{"id":"https://openalex.org/W4382338758","doi":"https://doi.org/10.1109/access.2023.3275744","title":"DNS Over HTTPS Detection Using Standard Flow Telemetry","display_name":"DNS Over HTTPS Detection Using Standard Flow Telemetry","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4382338758","doi":"https://doi.org/10.1109/access.2023.3275744"},"language":"en","primary_location":{"id":"doi:10.1109/access.2023.3275744","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3275744","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2023.3275744","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084472511","display_name":"Kamil Je\u0159\u00e1bek","orcid":"https://orcid.org/0000-0002-5317-9222"},"institutions":[{"id":"https://openalex.org/I60587646","display_name":"Brno University of Technology","ror":"https://ror.org/03613d656","country_code":"CZ","type":"education","lineage":["https://openalex.org/I60587646"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Kamil Jerabek","raw_affiliation_strings":["Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic"],"raw_orcid":"https://orcid.org/0000-0002-5317-9222","affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic","institution_ids":["https://openalex.org/I60587646"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088718699","display_name":"Karel Hynek","orcid":"https://orcid.org/0000-0002-8281-618X"},"institutions":[{"id":"https://openalex.org/I54634078","display_name":"CESNET, z\u00e1jmov\u00e9 sdru\u017een\u00ed pr\u00e1vnick\u00fdch osob","ror":"https://ror.org/050dkka69","country_code":"CZ","type":"other","lineage":["https://openalex.org/I54634078"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Karel Hynek","raw_affiliation_strings":["CESNET z.s.p.o, Prague, Czech Republic"],"raw_orcid":"https://orcid.org/0000-0002-8281-618X","affiliations":[{"raw_affiliation_string":"CESNET z.s.p.o, Prague, Czech Republic","institution_ids":["https://openalex.org/I54634078"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001527809","display_name":"Ond\u0159ej Ry\u0161av\u00fd","orcid":"https://orcid.org/0000-0001-9652-6418"},"institutions":[{"id":"https://openalex.org/I60587646","display_name":"Brno University of Technology","ror":"https://ror.org/03613d656","country_code":"CZ","type":"education","lineage":["https://openalex.org/I60587646"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Ondrej Rysavy","raw_affiliation_strings":["Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic"],"raw_orcid":"https://orcid.org/0000-0001-9652-6418","affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic","institution_ids":["https://openalex.org/I60587646"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027524757","display_name":"Ivana Burgetov\u00e1","orcid":"https://orcid.org/0000-0002-9947-9837"},"institutions":[{"id":"https://openalex.org/I60587646","display_name":"Brno University of Technology","ror":"https://ror.org/03613d656","country_code":"CZ","type":"education","lineage":["https://openalex.org/I60587646"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Ivana Burgetova","raw_affiliation_strings":["Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic"],"raw_orcid":"https://orcid.org/0000-0002-9947-9837","affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic","institution_ids":["https://openalex.org/I60587646"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2075,"currency":"USD","value_usd":2075},"apc_paid":{"value":2075,"currency":"USD","value_usd":2075},"fwci":2.8234,"has_fulltext":true,"cited_by_count":21,"citation_normalized_percentile":{"value":0.90511129,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"11","issue":null,"first_page":"50000","last_page":"50012"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.9894999861717224,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/telemetry","display_name":"Telemetry","score":0.8867343664169312},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.628266453742981},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.17002269625663757}],"concepts":[{"id":"https://openalex.org/C183121708","wikidata":"https://www.wikidata.org/wiki/Q209867","display_name":"Telemetry","level":2,"score":0.8867343664169312},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.628266453742981},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.17002269625663757}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/access.2023.3275744","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3275744","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:dspace.vut.cz:11012/244289","is_oa":true,"landing_page_url":"http://hdl.handle.net/11012/244289","pdf_url":"https://dspace.vut.cz/bitstreams/e6edd46e-2b33-4c59-af3a-dc775752b864/download","source":{"id":"https://openalex.org/S4306400317","display_name":"Brno University of Technology Digital Library (Brno University of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I60587646","host_organization_name":"Brno University of Technology","host_organization_lineage":["https://openalex.org/I60587646"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"article"},{"id":"pmh:oai:doaj.org/article:eb27b8eb74df419689c7c6f94e203369","is_oa":true,"landing_page_url":"https://doaj.org/article/eb27b8eb74df419689c7c6f94e203369","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 