{"id":"https://openalex.org/W2999984725","doi":"https://doi.org/10.1109/tdsc.2021.3065652","title":"Practical Encrypted Network Traffic Pattern Matching for Secure Middleboxes","display_name":"Practical Encrypted Network Traffic Pattern Matching for Secure Middleboxes","publication_year":2021,"publication_date":"2021-03-11","ids":{"openalex":"https://openalex.org/W2999984725","doi":"https://doi.org/10.1109/tdsc.2021.3065652","mag":"2999984725"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2021.3065652","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2021.3065652","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2001.01848","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Shangqi Lai","orcid":"https://orcid.org/0000-0002-0374-3593"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shangqi Lai","raw_affiliation_strings":["Faculty of Information Technology, Monash University, Clayton, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0002-0374-3593","affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Monash University, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xingliang Yuan","orcid":"https://orcid.org/0000-0002-3701-4946"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Xingliang Yuan","raw_affiliation_strings":["Faculty of Information Technology, Monash University, Clayton, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3701-4946","affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Monash University, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Shi-Feng Sun","orcid":"https://orcid.org/0000-0003-3742-5275"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shi-Feng Sun","raw_affiliation_strings":["Faculty of Information Technology, Monash University, Clayton, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0003-3742-5275","affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Monash University, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Joseph K. Liu","orcid":"https://orcid.org/0000-0001-6656-6240"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Joseph K. Liu","raw_affiliation_strings":["Faculty of Information Technology, Monash University, Clayton, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0001-6656-6240","affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Monash University, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Ron Steinfeld","orcid":null},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Ron Steinfeld","raw_affiliation_strings":["Faculty of Information Technology, Monash University, Clayton, VIC, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Monash University, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Amin Sakzad","orcid":"https://orcid.org/0000-0003-4569-3384"},"institutions":[{"id":"https://openalex.org/I56590836","display_name":"Monash University","ror":"https://ror.org/02bfwt286","country_code":"AU","type":"education","lineage":["https://openalex.org/I56590836"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Amin Sakzad","raw_affiliation_strings":["Faculty of Information Technology, Monash University, Clayton, VIC, Australia"],"raw_orcid":"https://orcid.org/0000-0003-4569-3384","affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Monash University, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I56590836"]}]},{"author_position":"last","author":{"id":null,"display_name":"Dongxi Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"government","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Dongxi Liu","raw_affiliation_strings":["Data 61 CSIRO, Clayton, VIC, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data 61 CSIRO, Clayton, VIC, Australia","institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.2696,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.87441636,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":98},"biblio":{"volume":"19","issue":"4","first_page":"2609","last_page":"2621"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.8679999709129333,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.8679999709129333,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.04839999973773956,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10651","display_name":"IPv6, Mobility, Handover, Networks, Security","score":0.019700000062584877,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.7937999963760376},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6740999817848206},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.5259000062942505},{"id":"https://openalex.org/keywords/default-gateway","display_name":"Default gateway","score":0.43540000915527344},{"id":"https://openalex.org/keywords/airfield-traffic-pattern","display_name":"Airfield traffic pattern","score":0.38769999146461487},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.38519999384880066},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.37119999527931213},{"id":"https://openalex.org/keywords/bandwidth","display_name":"Bandwidth (computing)","score":0.3562000095844269}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.835099995136261},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.7937999963760376},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.7608000040054321},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6740999817848206},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.5259000062942505},{"id":"https://openalex.org/C187713609","wikidata":"https://www.wikidata.org/wiki/Q2465461","display_name":"Default gateway","level":2,"score":0.43540000915527344},{"id":"https://openalex.org/C204673680","wikidata":"https://www.wikidata.org/wiki/Q1628107","display_name":"Airfield traffic