{"id":"https://openalex.org/W7123860804","doi":"https://doi.org/10.1109/iscc65549.2025.11326005","title":"MV-TFNet: Malware Traffic Detection Based on Multi-View Flow Sequence and Time-Frequency Feature Fusion","display_name":"MV-TFNet: Malware Traffic Detection Based on Multi-View Flow Sequence and Time-Frequency Feature Fusion","publication_year":2025,"publication_date":"2025-07-02","ids":{"openalex":"https://openalex.org/W7123860804","doi":"https://doi.org/10.1109/iscc65549.2025.11326005"},"language":null,"primary_location":{"id":"doi:10.1109/iscc65549.2025.11326005","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscc65549.2025.11326005","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Symposium on Computers and Communications (ISCC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100442492","display_name":"Renjie Li","orcid":"https://orcid.org/0000-0003-2225-7520"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Renjie Li","raw_affiliation_strings":["Institute of Information Engineering,Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122980893","display_name":"Zhou Zhou","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhou Zhou","raw_affiliation_strings":["Institute of Information Engineering,Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122949798","display_name":"Zhongyi Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhongyi Zhang","raw_affiliation_strings":["Institute of Information Engineering,Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jiang Guo","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiang Guo","raw_affiliation_strings":["Institute of Information Engineering,Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5121026315","display_name":"Qingyun Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingyun Liu","raw_affiliation_strings":["Institute of Information Engineering,Chinese Academy of Sciences"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering,Chinese Academy of Sciences","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.3151000142097473,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.3151000142097473,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.2443999946117401,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.2012999951839447,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5659000277519226},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5253000259399414},{"id":"https://openalex.org/keywords/constant-false-alarm-rate","display_name":"Constant false alarm rate","score":0.4262000024318695},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.3898000121116638},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.3880999982357025},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.38420000672340393},{"id":"https://openalex.org/keywords/feature-learning","display_name":"Feature learning","score":0.3562999963760376},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.3553999960422516},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.35120001435279846},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3424000144004822}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7835000157356262},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5659000277519226},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.527999997138977},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5253000259399414},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5091999769210815},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.4262000024318695},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3898000121116638},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3880999982357025},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.38420000672340393},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.3562999963760376},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3553999960422516},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.35120001435279846},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3424000144004822},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3391000032424927},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.33219999074935913},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.3005000054836273},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2897000014781952},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.28760001063346863},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2849999964237213},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.2847000062465668},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.2833999991416931},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.28189998865127563},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.2782999873161316},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.27570000290870667},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.27300000190734863},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.27149999141693115},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.27059999108314514},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2689000070095062},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.26499998569488525},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2615000009536743},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.25290000438690186},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.2515000104904175},{"id":"https://openalex.org/C186594467","wikidata":"https://www.wikidata.org/wiki/Q1429176","display_name":"Flooding (psychology)","level":2,"score":0.25029999017715454}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iscc65549.2025.11326005","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscc65549.2025.11326005","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE Symposium on Computers and Communications (ISCC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6214057207107544}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W2149600645","https://openalex.org/W2537766808","https://openalex.org/W2562429745","https://openalex.org/W2605422749","https://openalex.org/W2743556905","https://openalex.org/W2913857451","https://openalex.org/W2919493784","https://openalex.org/W2947585023","https://openalex.org/W3105087971","https://openalex.org/W3213111842","https://openalex.org/W4223587185","https://openalex.org/W4321019788","https://openalex.org/W4382239668","https://openalex.org/W4385444612","https://openalex.org/W4389152158","https://openalex.org/W4396723284","https://openalex.org/W4400489845","https://openalex.org/W4402957849"],"related_works":[],"abstract_inverted_index":{"The":[0],"proliferation":[1],"of":[2],"malware\u2019s":[3],"command-andcontrol":[4],"(C2)":[5],"communications":[6],"poses":[7],"significant":[8],"challenges":[9],"to":[10,83,152],"traditional":[11],"network":[12],"security":[13],"defence":[14],"as":[15,23],"adversaries":[16],"increasingly":[17],"leverage":[18],"advanced":[19],"evasion":[20],"tactics":[21],"such":[22],"dynamic":[24],"infrastructure":[25],"rotation":[26],"and":[27,40,75,91,114,137,154],"traffic":[28,55],"obfuscation.":[29],"However,":[30],"previous":[31],"works":[32],"suffer":[33],"from":[34,150],"inadequate":[35],"temporal":[36,86],"modeling,":[37],"session-completion":[38],"assumption,":[39],"inflexible":[41],"data":[42,106],"augmentation.":[43],"To":[44],"address":[45],"these":[46],"limitations,":[47],"this":[48],"paper":[49],"proposes":[50],"MV-TFNet,":[51],"a":[52,80,120,155],"novel":[53],"C2":[54],"detection":[56],"framework":[57],"that":[58],"synergizes":[59],"multi-view":[60],"flow":[61],"sequence":[62],"analysis":[63],"with":[64],"temporal-frequency":[65],"feature":[66],"fusion.":[67],"By":[68],"decomposing":[69],"host-server":[70],"interactions":[71],"into":[72],"upstream,":[73],"downstream,":[74],"bidirectional":[76],"views,":[77],"we":[78],"employ":[79],"dual-path":[81],"encoder":[82],"capture":[84],"localized":[85],"dependencies":[87],"via":[88],"dilated":[89],"convolutions":[90],"global":[92],"frequencydomain":[93],"patterns":[94],"through":[95],"spectral":[96],"analysis.":[97],"A":[98],"contrastive":[99],"learning":[100],"paradigm,":[101],"enhanced":[102],"by":[103],"label-guided":[104],"adaptive":[105],"augmentation,":[107],"further":[108],"optimizes":[109],"robustness":[110],"against":[111],"adversarial":[112],"noise":[113],"distribution":[115],"shifts.":[116],"Moreover,":[117],"MV-TFNet":[118],"has":[119],"protocol-agnostic":[121],"design,":[122],"eliminating":[123],"the":[124,135],"dependency":[125],"on":[126,134],"plaintext":[127],"information":[128],"or":[129],"protocol-specific":[130],"parsing.":[131],"Extensive":[132],"evaluations":[133],"MTA":[136],"DoHBrw":[138],"datasets":[139],"demonstrate":[140],"MV-TFNet\u2019s":[141],"superiority":[142],"over":[143],"state-of-the-art":[144],"methods,":[145],"achieving":[146],"an":[147],"F1-score":[148],"range":[149],"0.94":[151],"0.99":[153],"false":[156],"positive":[157],"rate":[158],"below":[159],"0.05.":[160]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-01-14T00:00:00"}