{"id":"https://openalex.org/W753768968","doi":null,"title":"Network Traffic Analysis Using Stochastic Grammars","display_name":"Network Traffic Analysis Using Stochastic Grammars","publication_year":2012,"publication_date":"2012-01-01","ids":{"openalex":"https://openalex.org/W753768968","mag":"753768968"},"language":"en","primary_location":{"id":"pmh:oai:tigerprints.clemson.edu:all_dissertations-2059","doi":null,"is_oa":true,"landing_page_url":"https://tigerprints.clemson.edu/all_dissertations/1059","pdf_url":"https://tigerprints.clemson.edu/all_dissertations/1059","source":{"id":"https://openalex.org/S4377196397","display_name":"TigerPrints (Clemson University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I8078737","host_organization_name":"Clemson University","host_organization_lineage":["https://openalex.org/I8078737"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"All Dissertations","raw_type":"text"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://tigerprints.clemson.edu/all_dissertations/1059","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100605099","display_name":"Chen L\u00fc","orcid":"https://orcid.org/0000-0003-1927-2391","observed_orcids":["https://orcid.org/0000-0003-1927-2391"]},"institutions":[{"id":"https://openalex.org/I8078737","display_name":"Clemson University","ror":"https://ror.org/037s24f05","country_code":"US","type":"education","lineage":["https://openalex.org/I8078737"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Chen L\u00fc","raw_affiliation_strings":["Clemson University"],"raw_orcid":"https://orcid.org/0000-0003-1927-2391","affiliations":[{"raw_affiliation_string":"Clemson University","institution_ids":["https://openalex.org/I8078737"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5100605099"],"corresponding_institution_ids":["https://openalex.org/I8078737"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9829000234603882,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9829000234603882,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.015300000086426735,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-traffic-analysis","display_name":"network traffic analysis","score":0.996999979019165},{"id":"https://openalex.org/keywords/stochastic-grammars","display_name":"stochastic grammars","score":0.7850000262260437},{"id":"https://openalex.org/keywords/hidden-markov-models","display_name":"hidden Markov models","score":0.9980000257492065},{"id":"https://openalex.org/keywords/probabilistic-context-free-grammars","display_name":"probabilistic context-free grammars","score":1.0},{"id":"https://openalex.org/keywords/encrypted-traffic-analysis","display_name":"encrypted traffic analysis","score":0.6349999904632568},{"id":"https://openalex.org/keywords/botnet-detection","display_name":"botnet detection","score":0.9430000185966492},{"id":"https://openalex.org/keywords/p2p-botnets","display_name":"P2P botnets","score":0.8970000147819519}],"concepts":[{"id":"https://openalex.org/C23224414","wikidata":"https://www.wikidata.org/wiki/Q176769","display_name":"Hidden Markov model","level":2,"score":0.8112293481826782},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7325774431228638},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.5438050627708435},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48856958746910095},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.4827350974082947},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.4122794270515442},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.404229998588562},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.19246181845664978},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.15759891271591187},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:tigerprints.clemson.edu:all_dissertations-2059","doi":null,"is_oa":true,"landing_page_url":"https://tigerprints.clemson.edu/all_dissertations/1059","pdf_url":"https://tigerprints.clemson.edu/all_dissertations/1059","source":{"id":"https://openalex.org/S4377196397","display_name":"TigerPrints (Clemson