{"id":"https://openalex.org/W2957354869","doi":"https://doi.org/10.1109/isdfs.2019.8757503","title":"User Profiling Based on Application-Level Using Network Metadata","display_name":"User Profiling Based on Application-Level Using Network Metadata","publication_year":2019,"publication_date":"2019-06-01","ids":{"openalex":"https://openalex.org/W2957354869","doi":"https://doi.org/10.1109/isdfs.2019.8757503","mag":"2957354869"},"language":"en","primary_location":{"id":"doi:10.1109/isdfs.2019.8757503","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isdfs.2019.8757503","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 7th International Symposium on Digital Forensics and Security (ISDFS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/10026.1/15108","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035660877","display_name":"Faisal Shaman","orcid":null},"institutions":[{"id":"https://openalex.org/I72264486","display_name":"University of Tabuk","ror":"https://ror.org/04yej8x59","country_code":"SA","type":"education","lineage":["https://openalex.org/I72264486"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Faisal Shaman","raw_affiliation_strings":["Faculty of Computers and Information Technology, University of Tabuk, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computers and Information Technology, University of Tabuk, Saudi Arabia","institution_ids":["https://openalex.org/I72264486"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044709278","display_name":"Bogdan Ghita","orcid":"https://orcid.org/0000-0002-1788-547X"},"institutions":[{"id":"https://openalex.org/I897542642","display_name":"University of Plymouth","ror":"https://ror.org/008n7pv89","country_code":"GB","type":"education","lineage":["https://openalex.org/I897542642"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Bogdan Ghita","raw_affiliation_strings":["Centre for Security, Communications and Network Research, University of Plymouth, Plymouth, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Security, Communications and Network Research, University of Plymouth, Plymouth, United Kingdom","institution_ids":["https://openalex.org/I897542642"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029670131","display_name":"Nathan Clarke","orcid":"https://orcid.org/0000-0002-3595-3800"},"institutions":[{"id":"https://openalex.org/I897542642","display_name":"University of Plymouth","ror":"https://ror.org/008n7pv89","country_code":"GB","type":"education","lineage":["https://openalex.org/I897542642"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Nathan Clarke","raw_affiliation_strings":["Centre for Security, Communications and Network Research, University of Plymouth, Plymouth, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Security, Communications and Network Research, University of Plymouth, Plymouth, United Kingdom","institution_ids":["https://openalex.org/I897542642"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5050269424","display_name":"Abdulrahman Alruban","orcid":"https://orcid.org/0000-0002-7295-5194"},"institutions":[{"id":"https://openalex.org/I897542642","display_name":"University of Plymouth","ror":"https://ror.org/008n7pv89","country_code":"GB","type":"education","lineage":["https://openalex.org/I897542642"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Abdulrahman Alruban","raw_affiliation_strings":["Centre for Security, Communications and Network Research, University of Plymouth, Plymouth, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Centre for Security, Communications and Network Research, University of Plymouth, Plymouth, United Kingdom","institution_ids":["https://openalex.org/I897542642"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.1446,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.5714767,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/profiling","display_name":"Profiling (computer programming)","score":0.8258134126663208},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.818221926689148},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.7227581143379211},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5308172702789307},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.5265182256698608},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.48417001962661743},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4777587950229645},{"id":"https://openalex.org/keywords/user-profile","display_name":"User profile","score":0.45040565729141235},{"id":"https://openalex.org/keywords/network-management","display_name":"Network management","score":0.4457738697528839},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3003614544868469},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.19517460465431213},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.19174709916114807}],"concepts":[{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.8258134126663208},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.818221926689148},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.7227581143379211},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5308172702789307},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.5265182256698608},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.48417001962661743},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4777587950229645},{"id":"https://openalex.org/C2780150774","wikidata":"https://www.wikidata.org/wiki/Q252500","display_name":"User profile","level":2,"score":0.45040565729141235},{"id":"https://openalex.org/C129763632","wikidata":"https://www.wikidata.org/wiki/Q1454667","display_name":"Network