{"id":"https://openalex.org/W7214601337","doi":"https://doi.org/10.1109/ojcoms.2026.3737702","title":"Real-Time Network Traffic Classification With Learned Feature Imputation and SDN-Based Automated Response","display_name":"Real-Time Network Traffic Classification With Learned Feature Imputation and SDN-Based Automated Response","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7214601337","doi":"https://doi.org/10.1109/ojcoms.2026.3737702"},"language":"en","primary_location":{"id":"doi:10.1109/ojcoms.2026.3737702","doi":"https://doi.org/10.1109/ojcoms.2026.3737702","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2026.3737702","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","dongbi-d","jufo-1","norway-1","poland-20","russia-white-list-1"],"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/ojcoms.2026.3737702","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5098446383","display_name":"Sayed Shafiullah Sadat","orcid":"https://orcid.org/0000-0001-8654-9640","observed_orcids":["https://orcid.org/0000-0001-8654-9640"]},"institutions":[{"id":"https://openalex.org/I4210126853","display_name":"Polytechnical University of Kabul","ror":"https://ror.org/0451w9n55","country_code":"AF","type":"education","lineage":["https://openalex.org/I4210126853"]}],"countries":["AF"],"is_corresponding":false,"raw_author_name":"Sayed Shafiullah Sadat","raw_affiliation_strings":["Kabul Polytechnic University"],"raw_orcid":"https://orcid.org/0000-0001-8654-9640","affiliations":[{"raw_affiliation_string":"Kabul Polytechnic University","institution_ids":["https://openalex.org/I4210126853"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093491170","display_name":"Abdul Awal Quraishi","orcid":"https://orcid.org/0009-0005-8764-4531","observed_orcids":["https://orcid.org/0009-0005-8764-4531"]},"institutions":[{"id":"https://openalex.org/I4210126853","display_name":"Polytechnical University of Kabul","ror":"https://ror.org/0451w9n55","country_code":"AF","type":"education","lineage":["https://openalex.org/I4210126853"]}],"countries":["AF"],"is_corresponding":false,"raw_author_name":"Abdul Awal Quraishi","raw_affiliation_strings":["Kabul Polytechnic University"],"raw_orcid":"https://orcid.org/0009-0005-8764-4531","affiliations":[{"raw_affiliation_string":"Kabul Polytechnic University","institution_ids":["https://openalex.org/I4210126853"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Mohammad Wasil Jalali","orcid":"https://orcid.org/0009-0004-9082-5934","observed_orcids":["https://orcid.org/0009-0004-9082-5934"]},"institutions":[{"id":"https://openalex.org/I4210126853","display_name":"Polytechnical University of Kabul","ror":"https://ror.org/0451w9n55","country_code":"AF","type":"education","lineage":["https://openalex.org/I4210126853"]}],"countries":["AF"],"is_corresponding":false,"raw_author_name":"Mohammad Wasil Jalali","raw_affiliation_strings":["Kabul Polytechnic University"],"raw_orcid":"https://orcid.org/0009-0004-9082-5934","affiliations":[{"raw_affiliation_string":"Kabul Polytechnic University","institution_ids":["https://openalex.org/I4210126853"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5153254116","display_name":"Iqbal Ahmadi","orcid":"https://orcid.org/0009-0007-2384-212X","observed_orcids":["https://orcid.org/0009-0007-2384-212X"]},"institutions":[{"id":"https://openalex.org/I4210126853","display_name":"Polytechnical University of Kabul","ror":"https://ror.org/0451w9n55","country_code":"AF","type":"education","lineage":["https://openalex.org/I4210126853"]}],"countries":["AF"],"is_corresponding":false,"raw_author_name":"Iqbal Ahmadi","raw_affiliation_strings":["Kabul Polytechnic University"],"raw_orcid":"https://orcid.org/0009-0007-2384-212X","affiliations":[{"raw_affiliation_string":"Kabul Polytechnic University","institution_ids":["https://openalex.org/I4210126853"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5098996991","display_name":"Mohammad Shah Omid","orcid":"https://orcid.org/0000-0001-9393-5830","observed_orcids":["https://orcid.org/0000-0001-9393-5830"]},"institutions":[{"id":"https://openalex.org/I4403386551","display_name":"Kateb