{"id":"https://openalex.org/W4402352858","doi":"https://doi.org/10.1109/ijcnn60899.2024.10650873","title":"A Knowledge Distillation-Driven Lightweight CNN Model for Detecting Malicious Encrypted Network Traffic","display_name":"A Knowledge Distillation-Driven Lightweight CNN Model for Detecting Malicious Encrypted Network Traffic","publication_year":2024,"publication_date":"2024-06-30","ids":{"openalex":"https://openalex.org/W4402352858","doi":"https://doi.org/10.1109/ijcnn60899.2024.10650873"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn60899.2024.10650873","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn60899.2024.10650873","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111319861","display_name":"Yuecheng Wen","orcid":null},"institutions":[{"id":"https://openalex.org/I152269853","display_name":"Qilu University of Technology","ror":"https://ror.org/04hyzq608","country_code":"CN","type":"education","lineage":["https://openalex.org/I152269853"]},{"id":"https://openalex.org/I4210142748","display_name":"Shandong Academy of Sciences","ror":"https://ror.org/04y8d6y55","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210142748"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuecheng Wen","raw_affiliation_strings":["Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China","institution_ids":["https://openalex.org/I152269853","https://openalex.org/I4210142748"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102924129","display_name":"Xiaohui Han","orcid":"https://orcid.org/0000-0002-5883-9218"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiaohui Han","raw_affiliation_strings":["Quancheng Provincial Laboratory,Jinan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Quancheng Provincial Laboratory,Jinan,China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110956660","display_name":"Wenbo Zuo","orcid":null},"institutions":[{"id":"https://openalex.org/I152269853","display_name":"Qilu University of Technology","ror":"https://ror.org/04hyzq608","country_code":"CN","type":"education","lineage":["https://openalex.org/I152269853"]},{"id":"https://openalex.org/I4210142748","display_name":"Shandong Academy of Sciences","ror":"https://ror.org/04y8d6y55","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210142748"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenbo Zuo","raw_affiliation_strings":["Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China","institution_ids":["https://openalex.org/I152269853","https://openalex.org/I4210142748"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058829648","display_name":"Weihua Liu","orcid":"https://orcid.org/0000-0002-2091-7137"},"institutions":[{"id":"https://openalex.org/I152269853","display_name":"Qilu University of Technology","ror":"https://ror.org/04hyzq608","country_code":"CN","type":"education","lineage":["https://openalex.org/I152269853"]},{"id":"https://openalex.org/I4210142748","display_name":"Shandong Academy of Sciences","ror":"https://ror.org/04y8d6y55","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210142748"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weihua Liu","raw_affiliation_strings":["Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China","institution_ids":["https://openalex.org/I152269853","https://openalex.org/I4210142748"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6109,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.73807851,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7640378475189209},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.7200332880020142},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5051634907722473},{"id":"https://openalex.org/keywords/distillation","display_name":"Distillation","score":0.4696231186389923},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3914211690425873},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3587827682495117}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7640378475189209},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.7200332880020142},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5051634907722473},{"id":"https://openalex.org/C204030448","wikidata":"https://www.wikidata.org/wiki/Q101017","display_name":"Distillation","level":2,"score":0.4696231186389923},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3914211690425873},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3587827682495117},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ijcnn60899.2024.10650873","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn60899.2024.10650873","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320328720","display_name":"Qilu University of