{"id":"https://openalex.org/W7207555857","doi":"https://doi.org/10.1109/access.2026.3730464","title":"Cross-Protocol DDoS Detection via HTTP/2 Stream Reconstruction: A Multiplexing-Aware Traffic Transformation Approach","display_name":"Cross-Protocol DDoS Detection via HTTP/2 Stream Reconstruction: A Multiplexing-Aware Traffic Transformation Approach","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7207555857","doi":"https://doi.org/10.1109/access.2026.3730464"},"language":"en","primary_location":{"id":"doi:10.1109/access.2026.3730464","doi":"https://doi.org/10.1109/access.2026.3730464","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3730464","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3730464","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109961498","display_name":"Liang Ming","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210110609","display_name":"Chongqing University of Arts and Sciences","ror":"https://ror.org/01rcvq140","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210110609"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liang Ming","raw_affiliation_strings":["Chongqing University of Arts and Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chongqing University of Arts and Sciences","institution_ids":["https://openalex.org/I4210110609"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010351554","display_name":"Yu\u2010Beng Leau","orcid":"https://orcid.org/0000-0002-5386-2734","observed_orcids":["https://orcid.org/0000-0002-5386-2734"]},"institutions":[{"id":"https://openalex.org/I161371597","display_name":"Universiti of Malaysia Sabah","ror":"https://ror.org/040v70252","country_code":"MY","type":"education","lineage":["https://openalex.org/I161371597"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Yu-Beng Leau","raw_affiliation_strings":["Universiti Malaysia Sabah"],"raw_orcid":"https://orcid.org/0000-0002-5386-2734","affiliations":[{"raw_affiliation_string":"Universiti Malaysia Sabah","institution_ids":["https://openalex.org/I161371597"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021148401","display_name":"Giap Weng Ng","orcid":"https://orcid.org/0000-0002-7735-8073","observed_orcids":["https://orcid.org/0000-0002-7735-8073"]},"institutions":[{"id":"https://openalex.org/I161371597","display_name":"Universiti of Malaysia Sabah","ror":"https://ror.org/040v70252","country_code":"MY","type":"education","lineage":["https://openalex.org/I161371597"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Giap-Weng Ng","raw_affiliation_strings":["Universiti Malaysia Sabah"],"raw_orcid":"https://orcid.org/0000-0002-7735-8073","affiliations":[{"raw_affiliation_string":"Universiti Malaysia Sabah","institution_ids":["https://openalex.org/I161371597"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5149735526","display_name":"Li Xingchun","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210110609","display_name":"Chongqing University of Arts and Sciences","ror":"https://ror.org/01rcvq140","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210110609"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Li Xingchun","raw_affiliation_strings":["Chongqing University of Arts and Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chongqing University of Arts and Sciences","institution_ids":["https://openalex.org/I4210110609"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5149683659","display_name":"Hua Huang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210116886","display_name":"Chongqing Vocational Institute of Engineering","ror":"https://ror.org/0279ehd23","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210116886"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hua Huang","raw_affiliation_strings":["Chongqing Vocational Institute of Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chongqing Vocational Institute of Engineering","institution_ids":["https://openalex.org/I4210116886"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5149470220","display_name":"Qian Yonggang","orcid":"https://orcid.org/0009-0000-5772-6580","observed_orcids":["https://orcid.org/0009-0000-5772-6580"]},"institutions":[{"id":"https://openalex.org/I4405279040","display_name":"Chongqing Vocational College of Intelligent Engineering","ror":"https://ror.org/00y528y04","country_code":"CN","type":"education","lineage":["https://openalex.org/I4405279040"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qian Yonggang","raw_affiliation_strings":["Chongqing Vocational College of Intelligent Engineering"],"raw_orcid":"https://orcid.org/0009-0000-5772-6580","affiliations":[{"raw_affiliation_string":"Chongqing Vocational College of Intelligent Engineering","institution_ids":["https://openalex.org/I4405279040"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2075,"currency":"USD","value_usd":2075},"apc_paid":{"value":2075,"currency":"USD","value_usd":2075},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"137772","last_page":"137787"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.002199999988079071,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ddos-detection","display_name":"DDoS attack detection","score":0.8889999985694885},{"id":"https://openalex.org/keywords/http-2","display_name":"HTTP/2","score":0.9959999918937683},{"id":"https://openalex.org/keywords/protocol-conversion","display_name":"protocol conversion","score":0.8619999885559082}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8066999912261963},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6186000108718872},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5006999969482422},{"id":"https://openalex.org/C204241405","wikidata":"https://www.wikidata.org/wiki/Q461499","display_name":"Transformation (genetics)","level":3,"score":0.48159998655319214},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.38370001316070557},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.274399995803833},{"id":"https://openalex.org/C32283439","wikidata":"https://www.wikidata.org/wiki/Q1407014","display_name":"Radar