{"id":"https://openalex.org/W4309156450","doi":"https://doi.org/10.1109/apcc55198.2022.9943677","title":"Training and Validating of Advanced Flow-Based Network Traffic Classifiers under Real-World Conditions","display_name":"Training and Validating of Advanced Flow-Based Network Traffic Classifiers under Real-World Conditions","publication_year":2022,"publication_date":"2022-10-19","ids":{"openalex":"https://openalex.org/W4309156450","doi":"https://doi.org/10.1109/apcc55198.2022.9943677"},"language":"en","primary_location":{"id":"doi:10.1109/apcc55198.2022.9943677","is_oa":false,"landing_page_url":"https://doi.org/10.1109/apcc55198.2022.9943677","pdf_url":null,"source":{"id":"https://openalex.org/S4363608215","display_name":"2022 27th Asia Pacific Conference on Communications (APCC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 27th Asia Pacific Conference on Communications (APCC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5062480203","display_name":"Sebastian Karius","orcid":"https://orcid.org/0009-0009-7698-7554"},"institutions":[{"id":"https://openalex.org/I18860807","display_name":"Wittenberg University","ror":"https://ror.org/04a23br85","country_code":"US","type":"education","lineage":["https://openalex.org/I18860807"]},{"id":"https://openalex.org/I68956291","display_name":"Martin Luther University Halle-Wittenberg","ror":"https://ror.org/05gqaka33","country_code":"DE","type":"education","lineage":["https://openalex.org/I68956291"]}],"countries":["DE","US"],"is_corresponding":false,"raw_author_name":"Sebastian Karius","raw_affiliation_strings":["MLU Halle-Wittenberg,Institute for Computer Science,Halle,Saale,Germany","Institute for Computer Science, MLU Halle-Wittenberg, Halle, Saale, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MLU Halle-Wittenberg,Institute for Computer Science,Halle,Saale,Germany","institution_ids":["https://openalex.org/I18860807","https://openalex.org/I68956291"]},{"raw_affiliation_string":"Institute for Computer Science, MLU Halle-Wittenberg, Halle, Saale, Germany","institution_ids":["https://openalex.org/I68956291"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023881449","display_name":"Mandy Kn\u00f6chel","orcid":"https://orcid.org/0009-0000-6469-9947"},"institutions":[{"id":"https://openalex.org/I18860807","display_name":"Wittenberg University","ror":"https://ror.org/04a23br85","country_code":"US","type":"education","lineage":["https://openalex.org/I18860807"]},{"id":"https://openalex.org/I68956291","display_name":"Martin Luther University Halle-Wittenberg","ror":"https://ror.org/05gqaka33","country_code":"DE","type":"education","lineage":["https://openalex.org/I68956291"]}],"countries":["DE","US"],"is_corresponding":false,"raw_author_name":"Mandy Kn\u00f6chel","raw_affiliation_strings":["MLU Halle-Wittenberg,Institute for Computer Science,Halle,Saale,Germany","Institute for Computer Science, MLU Halle-Wittenberg, Halle, Saale, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MLU Halle-Wittenberg,Institute for Computer Science,Halle,Saale,Germany","institution_ids":["https://openalex.org/I18860807","https://openalex.org/I68956291"]},{"raw_affiliation_string":"Institute for Computer Science, MLU Halle-Wittenberg, Halle, Saale, Germany","institution_ids":["https://openalex.org/I68956291"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080802964","display_name":"Sandro Wefel","orcid":null},"institutions":[{"id":"https://openalex.org/I18860807","display_name":"Wittenberg University","ror":"https://ror.org/04a23br85","country_code":"US","type":"education","lineage":["https://openalex.org/I18860807"]},{"id":"https://openalex.org/I68956291","display_name":"Martin Luther University Halle-Wittenberg","ror":"https://ror.org/05gqaka33","country_code":"DE","type":"education","lineage":["https://openalex.org/I68956291"]}],"countries":["DE","US"],"is_corresponding":false,"raw_author_name":"Sandro Wefel","raw_affiliation_strings":["MLU Halle-Wittenberg,Institute for Computer Science,Halle,Saale,Germany","Institute for Computer Science, MLU Halle-Wittenberg, Halle, Saale, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MLU Halle-Wittenberg,Institute for Computer Science,Halle,Saale,Germany","institution_ids":["https://openalex.org/I18860807","https://openalex.org/I68956291"]},{"raw_affiliation_string":"Institute for Computer Science, MLU Halle-Wittenberg, Halle, Saale, Germany","institution_ids":["https://openalex.org/I68956291"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.1687,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.43197233,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"126","last_page":"131"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8066916465759277},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.7305422425270081},{"id":"https://openalex.org/keywords/test-data","display_name":"Test data","score":0.5820769667625427},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5736693143844604},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5623119473457336},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.5045000314712524},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4892280101776123},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.48375701904296875},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4800780415534973},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.4760477542877197},{"id":"https://openalex.org/keywords/quality-of-service","display_name":"Quality