{"id":"https://openalex.org/W4414499208","doi":"https://doi.org/10.1016/j.cose.2025.104680","title":"WEDoHTool: Word embedding based early identification of DoH tunnel tool traffic in dynamic network environments","display_name":"WEDoHTool: Word embedding based early identification of DoH tunnel tool traffic in dynamic network environments","publication_year":2025,"publication_date":"2025-09-25","ids":{"openalex":"https://openalex.org/W4414499208","doi":"https://doi.org/10.1016/j.cose.2025.104680"},"language":"en","primary_location":{"id":"doi:10.1016/j.cose.2025.104680","doi":"https://doi.org/10.1016/j.cose.2025.104680","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.cose.2025.104680","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-b","cwts-core","dongbi-b","jufo-2","ki-jl-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Yang Miao","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Miao","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing 211189, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing 211189, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073150709","display_name":"Xiaoyan Hu","orcid":"https://orcid.org/0000-0002-4172-1977","observed_orcids":["https://orcid.org/0000-0002-4172-1977"]},"institutions":[{"id":"https://openalex.org/I4210155350","display_name":"Purple Mountain Laboratories","ror":"https://ror.org/04zcbk583","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210155350"]},{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xiaoyan Hu","raw_affiliation_strings":["Engineering Research Center of Blockchain Application, Supervision and Management, Ministry of Education, Nanjing 211189, China","Purple Mountain Laboratories for Network and Communication Security, Nanjing 211111, China","School of Cyber Science and Engineering, Southeast University, Nanjing 211189, China"],"raw_orcid":"https://orcid.org/0000-0002-4172-1977","affiliations":[{"raw_affiliation_string":"Engineering Research Center of Blockchain Application, Supervision and Management, Ministry of Education, Nanjing 211189, China","institution_ids":[]},{"raw_affiliation_string":"Purple Mountain Laboratories for Network and Communication Security, Nanjing 211111, China","institution_ids":["https://openalex.org/I4210155350"]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing 211189, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043707940","display_name":"Guang Cheng","orcid":"https://orcid.org/0000-0001-8642-4362","observed_orcids":["https://orcid.org/0000-0001-8642-4362"]},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guang Cheng","raw_affiliation_strings":["Jiangsu Provincial Engineering Research Center of Security for Ubiquitous Network, Nanjing 211189, China","School of Cyber Science and Engineering, Southeast University, Nanjing 211189, China"],"raw_orcid":"https://orcid.org/0000-0001-8642-4362","affiliations":[{"raw_affiliation_string":"Jiangsu Provincial Engineering Research Center of Security for Ubiquitous Network, Nanjing 211189, China","institution_ids":[]},{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing 211189, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100665328","display_name":"Ruidong Li","orcid":"https://orcid.org/0000-0002-9905-8952","observed_orcids":["https://orcid.org/0000-0002-9905-8952","https://orcid.org/0009-0007-8045-4764"]},"institutions":[{"id":"https://openalex.org/I10091056","display_name":"Kanazawa University","ror":"https://ror.org/02hwp6a56","country_code":"JP","type":"education","lineage":["https://openalex.org/I10091056"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Ruidong Li","raw_affiliation_strings":["Institute of Science and Engineering, Kanazawa University, Kakuma, Kanazawa, 920-1192, Japan"],"raw_orcid":"https://orcid.org/0000-0002-9905-8952","affiliations":[{"raw_affiliation_string":"Institute of Science and Engineering, Kanazawa University, Kakuma, Kanazawa, 920-1192, Japan","institution_ids":["https://openalex.org/I10091056"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032328549","display_name":"Hua Wu","orcid":"https://orcid.org/0000-0002-8829-0182","observed_orcids":["https://orcid.org/0000-0002-8829-0182"]},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hua Wu","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing 211189, China"],"raw_orcid":"https://orcid.org/0000-0002-8829-0182","affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing 211189, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102007274","display_name":"Yang Meng","orcid":"https://orcid.org/0000-0002-3627-3567","observed_orcids":["https://orcid.org/0000-0002-3627-3567"]},"institutions":[{"id":"https://openalex.org/I898250095","display_name":"Industrial and Commercial Bank of China","ror":"https://ror.org/02zcab046","country_code":"CN","type":"other","lineage":["https://openalex.org/I898250095"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Meng","raw_affiliation_strings":["Industrial and Commercial Bank of China Jiangsu Branch, Nanjing 210006, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Industrial and Commercial Bank of China Jiangsu Branch, Nanjing 210006, China","institution_ids":["https://openalex.org/I898250095"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5073150709"],"corresponding_institution_ids":["https://openalex.org/I4210155350","https://openalex.org/I76569877"],"apc_list":{"value":3100,"currency":"USD","value_usd":3100},"apc_paid":null,"fwci":0.9947,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.76066725,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"159","issue":null,"first_page":"104680","last_page":"104680"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0031999999191612005,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/dns-over-https","display_name":"DNS over HTTPS","score":0.9959999918937683},{"id":"https://openalex.org/keywords/traffic-identification","display_name":"traffic identification","score":0.5580000281333923},{"id":"https://openalex.org/keywords/word-embeddings","display_name":"word