University","ror":"https://ror.org/012hzxe25","country_code":"AF","type":"education","lineage":["https://openalex.org/I4403386551"]}],"countries":["AF"],"is_corresponding":false,"raw_author_name":"Mohammad Shah Omid","raw_affiliation_strings":["Kateb University"],"raw_orcid":"https://orcid.org/0000-0001-9393-5830","affiliations":[{"raw_affiliation_string":"Kateb University","institution_ids":["https://openalex.org/I4403386551"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2075,"currency":"USD","value_usd":2075},"apc_paid":{"value":2075,"currency":"USD","value_usd":2075},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"7","issue":null,"first_page":"12529","last_page":"12549"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9330999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9330999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.044199999421834946,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.01860000006854534,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-traffic-classification","display_name":"network traffic classification","score":0.9580000042915344},{"id":"https://openalex.org/keywords/network-intrusion-detection","display_name":"network intrusion detection","score":0.9269999861717224},{"id":"https://openalex.org/keywords/feature-imputation","display_name":"feature imputation","score":0.8109999895095825},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"software-defined networking","score":0.7870000004768372},{"id":"https://openalex.org/keywords/cicflowmeter","display_name":"CICFlowMeter","score":0.8700000047683716},{"id":"https://openalex.org/keywords/lstm","display_name":"LSTM","score":0.5090000033378601},{"id":"https://openalex.org/keywords/convolutional-neural-networks","display_name":"convolutional neural networks","score":0.777999997138977},{"id":"https://openalex.org/keywords/attack-classification","display_name":"attack classification","score":0.6970000267028809}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6521999835968018},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5884000062942505},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.44850000739097595},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.43059998750686646},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3831000030040741},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3481000065803528},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.32989999651908875},{"id":"https://openalex.org/C58041806","wikidata":"https://www.wikidata.org/wiki/Q1660484","display_name":"Imputation (statistics)","level":3,"score":0.319599986076355},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3160000145435333},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.26010000705718994},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.2558000087738037}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/ojcoms.2026.3737702","doi":"https://doi.org/10.1109/ojcoms.2026.3737702","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2026.3737702","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","dongbi-d","jufo-1","norway-1","poland-20","russia-white-list-1"],"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:439cde7990d64c73ab3f854ec9af4131","doi":null,"is_oa":false,"landing_page_url":"https://doaj.org/article/439cde7990d64c73ab3f854ec9af4131","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Open Journal of the Communications Society, Vol 7, Pp 12529-12549 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/ojcoms.2026.3737702","doi":"https://doi.org/10.1109/ojcoms.2026.3737702","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2026.3737702","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","dongbi-d","jufo-1","norway-1","poland-20","russia-white-list-1"],"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W2789828921","https://openalex.org/W2945020349","https://openalex.org/W3032948302","https://openalex.org/W3115107699","https://openalex.org/W3157388080","https://openalex.org/W3165292502","https://openalex.org/W4298395701","https://openalex.org/W4311410084","https://openalex.org/W4327750468","https://openalex.org/