11, Pp 50000-50012 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2023.3275744","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3275744","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2276189206","display_name":null,"funder_award_id":"SGS23/207/OHK3/3T/18","funder_id":"https://openalex.org/F4320309972","funder_display_name":"\u010cesk\u00e9 Vysok\u00e9 U\u010den\u00ed Technick\u00e9 v Praze"},{"id":"https://openalex.org/G388411615","display_name":null,"funder_award_id":"FW03010099","funder_id":"https://openalex.org/F4320315323","funder_display_name":"Technology Agency of the Czech Republic"},{"id":"https://openalex.org/G5611503438","display_name":"Flow-based Encrypted Traffic Analysis","funder_award_id":"VJ02010024","funder_id":"https://openalex.org/F4320311333","funder_display_name":"Ministerstvo Vnitra \u010cesk\u00e9 Republiky"}],"funders":[{"id":"https://openalex.org/F4320309972","display_name":"\u010cesk\u00e9 Vysok\u00e9 U\u010den\u00ed Technick\u00e9 v Praze","ror":"https://ror.org/03kqpb082"},{"id":"https://openalex.org/F4320311333","display_name":"Ministerstvo Vnitra \u010cesk\u00e9 Republiky","ror":"https://ror.org/05w1nn565"},{"id":"https://openalex.org/F4320315323","display_name":"Technology Agency of the Czech Republic","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W37081517","https://openalex.org/W40890042","https://openalex.org/W1986497098","https://openalex.org/W2053550965","https://openalex.org/W2134111523","https://openalex.org/W2140190241","https://openalex.org/W2187970900","https://openalex.org/W2738106943","https://openalex.org/W2788417557","https://openalex.org/W2806616617","https://openalex.org/W2809684781","https://openalex.org/W2969259791","https://openalex.org/W2981860933","https://openalex.org/W3025921802","https://openalex.org/W3080354144","https://openalex.org/W3080730509","https://openalex.org/W3105087971","https://openalex.org/W3199534252","https://openalex.org/W3204606269","https://openalex.org/W4206837062","https://openalex.org/W4213362721","https://openalex.org/W4214533612","https://openalex.org/W4224922558","https://openalex.org/W4237792908","https://openalex.org/W4241379226","https://openalex.org/W4253269957","https://openalex.org/W4281687072","https://openalex.org/W4285160154","https://openalex.org/W4285184946","https://openalex.org/W4296881942","https://openalex.org/W4309779554","https://openalex.org/W4321487091","https://openalex.org/W4327767779","https://openalex.org/W6764929927","https://openalex.org/W6810813897","https://openalex.org/W7000447106"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2070863773","https://openalex.org/W4212896802","https://openalex.org/W2503337970","https://openalex.org/W2056771637","https://openalex.org/W748047311","https://openalex.org/W2359918844","https://openalex.org/W4298110012"],"abstract_inverted_index":{"The":[0,135,159],"aim":[1],"of":[2,137,177,183],"DNS":[3],"over":[4],"HTTPS":[5,60],"(DoH)":[6],"is":[7,35,47,54],"to":[8,20,37,42,50,56,126],"enhance":[9],"users\u2019":[10],"privacy":[11],"by":[12],"encrypting":[13],"DNS.":[14,29],"However,":[15],"it":[16,34,53],"also":[17,141],"enables":[18,142],"adversaries":[19],"bypass":[21],"security":[22],"mechanisms":[23],"that":[24,80,85,117],"rely":[25,74],"on":[26,75,90],"inspecting":[27],"unencrypted":[28],"Therefore":[30,109],"in":[31,145],"some":[32],"networks,":[33],"crucial":[36],"detect":[38,127],"and":[39,122,166,171,179],"block":[40],"DoH":[41,46,70,115,128],"maintain":[43],"security.":[44],"Unfortunately,":[45],"particularly":[48],"challenging":[49],"detect,":[51],"because":[52],"designed":[55],"blend":[57],"into":[58,106],"regular":[59],"traffic.":[61],"So":[62],"far,":[63],"there":[64],"have":[65],"been":[66],"numerous":[67],"proposals":[68],"for":[69],"detection;":[71],"however,":[72],"they":[73],"specialized":[76],"flow":[77,132,139],"monitoring":[78,133],"software":[79],"can":[81],"export":[82],"complex":[83],"features":[84,140],"cannot":[86],"be":[87],"often":[88],"computed":[89],"the":[91],"running":[92],"sequence":[93],"or":[94,157],"suffer":[95],"from":[96],"low":[97],"accuracy.":[98],"These":[99],"properties":[100],"significantly":[101],"limit":[102],"their":[103],"mass":[104],"deployment":[105,144],"real-world":[107,167],"environments.":[108],"this":[110],"study":[111],"proposes":[112],"a":[113,173],"novel":[114],"detector":[116],"uses":[118],"IP-based,":[119],"machine":[120],"learning,":[121],"active":[123],"probing":[124],"techniques":[125],"effectively":[129],"with":[130,149,185],"standard":[131],"software.":[134],"use":[136],"classical":[138],"its":[143],"any":[146],"network":[147,169],"infrastructure":[148],"flow-monitoring":[150],"appliances":[151],"such":[152],"as":[153],"intelligent":[154],"switches,":[155],"firewalls,":[156],"routers.":[158],"proposed":[160],"approach":[161],"was":[162],"tested":[163],"using":[164],"lab-created":[165],"ISP-based":[168],"data":[170],"achieved":[172],"high":[174],"classification":[175],"accuracy":[176],"0.999":[178],"an":[180],"F1":[181],"score":[182],"0.998":[184],"no":[186],"false":[187],"positives.":[188]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":4}],"updated_date":"2026-08-24T07:32:12.397491","created_date":"2025-10-10T00:00:00"}