{"id":"https://openalex.org/W7204234178","doi":"https://doi.org/10.1109/iwqos70441.2026.11661217","title":"Dynamic Malicious Encrypted Traffic Detection via Temporal Knowledge Graph in Cloud-Edge Networks","display_name":"Dynamic Malicious Encrypted Traffic Detection via Temporal Knowledge Graph in Cloud-Edge Networks","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7204234178","doi":"https://doi.org/10.1109/iwqos70441.2026.11661217"},"language":"en","primary_location":{"id":"doi:10.1109/iwqos70441.2026.11661217","doi":"https://doi.org/10.1109/iwqos70441.2026.11661217","is_oa":true,"landing_page_url":"https://doi.org/10.1109/iwqos70441.2026.11661217","pdf_url":null,"source":{"id":"https://openalex.org/S4210234387","display_name":"International Workshop on Quality of Service","issn_l":"1548-615X","issn":["1548-615X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE/ACM International Symposium on Quality of Service (IWQoS)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/iwqos70441.2026.11661217","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5148204291","display_name":"Qilong Huang","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qilong Huang","raw_affiliation_strings":["Information Engineering University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090827854","display_name":"Zihao Wang","orcid":"https://orcid.org/0000-0002-5197-6308","observed_orcids":["https://orcid.org/0000-0002-5197-6308"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zihao Wang","raw_affiliation_strings":["Information Engineering University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068265979","display_name":"Yuxiang Hu","orcid":"https://orcid.org/0009-0008-6522-2321","observed_orcids":["https://orcid.org/0009-0008-6522-2321","https://orcid.org/0000-0002-9293-6898","https://orcid.org/0009-0007-6044-3515"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yuxiang Hu","raw_affiliation_strings":["Information Engineering University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127964421","display_name":"Le Tian","orcid":"https://orcid.org/0000-0001-5434-1781","observed_orcids":["https://orcid.org/0000-0001-5434-1781","https://orcid.org/0009-0005-5045-3854"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Le Tian","raw_affiliation_strings":["Information Engineering University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148225248","display_name":"Yufei Zhu","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yufei Zhu","raw_affiliation_strings":["Information Engineering University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071945381","display_name":"Menglong Li","orcid":"https://orcid.org/0000-0002-7723-5137","observed_orcids":["https://orcid.org/0000-0002-7723-5137"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Menglong Li","raw_affiliation_strings":["Information Engineering University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Engineering University","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9297000169754028,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9297000169754028,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.05869999900460243,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encrypted-traffic-analysis","display_name":"encrypted traffic analysis","score":0.7710000276565552},{"id":"https://openalex.org/keywords/malicious-traffic-detection","display_name":"malicious traffic detection","score":0.9399999976158142},{"id":"https://openalex.org/keywords/temporal-knowledge-graphs","display_name":"temporal knowledge graphs","score":0.949999988079071},{"id":"https://openalex.org/keywords/self-supervised-learning","display_name":"self-supervised learning","score":0.9620000123977661},{"id":"https://openalex.org/keywords/data-streams","display_name":"data streams","score":0.39800000190734863},{"id":"https://openalex.org/keywords/lateral-movement","display_name":"lateral movement","score":0.6290000081062317},{"id":"https://openalex.org/keywords/zero-day-attacks","display_name":"zero-day attacks","score":0.996999979019165},{"id":"https://openalex.org/keywords/network-security","display_name":"network security","score":0.5049999952316284}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6541000008583069},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.48590001463890076},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.3937000036239624},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.37720000743865967},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35179999470710754},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3255999982357025},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31520000100135803},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.30660000443458557},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.30300000309944153},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.25760000944137573},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2556000053882599}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iwqos70441.2026.11661217","doi":"https://doi.org/10.1109/iwqos70441.2026.11661217","is_oa":true,"landing_page_url":"https://doi.org/10.1109/iwqos70441.2026.11661217","pdf_url":null,"source":{"id":"https://openalex.org/S4210234387","display_name":"International