{"id":"https://openalex.org/W2200832203","doi":"https://doi.org/10.1109/milcom.2015.7357464","title":"Malware traffic detection using tamper resistant features","display_name":"Malware traffic detection using tamper resistant features","publication_year":2015,"publication_date":"2015-10-01","ids":{"openalex":"https://openalex.org/W2200832203","doi":"https://doi.org/10.1109/milcom.2015.7357464","mag":"2200832203"},"language":"en","primary_location":{"id":"doi:10.1109/milcom.2015.7357464","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom.2015.7357464","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2015 - 2015 IEEE Military Communications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Z. Berkay Celik","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Z. Berkay Celik","raw_affiliation_strings":["Department of Computer Science and Engineering, The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076667950","display_name":"Robert J. Walls","orcid":"https://orcid.org/0000-0002-1338-6403"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert J. Walls","raw_affiliation_strings":["Department of Computer Science and Engineering, The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055368149","display_name":"Patrick McDaniel","orcid":"https://orcid.org/0000-0003-2091-7484"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Patrick McDaniel","raw_affiliation_strings":["Department of Computer Science and Engineering, The Pennsylvania State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, The Pennsylvania State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103191815","display_name":"Ananthram Swami","orcid":"https://orcid.org/0000-0003-1439-332X"},"institutions":[{"id":"https://openalex.org/I166416128","display_name":"DEVCOM Army Research Laboratory","ror":"https://ror.org/011hc8f90","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I166416128","https://openalex.org/I2802705668","https://openalex.org/I4210154437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ananthram Swami","raw_affiliation_strings":["Army Research Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Army Research Laboratory","institution_ids":["https://openalex.org/I166416128"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":45,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"330","last_page":"335"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.925774335861206},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8122575879096985},{"id":"https://openalex.org/keywords/heartbeat","display_name":"Heartbeat","score":0.6549867391586304},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.609799861907959},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5712920427322388},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4775617718696594},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.448678195476532},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3765208125114441}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.925774335861206},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8122575879096985},{"id":"https://openalex.org/C13852961","wikidata":"https://www.wikidata.org/wiki/Q17021880","display_name":"Heartbeat","level":2,"score":0.6549867391586304},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.609799861907959},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5712920427322388},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4775617718696594},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.448678195476532},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3765208125114441},{"id":"https://openalex.org/C203014093","wikidata":"https://www.wikidata.org/wiki/Q101929","display_name":"Immunology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C8891405","wikidata":"https://www.wikidata.org/wiki/Q1059","display_name":"Immune system","level":2,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/milcom.2015.7357464","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom.2015.7357464","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2015 - 2015 IEEE Military Communications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6800000071525574,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W70584117","https://openalex.org/W1507388815","https://openalex.org/W1524496078","https://openalex.org/W1531782611","https://openalex.org/W1661871015","https://openalex.org/W1775772884","https://openalex.org/W1827212170","https://openalex.org/W1916198581","https://openalex.org/W1976866799","https://openalex.org/W1978907961","https://openalex.org/W1987851356","https://openalex.org/W2003206343","https://openalex.org/W2019353163","https://openalex.org/W2027664152","https://openalex.org/W2031163547","https://openalex.org/W2040424958","https://openalex.org/W2077488147","https://openalex.org/W2084353635","https://openalex.org/W2099452399","https://openalex.org/W2101234009","https://openalex.org/W2114996745","https://openalex.org/W2116892075","https://openalex.org/W2122646361","https://openalex.org/W2125055259","https://openalex.org/W2127218421","https://openalex.org/W2132870739","https://openalex.org/W2142301198","https://openalex.org/W2142889610","https://openalex.org/W2171331105","https://openalex.org/W2404137747","https://openalex.org/W2406037958","https://openalex.org/W2496323672","https://openalex.org/W3099514962","https://openalex.org/W6602816918","https://openalex.org/W6631506987","https://openalex.org/W6631877889","https://openalex.org/W6636914306","https://openalex.org/W6638021444","https://openalex.org/W6638623425","https://openalex.org/W6640045118","https://openalex.org/W6678914141","https://openalex.org/W6740445404"],"related_works":["https://openalex.org/W4256304280","https://openalex.org/W2783112941","https://openalex.org/W4249009605","https://openalex.org/W2900526031","https://openalex.org/W2526398307","https://openalex.org/W2395100307","https://openalex.org/W2909615516","https://openalex.org/W2470029541","https://openalex.org/W4387065217","https://openalex.org/W2470502009"],"abstract_inverted_index":{"This":[0],"paper":[1],"presents":[2],"a":[3,21],"framework":[4],"for":[5,65],"evaluating":[6],"the":[7,74,84,94],"transport":[8],"layer":[9],"feature":[10],"space":[11],"of":[12,45,76,86,96],"malware":[13,27,67,77,88,98],"heartbeat":[14],"traffic.":[15,106],"We":[16],"utilize":[17],"these":[18],"features":[19,42,61],"in":[20],"prototype":[22],"detection":[23,49],"system":[24],"to":[25,37,68,103],"distinguish":[26],"traffic":[28,30],"from":[29],"generated":[31],"by":[32,82],"legitimate":[33,105],"applications.":[34],"In":[35,90],"contrast":[36],"previous":[38],"work,":[39],"we":[40,72,92],"eliminate":[41],"at":[43],"risk":[44],"producing":[46],"overly":[47],"optimistic":[48],"results,":[50],"detect":[51],"previously":[52],"unobserved":[53],"anomalous":[54],"behavior,":[55],"and":[56],"rely":[57],"only":[58],"on":[59],"tamper-resistant":[60],"making":[62],"it":[63],"difficult":[64],"sophisticated":[66],"avoid":[69],"detection.":[70],"Further,":[71],"characterize":[73],"evolution":[75],"evasion":[78],"techniques":[79,102],"over":[80],"time":[81],"examining":[83],"behavior":[85],"16":[87],"families.":[89],"particular,":[91],"highlight":[93],"difficultly":[95],"detecting":[97],"that":[99],"use":[100],"traffic-shaping":[101],"mimic":[104]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":11},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":7},{"year":2017,"cited_by_count":5},{"year":2016,"cited_by_count":4}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}