{"id":"https://openalex.org/W4416250212","doi":"https://doi.org/10.1109/ijcnn64981.2025.11227646","title":"DMT-DHIN: A Dynamic Heterogeneous Information Network Framework for Detecting Malicious Encrypted Traffic","display_name":"DMT-DHIN: A Dynamic Heterogeneous Information Network Framework for Detecting Malicious Encrypted Traffic","publication_year":2025,"publication_date":"2025-06-30","ids":{"openalex":"https://openalex.org/W4416250212","doi":"https://doi.org/10.1109/ijcnn64981.2025.11227646"},"language":null,"primary_location":{"id":"doi:10.1109/ijcnn64981.2025.11227646","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn64981.2025.11227646","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100371872","display_name":"Xiaotong Li","orcid":"https://orcid.org/0000-0001-9960-5373"},"institutions":[{"id":"https://openalex.org/I152269853","display_name":"Qilu University of Technology","ror":"https://ror.org/04hyzq608","country_code":"CN","type":"education","lineage":["https://openalex.org/I152269853"]},{"id":"https://openalex.org/I4210142748","display_name":"Shandong Academy of Sciences","ror":"https://ror.org/04y8d6y55","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210142748"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xiaotong Li","raw_affiliation_strings":["Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China"],"affiliations":[{"raw_affiliation_string":"Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China","institution_ids":["https://openalex.org/I152269853","https://openalex.org/I4210142748"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102924129","display_name":"Xiaohui Han","orcid":"https://orcid.org/0000-0002-5883-9218"},"institutions":[{"id":"https://openalex.org/I152269853","display_name":"Qilu University of Technology","ror":"https://ror.org/04hyzq608","country_code":"CN","type":"education","lineage":["https://openalex.org/I152269853"]},{"id":"https://openalex.org/I4210142748","display_name":"Shandong Academy of Sciences","ror":"https://ror.org/04y8d6y55","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210142748"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaohui Han","raw_affiliation_strings":["Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China"],"affiliations":[{"raw_affiliation_string":"Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China","institution_ids":["https://openalex.org/I152269853","https://openalex.org/I4210142748"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006987121","display_name":"Hui Cui","orcid":"https://orcid.org/0000-0002-6505-4734"},"institutions":[{"id":"https://openalex.org/I4210142748","display_name":"Shandong Academy of Sciences","ror":"https://ror.org/04y8d6y55","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210142748"]},{"id":"https://openalex.org/I152269853","display_name":"Qilu University of Technology","ror":"https://ror.org/04hyzq608","country_code":"CN","type":"education","lineage":["https://openalex.org/I152269853"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hui Cui","raw_affiliation_strings":["Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China"],"affiliations":[{"raw_affiliation_string":"Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China","institution_ids":["https://openalex.org/I152269853","https://openalex.org/I4210142748"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075258958","display_name":"Lei Guo","orcid":"https://orcid.org/0000-0002-9408-7594"},"institutions":[{"id":"https://openalex.org/I28006308","display_name":"Shandong Normal University","ror":"https://ror.org/01wy3h363","country_code":"CN","type":"education","lineage":["https://openalex.org/I28006308"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Guo","raw_affiliation_strings":["Shandong Normal University,Jinan,China"],"affiliations":[{"raw_affiliation_string":"Shandong Normal University,Jinan,China","institution_ids":["https://openalex.org/I28006308"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101620295","display_name":"Hua Ding","orcid":"https://orcid.org/0000-0003-4683-0125"},"institutions":[{"id":"https://openalex.org/I4210142748","display_name":"Shandong Academy of Sciences","ror":"https://ror.org/04y8d6y55","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210142748"]},{"id":"https://openalex.org/I152269853","display_name":"Qilu University of Technology","ror":"https://ror.org/04hyzq608","country_code":"CN","type":"education","lineage":["https://openalex.org/I152269853"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hua Ding","raw_affiliation_strings":["Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China"],"affiliations":[{"raw_affiliation_string":"Qilu University of Technology (Shandong Academy of Sciences),Key Laboratory of Computing Power Network and Information Security, Ministry of Education, Shandong Computer Science Center (National Supercomputer Center in Jinan),Jinan,China","institution_ids":["https://openalex.org/I152269853","https://openalex.org/I4210142748"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040285913","display_name":"Chaoran Cui","orcid":"https://orcid.org/0000-0003-3332-1348"},"institutions":[{"id":"https://openalex.org/I59483232","display_name":"Shandong University of Finance and Economics","ror":"https://ror.org/02e2nnq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I59483232"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chaoran Cui","raw_affiliation_strings":["Shandong University of Finance and Economics,Jinan,China"],"affiliations":[{"raw_affiliation_string":"Shandong University of Finance and