pattern","level":2,"score":0.38769999146461487},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.38519999384880066},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.37119999527931213},{"id":"https://openalex.org/C2776257435","wikidata":"https://www.wikidata.org/wiki/Q1576430","display_name":"Bandwidth (computing)","level":2,"score":0.3562000095844269},{"id":"https://openalex.org/C68859911","wikidata":"https://www.wikidata.org/wiki/Q1503724","display_name":"Pattern matching","level":2,"score":0.35569998621940613},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3287000060081482},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3273000121116638},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.31619998812675476},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.30880001187324524},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.2971000075340271},{"id":"https://openalex.org/C69254412","wikidata":"https://www.wikidata.org/wiki/Q6554302","display_name":"Link encryption","level":4,"score":0.290800005197525},{"id":"https://openalex.org/C61455927","wikidata":"https://www.wikidata.org/wiki/Q1030529","display_name":"Blossom algorithm","level":3,"score":0.2766999900341034},{"id":"https://openalex.org/C510870077","wikidata":"https://www.wikidata.org/wiki/Q7444868","display_name":"Secure communication","level":3,"score":0.271699994802475},{"id":"https://openalex.org/C2779898492","wikidata":"https://www.wikidata.org/wiki/Q4112081","display_name":"Network virtualization","level":4,"score":0.2599000036716461},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.25600001215934753},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.25270000100135803}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tdsc.2021.3065652","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2021.3065652","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2001.01848","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2001.01848","pdf_url":"https://arxiv.org/pdf/2001.01848","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2001.01848","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2001.01848","pdf_url":"https://arxiv.org/pdf/2001.01848","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1539207281","https://openalex.org/W2062805799","https://openalex.org/W2142972529","https://openalex.org/W2145426052","https://openalex.org/W2235087147","https://openalex.org/W2379987282","https://openalex.org/W2462029305","https://openalex.org/W2487561892","https://openalex.org/W2561240722","https://openalex.org/W2603792932","https://openalex.org/W2726246108","https://openalex.org/W2734383261","https://openalex.org/W2746419656","https://openalex.org/W2751762880","https://openalex.org/W2764080192","https://openalex.org/W2790063371","https://openalex.org/W2798841271","https://openalex.org/W2891871515","https://openalex.org/W2898195193","https://openalex.org/W2914403634","https://openalex.org/W2954241526","https://openalex.org/W2963311060","https://openalex.org/W2966910544","https://openalex.org/W2983433342","https://openalex.org/W2983549981","https://openalex.org/W3009707646","https://openalex.org/W3086424741","https://openalex.org/W3138749118","https://openalex.org/W6697538429","https://openalex.org/W6697984839","https://openalex.org/W6736340968","https://openalex.org/W6751063601"],"related_works":[],"abstract_inverted_index":{"Network":[0],"Function":[1],"Virtualisation":[2],"(NFV)":[3],"advances":[4],"the":[5,25,32,54,64,87,99,144,155],"adoption":[6],"of":[7,28,53,124,146,157,198],"composable":[8],"software":[9],"middleboxes.":[10,108],"Accordingly,":[11],"cloud":[12],"data":[13],"centres":[14],"become":[15],"major":[16],"NFV":[17],"vendors":[18],"for":[19,106],"enterprise":[20,65],"traffic":[21,29,169],"processing.":[22],"Due":[23],"to":[24,31,67,86,111,128,142,148,191],"privacy":[26],"concern":[27],"redirection":[30],"cloud,":[33],"secure":[34,107],"middlebox":[35],"systems":[36,56],"(e.g.,":[37],"BlindBox)":[38],"draw":[39],"much":[40],"attention;":[41],"they":[42],"can":[43,82,177],"process":[44],"encrypted":[45,48,102,140],"packets":[46],"against":[47],"rules":[49,184],"directly.":[50],"However,":[51],"most":[52],"existing":[55],"supporting":[57],"pattern":[58,103],"matching":[59,104,151],"based":[60],"network":[61],"functions":[62],"require":[63],"gateway":[66],"tokenise":[68],"packet":[69,88,180],"payloads":[70],"via":[71],"sliding":[72],"windows.":[73],"Such":[74],"tokenisation":[75],"induces":[76],"a":[77,112,122,179,196],"considerable":[78],"communication":[79,133],"overhead,":[80],"which":[81],"be":[83],"over":[84,165,181],"100\u00d7":[85],"size.":[89],"To":[90,135],"overcome":[91],"this":[92,95],"bottleneck,":[93],"in":[94,201],"article,":[96],"we":[97,138],"propose":[98,121],"first":[100],"bandwidth-efficient":[101],"protocol":[105,160],"We":[109,153],"resort":[110],"primitive":[113],"called":[114],"symmetric":[115],"hidden":[116],"vector":[117],"encryption":[118],"(SHVE),":[119],"and":[120,131,161,168],"variant":[123],"it,":[125],"aka":[126],"SHVE+,":[127],"achieve":[129],"constant":[130],"moderate":[132],"cost.":[134],"speed":[136],"up,":[137],"devise":[139],"filters":[141],"reduce":[143],"number":[145],"accesses":[147],"SHVE+":[149],"during":[150],"highly.":[152],"formalise":[154],"security":[156],"our":[158,175],"proposed":[159],"conduct":[162],"comprehensive":[163],"evaluations":[164],"real-world":[166],"rulesets":[167],"dumps.":[170],"The":[171],"results":[172],"show":[173],"that":[174],"design":[176],"inspect":[178],"20":[182],"k":[183],"within":[185],"100":[186],"<inline-formula><tex-math":[187],"notation=\"LaTeX\">$\\mu$</tex-math></inline-formula>":[188],"s.":[189],"Compared":[190],"prior":[192],"work,":[193],"it":[194],"brings":[195],"saving":[197],"94":[199],"percent":[200],"bandwidth":[202],"consumption.":[203]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2020-01-23T00:00:00"}