tracker","level":3,"score":0.2678999900817871},{"id":"https://openalex.org/C159886148","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov process","level":2,"score":0.25850000977516174},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.2547000050544739},{"id":"https://openalex.org/C106516650","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm design","level":2,"score":0.2540000081062317}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2026.3730464","doi":"https://doi.org/10.1109/access.2026.3730464","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3730464","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:98fbccea6e704454a9bb61ffbaffbf8b","doi":null,"is_oa":false,"landing_page_url":"https://doaj.org/article/98fbccea6e704454a9bb61ffbaffbf8b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 14, Pp 137772-137787 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3730464","doi":"https://doi.org/10.1109/access.2026.3730464","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3730464","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W1562919578","https://openalex.org/W2089686051","https://openalex.org/W2526518335","https://openalex.org/W2608183811","https://openalex.org/W2743139118","https://openalex.org/W2756518166","https://openalex.org/W2765558264","https://openalex.org/W2795079039","https://openalex.org/W2805972670","https://openalex.org/W2886398423","https://openalex.org/W2902271075","https://openalex.org/W2908786285","https://openalex.org/W2987595184","https://openalex.org/W3005097670","https://openalex.org/W3016974523","https://openalex.org/W3114739594","https://openalex.org/W3190955496","https://openalex.org/W4376607515","https://openalex.org/W4377699358","https://openalex.org/W6906355099"],"related_works":["https://openalex.org/W4392207857","https://openalex.org/W2604899616","https://openalex.org/W2743139118","https://openalex.org/W2766692711","https://openalex.org/W2288803724","https://openalex.org/W2608183811","https://openalex.org/W2987595184","https://openalex.org/W2758836598","https://openalex.org/W3190955496","https://openalex.org/W2767050622"],"abstract_inverted_index":{"With":[0],"the":[1,20,68,74,80,84,88,104,119,126,130,147,151,160,193,202,207,227,236,276,290,310],"increasing":[2],"complexity":[3],"of":[4,77,98,125,150,196,206,244,252,263,313],"online":[5,187],"applications,":[6],"HTTP/2":[7,25,44,60,229,264,320],"has":[8],"significantly":[9],"improved":[10],"transmission":[11],"efficiency":[12],"through":[13],"key":[14],"enhancements":[15],"in":[16,250],"network":[17,335],"architecture.":[18],"However,":[19],"structural":[21,273],"changes":[22],"introduced":[23],"by":[24,72],"make":[26],"it":[27],"difficult":[28],"to":[29,43,67,107,129,145,275,286,319],"directly":[30],"adapt":[31],"existing":[32,140,197,221,247,314],"DDoS":[33,223,265],"attack":[34],"detection":[35,142,224,262,279,283,317],"algorithms,":[36],"which":[37],"are":[38],"primarily":[39],"designed":[40,165],"for":[41,139,309,330],"HTTP/1,":[42],"environments.":[45],"To":[46,200],"address":[47],"this":[48,50],"issue,":[49],"paper":[51],"proposes":[52],"an":[53,154,210],"HTTP/2-oriented":[54],"protocol":[55,161],"conversion":[56,162,189],"algorithm":[57,163],"that":[58,235,287],"reconstructs":[59],"traffic":[61,128,173,188,230,238],"into":[62],"a":[63,171,178,241,303],"data":[64,138,239,257],"representation":[65],"conforming":[66],"HTTP/1":[69,278,292],"request\u2013response":[70,110],"structure":[71,258],"leveraging":[73],"stream":[75,106,180],"mechanism":[76,175],"HTTP/2.":[78],"Specifically,":[79],"proposed":[81,152,208,295],"method":[82,296],"uses":[83],"Stream":[85],"ID":[86],"as":[87],"fundamental":[89],"partitioning":[90],"unit":[91],"and":[92,96,100,122,166,185,204,215,256,297,305,327],"performs":[93],"ordered":[94],"association":[95],"reassembly":[97,181],"HEADERS":[99],"DATA":[101],"frames":[102],"within":[103],"same":[105],"restore":[108],"complete":[109,304],"interactions.":[111],"This":[112],"design":[113],"preserves":[114],"request":[115],"independence":[116],"while":[117,281,322],"retaining":[118],"behavioral":[120],"characteristics":[121],"semantic":[123],"integrity":[124],"original":[127,277,291],"greatest":[131],"extent":[132],"possible,":[133],"thereby":[134],"providing":[135],"compatible":[136,158],"input":[137],"HTTP/1-based":[141,222,315],"models.":[143],"Furthermore,":[144],"ensure":[146],"practical":[148],"deployability":[149],"method,":[153,209],"engineering":[155,328],"deployment":[156,300],"architecture":[157,169,301],"with":[159,177,192,246],"is":[164],"implemented.":[167],"The":[168,294],"adopts":[170],"bypass-based":[172],"mirroring":[174],"combined":[176],"real-time":[179],"module,":[182],"enabling":[183],"low-latency":[184],"high-throughput":[186],"without":[190,270],"interfering":[191],"normal":[194],"operation":[195],"business":[198],"systems.":[199],"evaluate":[201],"effectiveness":[203],"feasibility":[205],"experimental":[211],"environment":[212],"was":[213],"constructed,":[214],"multiple":[216],"experiments":[217],"were":[218],"conducted":[219],"using":[220],"models":[225],"on":[226,289,333],"converted":[228,237],"data.":[231],"Experimental":[232],"results":[233],"demonstrate":[234],"maintain":[240],"high":[242],"degree":[243],"consistency":[245],"public":[248],"datasets":[249],"terms":[251],"core":[253],"statistical":[254],"features":[255],"characteristics.":[259],"Moreover,":[260],"effective":[261],"attacks":[266],"can":[267],"be":[268],"achieved":[269],"requiring":[271],"any":[272],"modifications":[274],"models,":[280],"maintaining":[282],"performance":[284],"comparable":[285],"obtained":[288],"datasets.":[293],"its":[298],"corresponding":[299],"provide":[302],"practically":[306],"deployable":[307],"solution":[308],"smooth":[311],"migration":[312],"threat":[316],"systems":[318],"environments,":[321],"also":[323],"offering":[324],"new":[325],"insights":[326],"references":[329],"future":[331],"research":[332],"cross-protocol":[334],"security":[336],"detection.":[337]},"counts_by_year":[],"updated_date":"2026-09-23T05:00:35.095934","created_date":"2026-09-04T00:00:00"}