{"id":"https://openalex.org/W4389473787","doi":"https://doi.org/10.1109/tdsc.2023.3340563","title":"IoTa: Fine-Grained Traffic Monitoring for IoT Devices via Fully Packet-Level Models","display_name":"IoTa: Fine-Grained Traffic Monitoring for IoT Devices via Fully Packet-Level Models","publication_year":2023,"publication_date":"2023-12-08","ids":{"openalex":"https://openalex.org/W4389473787","doi":"https://doi.org/10.1109/tdsc.2023.3340563"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2023.3340563","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3340563","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/tdsc.2023.3340563","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045228612","display_name":"Chenxin Duan","orcid":"https://orcid.org/0000-0002-5012-1017"},"institutions":[{"id":"https://openalex.org/I4210156423","display_name":"National Engineering Research Center for Information Technology in Agriculture","ror":"https://ror.org/04c3j3t84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210156423"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenxin Duan","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-5012-1017","affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China","institution_ids":["https://openalex.org/I4210156423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104728630","display_name":"Sainan Li","orcid":"https://orcid.org/0009-0004-2636-1784"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sainan Li","raw_affiliation_strings":["Department of Computer Science and Technology, Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0004-2636-1784","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104728074","display_name":"Hai Lin","orcid":"https://orcid.org/0000-0001-9428-7644"},"institutions":[{"id":"https://openalex.org/I4210156423","display_name":"National Engineering Research Center for Information Technology in Agriculture","ror":"https://ror.org/04c3j3t84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210156423"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hai Lin","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China","Zhongguancun Laboratory, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-9428-7644","affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China","institution_ids":["https://openalex.org/I4210156423"]},{"raw_affiliation_string":"Zhongguancun Laboratory, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101921959","display_name":"Wenqi Chen","orcid":"https://orcid.org/0000-0003-2326-8766"},"institutions":[{"id":"https://openalex.org/I4210156423","display_name":"National Engineering Research Center for Information Technology in Agriculture","ror":"https://ror.org/04c3j3t84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210156423"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenqi Chen","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-2326-8766","affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China","institution_ids":["https://openalex.org/I4210156423"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071667007","display_name":"Guanglei Song","orcid":"https://orcid.org/0000-0003-4736-6264"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guanglei Song","raw_affiliation_strings":["Zhongguancun Laboratory, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4736-6264","affiliations":[{"raw_affiliation_string":"Zhongguancun Laboratory, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054117052","display_name":"Chenglong Li","orcid":"https://orcid.org/0000-0003-4300-678X"},"institutions":[{"id":"https://openalex.org/I4210156423","display_name":"National Engineering Research Center for Information Technology in Agriculture","ror":"https://ror.org/04c3j3t84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210156423"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenglong Li","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China","Zhongguancun Laboratory, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4300-678X","affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China","institution_ids":["https://openalex.org/I4210156423"]},{"raw_affiliation_string":"Zhongguancun Laboratory, Beijing, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023416195","display_name":"Jiahai Yang","orcid":"https://orcid.org/0000-0001-6109-6737"},"institutions":[{"id":"https://openalex.org/I4210156423","display_name":"National Engineering Research Center for Information Technology in Agriculture","ror":"https://ror.org/04c3j3t84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210156423"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiahai Yang","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China","Zhongguancun Laboratory, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6109-6737","affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China","institution_ids":["https://openalex.org/I4210156423"]},{"raw_affiliation_string":"Zhongguancun Laboratory, Beijing, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100343127","display_name":"Zhiliang Wang","orcid":"https://orcid.org/0000-0001-6587-820X"},"institutions":[{"id":"https://openalex.org/I4210156423","display_name":"National Engineering Research Center for Information Technology in Agriculture","ror":"https://ror.org/04c3j3t84","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210156423"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiliang Wang","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Zhongguancun Laboratory, Beijing, China","Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6587-820X","affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Zhongguancun Laboratory, Beijing, China","institution_ids":[]},{"raw_affiliation_string":"Beijing National Research Center for Information Science and Technology (BNRist), Beijing, China","institution_ids":["https://openalex.org/I4210156423"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.7993,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.72746147,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"21","issue":"4","first_page":"3931","last_page":"3947"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9950000047683716,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7002462148666382},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6856163144111633},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5938323736190796},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.4616730213165283},{"id":"https://openalex.org/keywords/traffic-flow","display_name":"Traffic