University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I8078737","host_organization_name":"Clemson University","host_organization_lineage":["https://openalex.org/I8078737"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"All Dissertations","raw_type":"text"},{"id":"pmh:oai:open.clemson.edu:all_dissertations-2059","doi":null,"is_oa":false,"landing_page_url":"https://open.clemson.edu/all_dissertations/1059","pdf_url":null,"source":{"id":"https://openalex.org/S4377196397","display_name":"TigerPrints (Clemson University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I8078737","host_organization_name":"Clemson University","host_organization_lineage":["https://openalex.org/I8078737"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"All Dissertations","raw_type":"text"},{"id":"mag:753768968","doi":null,"is_oa":false,"landing_page_url":"https://tigerprints.clemson.edu/all_dissertations/1059/","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:tigerprints.clemson.edu:all_dissertations-2059","doi":null,"is_oa":true,"landing_page_url":"https://tigerprints.clemson.edu/all_dissertations/1059","pdf_url":"https://tigerprints.clemson.edu/all_dissertations/1059","source":{"id":"https://openalex.org/S4377196397","display_name":"TigerPrints (Clemson University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I8078737","host_organization_name":"Clemson University","host_organization_lineage":["https://openalex.org/I8078737"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"All Dissertations","raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W753768968.pdf","grobid_xml":"https://content.openalex.org/works/W753768968.grobid-xml"},"referenced_works_count":80,"referenced_works":["https://openalex.org/W185215740","https://openalex.org/W250535929","https://openalex.org/W643521013","https://openalex.org/W754439754","https://openalex.org/W1491175367","https://openalex.org/W1495953444","https://openalex.org/W1501843624","https://openalex.org/W1506219363","https://openalex.org/W1517583229","https://openalex.org/W1529345925","https://openalex.org/W1536584388","https://openalex.org/W1541680420","https://openalex.org/W1549364818","https://openalex.org/W1551871633","https://openalex.org/W1561010465","https://openalex.org/W1570131048","https://openalex.org/W1574901103","https://openalex.org/W1583098994","https://openalex.org/W1639784222","https://openalex.org/W1655958391","https://openalex.org/W1787428839","https://openalex.org/W1817451992","https://openalex.org/W1836311887","https://openalex.org/W1874903831","https://openalex.org/W1909494783","https://openalex.org/W1955645522","https://openalex.org/W1961810468","https://openalex.org/W1972624882","https://openalex.org/W1973867422","https://openalex.org/W1978470410","https://openalex.org/W1981049515","https://openalex.org/W1987716968","https://openalex.org/W1989248109","https://openalex.org/W1991209472","https://openalex.org/W2001000502","https://openalex.org/W2001496424","https://openalex.org/W2005336926","https://openalex.org/W2008755343","https://openalex.org/W2009570821","https://openalex.org/W2035611878","https://openalex.org/W2044168900","https://openalex.org/W2062930223","https://openalex.org/W2069620139","https://openalex.org/W2075978670","https://openalex.org/W2086449672","https://openalex.org/W2091644335","https://openalex.org/W2097496174","https://openalex.org/W2100307718","https://openalex.org/W2105862475","https://openalex.org/W2106937079","https://openalex.org/W2107510910","https://openalex.org/W2109305809","https://openalex.org/W2113784723","https://openalex.org/W2116618651","https://openalex.org/W2121255634","https://openalex.org/W2123282012","https://openalex.org/W2124479173","https://openalex.org/W2125838338","https://openalex.org/W2126958887","https://openalex.org/W2132303541","https://openalex.org/W2134290759","https://openalex.org/W2134442976","https://openalex.org/W2135399268","https://openalex.org/W2145802904","https://openalex.org/W2150779517","https://openalex.org/W2154195006","https://openalex.org/W2154408628","https://openalex.org/W2154798766","https://openalex.org/W2168392347","https://openalex.org/W2170104027","https://openalex.org/W2171126763","https://openalex.org/W2172231332","https://openalex.org/W2272314234","https://openalex.org/W2280775762","https://openalex.org/W2341535507","https://openalex.org/W2518192905","https://openalex.org/W2796901959","https://openalex.org/W2952720051","https://openalex.org/W2981264952","https://openalex.org/W4232857445"],"related_works":["https://openalex.org/W229659846","https://openalex.org/W1987716968","https://openalex.org/W7217738826","https://openalex.org/W2091644335","https://openalex.org/W2043360390","https://openalex.org/W1764020410","https://openalex.org/W7099305617","https://openalex.org/W1973867422","https://openalex.org/W7098812442","https://openalex.org/W1993028889"],"abstract_inverted_index":{"Network":[0],"traffic":[1,18,24,65,179,204,233,280,291],"analysis":[2],"is":[3,13,19,111,164],"widely":[4,69],"used":[5,70,112,165],"to":[6,90,113,147,177,208,223,272],"infer":[7,183,229],"information":[8],"from":[9,125,159,231],"Internet":[10,294],"traffic.":[11,43,227,249,276,295],"This":[12,135],"possible":[14],"even":[15],"if":[16,92],"the":[17,41,97,121,129,137,143,184,200,210],"encrypted.":[20],"Previous":[21],"work":[22],"uses":[23],"characteristics,":[25],"such":[26],"as":[27,60],"port":[28],"numbers,":[29],"packet":[30],"sizes,":[31],"and":[32,55,74,174,235,266,292],"frequency,":[33],"without":[34],"looking":[35],"for":[36,64,71,166],"more":[37,151],"subtle":[38],"patterns":[39],"in":[40,206,217],"network":[42,178,203],"In":[44],"this":[45],"work,":[46],"we":[47,85,102,182],"use":[48,77,86,144,221,270],"stochastic":[49],"grammars,":[50],"hidden":[51],"Markov":[52,106,197],"models":[53,131],"(HMMs)":[54],"probabilistic":[56],"context-free":[57],"grammars":[58],"(PCFGs),":[59],"pattern":[61,72],"recognition":[62,73],"tools":[63],"analysis.":[66,180],"HMMs":[67,127,146,205,222,230,243],"are":[68,132],"detection.":[75,167],"We":[76,141,154,168,220,228,269],"a":[78,93,104],"HMM":[79,173],"inference":[80],"approach.":[81],"With":[82],"inferred":[83],"HMMs,":[84,101],"confidence":[87],"intervals":[88],"(CI)":[89],"detect":[91,224,236,246,273],"data":[94,234,281],"sequence":[95],"matches":[96],"HMM.":[98],"To":[99,250],"compare":[100],"define":[103],"normalized":[105],"metric.":[107],"A":[108,161],"statistical":[109,162],"test":[110,163],"determine":[114],"model":[115],"equivalence.":[116],"Our":[117],"metric":[118,198],"systematically":[119],"removes":[120],"least":[122],"likely":[123],"events":[124],"both":[126],"until":[128],"remaining":[130],"statistically":[133],"equivalent.":[134],"defines":[136],"distance":[138],"between":[139,288],"models.":[140],"extend":[142],"of":[145,172,186,202],"PCFGs,":[148],"which":[149],"have":[150,257],"expressive":[152],"power.":[153],"estimate":[155],"PCFG":[156,175],"production":[157],"probabilities":[158],"data.":[160],"present":[169],"three":[170],"applications":[171],"detection":[176],"First,":[181],"presence":[185],"protocol":[187],"tunneling":[188],"through":[189],"Tor":[190,207,218],"(the":[191],"onion":[192],"router)":[193],"anonymization":[194],"network.":[195,219],"The":[196],"quantifies":[199],"similarity":[201],"identify":[209],"protocol.":[211],"It":[212],"also":[213],"measures":[214],"communication":[215],"noise":[216],"centralized":[225],"botnet":[226,232,237,248,275,290],"infections.":[238],"Experimental":[239],"results":[240],"show":[241],"that":[242,283],"can":[244,285],"accurately":[245,286],"Zeus":[247],"hide":[251],"their":[252],"locations":[253],"better,":[254],"newer":[255],"botnets":[256,263],"P2P":[258,262,274,289],"control":[259],"structures.":[260],"Hierarchical":[261],"contain":[264],"recursive":[265],"hierarchical":[267],"patterns.":[268],"PCFGs":[271,284],"Experimentation":[277],"on":[278],"real-world":[279],"shows":[282],"differentiate":[287],"normal":[293]},"counts_by_year":[{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":3}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2016-06-24T00:00:00"}