{"id":"https://openalex.org/W7139133387","doi":"https://doi.org/10.1109/globecom59602.2025.11432425","title":"Toward Fingerprinting Encrypted C2 Traffic in the Data Plane","display_name":"Toward Fingerprinting Encrypted C2 Traffic in the Data Plane","publication_year":2025,"publication_date":"2025-12-08","ids":{"openalex":"https://openalex.org/W7139133387","doi":"https://doi.org/10.1109/globecom59602.2025.11432425"},"language":null,"primary_location":{"id":"doi:10.1109/globecom59602.2025.11432425","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom59602.2025.11432425","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2025 - 2025 IEEE Global Communications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://scholarcommons.sc.edu/context/aiday2026/article/1016/viewcontent/COMPLIANT_toward_fingerprinting_encrypted_c2_traffic_in_Ali_Mazloum.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046451709","display_name":"Ali Mazloum","orcid":"https://orcid.org/0000-0002-5982-8393"},"institutions":[{"id":"https://openalex.org/I155781252","display_name":"University of South Carolina","ror":"https://ror.org/02b6qw903","country_code":"US","type":"education","lineage":["https://openalex.org/I155781252"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Ali Mazloum","raw_affiliation_strings":["University of South Carolina,Molinaroli College of Engineering and Computing,Columbia,U.S.A"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of South Carolina,Molinaroli College of Engineering and Computing,Columbia,U.S.A","institution_ids":["https://openalex.org/I155781252"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002648936","display_name":"Elie Kfoury","orcid":"https://orcid.org/0000-0003-1236-6168"},"institutions":[{"id":"https://openalex.org/I155781252","display_name":"University of South Carolina","ror":"https://ror.org/02b6qw903","country_code":"US","type":"education","lineage":["https://openalex.org/I155781252"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Elie Kfoury","raw_affiliation_strings":["University of South Carolina,Molinaroli College of Engineering and Computing,Columbia,U.S.A"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of South Carolina,Molinaroli College of Engineering and Computing,Columbia,U.S.A","institution_ids":["https://openalex.org/I155781252"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074094953","display_name":"Ali AlSabeh","orcid":"https://orcid.org/0000-0001-7063-4840"},"institutions":[{"id":"https://openalex.org/I8645926","display_name":"University of South Carolina Aiken","ror":"https://ror.org/02d9k9g58","country_code":"US","type":"education","lineage":["https://openalex.org/I8645926"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ali AlSabeh","raw_affiliation_strings":["University of South Carolina,College of Sciences and Engineering,Aiken,U.S.A"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of South Carolina,College of Sciences and Engineering,Aiken,U.S.A","institution_ids":["https://openalex.org/I8645926"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010853777","display_name":"Jose Gomez","orcid":"https://orcid.org/0009-0005-2705-7095"},"institutions":[{"id":"https://openalex.org/I149471917","display_name":"Fort Lewis College","ror":"https://ror.org/00aad7q36","country_code":"US","type":"education","lineage":["https://openalex.org/I149471917"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jose Gomez","raw_affiliation_strings":["Fort Lewis College,Katz School of Business,Durango,U.S.A"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fort Lewis College,Katz School of Business,Durango,U.S.A","institution_ids":["https://openalex.org/I149471917"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058298121","display_name":"Jorge Crichigno","orcid":"https://orcid.org/0000-0002-6705-5300"},"institutions":[{"id":"https://openalex.org/I155781252","display_name":"University of South Carolina","ror":"https://ror.org/02b6qw903","country_code":"US","type":"education","lineage":["https://openalex.org/I155781252"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jorge Crichigno","raw_affiliation_strings":["University of South Carolina,Molinaroli College of Engineering and Computing,Columbia,U.S.A"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of South Carolina,Molinaroli College of Engineering and Computing,Columbia,U.S.A","institution_ids":["https://openalex.org/I155781252"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5046451709"],"corresponding_institution_ids":["https://openalex.org/I155781252"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.85603484,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3311","last_page":"3316"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.4284999966621399,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.4284999966621399,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11498","display_name":"Security in Wireless Sensor Networks","score":0.09709999710321426,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":0.08869999647140503,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.47909998893737793},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.30140000581741333},{"id":"https://openalex.org/keywords/plane","display_name":"Plane (geometry)","score":0.30059999227523804},{"id":"https://openalex.org/keywords/intersection","display_name":"Intersection (aeronautics)","score":0.2896000146865845},{"id":"https://openalex.org/keywords/term","display_name":"Term (time)","score":0.26440000534057617}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5824000239372253},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.47909998893737793},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.34380000829696655},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.3336000144481659},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.30140000581741333},{"id":"https://openalex.org/C17825722","wikidata":"https://www.wikidata.org/wiki/Q17285","display_name":"Plane (geometry)","level":2,"score":0.30059999227523804},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.29179999232292175},{"id":"https://openalex.org/C64543145","wikidata":"https://www.wikidata.org/wiki/Q162942","display_name":"Intersection (aeronautics)","level":2,"score":0.2896000146865845},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27970001101493835},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.26440000534057617},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.2574000060558319},{"id":"https://openalex.org/C45235069","wikidata":"https://www.wikidata.org/wiki/Q278425","display_name":"Table (database)","level":2,"score":0.2563000023365021}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/globecom59602.2025.11432425","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom59602.2025.11432425","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2025 - 2025 IEEE Global Communications Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:scholarcommons.sc.edu:aiday2026-1016","is_oa":true,"landing_page_url":"https://scholarcommons.sc.edu/aiday2026/18","pdf_url":"https://scholarcommons.sc.edu/context/aiday2026/article/1016/viewcontent/COMPLIANT_toward_fingerprinting_encrypted_c2_traffic_in_Ali_Mazloum.pdf","source":{"id":"https://openalex.org/S4377196354","display_name":"Scholar Commons (University of South Carolina)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I155781252","host_organization_name":"University of South Carolina","host_organization_lineage":["https://openalex.org/I155781252"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"AI Day 2026","raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:scholarcommons.sc.edu:aiday2026-1016","is_oa":true,"landing_page_url":"https://scholarcommons.sc.edu/aiday2026/18","pdf_url":"https://scholarcommons.sc.edu/context/aiday2026/article/1016/viewcontent/COMPLIANT_toward_fingerprinting_encrypted_c2_traffic_in_Ali_Mazloum.pdf","source":{"id":"https://openalex.org/S4377196354","display_name":"Scholar Commons (University of South Carolina)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I155781252","host_organization_name":"University of South Carolina","host_organization_lineage":["https://openalex.org/I155781252"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"AI Day 2026","raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2197388950","display_name":null,"funder_award_id":"2346726","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7178354900","display_name":null,"funder_award_id":"2403360","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7139133387.pdf","grobid_xml":"https://content.openalex.org/works/W7139133387.grobid-xml"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W2731865152","https://openalex.org/W2904027722","https://openalex.org/W2919493784","https://openalex.org/W3045573694","https://openalex.org/W3105087971","https://openalex.org/W3127353117","https://openalex.org/W4210984003","https://openalex.org/W4366981468","https://openalex.org/W4396987591","https://openalex.org/W4400233536","https://openalex.org/W4402957849","https://openalex.org/W4405836406","https://openalex.org/W4412445560","https://openalex.org/W4414539269"],"related_works":[],"abstract_inverted_index":{"\u2022":[0,18,35,45,62,88,105,117],"Transport":[1],"Layer":[2],"Security":[3],"(TLS)":[4],"is":[5,72],"the":[6,16,56,64,69],"dominant":[7],"protocol":[8],"that":[9,49,81],"enables":[10],"users":[11,51],"to":[12,24,91,100],"securely":[13],"interact":[14],"with":[15,124],"Internet.":[17],"Threat":[19],"actors":[20],"are":[21,39],"using":[22],"TLS":[23,42],"bypass":[25,77],"traditional":[26],"cybersecurity":[27],"defenses":[28],"like":[29],"firewalls":[30],"and":[31,58,68],"intrusion":[32],"detection":[33,122],"systems.":[34],"Modern":[36],"malware":[37,47,67],"attacks":[38],"hiding":[40],"behind":[41],"secure":[43],"channels.":[44],"Many":[46],"families":[48],"infect":[50],"receive":[52],"malicious":[53],"instructions":[54],"from":[55],"command":[57],"control":[59],"(C2)":[60],"server.":[61],"As":[63],"communication":[65],"between":[66],"C2":[70,103],"server":[71],"encrypted,":[73],"it":[74],"can":[75],"easily":[76],"modern":[78],"security":[79],"appliances":[80],"rely":[82],"on":[83],"deep":[84],"packet":[85],"inspection":[86],"(DPI).":[87],"In":[89],"response":[90],"this":[92,94],"threat,":[93],"project":[95,107],"aims":[96],"at":[97],"utilizing":[98],"ML":[99,111],"identify":[101],"encrypted":[102],"communication.":[104],"The":[106,118],"implements":[108],"a":[109,125],"distributed":[110],"model":[112],"over":[113],"two":[114],"hardware":[115],"accelerators.":[116],"system":[119],"achieves":[120],"99.3%":[121],"accuracy":[123],"microsecond-level":[126],"processing":[127],"latency.":[128]},"counts_by_year":[],"updated_date":"2026-05-01T08:36:08.643496","created_date":"2026-03-20T00:00:00"}