flow (computer networking)","score":0.4342607259750366},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4152144491672516},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4012022316455841},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3494807183742523},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3365527093410492},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.19562843441963196}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7002462148666382},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6856163144111633},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5938323736190796},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4616730213165283},{"id":"https://openalex.org/C207512268","wikidata":"https://www.wikidata.org/wiki/Q3074551","display_name":"Traffic flow (computer networking)","level":2,"score":0.4342607259750366},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4152144491672516},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4012022316455841},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3494807183742523},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3365527093410492},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.19562843441963196}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2023.3340563","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3340563","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tdsc.2023.3340563","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tdsc.2023.3340563","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6419233385","display_name":null,"funder_award_id":"62172251","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W1964103998","https://openalex.org/W1982774175","https://openalex.org/W2111371783","https://openalex.org/W2133226833","https://openalex.org/W2508433864","https://openalex.org/W2522532078","https://openalex.org/W2583228413","https://openalex.org/W2611338987","https://openalex.org/W2774169481","https://openalex.org/W2799758613","https://openalex.org/W2888505697","https://openalex.org/W2890559797","https://openalex.org/W2912944782","https://openalex.org/W2921669466","https://openalex.org/W2929835212","https://openalex.org/W2930144424","https://openalex.org/W2944968054","https://openalex.org/W2945159175","https://openalex.org/W2947175569","https://openalex.org/W2947969447","https://openalex.org/W2955481530","https://openalex.org/W2963197901","https://openalex.org/W2980558733","https://openalex.org/W2988337058","https://openalex.org/W3007016253","https://openalex.org/W3027485588","https://openalex.org/W3047333263","https://openalex.org/W3047562633","https://openalex.org/W3122864121","https://openalex.org/W3131136581","https://openalex.org/W3132321084","https://openalex.org/W3165286789","https://openalex.org/W3210742324","https://openalex.org/W3213708419","https://openalex.org/W4324007053","https://openalex.org/W6634834952","https://openalex.org/W6762982010","https://openalex.org/W6794840795","https://openalex.org/W6798200768","https://openalex.org/W6903521237"],"related_works":["https://openalex.org/W4245926026","https://openalex.org/W4311097251","https://openalex.org/W2586548817","https://openalex.org/W2625093826","https://openalex.org/W2950174689","https://openalex.org/W4200598720","https://openalex.org/W2921026492","https://openalex.org/W4247463117","https://openalex.org/W4361251261","https://openalex.org/W3031181660"],"abstract_inverted_index":{"With":[0,141],"Internet-of-Things":[1],"(IoT)":[2],"devices":[3,80,170],"gaining":[4],"popularity,":[5],"dedicated":[6],"monitoring":[7,113],"systems":[8],"which":[9],"accurately":[10],"detect":[11,121],"intrusion":[12,122,191],"traffic":[13,26,76,112,123,133,139,145,192],"for":[14,44,78,84,124,157,189,204],"them":[15],"are":[16,98,231],"in":[17],"high":[18],"demand.":[19],"Existing":[20],"methods":[21],"mainly":[22],"use":[23,159],"statistical":[24],"spatial-temporal":[25],"features":[27],"and":[28,46,51,58,87,93,109,143,154,184,209,227],"machine":[29],"learning":[30],"models.":[31],"Their":[32],"practicality":[33],"has":[34],"been":[35],"limited":[36],"due":[37],"to":[38,69,74,107,120,220],"the":[39,61,91,99,131,194,210,218,222,234],"lack":[40],"of":[41,63,95,167],"detection":[42,179,199],"ability":[43],"stealthy":[45],"tricky":[47],"attacks,":[48],"diagnostic":[49,225],"utility":[50,226],"long-term":[52,158],"performance.":[53],"To":[54],"address":[55],"these":[56,104],"problems":[57],"motivated":[59],"by":[60,81,205,217,233],"simplicity":[62],"mini":[64],"IoT":[65,79,125,169],"devices,":[66],"we":[67],"propose":[68],"construct":[70],"fully":[71],"packet-level":[72],"models":[73,106],"profile":[75],"patterns":[77,135],"constructing":[82],"automaton":[83],"short":[85],"flow":[86],"long":[88],"flow,":[89],"where":[90],"length":[92],"direction":[94],"each":[96],"packet":[97],"representative":[100],"features.":[101],"We":[102],"apply":[103],"fine-grained":[105],"design":[108],"develop":[110],"a":[111],"system,":[114],"namely":[115],"<sc":[116,127,147,173],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[117,128,148,174],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">IoTa</small>":[118,129,149,175],",":[119],"devices.":[126],"matches":[130],"ongoing":[132],"with":[134],"extracted":[136],"from":[137],"normal":[138],"traces.":[140],"visible":[142],"interactive":[144],"profiles,":[146],"can":[150,176,201,214],"generate":[151],"interpretable":[152],"alerts":[153],"is":[155],"available":[156],"under":[160],"reasonable":[161],"human":[162],"efforts.":[163],"Evaluations":[164],"on":[165],"dozens":[166],"common":[168],"show":[171],"that":[172],"achieve":[177],"excellent":[178],"accuracy":[180],"(nearly":[181],"perfect":[182],"recalls":[183],"always":[185],"over":[186],"0.999":[187],"precisions)":[188],"various":[190],"covering":[193],"complete":[195],"kill":[196],"chains.":[197],"Incorrect":[198],"results":[200],"be":[202,215],"compensated":[203],"error":[206],"recovery":[207],"mechanisms":[208],"understandable":[211],"alert":[212,229],"context":[213],"used":[216],"operator":[219],"enhance":[221],"system.":[223],"The":[224],"little":[228],"weariness":[230],"recognized":[232],"experienced":[235],"operators.":[236]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-27T08:26:11.824852","created_date":"2025-10-10T00:00:00"}