{"id":"https://openalex.org/W3116106503","doi":"https://doi.org/10.1109/latincom50620.2020.9282317","title":"Classifying and Understanding Tor Traffic Using Tree-Based Models","display_name":"Classifying and Understanding Tor Traffic Using Tree-Based Models","publication_year":2020,"publication_date":"2020-11-18","ids":{"openalex":"https://openalex.org/W3116106503","doi":"https://doi.org/10.1109/latincom50620.2020.9282317","mag":"3116106503"},"language":"en","primary_location":{"id":"doi:10.1109/latincom50620.2020.9282317","is_oa":false,"landing_page_url":"https://doi.org/10.1109/latincom50620.2020.9282317","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE Latin-American Conference on Communications (LATINCOM)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103089963","display_name":"Paulo Calvo","orcid":"https://orcid.org/0009-0006-3795-2752"},"institutions":[{"id":"https://openalex.org/I31944674","display_name":"Universidad de Costa Rica","ror":"https://ror.org/02yzgww51","country_code":"CR","type":"education","lineage":["https://openalex.org/I31944674"]}],"countries":["CR"],"is_corresponding":false,"raw_author_name":"Paulo Calvo","raw_affiliation_strings":["Universidad de Costa Rica, San Jos\u00e9, Costa Rica"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad de Costa Rica, San Jos\u00e9, Costa Rica","institution_ids":["https://openalex.org/I31944674"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064398867","display_name":"Jos\u00e9 Guevara-Coto","orcid":"https://orcid.org/0000-0001-9447-4132"},"institutions":[{"id":"https://openalex.org/I31944674","display_name":"Universidad de Costa Rica","ror":"https://ror.org/02yzgww51","country_code":"CR","type":"education","lineage":["https://openalex.org/I31944674"]}],"countries":["CR"],"is_corresponding":false,"raw_author_name":"Jose Guevara-Coto","raw_affiliation_strings":["Universidad de Costa Rica, San Jos\u00e9, Costa Rica"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad de Costa Rica, San Jos\u00e9, Costa Rica","institution_ids":["https://openalex.org/I31944674"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102902035","display_name":"Adri\u00e1n Lara","orcid":"https://orcid.org/0000-0001-8389-1918"},"institutions":[{"id":"https://openalex.org/I31944674","display_name":"Universidad de Costa Rica","ror":"https://ror.org/02yzgww51","country_code":"CR","type":"education","lineage":["https://openalex.org/I31944674"]}],"countries":["CR"],"is_corresponding":false,"raw_author_name":"Adrian Lara","raw_affiliation_strings":["Universidad de Costa Rica, San Jos\u00e9, Costa Rica"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad de Costa Rica, San Jos\u00e9, Costa Rica","institution_ids":["https://openalex.org/I31944674"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.1354,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.5877587,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.9855999946594238,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8174788951873779},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.6699289679527283},{"id":"https://openalex.org/keywords/anonymity","display_name":"Anonymity","score":0.5949539542198181},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.5917305946350098},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.5573293566703796},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5485086441040039},{"id":"https://openalex.org/keywords/traffic-analysis","display_name":"Traffic analysis","score":0.5404033064842224},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5337364077568054},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.5294724702835083},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.4990708827972412},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.48718971014022827},{"id":"https://openalex.org/keywords/decision-tree-learning","display_name":"Decision tree learning","score":0.43579670786857605},{"id":"https://openalex.org/keywords/relevance","display_name":"Relevance (law)","score":0.4162355363368988},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4084530174732208},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4076191484928131},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.39242708683013916},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.13412976264953613}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8174788951873779},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.6699289679527283},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.5949539542198181},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.5917305946350098},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.5573293566703796},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5485086441040039},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.5404033064842224},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5337364077568054},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.5294724702835083},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.4990708827972412},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.48718971014022827},{"id":"https://openalex.org/C5481197","wikidata":"https://www.wikidata.org/wiki/Q16766476","display_name":"Decision