{"id":"https://openalex.org/W4405270567","doi":"https://doi.org/10.1109/tifs.2024.3515821","title":"ReTrial: Robust Encrypted Malicious Traffic Detection via Discriminative Relation Incorporation and Misleading Relation Correction","display_name":"ReTrial: Robust Encrypted Malicious Traffic Detection via Discriminative Relation Incorporation and Misleading Relation Correction","publication_year":2024,"publication_date":"2024-12-11","ids":{"openalex":"https://openalex.org/W4405270567","doi":"https://doi.org/10.1109/tifs.2024.3515821"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3515821","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3515821","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057657371","display_name":"Jianjin Zhao","orcid":"https://orcid.org/0000-0001-5362-3445"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianjin Zhao","raw_affiliation_strings":["Department of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-5362-3445","affiliations":[{"raw_affiliation_string":"Department of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092069033","display_name":"Qi Li","orcid":"https://orcid.org/0000-0001-9855-6119"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Li","raw_affiliation_strings":["Department of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-9855-6119","affiliations":[{"raw_affiliation_string":"Department of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zewei Han","orcid":"https://orcid.org/0009-0003-1196-5350"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zewei Han","raw_affiliation_strings":["Department of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0009-0003-1196-5350","affiliations":[{"raw_affiliation_string":"Department of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011916209","display_name":"Junsong Fu","orcid":"https://orcid.org/0000-0002-2445-1987"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junsong Fu","raw_affiliation_strings":["Department of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-2445-1987","affiliations":[{"raw_affiliation_string":"Department of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020360628","display_name":"Guoshun Nan","orcid":"https://orcid.org/0000-0002-1987-2736"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guoshun Nan","raw_affiliation_strings":["Department of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1987-2736","affiliations":[{"raw_affiliation_string":"Department of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]},{"raw_affiliation_string":"Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047030842","display_name":"Meng Shen","orcid":"https://orcid.org/0000-0002-1867-0972"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Meng Shen","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-1867-0972","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]},{"raw_affiliation_string":"Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077320731","display_name":"Bharat Bhargava","orcid":"https://orcid.org/0000-0003-3803-8672"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Bharat K. Bhargava","raw_affiliation_strings":["Department of Computer Science, Purdue University, West Lafayette, IN, USA","Purdue University, West Lafayette, IN, USA"],"raw_orcid":"https://orcid.org/0000-0003-3803-8672","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]},{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.4756,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.85039646,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"20","issue":null,"first_page":"677","last_page":"692"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9739000201225281,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9652000069618225,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8514823913574219},{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.8055809736251831},{"id":"https://openalex.org/keywords/relation","display_name":"Relation (database)","score":0.6501419544219971},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6442605257034302},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5837275981903076},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4470835328102112},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3861906826496124},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3411697745323181},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.33005502820014954}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8514823913574219},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.8055809736251831},{"id":"https://openalex.org/C25343380","wikidata":"https://www.wikidata.org/wiki/Q277521","display_name":"Relation (database)","level":2,"score":0.6501419544219971},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6442605257034302},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5837275981903076},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4470835328102112},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3861906826496124},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3411697745323181},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.33005502820014954},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2024.3515821","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2024.3515821","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.7599999904632568}],"awards":[{"id":"https://openalex.org/G1858642095","display_name":null,"funder_award_id":"U23A20304","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G4139883311","display_name":null,"funder_award_id":"62172055","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5704508912","display_name":null,"funder_award_id":"62172055, 