{"id":"https://openalex.org/W4226033273","doi":"https://doi.org/10.1093/comjnl/bxac008","title":"DEV-ETA: An Interpretable Detection Framework for Encrypted Malicious Traffic","display_name":"DEV-ETA: An Interpretable Detection Framework for Encrypted Malicious Traffic","publication_year":2022,"publication_date":"2022-03-06","ids":{"openalex":"https://openalex.org/W4226033273","doi":"https://doi.org/10.1093/comjnl/bxac008"},"language":"en","primary_location":{"id":"doi:10.1093/comjnl/bxac008","is_oa":false,"landing_page_url":"https://doi.org/10.1093/comjnl/bxac008","pdf_url":null,"source":{"id":"https://openalex.org/S44643521","display_name":"The Computer Journal","issn_l":"0010-4620","issn":["0010-4620","1460-2067"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Computer Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078558551","display_name":"Luming Yang","orcid":"https://orcid.org/0000-0002-5539-5025"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Luming Yang","raw_affiliation_strings":["College of Computer , National University of Defense Technology, Changsha, China"],"affiliations":[{"raw_affiliation_string":"College of Computer , National University of Defense Technology, Changsha, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082564456","display_name":"Shaojing Fu","orcid":"https://orcid.org/0000-0002-7275-8190"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Shaojing Fu","raw_affiliation_strings":["College of Computer , National University of Defense Technology, Changsha, China"],"affiliations":[{"raw_affiliation_string":"College of Computer , National University of Defense Technology, Changsha, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100424209","display_name":"Yongjun Wang","orcid":"https://orcid.org/0000-0002-3627-1465"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongjun Wang","raw_affiliation_strings":["College of Computer , National University of Defense Technology, Changsha, China"],"affiliations":[{"raw_affiliation_string":"College of Computer , National University of Defense Technology, Changsha, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001485404","display_name":"Kaitai Liang","orcid":"https://orcid.org/0000-0003-0262-7678"},"institutions":[{"id":"https://openalex.org/I98358874","display_name":"Delft University of Technology","ror":"https://ror.org/02e2c7k09","country_code":"NL","type":"education","lineage":["https://openalex.org/I98358874"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Kaitai Liang","raw_affiliation_strings":["Delft University of Technology , Delft, Nederland"],"affiliations":[{"raw_affiliation_string":"Delft University of Technology , Delft, Nederland","institution_ids":["https://openalex.org/I98358874"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101938740","display_name":"Fan Mo","orcid":"https://orcid.org/0000-0003-0840-8679"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fan Mo","raw_affiliation_strings":["DBAPPSecurity Ltd , Hangzhou , China"],"affiliations":[{"raw_affiliation_string":"DBAPPSecurity Ltd , Hangzhou , China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100461675","display_name":"Bo Liu","orcid":"https://orcid.org/0000-0002-6615-6601"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Liu","raw_affiliation_strings":["DBAPPSecurity Ltd , Hangzhou , China"],"affiliations":[{"raw_affiliation_string":"DBAPPSecurity Ltd , Hangzhou , China","institution_ids":["https://openalex.org/I45928872"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5082564456"],"corresponding_institution_ids":["https://openalex.org/I170215575"],"apc_list":{"value":2635,"currency":"GBP","value_usd":3232},"apc_paid":null,"fwci":1.9434,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":{"value":0.87943235,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"66","issue":"5","first_page":"1213","last_page":"1227"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7563670873641968},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.7126376032829285},{"id":"https://openalex.org/keywords/plot","display_name":"Plot (graphics)","score":0.5323154330253601},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.5011346340179443},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.47572043538093567},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4391461908817291},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.42732343077659607},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4123002290725708},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3686065673828125},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.32164788246154785},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2868233025074005},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.11915707588195801}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7563670873641968},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.7126376032829285},{"id":"https://openalex.org/C167651023","wikidata":"https://www.wikidata.org/wiki/Q1474611","display_name":"Plot (graphics)","level":2,"score":0.5323154330253601},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.5011346340179443},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.47572043538093567},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4391461908817291},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.42732343077659607},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4123002290725708},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3686065673828125},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32164788246154785},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2868233025074005},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.11915707588195801},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1093/comjnl/bxac008","is_oa":false,"landing_page_url":"https://doi.org/10.1093/comjnl/bxac008","pdf_url":null,"source":{"id":"https://openalex.org/S44643521","display_name":"The Computer Journal","issn_l":"0010-4620","issn":["0010-4620","1460-2067"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The Computer Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6000000238418579}],"awards":[{"id":"https://openalex.org/G4135978206","display_name":null,"funder_award_id":"U1811462","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5214302469","display_name":null,"funder_award_id":"2018YFB0204301","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G7482821243","display_name":null,"funder_award_id":"62072466","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8421753127","display_name":null,"funder_award_id":"ZK19-38","funder_id":"https://openalex.org/F4320324150","funder_display_name":"National University of Defense Technology"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320324150","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W1678356000","https://openalex.org/W2148143831","https://openalex.org/W2282821441","https://openalex.org/W2295598076","https://openalex.org/W2486050448","https://openalex.org/W2537766808","https://openalex.org/W2603584778","https://openalex.org/W2605592668","https://openalex.org/W2743556905","https://openalex.org/W2765793020","https://openalex.org/W2912711574","https://openalex.org/W2915352631","https://openalex.org/W2962858109","https://openalex.org/W2963065250","https://openalex.org/W2963399068","https://openalex.org/W2980759281","https://openalex.org/W2999615587","https://openalex.org/W3091678670","https://openalex.org/W4210531213","https://openalex.org/W4247336883","https://openalex.org/W4255455317","https://openalex.org/W4287391445","https://openalex.org/W4293579972","https://openalex.org/W4295313945","https://openalex.org/W6637404493","https://openalex.org/W6640462745","https://openalex.org/W6662391535","https://openalex.org/W6722226382","https://openalex.org/W6737947904","https://openalex.org/W6745861399","https://openalex.org/W6748281036","https://openalex.org/W6748454275","https://openalex.org/W6752800003","https://openalex.org/W6755438426","https://openalex.org/W6781941833","https://openalex.org/W6786463182","https://openalex.org/W6787937443"],"related_works":["https://openalex.org/W2897156099","https://openalex.org/W2245242553","https://openalex.org/W3041711126","https://openalex.org/W1981338710","https://openalex.org/W2047881532","https://openalex.org/W4390591638","https://openalex.org/W2285795935","https://openalex.org/W2606639950","https://openalex.org/W2100090372","https://openalex.org/W2012531322"],"abstract_inverted_index":{"Abstract":[0],"Traffic":[1],"encrypted":[2,30],"technology":[3],"enables":[4],"Internet":[5],"users":[6],"to":[7,18,60,84,94,97,125,148],"protect":[8],"their":[9],"data":[10],"secrecy,":[11],"but":[12],"it":[13],"also":[14],"brings":[15],"a":[16,52,86,107,196],"challenge":[17],"malicious":[19,46],"package":[20],"detection.":[21],"To":[22],"tackle":[23],"this":[24,69],"issue,":[25],"researchers":[26],"have":[27],"investigated":[28],"into":[29,80],"traffic":[31],"analysis":[32,109],"(ETA)":[33],"in":[34],"recent":[35],"years.":[36],"Existing":[37],"works,":[38],"however,":[39],"only":[40],"focus":[41],"on":[42,141],"the":[43,61,73,127,132,135,142,150,166,169,182,193],"accuracy":[44],"of":[45,66,117,138,185,189],"flow":[47],"identification.":[48],"Using":[49],"ETA":[50,186],"as":[51,93,195],"technical":[53],"black":[54,197],"box,":[55],"they":[56],"pay":[57],"little":[58],"attention":[59],"internal":[62],"details":[63],"and":[64,99,115,130,161,163],"explanation":[65,88,114,133,156,167],"models.":[67],"In":[68],"paper,":[70],"we,":[71],"for":[72,89],"first":[74],"time,":[75],"introduce":[76],"interpretable":[77],"machine":[78],"learning":[79],"ETA.":[81],"We":[82,105,144],"aim":[83],"provide":[85],"reasonable":[87],"detection":[90,128,151,183],"results,":[91],"so":[92],"enable":[95],"one":[96],"understand":[98],"further":[100],"trust":[101],"network":[102],"security":[103],"analysts.":[104],"develop":[106],"complete":[108],"framework,":[110],"named":[111],"DEV-ETA":[112,119],"(detection,":[113],"verification":[116],"ETA).":[118],"applies":[120],"post":[121],"hoc":[122],"interpretation":[123],"methods":[124],"explain":[126,149],"results":[129,175],"verify":[131,165],"using":[134,153],"joint":[136],"distribution":[137,171],"support":[139],"features":[140],"dataset.":[143],"run":[145],"thorough":[146],"experiments":[147],"result":[152,184],"three":[154],"popular":[155],"approaches,":[157],"namely":[158],"SHAP,":[159],"LIME":[160],"MSS,":[162],"we":[164],"via":[168],"feature":[170],"plot.":[172],"The":[173],"experimental":[174],"show":[176],"that":[177],"our":[178],"design":[179],"can":[180],"interpret":[181],"model":[187,194],"instead":[188],"just":[190],"simply":[191],"treating":[192],"box.":[198]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3}],"updated_date":"2026-04-15T08:11:43.952461","created_date":"2025-10-10T00:00:00"}