Economics,Jinan,China","institution_ids":["https://openalex.org/I59483232"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5100371872"],"corresponding_institution_ids":["https://openalex.org/I152269853","https://openalex.org/I4210142748"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.1821917,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.978600025177002,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.978600025177002,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.01119999960064888,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.002199999988079071,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.803600013256073},{"id":"https://openalex.org/keywords/dynamic-network-analysis","display_name":"Dynamic network analysis","score":0.5799999833106995},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.49959999322891235},{"id":"https://openalex.org/keywords/heterogeneous-network","display_name":"Heterogeneous network","score":0.44850000739097595},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.41760000586509705},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4171000123023987}],"concepts":[{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.803600013256073},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7799000144004822},{"id":"https://openalex.org/C13540734","wikidata":"https://www.wikidata.org/wiki/Q5318996","display_name":"Dynamic network analysis","level":2,"score":0.5799999833106995},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5004000067710876},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.49959999322891235},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4878000020980835},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.47859999537467957},{"id":"https://openalex.org/C158207573","wikidata":"https://www.wikidata.org/wiki/Q5747224","display_name":"Heterogeneous network","level":4,"score":0.44850000739097595},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.41760000586509705},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4171000123023987},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3472000062465668},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3458000123500824},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.3391000032424927},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3303999900817871},{"id":"https://openalex.org/C123757187","wikidata":"https://www.wikidata.org/wiki/Q9195957","display_name":"Network dynamics","level":2,"score":0.28529998660087585}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ijcnn64981.2025.11227646","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn64981.2025.11227646","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320324887","display_name":"Shandong Academy of Sciences","ror":"https://ror.org/04y8d6y55"},{"id":"https://openalex.org/F4320337504","display_name":"Research and Development","ror":"https://ror.org/027s68j25"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W2606697812","https://openalex.org/W2789828921","https://openalex.org/W2911286998","https://openalex.org/W2912711574","https://openalex.org/W2919493784","https://openalex.org/W2963516518","https://openalex.org/W2973442392","https://openalex.org/W2974442408","https://openalex.org/W3094043420","https://openalex.org/W3120227884","https://openalex.org/W3120681308","https://openalex.org/W3127084347","https://openalex.org/W3134226201","https://openalex.org/W3145680685","https://openalex.org/W3155231452","https://openalex.org/W4206912047","https://openalex.org/W4210358464","https://openalex.org/W4220957574","https://openalex.org/W4312935532","https://openalex.org/W4367047070","https://openalex.org/W4382281941","https://openalex.org/W4385562531","https://openalex.org/W4392904058","https://openalex.org/W4393379748","https://openalex.org/W4400489309","https://openalex.org/W4402351536","https://openalex.org/W4403582740"],"related_works":[],"abstract_inverted_index":{"The":[0,154],"rapid":[1],"increase":[2],"in":[3,15,41,48,135,166],"encrypted":[4,42,136,178],"network":[5,16,90],"traffic":[6,83],"has":[7],"made":[8],"detecting":[9],"malicious":[10,54,177],"activities":[11],"a":[12,63],"critical":[13],"challenge":[14],"management,":[17],"attracting":[18],"significant":[19],"research":[20],"attention.":[21],"However,":[22],"most":[23],"existing":[24,160],"methods":[25],"focus":[26],"primarily":[27],"on":[28,147],"flow-based":[29],"features,":[30,128],"often":[31],"neglecting":[32],"the":[33,50,58,117,120,123,140],"inherent":[34],"structural":[35],"heterogeneity":[36],"and":[37,96,98,152,169],"dynamic":[38,78,133],"temporal":[39,124],"variations":[40],"traffic,":[43],"which":[44],"limits":[45],"their":[46,101],"effectiveness":[47,141],"capturing":[49,100],"evolving":[51],"nature":[52],"of":[53,126,142],"activities.":[55],"To":[56],"address":[57],"aforementioned":[59],"issue,":[60],"we":[61],"present":[62],"novel":[64],"Dynamic":[65],"Heterogeneous":[66],"Information":[67],"Network":[68],"framework,":[69],"DMT-DHIN,":[70],"for":[71],"Detecting":[72],"Malicious":[73],"Encrypted":[74],"Traffic.":[75],"DMT-DHIN":[76,130,143,158],"constructs":[77],"heterogeneous":[79,104],"graphs":[80],"by":[81,144],"partitioning":[82],"into":[84],"time":[85],"slices,":[86],"with":[87],"nodes":[88],"representing":[89],"entities":[91],"(e.g.,":[92],"packets,":[93],"protocols,":[94],"IPs,":[95],"ports)":[97],"edges":[99],"interactions.":[102],"A":[103],"graph":[105],"attention":[106],"mechanism":[107],"effectively":[108],"captures":[109,122],"spatial":[110],"dependencies":[111],"among":[112],"different":[113],"node":[114,127],"types.":[115],"At":[116],"same":[118],"time,":[119],"Transformer":[121],"evolution":[125],"enabling":[129],"to":[131,175],"identify":[132,176],"patterns":[134],"traffic.":[137,179],"We":[138],"validate":[139],"conducting":[145],"evaluations":[146],"three":[148],"datasets:":[149],"CICIDS2017,":[150],"USTC-TFC2016,":[151],"CICIoT2023.":[153],"results":[155],"demonstrate":[156],"that":[157],"surpasses":[159],"state-of-the-art":[161],"methods,":[162],"delivering":[163],"marked":[164],"enhancements":[165],"detection":[167],"accuracy":[168],"F1-score,":[170],"highlighting":[171],"its":[172],"superior":[173],"ability":[174]},"counts_by_year":[],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-11-14T00:00:00"}