Workshop on Quality of Service","issn_l":"1548-615X","issn":["1548-615X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE/ACM International Symposium on Quality of Service (IWQoS)","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1109/iwqos70441.2026.11661217","doi":"https://doi.org/10.1109/iwqos70441.2026.11661217","is_oa":true,"landing_page_url":"https://doi.org/10.1109/iwqos70441.2026.11661217","pdf_url":null,"source":{"id":"https://openalex.org/S4210234387","display_name":"International Workshop on Quality of Service","issn_l":"1548-615X","issn":["1548-615X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-1"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE/ACM International Symposium on Quality of Service (IWQoS)","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.4943999946117401}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W2296509296","https://openalex.org/W2793294490","https://openalex.org/W3085955590","https://openalex.org/W4307042912","https://openalex.org/W4382281941","https://openalex.org/W4405623334","https://openalex.org/W4405907203","https://openalex.org/W4407116609","https://openalex.org/W4409427650","https://openalex.org/W4409641217","https://openalex.org/W4411143699","https://openalex.org/W4411358774","https://openalex.org/W4411866901","https://openalex.org/W4412043518","https://openalex.org/W4413860173","https://openalex.org/W4415125093","https://openalex.org/W4415593581","https://openalex.org/W7086759574","https://openalex.org/W7124877942","https://openalex.org/W7125908728"],"related_works":["https://openalex.org/W4413750229","https://openalex.org/W6940746557","https://openalex.org/W7166890715","https://openalex.org/W7166520760","https://openalex.org/W7201841479","https://openalex.org/W7166540068","https://openalex.org/W7223407822","https://openalex.org/W7171517757","https://openalex.org/W7153259638","https://openalex.org/W7166810075"],"abstract_inverted_index":{"Traditional":[0],"centralized":[1],"security":[2,18],"is":[3,26],"inadequate":[4],"for":[5,114,241],"Cloud-Edge":[6],"Networks,":[7],"where":[8],"massive":[9,68,138],"distributed":[10],"traffic":[11,25,59,140,191,215],"and":[12,37,61,132,199,236],"widespread":[13],"protocol":[14],"encryption":[15],"create":[16],"severe":[17,63],"blind":[19],"spots.":[20],"Continuous":[21],"monitoring":[22],"of":[23,58,188],"network":[24,46,107,166,214],"essential":[27],"to":[28,53,87,129,159,182],"identify":[29],"malicious":[30,207],"encrypted":[31,190,208],"activities":[32],"such":[33],"as":[34,48],"lateral":[35],"movement":[36],"zero-day":[38],"attacks.":[39],"Existing":[40],"graph-based":[41],"detection":[42,222],"methods":[43],"typically":[44],"model":[45,160,204],"flows":[47],"static":[49],"graphs,":[50],"which":[51],"fail":[52],"capture":[54],"the":[55,161,185,202,233],"temporal":[56,173,200],"dynamics":[57],"patterns":[60,192],"face":[62],"scalability":[64],"bottlenecks":[65],"when":[66],"processing":[67],"streaming":[69,139,157],"data":[70],"at":[71],"resource-constrained":[72],"edge":[73],"nodes.":[74],"Furthermore,":[75],"supervised":[76],"models":[77],"heavily":[78],"rely":[79],"on":[80,171,212],"exhaustive":[81],"labeled":[82],"datasets":[83,216],"that":[84,218],"are":[85,151],"impractical":[86],"maintain":[88],"in":[89,119],"highly":[90],"dynamic":[91,115],"environments.":[92],"To":[93],"address":[94],"these":[95],"limitations,":[96],"we":[97,175],"propose":[98],"TKG-ETA,":[99],"a":[100,124,155,177],"self-supervised":[101,178],"Temporal":[102],"Knowledge":[103],"Graph":[104],"(TKG)":[105],"neural":[106],"equipped":[108],"with":[109,141,224],"an":[110,225],"adaptive":[111],"sketch":[112,127],"mechanism":[113,181],"Encrypted":[116],"Traffic":[117],"Analysis":[118],"cloud-edge":[120,242],"networks.":[121],"We":[122],"utilize":[123],"dynamically":[125],"configurable":[126],"algorithm":[128],"efficiently":[130],"compress":[131],"extract":[133],"multi-dimensional":[134],"statistical":[135],"features":[136,150],"from":[137],"minimal":[142],"memory":[143],"overhead,":[144],"entirely":[145],"bypassing":[146],"payload":[147],"inspection.":[148],"These":[149],"continuously":[152],"transformed":[153],"into":[154],"lightweight":[156],"TKG":[158],"fine-grained":[162],"communication":[163],"relations":[164],"among":[165],"entities":[167],"over":[168],"time.":[169],"Based":[170],"this":[172],"structure,":[174],"design":[176],"time-aware":[179],"message-passing":[180],"autonomously":[183],"learn":[184],"evolutionary":[186],"trajectories":[187],"normal":[189],"without":[193],"manual":[194],"annotations.":[195],"By":[196],"capturing":[197],"structural":[198],"deviations,":[201],"proposed":[203],"accurately":[205],"identifies":[206],"traffic.":[209],"Extensive":[210],"experiments":[211],"real-world":[213],"demonstrate":[217],"TKG-ETA":[219],"achieves":[220],"superior":[221],"accuracy":[223],"weighted":[226],"F1":[227],"score":[228],"exceeding":[229],"96%":[230],"while":[231],"maintaining":[232],"high":[234],"throughput":[235],"low":[237],"resource":[238],"overhead":[239],"imperative":[240],"collaborative":[243],"deployment.":[244]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-08-27T00:00:00"}