embeddings","score":0.8259999752044678},{"id":"https://openalex.org/keywords/word2vec","display_name":"Word2Vec","score":0.9929999709129333},{"id":"https://openalex.org/keywords/textcnn","display_name":"TextCNN","score":0.7269999980926514},{"id":"https://openalex.org/keywords/transformer-encoder","display_name":"Transformer encoder","score":0.9490000009536743},{"id":"https://openalex.org/keywords/dynamic-network-environments","display_name":"dynamic network environments","score":0.7689999938011169},{"id":"https://openalex.org/keywords/network-traffic-classification","display_name":"network traffic classification","score":0.46799999475479126},{"id":"https://openalex.org/keywords/dns-privacy","display_name":"DNS privacy","score":0.3959999978542328}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8269000053405762},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.6485000252723694},{"id":"https://openalex.org/C2776461190","wikidata":"https://www.wikidata.org/wiki/Q22673982","display_name":"Word2vec","level":3,"score":0.5669000148773193},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5458999872207642},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.48579999804496765},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.43799999356269836},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.43720000982284546},{"id":"https://openalex.org/C90805587","wikidata":"https://www.wikidata.org/wiki/Q10944557","display_name":"Word (group theory)","level":2,"score":0.4178999960422516},{"id":"https://openalex.org/C92717368","wikidata":"https://www.wikidata.org/wiki/Q1162538","display_name":"Plaintext","level":3,"score":0.3889999985694885},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.38760000467300415},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3831000030040741},{"id":"https://openalex.org/C2777462759","wikidata":"https://www.wikidata.org/wiki/Q18395344","display_name":"Word embedding","level":3,"score":0.3749000132083893},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.37400001287460327},{"id":"https://openalex.org/C2779888511","wikidata":"https://www.wikidata.org/wiki/Q244156","display_name":"Traffic congestion","level":2,"score":0.34310001134872437},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.32670000195503235},{"id":"https://openalex.org/C2777826928","wikidata":"https://www.wikidata.org/wiki/Q3745713","display_name":"Fingerprint (computing)","level":2,"score":0.311599999666214},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.3111000061035156},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.30790001153945923},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.29829999804496765},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.2969000041484833},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.2962000072002411},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.29490000009536743},{"id":"https://openalex.org/C46451311","wikidata":"https://www.wikidata.org/wiki/Q262550","display_name":"Traffic shaping","level":4,"score":0.2833000123500824},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.27410000562667847},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.26570001244544983},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.260699987411499},{"id":"https://openalex.org/C13540734","wikidata":"https://www.wikidata.org/wiki/Q5318996","display_name":"Dynamic network analysis","level":2,"score":0.2599000036716461}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.cose.2025.104680","doi":"https://doi.org/10.1016/j.cose.2025.104680","is_oa":false,"landing_page_url":"https://doi.org/10.1016/j.cose.2025.104680","pdf_url":null,"source":{"id":"https://openalex.org/S12529635","display_name":"Computers & Security","issn_l":"0167-4048","issn":["0167-4048","1872-6208"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","ccf-b","cwts-core","dongbi-b","jufo-2","ki-jl-1","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers & Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G1092968927","display_name":null,"funder_award_id":"62472087","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1640333749","display_name":null,"funder_award_id":"BK20231413","funder_id":"https://openalex.org/F4320322769","funder_display_name":"Natural Science Foundation of Jiangsu Province"},{"id":"https://openalex.org/G2572561021","display_name":null,"funder_award_id":"2242025K30025","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G8327356015","display_name":null,"funder_award_id":"2023YFB3106801","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W1832693441","https://openalex.org/W2112796928","https://openalex.org/W2806616617","https://openalex.org/W2947585023","https://openalex.org/W2972689670","https://openalex.org/W3008176860","https://openalex.org/W3035060554","https://openalex.org/W3035342403","https://openalex.org/W3080354144","https://openalex.org/W3080730509","https://openalex.org/W3105087971","https://openalex.org/W3155533904","https://openalex.org/W3198759872","https://openalex.org/W4206898372","https://openalex.org/W4214533612","https://openalex.org/W4221077261","https://openalex.org/W4221149871","https://openalex.org/W4237792908","https://openalex.org/W4281679414","https://openalex.org/W4285184946","https://openalex.org/W4312652679","https://openalex.org/W4319994093","https://openalex.org/W4364361361","https://openalex.org/W4367060677","https://openalex.org/W4381744511","https://openalex.org/W4382753153","https://openalex.org/W4385415767","https://openalex.org/W4386694208","https://openalex.org/W4395697756"],"related_works":["https://openalex.org/W4361858236","https://openalex.org/W7170058432","https://openalex.org/W4312652679","https://openalex.org/W4405181273","https://openalex.org/W7196976072","https://openalex.org/W4381744511","https://openalex.org/W3215244843","https://openalex.org/W4382338758","https://openalex.org/W4392546305","https://openalex.org/W7210160416"],"abstract_inverted_index":null,"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2025-10-10T00:00:00"}