W4389400900","https://openalex.org/W4399181772","https://openalex.org/W4399453076","https://openalex.org/W4400166762","https://openalex.org/W4404125286","https://openalex.org/W4404171983","https://openalex.org/W4405182414","https://openalex.org/W4405183220","https://openalex.org/W4407097759","https://openalex.org/W4407953029","https://openalex.org/W4409370533","https://openalex.org/W4410723822","https://openalex.org/W4412613859","https://openalex.org/W4412957906","https://openalex.org/W4413055389","https://openalex.org/W4413277579","https://openalex.org/W4413854748","https://openalex.org/W4414995089","https://openalex.org/W6940826805","https://openalex.org/W7118385090","https://openalex.org/W7215060748"],"related_works":["https://openalex.org/W7154512799","https://openalex.org/W7167472478","https://openalex.org/W7147225971","https://openalex.org/W7152539941","https://openalex.org/W4410770078","https://openalex.org/W7160607231","https://openalex.org/W4323362877","https://openalex.org/W4413979046","https://openalex.org/W4309082205","https://openalex.org/W4390974289"],"abstract_inverted_index":{"Real-time":[0],"deployment":[1],"of":[2,44,213],"deep":[3],"learning":[4],"(DL)-based":[5],"network":[6,59,221],"intrusion":[7],"detection":[8],"systems":[9],"(NIDS)":[10],"is":[11,200],"often":[12],"limited":[13],"by":[14,82,95],"a":[15,41,83,133,171,196,208],"feature-space":[16],"mismatch":[17],"between":[18,150],"offline":[19],"training":[20],"datasets":[21,27],"and":[22,72,104,114,123,152,156,186,223],"online":[23],"monitoring":[24,169],"tools.":[25],"Benchmark":[26],"commonly":[28],"provide":[29],"CICFlowMeter-style":[30],"flow":[31,198],"statistics,":[32],"whereas":[33],"operational":[34],"monitors":[35],"such":[36],"as":[37],"Zeek":[38],"expose":[39],"only":[40],"smaller":[42],"set":[43],"real-time":[45,168],"observable":[46,78],"attributes.":[47],"To":[48],"address":[49],"this":[50],"gap,":[51],"we":[52],"propose":[53],"an":[54],"end-to-end":[55],"workflow":[56],"for":[57,120,191],"multi-dimensional":[58],"traffic":[60],"classification":[61],"(NTC)":[62],"that":[63],"combines":[64],"learned":[65],"feature":[66,100,193,218],"imputation":[67,86],"(FI),":[68],"TensorFlow":[69],"Serving-based":[70],"inference,":[71,220],"software-defined":[73],"networking":[74],"(SDN)-enabled":[75],"response.":[76],"Zeek-derived":[77],"features":[79],"are":[80,102,127,145,154,162],"used":[81],"lightweight":[84],"TSMixer-inspired":[85],"model":[87],"to":[88,108],"reconstruct":[89],"the":[90,202],"missing":[91],"CICFlowMeter-compatible":[92],"attributes":[93],"required":[94],"pre-trained":[96],"classifiers.":[97],"The":[98,174],"completed":[99,197],"vectors":[101],"normalized":[103],"sent":[105],"through":[106,129],"FastAPI":[107],"Docker-hosted":[109],"Convolutional":[110],"Neural":[111],"Network":[112],"(CNN)":[113],"Long":[115],"Short-Term":[116],"Memory":[117],"(LSTM)":[118],"models":[119],"binary,":[121],"attack-type,":[122],"application-level":[124],"classification.":[125],"Predictions":[126],"enforced":[128],"OpenFlow":[130],"rules":[131],"in":[132,170],"Ryu":[134],"controller":[135],"using":[136],"confidence-aware":[137],"actions:":[138],"malicious":[139],"flows":[140,147,157],"with":[141,148,158],"confidence":[142,149,159],"above":[143],"80%":[144,153],"dropped,":[146],"60%":[151,161],"paused,":[155],"below":[160],"allowed.":[163],"A":[164],"Gradio":[165],"dashboard":[166],"supports":[167],"Mininet-based":[172],"testbed.":[173],"system":[175],"achieves":[176],"99.74%":[177],"binary":[178],"accuracy,":[179,182,185],"96.83%":[180],"attack-classification":[181],"98.39%":[183],"application-classification":[184],"maximum":[187],"R2":[188],"=":[189],"0.9015":[190],"continuous":[192],"imputation.":[194],"Once":[195],"record":[199],"available,":[201],"independently":[203],"benchmarked":[204],"processing":[205,211],"stages":[206],"yield":[207],"composed":[209],"mean":[210],"estimate":[212],"approximately":[214],"25.7":[215],"ms":[216],"from":[217],"completion,":[219],"transmission,":[222],"SDN":[224],"rule":[225],"installation.":[226]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-09-29T00:00:00"}