{"id":"https://openalex.org/W4390481680","doi":"https://doi.org/10.1109/ssci52147.2023.10371980","title":"Explainable Artificial Intelligence for Improving a Session-Based Malware Traffic Classification with Deep Learning","display_name":"Explainable Artificial Intelligence for Improving a Session-Based Malware Traffic Classification with Deep Learning","publication_year":2023,"publication_date":"2023-12-05","ids":{"openalex":"https://openalex.org/W4390481680","doi":"https://doi.org/10.1109/ssci52147.2023.10371980"},"language":"en","primary_location":{"id":"doi:10.1109/ssci52147.2023.10371980","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ssci52147.2023.10371980","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium Series on Computational Intelligence (SSCI)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027381468","display_name":"Stefan Machmeier","orcid":"https://orcid.org/0000-0002-7028-1755"},"institutions":[{"id":"https://openalex.org/I223822909","display_name":"Heidelberg University","ror":"https://ror.org/038t36y30","country_code":"DE","type":"education","lineage":["https://openalex.org/I223822909"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Stefan Machmeier","raw_affiliation_strings":["Heidelberg University,Engineering Mathematics and Computing Lab,Heidelberg,Germany,69120"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Heidelberg University,Engineering Mathematics and Computing Lab,Heidelberg,Germany,69120","institution_ids":["https://openalex.org/I223822909"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070389132","display_name":"Maximilian Hoecker","orcid":null},"institutions":[{"id":"https://openalex.org/I223822909","display_name":"Heidelberg University","ror":"https://ror.org/038t36y30","country_code":"DE","type":"education","lineage":["https://openalex.org/I223822909"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Maximilian Hoecker","raw_affiliation_strings":["Heidelberg University,Engineering Mathematics and Computing Lab,Heidelberg,Germany,69120"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Heidelberg University,Engineering Mathematics and Computing Lab,Heidelberg,Germany,69120","institution_ids":["https://openalex.org/I223822909"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5058920681","display_name":"Vincent Heuveline","orcid":"https://orcid.org/0000-0002-2217-7558"},"institutions":[{"id":"https://openalex.org/I223822909","display_name":"Heidelberg University","ror":"https://ror.org/038t36y30","country_code":"DE","type":"education","lineage":["https://openalex.org/I223822909"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Vincent Heuveline","raw_affiliation_strings":["Heidelberg University,Engineering Mathematics and Computing Lab,Heidelberg,Germany,69120"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Heidelberg University,Engineering Mathematics and Computing Lab,Heidelberg,Germany,69120","institution_ids":["https://openalex.org/I223822909"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I223822909"],"apc_list":null,"apc_paid":null,"fwci":2.1783,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.89080384,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"850","last_page":"855"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8361831903457642},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.679353654384613},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5683940649032593},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.5427932143211365},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5067647099494934},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5063086748123169},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.4414884150028229},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.41633540391921997},{"id":"https://openalex.org/keywords/feature-learning","display_name":"Feature learning","score":0.41314810514450073},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.16747671365737915}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8361831903457642},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.679353654384613},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5683940649032593},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5427932143211365},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5067647099494934},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5063086748123169},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.4414884150028229},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.41633540391921997},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.41314810514450073},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.16747671365737915},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ssci52147.2023.10371980","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ssci52147.2023.10371980","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE Symposium Series on Computational Intelligence (SSCI)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W1686810756","https://openalex.org/W1817166299","https://openalex.org/W1994488211","https://openalex.org/W2019821286","https://openalex.org/W2103662262","https://openalex.org/W2110385611","https://openalex.org/W2113555287","https://openalex.org/W2146260356","https://openalex.org/W2164766691","https://openalex.org/W2531409750","https://openalex.org/W2606697812","https://openalex.org/W2789828921","https://openalex.org/W2924962435","https://openalex.org/W2953231656","https://openalex.org/W2962858109","https://openalex.org/W3016769969","https://openalex.org/W3029534949","https://openalex.org/W3094502228","https://openalex.org/W3125596609","https://openalex.org/W3129726290","https://openalex.org/W3176196997","https://openalex.org/W3200969414","https://openalex.org/W4224249813","https://openalex.org/W4285184946","https://openalex.org/W4287022992","https://openalex.org/W4290755474","https://openalex.org/W4294691140","https://openalex.org/W4297235882","https://openalex.org/W4298653275","https://openalex.org/W4389543350"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2012465643","https://openalex.org/W2773751105","https://openalex.org/W3048601286","https://openalex.org/W2965925734","https://openalex.org/W4293863212","https://openalex.org/W2050261031"],"abstract_inverted_index":{"In":[0,140,201],"network":[1,9,18,29,42,71,90,159],"security,":[2],"applying":[3,45],"deep":[4,50],"learning":[5,51],"methods":[6,87],"to":[7,31,33,63,88,149,154,214],"detect":[8,215],"traffic":[10,19,43,213],"anomalies":[11],"has":[12],"achieved":[13],"great":[14],"results":[15],"with":[16,192],"various":[17],"representations.":[20],"A":[21],"possible":[22],"representation":[23,46,153],"is":[24,61,68],"the":[25,38,95,112,116,120,130,156],"transformation":[26,146],"of":[27,41,123,134,147,158,171,219],"raw":[28],"communication":[30,72,104],"images":[32],"extract":[34],"valuable":[35,66],"information":[36,67],"from":[37,70],"unmanageable":[39],"amount":[40],"by":[44,207],"learning.":[47],"However,":[48],"since":[49],"models":[52],"can":[53],"result":[54],"in":[55,101],"black":[56],"boxes":[57],"for":[58,174,194,198],"users,":[59],"it":[60],"interesting":[62],"understand":[64],"what":[65],"learned":[69],"converted":[73],"into":[74],"images.":[75],"This":[76],"paper":[77],"elaborates":[78],"on":[79,111],"that":[80,92,99],"question":[81],"using":[82],"explainable":[83],"artificial":[84],"intelligence":[85],"(XAI)":[86],"identify":[89],"packets":[91,100],"most":[93],"influence":[94,110],"prediction":[96],"and":[97,118,125,128,178,196,211],"verify":[98],"a":[102,144,150,188],"malware":[103],"containing":[105],"malicious":[106,216],"payloads":[107],"have":[108],"high":[109],"prediction.":[113],"We":[114],"inspect":[115],"Grad-CAM":[117],"visualize":[119],"Integrated":[121],"Gradients":[122],"Xception":[124,167,177],"VGG-19":[126,179],"model":[127,166,186],"investigate":[129],"attention":[131],"heat":[132],"maps":[133],"our":[135,164],"Vision":[136],"Transformer":[137],"(ViT)":[138],"model.":[139],"addition,":[141],"we":[142],"present":[143],"novel":[145],"sessions":[148],"new":[151],"image":[152],"expand":[155],"informativeness":[157],"communication.":[160],"For":[161],"multiclass":[162,195],"classification,":[163,176],"best":[165],"achieves":[168,187],"an":[169],"accuracy":[170],"97.95%,":[172],"whereas,":[173],"binary":[175,199],"achieve":[180],"well":[181],"above":[182],"99.50%.":[183],"Our":[184],"ViT":[185],"significantly":[189],"lower":[190],"performance":[191],"95.86%":[193],"99.36%":[197],"classification.":[200],"particular,":[202],"computing":[203],"centers":[204],"could":[205],"benefit":[206],"examining":[208],"their":[209],"inbound":[210],"outbound":[212],"behaviors":[217],"ahead":[218],"time.":[220]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}