{"id":"https://openalex.org/W1972374951","doi":"https://doi.org/10.1109/tifs.2013.2252341","title":"Payload Attribution via Character Dependent Multi-Bloom Filters","display_name":"Payload Attribution via Character Dependent Multi-Bloom Filters","publication_year":2013,"publication_date":"2013-03-12","ids":{"openalex":"https://openalex.org/W1972374951","doi":"https://doi.org/10.1109/tifs.2013.2252341","mag":"1972374951"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2013.2252341","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2013.2252341","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067761049","display_name":"Mohammad Hashem Haghighat","orcid":null},"institutions":[{"id":"https://openalex.org/I133529467","display_name":"Sharif University of Technology","ror":"https://ror.org/024c2fq17","country_code":"IR","type":"education","lineage":["https://openalex.org/I133529467"]}],"countries":["IR"],"is_corresponding":true,"raw_author_name":"Mohammad Hashem Haghighat","raw_affiliation_strings":["DNS Laboratory, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","Department of Computer Engineering, Sharif University of Technology, Tehran, Iran"],"affiliations":[{"raw_affiliation_string":"DNS Laboratory, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]},{"raw_affiliation_string":"Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113837577","display_name":"Mehdi Tavakoli","orcid":null},"institutions":[{"id":"https://openalex.org/I133529467","display_name":"Sharif University of Technology","ror":"https://ror.org/024c2fq17","country_code":"IR","type":"education","lineage":["https://openalex.org/I133529467"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Mehdi Tavakoli","raw_affiliation_strings":["DNS Laboratory, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","Department of Computer Engineering, Sharif University of Technology, Tehran, Iran"],"affiliations":[{"raw_affiliation_string":"DNS Laboratory, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]},{"raw_affiliation_string":"Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060444268","display_name":"Mehdi Kharrazi","orcid":"https://orcid.org/0000-0002-1773-8314"},"institutions":[{"id":"https://openalex.org/I133529467","display_name":"Sharif University of Technology","ror":"https://ror.org/024c2fq17","country_code":"IR","type":"education","lineage":["https://openalex.org/I133529467"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Mehdi Kharrazi","raw_affiliation_strings":["DNS Laboratory, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","Department of Computer Engineering, Sharif University of Technology, Tehran, Iran"],"affiliations":[{"raw_affiliation_string":"DNS Laboratory, Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]},{"raw_affiliation_string":"Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5067761049"],"corresponding_institution_ids":["https://openalex.org/I133529467"],"apc_list":null,"apc_paid":null,"fwci":2.9654,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.91326108,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"8","issue":"5","first_page":"705","last_page":"716"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.8755105137825012},{"id":"https://openalex.org/keywords/bloom-filter","display_name":"Bloom filter","score":0.8648075461387634},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8356047868728638},{"id":"https://openalex.org/keywords/string","display_name":"String (physics)","score":0.5849031805992126},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5056984424591064},{"id":"https://openalex.org/keywords/character","display_name":"Character (mathematics)","score":0.4810633659362793},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.45537078380584717},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3253057599067688},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.2455098032951355},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1451694667339325},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.0719863772392273}],"concepts":[{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.8755105137825012},{"id":"https://openalex.org/C147224247","wikidata":"https://www.wikidata.org/wiki/Q885373","display_name":"Bloom filter","level":2,"score":0.8648075461387634},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8356047868728638},{"id":"https://openalex.org/C157486923","wikidata":"https://www.wikidata.org/wiki/Q1376436","display_name":"String (physics)","level":2,"score":0.5849031805992126},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5056984424591064},{"id":"https://openalex.org/C2780861071","wikidata":"https://www.wikidata.org/wiki/Q1062934","display_name":"Character (mathematics)","level":2,"score":0.4810633659362793},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.45537078380584717},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3253057599067688},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2455098032951355},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1451694667339325},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0719863772392273},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C37914503","wikidata":"https://www.wikidata.org/wiki/Q156495","display_name":"Mathematical physics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tifs.2013.2252341","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2013.2252341","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.711.6254","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.711.6254","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://sharif.edu/%7Ekharrazi/pubs/tifs13-preprint.