{"id":"https://openalex.org/W7130341755","doi":"https://doi.org/10.1109/tencon66050.2025.11375148","title":"QUIC-AID: Adaptive Intrusion Detection for QUIC Traffic Using Online Learning with ADWIN-Based Drift Detection","display_name":"QUIC-AID: Adaptive Intrusion Detection for QUIC Traffic Using Online Learning with ADWIN-Based Drift Detection","publication_year":2025,"publication_date":"2025-10-27","ids":{"openalex":"https://openalex.org/W7130341755","doi":"https://doi.org/10.1109/tencon66050.2025.11375148"},"language":null,"primary_location":{"id":"doi:10.1109/tencon66050.2025.11375148","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tencon66050.2025.11375148","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"TENCON 2025 - 2025 IEEE Region 10 Conference (TENCON)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126308116","display_name":"Carlo M. Alamani","orcid":null},"institutions":[{"id":"https://openalex.org/I87074743","display_name":"University of the Philippines Diliman","ror":"https://ror.org/03tbh6y23","country_code":"PH","type":"education","lineage":["https://openalex.org/I103911934","https://openalex.org/I87074743"]}],"countries":["PH"],"is_corresponding":false,"raw_author_name":"Carlo M. Alamani","raw_affiliation_strings":["Electrical and Electronics Engineering Institute, University of the Philippines Diliman,Quezon City,Philippines"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Electronics Engineering Institute, University of the Philippines Diliman,Quezon City,Philippines","institution_ids":["https://openalex.org/I87074743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126313728","display_name":"Mary Crizelle Jamielane T. Figueroa","orcid":null},"institutions":[{"id":"https://openalex.org/I87074743","display_name":"University of the Philippines Diliman","ror":"https://ror.org/03tbh6y23","country_code":"PH","type":"education","lineage":["https://openalex.org/I103911934","https://openalex.org/I87074743"]}],"countries":["PH"],"is_corresponding":false,"raw_author_name":"Mary Crizelle Jamielane T. Figueroa","raw_affiliation_strings":["Electrical and Electronics Engineering Institute, University of the Philippines Diliman,Quezon City,Philippines"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Electronics Engineering Institute, University of the Philippines Diliman,Quezon City,Philippines","institution_ids":["https://openalex.org/I87074743"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126304653","display_name":"John Raphael Q. Mundo","orcid":null},"institutions":[{"id":"https://openalex.org/I87074743","display_name":"University of the Philippines Diliman","ror":"https://ror.org/03tbh6y23","country_code":"PH","type":"education","lineage":["https://openalex.org/I103911934","https://openalex.org/I87074743"]}],"countries":["PH"],"is_corresponding":false,"raw_author_name":"John Raphael Q. Mundo","raw_affiliation_strings":["Electrical and Electronics Engineering Institute, University of the Philippines Diliman,Quezon City,Philippines"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Electronics Engineering Institute, University of the Philippines Diliman,Quezon City,Philippines","institution_ids":["https://openalex.org/I87074743"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033800921","display_name":"Jaybie A. De Guzman","orcid":"https://orcid.org/0000-0002-2816-7721"},"institutions":[{"id":"https://openalex.org/I87074743","display_name":"University of the Philippines Diliman","ror":"https://ror.org/03tbh6y23","country_code":"PH","type":"education","lineage":["https://openalex.org/I103911934","https://openalex.org/I87074743"]}],"countries":["PH"],"is_corresponding":false,"raw_author_name":"Jaybie A. de Guzman","raw_affiliation_strings":["Electrical and Electronics Engineering Institute, University of the Philippines Diliman,Quezon City,Philippines"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Electronics Engineering Institute, University of the Philippines Diliman,Quezon City,Philippines","institution_ids":["https://openalex.org/I87074743"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I87074743"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.65634054,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"923","last_page":"927"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5342000126838684,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5342000126838684,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.26989999413490295,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.08910000324249268,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5644000172615051},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.555400013923645},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.4993000030517578},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.48989999294281006},{"id":"https://openalex.org/keywords/application-layer","display_name":"Application layer","score":0.48410001397132874},{"id":"https://openalex.org/keywords/flooding","display_name":"Flooding (psychology)","score":0.48080000281333923},{"id":"https://openalex.org/keywords/weighting","display_name":"Weighting","score":0.46129998564720154},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.45809999108314514},{"id":"https://openalex.org/keywords/online-learning","display_name":"Online learning","score":0.4307999908924103}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7285000085830688},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5644000172615051},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.555400013923645},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.4993000030517578},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.48989999294281006},{"id":"https://openalex.org/C190793597","wikidata":"https://www.wikidata.org/wiki/Q189768","display_name":"Application