Technology","ror":"https://ror.org/04hyzq608"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W1821462560","https://openalex.org/W2054440265","https://openalex.org/W2062805799","https://openalex.org/W2194775991","https://openalex.org/W2743678626","https://openalex.org/W2783323081","https://openalex.org/W2883780447","https://openalex.org/W2911301616","https://openalex.org/W2912924201","https://openalex.org/W2919493784","https://openalex.org/W2963125010","https://openalex.org/W2963140444","https://openalex.org/W2982083293","https://openalex.org/W2996970889","https://openalex.org/W2997006708","https://openalex.org/W3016479063","https://openalex.org/W3034368386","https://openalex.org/W3034756453","https://openalex.org/W3036573907","https://openalex.org/W3091014823","https://openalex.org/W3094487067","https://openalex.org/W3127084347","https://openalex.org/W3138154797","https://openalex.org/W3169233583","https://openalex.org/W3169273186","https://openalex.org/W3173170122","https://openalex.org/W3200781567","https://openalex.org/W4210991982","https://openalex.org/W4224315052","https://openalex.org/W4283068901","https://openalex.org/W4285133995","https://openalex.org/W4312767053","https://openalex.org/W4385562531","https://openalex.org/W4387055849","https://openalex.org/W6638523607","https://openalex.org/W6720517704"],"related_works":["https://openalex.org/W2100090372","https://openalex.org/W4361205702","https://openalex.org/W2385965183","https://openalex.org/W4289281780","https://openalex.org/W2013342653","https://openalex.org/W2901818815","https://openalex.org/W4237598585","https://openalex.org/W2359552542","https://openalex.org/W3026162553","https://openalex.org/W2374897487"],"abstract_inverted_index":{"In":[0,94,115],"the":[1,95,116,119,140,154,157,173,188,193,212],"realm":[2],"of":[3,91,142,149,156,175,214,231],"cybersecurity,":[4],"efficiently":[5],"and":[6,9,64,128,145,205,233,239],"precisely":[7],"identifying":[8],"mitigating":[10],"potential":[11],"threats":[12],"from":[13],"malicious":[14,47,176,247],"encrypted":[15,48,83,177,248],"traffic":[16,32,84,113,121,178,203],"is":[17,123],"crucial.":[18],"As":[19],"deep":[20],"learning":[21],"evolves,":[22],"methods":[23],"relying":[24],"on":[25],"Convolutional":[26],"Neural":[27],"Networks":[28],"(CNNs)":[29],"to":[30,60,108,166,190,210],"convert":[31],"payloads":[33],"into":[34,125],"visual":[35],"representations":[36],"for":[37,81],"analysis":[38],"have":[39],"become":[40],"popular.":[41],"Although":[42],"this":[43],"technique":[44],"effectively":[45],"discerns":[46],"traffic,":[49],"it":[50],"faces":[51],"inherent":[52],"limitations,":[53],"such":[54],"as":[55],"difficulties":[56],"in":[57,69,229,241],"deployment":[58],"due":[59],"extensive":[61],"network":[62],"scales":[63],"high":[65,146],"computational":[66,147],"demands,":[67],"especially":[68],"edge":[70],"computing":[71],"environments.":[72],"To":[73,152],"address":[74],"these":[75],"challenges,":[76],"we":[77,98,159],"propose":[78,160],"a":[79,104,182,200,206],"model":[80,89,138,189],"maliciously":[82],"detection,":[85],"named":[86],"LightMETD.":[87,168,215],"The":[88],"consists":[90],"two":[92],"stages.":[93],"first":[96],"stage,":[97,118],"utilize":[99],"Random":[100],"Forest":[101],"(RF)":[102],"with":[103],"feature":[105],"selection":[106],"algorithm":[107],"quickly":[109],"identify":[110],"easily":[111],"distinguishable":[112],"patterns.":[114],"second":[117],"filtered":[120],"data":[122],"converted":[124],"grayscale":[126],"images":[127],"classified":[129],"using":[130],"an":[131,161,218],"innovative":[132,162],"lightweight":[133],"MobileNetV3-S":[134],"architecture.":[135],"Our":[136],"LightMETD":[137,216,224],"addresses":[139],"problem":[141],"large":[143],"volume":[144,232],"requirements":[148],"CNN":[150],"models.":[151],"enhance":[153],"effectiveness":[155,213],"LightMETD,":[158],"knowledge":[163],"distillation":[164,183],"method":[165,170],"train":[167],"This":[169],"significantly":[171,225],"improves":[172],"accuracy":[174],"detection":[179,234],"by":[180,246],"designing":[181],"loss":[184],"function":[185],"that":[186],"enables":[187],"better":[191],"capture":[192],"intricate":[194],"relationships":[195],"between":[196],"samples.":[197],"We":[198],"use":[199],"USTC-TFC2016":[201],"public":[202],"dataset":[204,209],"locally":[207],"collected":[208],"demonstrate":[211],"achieves":[217],"impressive":[219],"97%":[220],"average":[221],"classification":[222],"accuracy.":[223],"outperforms":[226],"other":[227],"baselines":[228],"terms":[230],"speed,":[235],"underscoring":[236],"its":[237],"viability":[238],"superiority":[240],"addressing":[242],"real-world":[243],"challenges":[244],"posed":[245],"traffic.":[249]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}