{"id":"https://openalex.org/W7154150632","doi":"https://doi.org/10.1109/tifs.2026.3683528","title":"LitCVit: A Lightweight Self-Supervised Contrastive Vision Transformer for Encrypted Malicious Traffic Detection","display_name":"LitCVit: A Lightweight Self-Supervised Contrastive Vision Transformer for Encrypted Malicious Traffic Detection","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7154150632","doi":"https://doi.org/10.1109/tifs.2026.3683528"},"language":null,"primary_location":{"id":"doi:10.1109/tifs.2026.3683528","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3683528","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133475847","display_name":"Mehr un Nisa","orcid":null},"institutions":[{"id":"https://openalex.org/I1323252656","display_name":"Information Technology University","ror":"https://ror.org/00ngv8j44","country_code":"PK","type":"education","lineage":["https://openalex.org/I1323252656"]},{"id":"https://openalex.org/I142732210","display_name":"University of Engineering and Technology Lahore","ror":"https://ror.org/0051w2v06","country_code":"PK","type":"education","lineage":["https://openalex.org/I142732210"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Mehr Un Nisa","raw_affiliation_strings":["Department of Computer Science, Cyber Intelligence Laboratory, Information Technology University, Lahore, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Cyber Intelligence Laboratory, Information Technology University, Lahore, Pakistan","institution_ids":["https://openalex.org/I142732210","https://openalex.org/I1323252656"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020756965","display_name":"Adnan Noor Mian","orcid":"https://orcid.org/0000-0003-1034-0140"},"institutions":[{"id":"https://openalex.org/I1323252656","display_name":"Information Technology University","ror":"https://ror.org/00ngv8j44","country_code":"PK","type":"education","lineage":["https://openalex.org/I1323252656"]},{"id":"https://openalex.org/I142732210","display_name":"University of Engineering and Technology Lahore","ror":"https://ror.org/0051w2v06","country_code":"PK","type":"education","lineage":["https://openalex.org/I142732210"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Adnan Noor Mian","raw_affiliation_strings":["Department of Computer Science, Cyber Intelligence Laboratory, Information Technology University, Lahore, Pakistan"],"raw_orcid":"https://orcid.org/0000-0003-1034-0140","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Cyber Intelligence Laboratory, Information Technology University, Lahore, Pakistan","institution_ids":["https://openalex.org/I142732210","https://openalex.org/I1323252656"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5047501301","display_name":"Mubashir Husain Rehmani","orcid":"https://orcid.org/0000-0002-3565-7390"},"institutions":[{"id":"https://openalex.org/I4210100923","display_name":"Munster Technological University","ror":"https://ror.org/013xpqh61","country_code":"IE","type":"facility","lineage":["https://openalex.org/I4210100923"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Mubashir Husain Rehmani","raw_affiliation_strings":["Department of Computer Science, Munster Technological University, Cork, Ireland"],"raw_orcid":"https://orcid.org/0000-0002-3565-7390","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Munster Technological University, Cork, Ireland","institution_ids":["https://openalex.org/I4210100923"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.54418387,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":null,"first_page":"3960","last_page":"3972"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.5871999859809875,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.5871999859809875,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11017","display_name":"Chaos-based Image/Signal Encryption","score":0.09560000151395798,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.03720000013709068,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5770999789237976},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.4302000105381012},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4189999997615814},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.3831000030040741},{"id":"https://openalex.org/keywords/machine-vision","display_name":"Machine vision","score":0.3714999854564667},{"id":"https://openalex.org/keywords/object-detection","display_name":"Object