{"id":"https://openalex.org/W4281383857","doi":"https://doi.org/10.1109/cscwd54268.2022.9776029","title":"Design of an Autoencoder-based Anomaly Detection for the DoH traffic System","display_name":"Design of an Autoencoder-based Anomaly Detection for the DoH traffic System","publication_year":2022,"publication_date":"2022-05-04","ids":{"openalex":"https://openalex.org/W4281383857","doi":"https://doi.org/10.1109/cscwd54268.2022.9776029"},"language":"en","primary_location":{"id":"doi:10.1109/cscwd54268.2022.9776029","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cscwd54268.2022.9776029","pdf_url":null,"source":{"id":"https://openalex.org/S4363607909","display_name":"2022 IEEE 25th International Conference on Computer Supported Cooperative Work in Design (CSCWD)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 25th International Conference on Computer Supported Cooperative Work in Design (CSCWD)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078060193","display_name":"Xinhui Du","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinhui Du","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China,100093","School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China,100093","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101762197","display_name":"Dongxin Liu","orcid":"https://orcid.org/0000-0003-4958-6949"},"institutions":[{"id":"https://openalex.org/I4210136246","display_name":"China Telecom (China)","ror":"https://ror.org/03jgnzt20","country_code":"CN","type":"company","lineage":["https://openalex.org/I4210136246"]},{"id":"https://openalex.org/I4387153335","display_name":"China Telecom","ror":"https://ror.org/05p67dv18","country_code":null,"type":"company","lineage":["https://openalex.org/I4387153335"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongxin Liu","raw_affiliation_strings":["Guangdong Research Institute of China Telecom Corporation Limited,Guangzhou,China,510630"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangdong Research Institute of China Telecom Corporation Limited,Guangzhou,China,510630","institution_ids":["https://openalex.org/I4210136246","https://openalex.org/I4387153335"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100712879","display_name":"Shuai Ding","orcid":"https://orcid.org/0000-0002-8384-1950"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shuai Ding","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China,100093","School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China,100093","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhongji Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I15089104","display_name":"China Aerospace Science and Industry Corporation (China)","ror":"https://ror.org/0523vvf33","country_code":"CN","type":"company","lineage":["https://openalex.org/I15089104"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhongji Liu","raw_affiliation_strings":["Second Academy of China Aerospace and Industry Corporation,Institute 706,Beijing,China,100854"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Second Academy of China Aerospace and Industry Corporation,Institute 706,Beijing,China,100854","institution_ids":["https://openalex.org/I15089104"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101906767","display_name":"Xiaowei Yuan","orcid":"https://orcid.org/0000-0003-0841-266X"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaowei Yuan","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China,100093","School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China,100093","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100359041","display_name":"Tong Li","orcid":"https://orcid.org/0000-0002-8881-0037"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tong Li","raw_affiliation_strings":["Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China,100093"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Chinese Academy of Sciences,Institute of Information Engineering,Beijing,China,100093","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054703846","display_name":"Haojiang Deng","orcid":"https://orcid.org/0000-0002-3370-7446"},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haojiang Deng","raw_affiliation_strings":["Peng Cheng Laboratory,Shenzhen,China,518000"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Peng Cheng Laboratory,Shenzhen,China,518000","institution_ids":["https://openalex.org/I4210136793"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"763","last_page":"768"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8046231269836426},{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.7725943326950073},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7350659370422363},{"id":"https://openalex.org/keywords/ethernet","display_name":"Ethernet","score":0.6452661752700806},{"id":"https://openalex.org/keywords/workload","display_name":"Workload","score":0.6348897814750671},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5785977244377136},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.44994133710861206},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4112424850463867},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3868