tree learning","level":3,"score":0.43579670786857605},{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.4162355363368988},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4084530174732208},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4076191484928131},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39242708683013916},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.13412976264953613},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/latincom50620.2020.9282317","is_oa":false,"landing_page_url":"https://doi.org/10.1109/latincom50620.2020.9282317","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE Latin-American Conference on Communications (LATINCOM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.46000000834465027,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W746053470","https://openalex.org/W1481202711","https://openalex.org/W1545050218","https://openalex.org/W1655958391","https://openalex.org/W1792764119","https://openalex.org/W1964234701","https://openalex.org/W1964250430","https://openalex.org/W1967030981","https://openalex.org/W1973668864","https://openalex.org/W2031794885","https://openalex.org/W2068141066","https://openalex.org/W2073089243","https://openalex.org/W2096352448","https://openalex.org/W2155261478","https://openalex.org/W2187669723","https://openalex.org/W2189469435","https://openalex.org/W2302698618","https://openalex.org/W2303116861","https://openalex.org/W2591712613","https://openalex.org/W2613715541","https://openalex.org/W2745658990","https://openalex.org/W2750812801","https://openalex.org/W2750853837","https://openalex.org/W2759910885","https://openalex.org/W2900853407","https://openalex.org/W2950647708","https://openalex.org/W3001065717","https://openalex.org/W3198536054","https://openalex.org/W6628849624","https://openalex.org/W6683111642","https://openalex.org/W6686966971","https://openalex.org/W6697949580","https://openalex.org/W6743921324","https://openalex.org/W6764160190"],"related_works":["https://openalex.org/W2964663688","https://openalex.org/W3171671300","https://openalex.org/W4399181772","https://openalex.org/W2062731068","https://openalex.org/W4293901154","https://openalex.org/W4293088549","https://openalex.org/W4296473472","https://openalex.org/W3174245262","https://openalex.org/W2027288815","https://openalex.org/W2186202160"],"abstract_inverted_index":{"Over":[0],"the":[1,4,25,29,80,100,104,117,120,143,154,160,166,173,179,183,233,244,247],"past":[2],"years":[3],"use":[5],"of":[6,28,59,75,94,119,168,229,243,246],"anonymization":[7],"services":[8],"has":[9],"gained":[10],"significant":[11],"relevance":[12],"as":[13,136],"more":[14],"users":[15,53],"are":[16],"interested":[17],"in":[18,79,108,172,232,235],"protecting":[19],"their":[20],"data":[21],"and":[22,41,63,67,92,110,115,139,186,218,226],"privacy":[23],"on":[24],"internet.":[26],"One":[27],"most":[30],"popular":[31],"ways":[32],"to":[33,56,98,163,194,209],"achieve":[34],"this":[35,123,199],"result":[36],"is":[37,159],"Tor.":[38],"The":[39,65,86],"anonymity":[40],"untraceability":[42],"that":[43,178],"Tor":[44,77,95,196,211],"provides,":[45],"however,":[46],"can":[47,191],"also":[48,239],"be":[49,192],"used":[50,193,208],"by":[51],"ill-intentioned":[52],"who":[54],"try":[55],"take":[57],"advantage":[58],"bypassing":[60],"security":[61],"control":[62],"policies.":[64],"Cybersecurity":[66],"Infrastructure":[68],"Security":[69],"Agency":[70],"(CISA)":[71],"mentions":[72],"two":[73],"methods":[74],"recognizing":[76],"traffic":[78,170,189,213],"enterprise:":[81],"indicator-":[82],"or":[83],"behavior-based":[84],"analysis.":[85],"first":[87,161],"one":[88,144,162],"uses":[89],"log":[90],"analysis":[91,242],"lists":[93],"exit":[96],"nodes":[97],"identify":[99,195,210],"suspicious":[101],"activity":[102],"while":[103],"latter":[105],"inspects":[106],"patterns":[107],"TCP":[109,180],"UDP":[111],"ports,":[112],"DNS":[113],"queries":[114],"inspecting":[116],"payload":[118],"packets.":[121],"In":[122,198],"paper,":[124],"we":[125,201],"propose":[126],"a":[127,204,223],"different":[128],"approach":[129,158,225],"using":[130],"white-box":[131,224],"machine":[132],"learning":[133],"models":[134],"such":[135],"decision":[137,215],"trees":[138,216],"Random":[140,219],"Forest.":[141,220],"On":[142,153],"hand,":[145,156],"our":[146,157],"classifier":[147],"achieves":[148],"accuracy":[149,228],"levels":[150],"above":[151],"95%.":[152],"other":[155],"allow":[164],"understanding":[165],"importance":[167,245],"each":[169],"feature":[171],"classification.":[174],"Our":[175],"results":[176],"demonstrate":[177],"window":[181],"size,":[182],"frame":[184],"size":[185],"time":[187],"related":[188],"features":[190],"traffic.":[197],"paper":[200],"will":[202],"describe":[203],"Machine":[205],"Learning":[206],"methodology":[207],"network":[212],"utilizing":[214],"C5.0":[217],"We":[221,238],"followed":[222],"accomplished":[227],"over":[230],"95%":[231],"prediction":[234],"both":[236],"models.":[237],"present":[240],"an":[241],"top":[248],"predictor":[249],"variables.":[250]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}