68],"combination":[70],"poses":[76],"challenges":[77],"not":[78],"fully":[79],"covered":[80],"literature.":[85,157],"In":[86,112],"this":[87],"paper,":[88],"we":[89,114],"share":[90],"our":[91],"experience":[92],"commercial-grade":[95,139],"engine":[99],"that":[100],"combines":[101],"to":[106,190,212],"identify":[107],"known":[108,220],"traffic.":[111],"particular,":[113],"rely":[115],"dataset":[118],"withhundredsof":[119],"very":[120],"fine":[121],"grained":[122],"application":[123],"labels,":[124],"perform":[126],"thorough":[128],"assessment":[129],"two":[131],"state":[132,191],"art":[135,194],"classifiers":[137,147],"in":[138,155,196],"settings.":[140],"This":[141],"pushes":[142],"boundaries":[144],"evaluation":[148,165],"beyond":[149],"thefew":[150],"tensof":[151],"classes":[152,239],"typically":[153],"used":[154],"Our":[158],"main":[159],"contribution":[160],"design":[163],"GradBP,":[167],"novel":[169],"technique":[170],"for":[171,181,216,234],"applications":[173],"detection.":[174],"Based":[175],"gradient":[177],"backpropagation":[178],"tailored":[180],"models,":[183],"GradBP":[184],"yields":[185],"superior":[186],"respect":[189],"alternatives,":[195],"both":[197,209],"accuracy":[198],"computational":[200],"cost.":[201],"Overall,":[202],"while":[203],"ML":[204,242],"are":[208],"equally":[210],"able":[211],"excellent":[214],"traffic,":[221],"non-linear":[223],"feature":[224],"extraction":[225],"process":[226],"backbone":[230],"provides":[231],"sizable":[232],"advantages":[233],"unknown":[238],"over":[240],"classical":[241],"models.":[243]},"counts_by_year":[{"year":2026,"cited_by_count":17},{"year":2025,"cited_by_count":22},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":22},{"year":2022,"cited_by_count":10},{"year":2021,"cited_by_count":3}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2021-11-08T00:00:00"}