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6600000262260437}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W20635404","https://openalex.org/W74995240","https://openalex.org/W1578679497","https://openalex.org/W1970399788","https://openalex.org/W2066197655","https://openalex.org/W2111295912","https://openalex.org/W2119030343","https://openalex.org/W2119613543","https://openalex.org/W2123845384","https://openalex.org/W2136986825","https://openalex.org/W2137786570","https://openalex.org/W2146211060","https://openalex.org/W2148914579","https://openalex.org/W2157153057","https://openalex.org/W2157740020","https://openalex.org/W4255033750","https://openalex.org/W6600830379","https://openalex.org/W6603018428","https://openalex.org/W6678080559","https://openalex.org/W6681652963","https://openalex.org/W6682139215","https://openalex.org/W6683360394"],"related_works":["https://openalex.org/W2776975642","https://openalex.org/W1588510835","https://openalex.org/W2332271486","https://openalex.org/W1501220409","https://openalex.org/W2606286704","https://openalex.org/W1580517046","https://openalex.org/W2470706224","https://openalex.org/W2118107930","https://openalex.org/W2115742290","https://openalex.org/W1519909059"],"abstract_inverted_index":{"Network":[0],"forensic":[1],"analysts":[2],"employ":[3],"payload":[4,84,101],"attribution":[5,174],"systems":[6],"(PAS)":[7],"as":[8,126,207,251],"an":[9,29,70,252],"investigative":[10],"tool,":[11],"which":[12],"enables":[13],"them":[14],"to":[15,64,79,114,122,142,149,203,240,264],"store":[16],"and":[17,39,151,171],"summarize":[18],"large":[19],"amounts":[20],"of":[21,43,73,88,134,161,197],"network":[22,50],"traffic,":[23],"including":[24],"full":[25],"packet":[26],"payload.":[27],"Hence":[28],"investigator":[30,78],"could":[31],"query":[32,74,228,259],"the":[33,44,49,58,77,83,89,116,135,153,168,172,178,185,210,222,243,248,257],"system":[34],"for":[35,100],"a":[36,56,96,131,159,193,216,226],"specific":[37,53],"string":[38,90],"check":[40],"whether":[41],"any":[42],"packets":[45],"transmitted":[46],"previously":[47,59,117,211],"in":[48,82,112,140,177],"contained":[51],"that":[52,75,225],"string.":[54],"As":[55],"shortcoming,":[57],"proposed":[60,118,136,169,212,244],"techniques":[61,175,214],"are":[62,69,165],"unable":[63],"support":[65,123],"wildcard":[66,124,227],"queries.":[67],"Wildcards":[68],"important":[71],"type":[72],"allow":[76],"locate":[80],"strings":[81],"when":[85,147],"only":[86],"part":[87],"is":[91,120,156,255],"known.":[92],"In":[93],"this":[94,129],"paper,":[95],"new":[97],"data":[98,194],"structure":[99],"attribution,":[102],"named":[103],"Character":[104,186],"Dependent":[105,187],"Multi-Bloom":[106,188],"Filters,":[107,189],"will":[108],"be":[109],"presented":[110,176],"which,":[111],"addition":[113],"improving":[115],"techniques,":[119,250],"able":[121],"queries":[125,150],"well.":[127],"To":[128],"end,":[130],"theoretical":[132,154],"study":[133],"method":[137,170],"was":[138],"conducted":[139],"order":[141],"evaluate":[143],"its":[144],"false":[145],"positive":[146],"responding":[148],"subsequently":[152],"analysis":[155],"verified":[157],"through":[158],"number":[160],"experiments.":[162],"Furthermore,":[163],"comparisons":[164],"made":[166],"between":[167],"state-of-the-art":[173,213],"literature.":[179],"The":[180],"results":[181,223],"suggest":[182],"that,":[183],"using":[184,242],"one":[190],"can":[191],"obtain":[192],"reduction":[195],"ratio":[196],"about":[198,261],"265":[199],":":[200,205],"1":[201,206,238],"opposed":[202],"210":[204],"obtained":[208],"by":[209],"assuming":[215],"similar":[217],"false-positive":[218],"rate.":[219],"More":[220],"importantly,":[221],"indicate":[224],"with":[229],"seven":[230],"unknown":[231],"characters":[232],"would":[233],"take":[234],"approximately":[235],"less":[236],"than":[237],"second":[239],"process,":[241],"method;":[245],"while":[246],"given":[247],"previous":[249],"exhaustive":[253],"search":[254],"required,":[256],"same":[258],"takes":[260],"4500":[262],"years":[263],"process.":[265]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":2},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":1}],"updated_date":"2026-04-05T17:49:38.594831","created_date":"2025-10-10T00:00:00"}