layer","level":3,"score":0.48410001397132874},{"id":"https://openalex.org/C186594467","wikidata":"https://www.wikidata.org/wiki/Q1429176","display_name":"Flooding (psychology)","level":2,"score":0.48080000281333923},{"id":"https://openalex.org/C183115368","wikidata":"https://www.wikidata.org/wiki/Q856577","display_name":"Weighting","level":2,"score":0.46129998564720154},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.45809999108314514},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.44449999928474426},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.44269999861717224},{"id":"https://openalex.org/C2986087404","wikidata":"https://www.wikidata.org/wiki/Q15946010","display_name":"Online learning","level":2,"score":0.4307999908924103},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.42559999227523804},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.41690000891685486},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.400299996137619},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.39010000228881836},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3788999915122986},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3686999976634979},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.3458999991416931},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.34209999442100525},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.32249999046325684},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.29010000824928284},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.2883000075817108},{"id":"https://openalex.org/C149672775","wikidata":"https://www.wikidata.org/wiki/Q8777","display_name":"Hypertext Transfer Protocol","level":3,"score":0.2865000069141388},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.28600001335144043},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.2824000120162964},{"id":"https://openalex.org/C63969886","wikidata":"https://www.wikidata.org/wiki/Q3536440","display_name":"Internet traffic","level":3,"score":0.2712000012397766},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2551000118255615}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tencon66050.2025.11375148","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tencon66050.2025.11375148","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"TENCON 2025 - 2025 IEEE Region 10 Conference (TENCON)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5715919137001038,"id":"https://metadata.un.org/sdg/15","display_name":"Life in Land"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W1985987493","https://openalex.org/W2136051823","https://openalex.org/W2143991132","https://openalex.org/W2626498001","https://openalex.org/W2745034467","https://openalex.org/W2908669990","https://openalex.org/W3036781224","https://openalex.org/W3093410479","https://openalex.org/W3102893897","https://openalex.org/W3200219001","https://openalex.org/W4221120091","https://openalex.org/W4281621630","https://openalex.org/W4311107002","https://openalex.org/W4313837379","https://openalex.org/W4362733286","https://openalex.org/W4392379943","https://openalex.org/W4392388421","https://openalex.org/W4399119637","https://openalex.org/W4401732041","https://openalex.org/W4407851768","https://openalex.org/W4412965829"],"related_works":[],"abstract_inverted_index":{"QUIC":[0,55,76,108],"is":[1,6,57],"a":[2,25,38,66,128],"transport":[3],"protocol":[4],"that":[5,113],"gaining":[7],"adoption":[8],"among":[9],"content":[10],"providers,":[11],"offering":[12],"reliability":[13],"and":[14,72,79,87,97,119],"speed":[15],"by":[16],"building":[17],"an":[18,49,90],"encryption":[19],"layer":[20],"similar":[21],"to":[22,29,46],"TCP's":[23],"atop":[24],"UDP":[26],"framework.":[27],"Due":[28],"the":[30,35,106,137,149,158,170],"vulnerabilities":[31],"of":[32,75,123,151],"both":[33],"protocols,":[34],"demand":[36],"for":[37,54,69,140],"QUIC-based":[39],"Network":[40],"Intrusion":[41],"Detection":[42],"System":[43],"(IDS)":[44],"continues":[45],"grow.":[47],"QUIC-AID,":[48],"adaptive":[50],"IDS":[51],"framework":[52],"designed":[53],"traffic,":[56],"proposed.":[58],"Labeled":[59],"network":[60],"traffic":[61,71],"flows":[62],"were":[63],"collected":[64,107],"through":[65,162],"simulated":[67],"environment":[68],"benign":[70],"two":[73],"types":[74],"attacks:":[77],"flooding":[78],"fuzzing.":[80],"QUIC-AID":[81,114],"incorporates":[82],"(1)":[83],"dynamic":[84,146],"feature":[85,147,161],"selection-OFS":[86],"FIRES,":[88,163],"(2)":[89],"online":[91],"learning":[92],"classifier-Adaptive":[93],"Random":[94],"Forest":[95],"(ARF),":[96],"(3)":[98],"drift":[99],"detection-Adaptive":[100],"Windowing":[101],"(ADWIN).":[102],"Prequential":[103],"evaluation":[104],"on":[105,169],"dataset":[109],"(390,000":[110],"flows)":[111],"showed":[112],"outperformed":[115],"other":[116],"benchmarks":[117],"(KNN":[118],"OC-SVM)":[120],"in":[121],"terms":[122],"true":[124],"positive":[125,130],"detection":[126],"with":[127],"false":[129],"rate":[131,150],"below":[132],"0.1%.":[133],"It":[134],"also":[135],"yielded":[136],"best":[138],"results":[139],"ARF,":[141],"achieving":[142],"99.94%":[143],"recall.":[144],"With":[145],"selection,":[148],"byte":[152],"flow":[153],"during":[154],"attacks":[155],"consistently":[156],"had":[157],"highest":[159],"weighting":[160],"whereas":[164],"OFS":[165],"shifted":[166],"weights":[167],"based":[168],"attack":[171],"type.":[172]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-02-19T00:00:00"}