650197982788},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.29544806480407715},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.25946009159088135},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.16423848271369934},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1425071656703949}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8046231269836426},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.7725943326950073},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7350659370422363},{"id":"https://openalex.org/C172173386","wikidata":"https://www.wikidata.org/wiki/Q79984","display_name":"Ethernet","level":2,"score":0.6452661752700806},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.6348897814750671},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5785977244377136},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.44994133710861206},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4112424850463867},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3868650197982788},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.29544806480407715},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.25946009159088135},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.16423848271369934},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1425071656703949},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cscwd54268.2022.9776029","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cscwd54268.2022.9776029","pdf_url":null,"source":{"id":"https://openalex.org/S4363607909","display_name":"2022 IEEE 25th International Conference on Computer Supported Cooperative Work in Design (CSCWD)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 25th International Conference on Computer Supported Cooperative Work in Design (CSCWD)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321133","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W179875071","https://openalex.org/W2064675550","https://openalex.org/W2204904589","https://openalex.org/W2754468074","https://openalex.org/W2783007605","https://openalex.org/W2806616617","https://openalex.org/W2833324965","https://openalex.org/W2911301616","https://openalex.org/W2941652429","https://openalex.org/W2963379686","https://openalex.org/W2965981069","https://openalex.org/W3039623901","https://openalex.org/W3080354144","https://openalex.org/W3080730509","https://openalex.org/W3105087971","https://openalex.org/W3125745247","https://openalex.org/W3170851865","https://openalex.org/W4200586132","https://openalex.org/W4385245566","https://openalex.org/W6739901393","https://openalex.org/W6762388960"],"related_works":["https://openalex.org/W3186512740","https://openalex.org/W3017266184","https://openalex.org/W2918377632","https://openalex.org/W3194885736","https://openalex.org/W3046391934","https://openalex.org/W4363671829","https://openalex.org/W2806741695","https://openalex.org/W3210364259","https://openalex.org/W4290647774","https://openalex.org/W3189286258"],"abstract_inverted_index":{"DNS":[0,32,40],"has":[1,23,167],"encountered":[2],"complex":[3],"and":[4,70,77,114,137,151,174],"diversified":[5],"attacks":[6],"over":[7],"the":[8,16,37,56,89,105,140,143,177],"years":[9],"due":[10],"to":[11,26,85,155],"its":[12],"special":[13],"status":[14],"on":[15,125],"Internet.":[17],"The":[18,118],"concept":[19],"of":[20,39,59,64,110],"DNS-over-HTTPS":[21],"(DoH)":[22],"been":[24],"proposed":[25],"protect":[27],"user":[28],"privacy":[29],"by":[30],"encapsulating":[31],"into":[33],"HTTPS,":[34],"which":[35,74,127],"increases":[36],"difficulty":[38],"tunnel":[41],"detection":[42,57],"but":[43],"also":[44],"faces":[45],"some":[46],"new":[47],"attacks.":[48],"In":[49,91],"recent":[50],"years,":[51],"many":[52],"researchers":[53],"have":[54],"discussed":[55],"methods":[58],"DoH":[60,106],"tunnel.":[61],"However,":[62],"most":[63],"them":[65],"need":[66],"large-scale":[67],"labeled":[68],"datasets":[69],"extract":[71],"statistical":[72],"features,":[73],"is":[75,83,122],"time-consuming":[76],"costs":[78],"immense":[79],"manpower,":[80],"so":[81],"it":[82,175],"impractical":[84],"be":[86],"used":[87,148],"in":[88,132],"real-world.":[90],"this":[92],"paper,":[93],"we":[94,147],"developed":[95,123],"a":[96,133],"system":[97],"called":[98],"AADDS:":[99],"an":[100,157],"Autoencoder-based":[101],"Anomaly":[102,115,144],"Detection":[103,116,145],"for":[104],"traffic":[107],"System":[108],"consists":[109],"Traffic":[111,119],"Capture":[112,120],"module":[113,121],"module.":[117],"based":[124],"nff-go,":[126],"can":[128],"collect":[129],"features":[130],"stably":[131],"high-speed":[134],"Ethernet":[135],"environment":[136],"greatly":[138],"reduce":[139],"workload.":[141],"For":[142],"module,":[146],"bidirectional":[149],"Long":[150],"Short-Term":[152],"Memory":[153],"(Bi-LSTM)":[154],"build":[156],"autoencoder":[158],"network.":[159],"Several":[160],"essential":[161],"experiments":[162],"proved":[163],"that":[164],"our":[165],"method":[166],"fewer":[168],"parameters":[169],"while":[170],"ensuring":[171],"higher":[172],"accuracy,":[173],"outperforms":[176],"state-of-the-art":[178],"methods.":[179]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}