detection","score":0.3562999963760376}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8212000131607056},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5770999789237976},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.4781999886035919},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4361000061035156},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.4302000105381012},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4189999997615814},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3831000030040741},{"id":"https://openalex.org/C5339829","wikidata":"https://www.wikidata.org/wiki/Q1425977","display_name":"Machine vision","level":2,"score":0.3714999854564667},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.3562999963760376},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32710000872612},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.32030001282691956},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3050999939441681},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.30169999599456787},{"id":"https://openalex.org/C9417928","wikidata":"https://www.wikidata.org/wiki/Q1070689","display_name":"Image processing","level":3,"score":0.2903999984264374},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2851000130176544},{"id":"https://openalex.org/C168406668","wikidata":"https://www.wikidata.org/wiki/Q178022","display_name":"Fingerprint recognition","level":3,"score":0.2718000113964081},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2687999904155731}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2026.3683528","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2026.3683528","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Malicious":[0],"traffic":[1,191],"detection":[2,132,154,187],"often":[3,61],"requires":[4],"large,":[5],"labeled":[6],"datasets,":[7],"which":[8],"are":[9,36],"challenging":[10],"due":[11],"to":[12,77,112,163,203],"privacy":[13],"concerns,":[14],"labeling":[15],"costs,":[16],"and":[17,39,60,81,109,158,180],"evolving":[18],"threat":[19],"patterns.":[20],"Although":[21],"recent":[22],"self-supervised":[23,100,207],"pretraining":[24],"methods":[25],"address":[26,92],"this":[27],"issue,":[28],"they":[29],"rely":[30,62],"on":[31,63,122,143,215],"complex":[32],"transformer-based":[33],"architectures":[34],"that":[35,67,105,147],"computationally":[37],"expensive":[38],"have":[40],"high":[41],"inference":[42,139,200],"times,":[43],"making":[44,209],"them":[45],"unsuitable":[46],"for":[47,86,213],"real-time":[48],"use.":[49],"In":[50],"addition,":[51],"most":[52],"existing":[53,206],"approaches":[54],"process":[55],"packets":[56],"or":[57,124],"flows":[58,85,136],"independently,":[59],"per-packet":[64],"dataset":[65],"splits":[66],"introduce":[68],"implicit":[69],"flow-level":[70],"data":[71],"leakage,":[72],"thereby":[73],"limiting":[74],"their":[75],"ability":[76],"capture":[78],"meaningful":[79],"semantic":[80,108],"behavioral":[82,110],"relationships":[83],"across":[84],"detecting":[87],"stealthy":[88],"encrypted":[89,118,134,190],"threats.":[90],"To":[91],"these":[93],"issues,":[94],"we":[95],"propose":[96],"LitCVit,":[97],"a":[98],"lightweight":[99],"contrastive":[101],"Vision":[102],"Transformer-based":[103],"framework":[104,150],"captures":[106],"cross-flow":[107],"patterns":[111],"generate":[113],"robust":[114],"latent":[115],"representations":[116],"of":[117,133,156,160,173],"traffic.":[119],"Without":[120],"relying":[121],"decryption":[123],"manually":[125],"engineered":[126],"features,":[127],"our":[128],"method":[129],"enables":[130],"efficient":[131],"malicious":[135],"with":[137],"low":[138],"time.":[140],"Extensive":[141],"evaluations":[142],"benchmark":[144],"datasets":[145],"demonstrate":[146],"the":[148,164,204],"proposed":[149],"achieves":[151,169,195],"an":[152,170,196],"average":[153,171],"accuracy":[155],"98.10%":[157],"F1-score":[159],"98.08%.":[161],"Compared":[162],"best":[165,205],"state-of-the-art":[166],"model,":[167],"LitCVit":[168,194],"improvement":[172],"2.49%":[174],"in":[175,178,182,189,199],"F1-score,":[176],"2.12%":[177],"precision,":[179],"2.50%":[181],"recall,":[183],"highlighting":[184],"its":[185],"superior":[186],"capability":[188],"scenarios.":[192],"Additionally,":[193],"8.7\u00d7":[197],"reduction":[198],"time":[201],"compared":[202],"approach,":[208],"it":[210],"highly":[211],"suitable":[212],"deployment":[214],"resource-constrained":[216],"devices.":[217]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-04-14T00:00:00"}