of service","score":0.46147510409355164},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4421650469303131},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.21512940526008606},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.17452841997146606}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8066916465759277},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.7305422425270081},{"id":"https://openalex.org/C16910744","wikidata":"https://www.wikidata.org/wiki/Q7705759","display_name":"Test data","level":2,"score":0.5820769667625427},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5736693143844604},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5623119473457336},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.5045000314712524},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4892280101776123},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48375701904296875},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4800780415534973},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.4760477542877197},{"id":"https://openalex.org/C5119721","wikidata":"https://www.wikidata.org/wiki/Q220501","display_name":"Quality of service","level":2,"score":0.46147510409355164},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4421650469303131},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.21512940526008606},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.17452841997146606},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/apcc55198.2022.9943677","is_oa":false,"landing_page_url":"https://doi.org/10.1109/apcc55198.2022.9943677","pdf_url":null,"source":{"id":"https://openalex.org/S4363608215","display_name":"2022 27th Asia Pacific Conference on Communications (APCC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 27th Asia Pacific Conference on Communications (APCC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W1524496078","https://openalex.org/W1918274310","https://openalex.org/W1981780459","https://openalex.org/W2101234009","https://openalex.org/W2110531057","https://openalex.org/W2190207511","https://openalex.org/W2750674396","https://openalex.org/W2963516518","https://openalex.org/W3009698636","https://openalex.org/W3034813965","https://openalex.org/W6631506987","https://openalex.org/W6640164566","https://openalex.org/W6645959102","https://openalex.org/W6676618411"],"related_works":["https://openalex.org/W2171331105","https://openalex.org/W209733029","https://openalex.org/W2891480213","https://openalex.org/W3118953353","https://openalex.org/W2158542502","https://openalex.org/W1997978958","https://openalex.org/W133774893","https://openalex.org/W2099971677","https://openalex.org/W2250522181","https://openalex.org/W2615667245"],"abstract_inverted_index":{"Robust":[0],"network":[1,36,77,165,206],"traffic":[2,37,207],"classification":[3],"(NTC)":[4],"is":[5,38,187,200],"an":[6],"essential":[7],"component":[8],"of":[9,20,122,148,156],"intrusion":[10,13],"detection":[11],"and":[12,56,132,152],"prevention":[14],"systems":[15],"as":[16,18,110,112],"well":[17,111],"quality":[19,186],"service":[21],"applications.":[22],"Modern":[23],"NTCs":[24],"use":[25],"flow-based":[26,42],"methods":[27,43],"to":[28,73,87,172,202],"either":[29],"support":[30],"or":[31],"replace":[32],"single-packet-based":[33],"methods,":[34],"since":[35],"usually":[39,54],"encrypted.":[40],"The":[41,115],"are":[44,53,170],"often":[45],"implemented":[46],"using":[47,58],"neural":[48,51,76,90,164],"networks.":[49],"These":[50],"networks":[52],"trained":[55],"tested":[57,211],"the":[59,70,75,84,89,107,145,149,153,157,174,185,192,209],"same":[60],"dataset.":[61],"We":[62,160],"propose":[63],"a":[64,80,96,100,120,140],"new":[65],"testing":[66,158],"method":[67,195],"in":[68,176,208],"which":[69],"data":[71,85,116,127,134,151],"used":[72,86,95,129,136],"test":[74,178],"occurs":[78],"at":[79],"later":[81],"time":[82,142],"than":[83],"train":[88],"network.":[91],"For":[92],"this,":[93],"we":[94],"dataset":[97],"recorded":[98,118],"by":[99],"honeypod":[101],"that":[102,162,191],"captured":[103],"attacks,":[104],"particularly":[105],"on":[106],"SSH":[108],"service,":[109],"authorized":[113,183],"logins.":[114],"was":[117,128,135],"over":[119,123],"period":[121],"two":[124],"years.":[125],"Past":[126],"for":[130,137,168,182,196],"training":[131,150],"recent":[133],"testing,":[138],"with":[139],"large":[141],"gap":[143],"between":[144],"last":[146],"datapoint":[147,155],"first":[154],"data.":[159],"show":[161],"existing":[163],"models":[166,199],"developed":[167],"NTC":[169],"able":[171],"classify":[173,204],"attacks":[175],"our":[177,197],"scenario":[179],"equally":[180],"well,":[181],"accesses":[184],"worse.":[188],"This":[189],"shows":[190],"proposed":[193],"learning":[194],"chosen":[198],"sufficient":[201],"robustly":[203],"future":[205],"scenarios":[210],"here.":[212]},"counts_by_year":[{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}