{"id":"https://openalex.org/W7165183080","doi":"https://doi.org/10.1109/ojcoms.2026.3705147","title":"Detecting Tor Snowflake as Anomalous WebRTC Traffic Under Extreme Class Imbalance","display_name":"Detecting Tor Snowflake as Anomalous WebRTC Traffic Under Extreme Class Imbalance","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7165183080","doi":"https://doi.org/10.1109/ojcoms.2026.3705147"},"language":"en","primary_location":{"id":"doi:10.1109/ojcoms.2026.3705147","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2026.3705147","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/ojcoms.2026.3705147","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092202403","display_name":"Ban AlOmar","orcid":"https://orcid.org/0000-0002-5977-2035"},"institutions":[{"id":"https://openalex.org/I119744171","display_name":"Higher Colleges of Technology","ror":"https://ror.org/00qmy9z88","country_code":"AE","type":"education","lineage":["https://openalex.org/I119744171"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Ban Alomar","raw_affiliation_strings":["Higher Colleges of Technology, Dubai, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0002-5977-2035","affiliations":[{"raw_affiliation_string":"Higher Colleges of Technology, Dubai, United Arab Emirates","institution_ids":["https://openalex.org/I119744171"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011728448","display_name":"Zouheir Trabelsi","orcid":"https://orcid.org/0000-0001-8686-8975"},"institutions":[{"id":"https://openalex.org/I201726411","display_name":"United Arab Emirates University","ror":"https://ror.org/01km6p862","country_code":"AE","type":"education","lineage":["https://openalex.org/I201726411"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Zouheir Trabelsi","raw_affiliation_strings":["United Arab Emirates University, Al Ain, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0001-8686-8975","affiliations":[{"raw_affiliation_string":"United Arab Emirates University, Al Ain, United Arab Emirates","institution_ids":["https://openalex.org/I201726411"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2075,"currency":"USD","value_usd":2075},"apc_paid":{"value":2075,"currency":"USD","value_usd":2075},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.64089638,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"7","issue":null,"first_page":"6723","last_page":"6740"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.3790000081062317,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.3790000081062317,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.15489999949932098,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.07400000095367432,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.5575000047683716},{"id":"https://openalex.org/keywords/snowflake","display_name":"Snowflake","score":0.5029000043869019},{"id":"https://openalex.org/keywords/measure","display_name":"Measure (data warehouse)","score":0.3167000114917755},{"id":"https://openalex.org/keywords/air-traffic-control","display_name":"Air traffic control","score":0.273499995470047},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.2720000147819519}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6571000218391418},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.5575000047683716},{"id":"https://openalex.org/C54059038","wikidata":"https://www.wikidata.org/wiki/Q550147","display_name":"Snowflake","level":3,"score":0.5029000043869019},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.3167000114917755},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.31279999017715454},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2937000095844269},{"id":"https://openalex.org/C166961238","wikidata":"https://www.wikidata.org/wiki/Q221395","display_name":"Air traffic control","level":2,"score":0.273499995470047},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2720000147819519},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.265500009059906},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.25}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/ojcoms.2026.3705147","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2026.3705147","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:67b59dee60bf4c599ba2121f417510f1","is_oa":false,"landing_page_url":"https://doaj.org/article/67b59dee60bf4c599ba2121f417510f1","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Open Journal of the Communications Society, Vol 7, Pp 6723-6740 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/ojcoms.2026.3705147","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2026.3705147","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Climate action","id":"https://metadata.un.org/sdg/13","score":0.7070839405059814}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Tor":[0],"Snowflake":[1,115],"employs":[2],"the":[3,34,49,59,112,135,161],"WebRTC":[4],"protocol":[5,82],"stack":[6],"to":[7,32,85,157,178],"circumvent":[8],"network":[9,110],"censorship":[10],"by":[11,78],"simulating":[12],"conventional":[13],"peer-to-peer":[14],"browser":[15],"communication.":[16],"Despite":[17],"modern":[18],"trained":[19],"detection":[20],"algorithms":[21],"achieving":[22],"accuracies":[23],"beyond":[24],"99%":[25],"in":[26,39,58,89],"laboratory":[27],"conditions,":[28],"these":[29,47,76],"evaluations":[30],"fail":[31],"consider":[33],"significant":[35,54],"class":[36],"imbalance":[37,131],"present":[38],"operational":[40,130],"contexts":[41],"where":[42],"circumvention":[43,123],"is":[44],"infrequent.":[45],"In":[46],"circumstances,":[48],"base-rate":[50],"fallacy":[51],"induces":[52],"a":[53,80,144],"accuracy":[55],"decline,":[56],"resulting":[57],"majority":[60],"of":[61],"positive":[62],"identifications":[63],"being":[64],"false":[65],"positives":[66],"and":[67,102],"making":[68],"supervised":[69,154],"approaches":[70],"operationally":[71],"infeasible.":[72],"This":[73],"study":[74],"mitigates":[75],"deficiencies":[77],"utilizing":[79],"36-dimensional":[81],"fingerprint":[83],"vector":[84],"identify":[86],"distinctive":[87],"patterns":[88],"DTLS":[90],"content":[91],"types,":[92],"STUN":[93],"binding":[94],"attributes,":[95],"TLS":[96],"record":[97],"distributions,":[98],"TCP":[99],"flag":[100],"configurations,":[101],"packet-level":[103],"entropy.":[104],"By":[105],"training":[106],"exclusively":[107],"on":[108],"standard":[109],"traffic,":[111],"framework":[113],"recognises":[114],"traffic":[116],"as":[117],"structural":[118],"anomalies":[119],"without":[120],"necessitating":[121],"labeled":[122],"samples.":[124],"A":[125],"systematic":[126],"evaluation":[127],"across":[128],"realistic":[129],"ratios":[132],"indicates":[133],"that":[134],"local":[136],"outlier":[137],"factor":[138],"(LOF)":[139],"demonstrates":[140],"strong":[141],"performance,":[142,172],"attaining":[143],"91.6%":[145],"F1-score":[146],"(86.0%":[147],"precision,":[148],"98.0%":[149],"recall)":[150],"at":[151,160,180],"1000:1,":[152],"while":[153],"classifiers":[155],"collapse":[156],"17.8\u201337.6%":[158],"precision":[159],"same":[162],"ratio.":[163],"Deep":[164],"learning":[165],"techniques":[166],"(AE,":[167],"VAE,":[168],"GANomaly)":[169],"attain":[170],"intermediate":[171],"with":[173],"F1-scores":[174],"ranging":[175],"from":[176],"68.7%":[177],"87.3%":[179],"1000:1.":[181]},"counts_by_year":[],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2026-06-19T00:00:00"}