61972039, U20B2045","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G595233080","display_name":null,"funder_award_id":"61972039","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G624321828","display_name":null,"funder_award_id":"JCKY2021602B002","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7082687","display_name":null,"funder_award_id":"20220484174","funder_id":"https://openalex.org/F4320334978","funder_display_name":"Beijing Nova Program"},{"id":"https://openalex.org/G8003444953","display_name":null,"funder_award_id":"U20B2045","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G889056422","display_name":null,"funder_award_id":"62222201","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320334978","display_name":"Beijing Nova Program","ror":"https://ror.org/034k14f91"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W2537766808","https://openalex.org/W2559839022","https://openalex.org/W2591712613","https://openalex.org/W2604314403","https://openalex.org/W2606697812","https://openalex.org/W2612544399","https://openalex.org/W2743556905","https://openalex.org/W2897202622","https://openalex.org/W2900853407","https://openalex.org/W2963065250","https://openalex.org/W3000027147","https://openalex.org/W3007418556","https://openalex.org/W3035950449","https://openalex.org/W3044401840","https://openalex.org/W3111088413","https://openalex.org/W3120227884","https://openalex.org/W3134622107","https://openalex.org/W3152746601","https://openalex.org/W3153206160","https://openalex.org/W3165205057","https://openalex.org/W3173170122","https://openalex.org/W3200583622","https://openalex.org/W4214599792","https://openalex.org/W4285378361","https://openalex.org/W4290714064","https://openalex.org/W4296473472","https://openalex.org/W4306406279","https://openalex.org/W4312401453","https://openalex.org/W4321484315","https://openalex.org/W4324007233","https://openalex.org/W4379054627","https://openalex.org/W4385009227","https://openalex.org/W4385444612","https://openalex.org/W4386694208","https://openalex.org/W4393379748","https://openalex.org/W4402264442","https://openalex.org/W6767654570","https://openalex.org/W6794575095"],"related_works":["https://openalex.org/W2965546495","https://openalex.org/W4389116644","https://openalex.org/W2153315159","https://openalex.org/W3103844505","https://openalex.org/W259157601","https://openalex.org/W4205463238","https://openalex.org/W2761785940","https://openalex.org/W2110523656","https://openalex.org/W1482209366","https://openalex.org/W2521627374"],"abstract_inverted_index":{"Encryption":[0],"techniques":[1],"greatly":[2],"ensure":[3],"the":[4,58,119,181,222],"confidentiality":[5],"and":[6,34,41,53,60,102,127,141,174,198],"integrity":[7],"of":[8,183,224,243],"network":[9],"communications.":[10],"However,":[11,37],"they":[12],"also":[13],"allow":[14],"attackers":[15],"to":[16,62,116,149],"conceal":[17],"malicious":[18,70,94],"activities":[19],"within":[20],"encrypted":[21,69,93],"traffic,":[22],"posing":[23],"severe":[24],"cybersecurity":[25],"challenges.":[26],"Current":[27],"detection":[28,72,96],"methods":[29,227],"primarily":[30],"rely":[31],"on":[32],"statistics":[33],"correlation":[35],"analysis.":[36],"both":[38,171],"statistical":[39],"features":[40],"inter-entity":[42],"relations":[43,121],"can":[44],"be":[45],"easily":[46],"obfuscated.":[47],"Moreover,":[48],"issues":[49],"with":[50,239],"low-quality":[51],"data":[52],"fixed":[54],"feature":[55],"sets":[56],"limit":[57],"generalizability":[59],"adaptability":[61],"defend":[63],"against":[64],"various":[65,191],"evasion":[66],"techniques.":[67],"Robustifying":[68],"traffic":[71,95],"in":[73,215,246,251],"adverse":[74,192,219],"conditions":[75,193],"is":[76,213],"still":[77],"an":[78,168],"open":[79],"problem.":[80],"In":[81],"this":[82],"paper,":[83],"we":[84,136,155,189],"propose":[85],"R<sc":[86,110,184,208,230],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[87,89,111,113,185,187,209,211,231,233],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">e</small>T<sc":[88,112,186,210,232],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">rial</small>,":[90,188],"a":[91,138,143,240],"robust":[92,132],"system":[97],"via":[98],"discriminative":[99],"relation":[100,104,165],"incorporation":[101],"misleading":[103,129],"correction.":[105,166],"The":[106,203],"key":[107],"motivations":[108],"behind":[109],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">rial</small>":[114,212,234],"are":[115],"accurately":[117],"leverage":[118],"rich":[120],"among":[122],"flows":[123],"for":[124,131,163],"contextual":[125,152],"analysis,":[126],"correct":[128],"ones":[130],"threat":[133,252],"detection.":[134,253],"Specifically,":[135],"construct":[137],"relational":[139],"multigraph":[140],"develop":[142],"tailored":[144],"Graph":[145],"Attention":[146],"Network":[147],"(GAT)":[148],"selectively":[150],"incorporate":[151],"information.":[153],"Then":[154],"retrieve":[156],"multi-order":[157],"neighborhood":[158],"similarity":[159],"graphs":[160],"as":[161],"observations":[162],"adaptive":[164],"Following":[167],"iterative":[169],"scheme,":[170],"detector":[172],"performance":[173,238],"graph":[175],"topology":[176],"mutually":[177],"optimize.":[178],"To":[179],"validate":[180],"robustness":[182,250],"simulate":[190],"by":[194],"randomly":[195],"dropping":[196],"packets":[197],"greedily":[199],"injecting":[200],"perturbation":[201],"edges.":[202],"experimental":[204],"results":[205],"show":[206],"that":[207],"competitive":[214],"ideal":[216],"condition.":[217],"Under":[218],"conditions,":[220],"though":[221],"performances":[223],"other":[225],"state-of-the-art":[226],"degrade":[228],"significantly,":[229],"consistently":[235],"exhibits":[236],"superior":[237],"maximum":[241],"reduction":[242],"only":[244],"5.88%":[245],"F1,":[247],"highlighting":[248],"its":[249]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}