management","level":2,"score":0.4457738697528839},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3003614544868469},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.19517460465431213},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.19174709916114807},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/isdfs.2019.8757503","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isdfs.2019.8757503","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 7th International Symposium on Digital Forensics and Security (ISDFS)","raw_type":"proceedings-article"},{"id":"pmh:oai:pearl.plymouth.ac.uk:10026.1/15108","is_oa":true,"landing_page_url":"http://hdl.handle.net/10026.1/15108","pdf_url":"http://hdl.handle.net/10026.1/15108","source":{"id":"https://openalex.org/S4306402507","display_name":"PEARL (University of Plymouth)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I897542642","host_organization_name":"University of Plymouth","host_organization_lineage":["https://openalex.org/I897542642"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference"}],"best_oa_location":{"id":"pmh:oai:pearl.plymouth.ac.uk:10026.1/15108","is_oa":true,"landing_page_url":"http://hdl.handle.net/10026.1/15108","pdf_url":"http://hdl.handle.net/10026.1/15108","source":{"id":"https://openalex.org/S4306402507","display_name":"PEARL (University of Plymouth)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I897542642","host_organization_name":"University of Plymouth","host_organization_lineage":["https://openalex.org/I897542642"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"conference"},"sustainable_development_goals":[{"score":0.5400000214576721,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2957354869.pdf"},"referenced_works_count":25,"referenced_works":["https://openalex.org/W1594000319","https://openalex.org/W1595415767","https://openalex.org/W1829816717","https://openalex.org/W1915916318","https://openalex.org/W1974747079","https://openalex.org/W1976515580","https://openalex.org/W1990867522","https://openalex.org/W2005769304","https://openalex.org/W2013210378","https://openalex.org/W2057778513","https://openalex.org/W2062063787","https://openalex.org/W2062401262","https://openalex.org/W2145457748","https://openalex.org/W2147024424","https://openalex.org/W2310211158","https://openalex.org/W2402543976","https://openalex.org/W2419531601","https://openalex.org/W2473412397","https://openalex.org/W2495970965","https://openalex.org/W2532732179","https://openalex.org/W2578088175","https://openalex.org/W2588937729","https://openalex.org/W2912953040","https://openalex.org/W6682177051","https://openalex.org/W6758647617"],"related_works":["https://openalex.org/W2005630130","https://openalex.org/W2132546753","https://openalex.org/W2189007570","https://openalex.org/W184756452","https://openalex.org/W2144035188","https://openalex.org/W1990804090","https://openalex.org/W3008307459","https://openalex.org/W2327596978","https://openalex.org/W2976552083","https://openalex.org/W2014060944"],"abstract_inverted_index":{"There":[0],"is":[1,115,129],"an":[2,38,197,242],"increasing":[3],"interest":[4],"to":[5,29,36,64,131,196,254],"identify":[6],"users":[7],"and":[8,18,24,45,59,77,89,102,118,147,164,167,188],"behaviour":[9,33,90,101,114,150,165],"profiling":[10,78,91,166],"from":[11,217],"network":[12,49,56,94,106,139],"traffic":[13,16,34,43,57,140],"metadata":[14,58],"for":[15,161,213,229,244],"engineering":[17],"security":[19,22,50],"monitoring.":[20],"Network":[21],"administrators":[23],"internet":[25],"service":[26],"providers":[27],"need":[28],"create":[30],"the":[31,47,53,79,83,100,121,127,134,145,176,204,235,250],"user":[32,80,87,113,135,146,162,231,247],"profile":[35],"make":[37],"informed":[39],"decision":[40],"about":[41],"policing,":[42],"management,":[44],"investigate":[46],"different":[48],"perspectives.":[51],"Additionally,":[52],"analysis":[54],"of":[55,61,75,105,143,200,203],"extraction":[60],"feature":[62],"sets":[63],"understand":[65],"trends":[66],"in":[67,73,92,141],"application":[68],"usage":[69,170],"can":[70],"be":[71],"significant":[72],"terms":[74,142],"identifying":[76,144,245],"by":[81,208],"representing":[82],"user's":[84],"activity.":[85],"However,":[86],"identification":[88,163,232],"real-time":[93],"management":[95],"remains":[96],"a":[97,158,214,246],"challenge,":[98],"as":[99,120],"underline":[103],"interaction":[104,123],"applications":[107],"are":[108],"permanently":[109],"changing.":[110],"In":[111,153],"parallel,":[112],"also":[116],"changing":[117,149],"adapting,":[119],"online":[122],"environment":[124],"changes.":[125],"Also,":[126],"challenge":[128],"how":[130],"adequately":[132],"describe":[133],"activity":[136],"among":[137],"generic":[138],"his":[148],"over":[151],"time.":[152],"this":[154],"paper,":[155],"we":[156],"propose":[157],"novel":[159],"mechanism":[160],"analysing":[168],"individual":[169],"per":[171],"application.":[172],"The":[173,238],"research":[174],"considered":[175],"application-level":[177],"flow":[178],"sessions":[179],"identified":[180],"based":[181,233,248],"on":[182,249],"Domain":[183],"Name":[184],"System":[185],"filtering":[186],"criteria":[187],"timing":[189,193],"resolution":[190],"bins":[191],"(24-hour":[192],"bins)":[194],"leading":[195],"extended":[198],"set":[199],"features.":[201,237],"Validation":[202],"module":[205],"was":[206,227],"conducted":[207],"collecting":[209],"Net":[210],"Flow":[211],"records":[212],"60":[215],"days":[216],"23":[218],"users.":[219],"A":[220],"gradient":[221],"boosting":[222],"supervised":[223],"machine":[224],"learning":[225],"algorithm":[226],"leveraged":[228],"modelling":[230],"upon":[234],"selected":[236],"proposed":[239,251],"method":[240],"yields":[241],"accuracy":[243],"features":[252],"up":[253],"74%.":[255]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}