{"id":"https://openalex.org/W4206495455","doi":"https://doi.org/10.1109/tnsm.2021.3131266","title":"FLAG: Few-Shot Latent Dirichlet Generative Learning for Semantic-Aware Traffic Detection","display_name":"FLAG: Few-Shot Latent Dirichlet Generative Learning for Semantic-Aware Traffic Detection","publication_year":2021,"publication_date":"2021-12-08","ids":{"openalex":"https://openalex.org/W4206495455","doi":"https://doi.org/10.1109/tnsm.2021.3131266"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2021.3131266","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2021.3131266","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079902623","display_name":"Tianpeng Ye","orcid":"https://orcid.org/0000-0002-3777-3301"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tianpeng Ye","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University and Shanghai Key Laboratory of Integrated Administration Technologies for Information Security, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-3777-3301","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University and Shanghai Key Laboratory of Integrated Administration Technologies for Information Security, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007267530","display_name":"Gaolei Li","orcid":"https://orcid.org/0000-0003-3913-5001"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gaolei Li","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University and Shanghai Key Laboratory of Integrated Administration Technologies for Information Security, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0003-3913-5001","affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University and Shanghai Key Laboratory of Integrated Administration Technologies for Information Security, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085306778","display_name":"Ijaz Ahmad","orcid":"https://orcid.org/0000-0003-1101-8698"},"institutions":[{"id":"https://openalex.org/I87653560","display_name":"VTT Technical Research Centre of Finland","ror":"https://ror.org/04b181w54","country_code":"FI","type":"nonprofit","lineage":["https://openalex.org/I4210089493","https://openalex.org/I87653560"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Ijaz Ahmad","raw_affiliation_strings":["Department of 5G and Beyond Networks, VTT Technical Research Centre of Finland, Espoo, Finland"],"raw_orcid":"https://orcid.org/0000-0003-1101-8698","affiliations":[{"raw_affiliation_string":"Department of 5G and Beyond Networks, VTT Technical Research Centre of Finland, Espoo, Finland","institution_ids":["https://openalex.org/I87653560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100405884","display_name":"Chaofeng Zhang","orcid":"https://orcid.org/0000-0002-1042-1541"},"institutions":[{"id":"https://openalex.org/I74640424","display_name":"Advanced Institute of Industrial Technology","ror":"https://ror.org/04f9apy08","country_code":"JP","type":"education","lineage":["https://openalex.org/I74640424"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Chaofeng Zhang","raw_affiliation_strings":["Advanced Institute of Industrial Technology, Tokyo, Japan"],"raw_orcid":"https://orcid.org/0000-0002-1042-1541","affiliations":[{"raw_affiliation_string":"Advanced Institute of Industrial Technology, Tokyo, Japan","institution_ids":["https://openalex.org/I74640424"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101792673","display_name":"Xiang Lin","orcid":"https://orcid.org/0000-0003-2789-4449"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiang Lin","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University and Shanghai Key Laboratory of Integrated Administration Technologies for Information Security, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University and Shanghai Key Laboratory of Integrated Administration Technologies for Information Security, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100391361","display_name":"Jianhua Li","orcid":"https://orcid.org/0000-0002-6831-3973"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianhua Li","raw_affiliation_strings":["School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University and Shanghai Key Laboratory of Integrated Administration Technologies for Information Security, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electronic Information and Electrical Engineering, Shanghai Jiao Tong University and Shanghai Key Laboratory of Integrated Administration Technologies for Information Security, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.0464,"has_fulltext":false,"cited_by_count":20,"citation_normalized_percentile":{"value":0.91736822,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":99},"biblio":{"volume":"19","issue":"1","first_page":"73","last_page":"88"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8592228889465332},{"id":"https://openalex.org/keywords/latent-dirichlet-allocation","display_name":"Latent Dirichlet allocation","score":0.7684767246246338},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.5735503435134888},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5479674935340881},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5250187516212463},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5154595971107483},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4655165672302246},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.444225937128067},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4378425180912018},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.42017805576324463},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.2022716999053955},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.19204816222190857},{"id":"https://openalex.org/keywords/topic-model","display_name":"Topic model","score":0.1794355809688568},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.12470278143882751}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8592228889465332},{"id":"https://openalex.org/C500882744","wikidata":"https://www.wikidata.org/wiki/Q269236","display_name":"Latent Dirichlet allocation","level":3,"score":0.7684767246246338},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.5735503435134888},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5479674935340881},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5250187516212463},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5154595971107483},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4655165672302246},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.444225937128067},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4378425180912018},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.42017805576324463},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.2022716999053955},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.19204816222190857},{"id":"https://openalex.org/C171686336","wikidata":"https://www.wikidata.org/wiki/Q3532085","display_name":"Topic model","level":2,"score":0.1794355809688568},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.12470278143882751},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2021.3131266","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2021.3131266","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6399999856948853,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G5371349539","display_name":null,"funder_award_id":"U20B2048","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":65,"referenced_works":["https://openalex.org/W1972428331","https://openalex.org/W1985690171","https://openalex.org/W2019821286","https://openalex.org/W2054242226","https://openalex.org/W2062401262","https://openalex.org/W2062805799","https://openalex.org/W2074373096","https://openalex.org/W2075798023","https://openalex.org/W2099940443","https://openalex.org/W2106177700","https://openalex.org/W2155926039","https://openalex.org/W2162152151","https://openalex.org/W2165599843","https://openalex.org/W2171836785","https://openalex.org/W2182464523","https://openalex.org/W2346917897","https://openalex.org/W2518895230","https://openalex.org/W2564630785","https://openalex.org/W2605422749","https://openalex.org/W2606697812","https://openalex.org/W2613548641","https://openalex.org/W2736067536","https://openalex.org/W2772317693","https://openalex.org/W2775103799","https://openalex.org/W2786532017","https://openalex.org/W2787322429","https://openalex.org/W2793289516","https://openalex.org/W2793556064","https://openalex.org/W2794833484","https://openalex.org/W2799709780","https://openalex.org/W2800828017","https://openalex.org/W2887770386","https://openalex.org/W2895752198","https://openalex.org/W2897202622","https://openalex.org/W2900853407","https://openalex.org/W2901114541","https://openalex.org/W2904509905","https://openalex.org/W2904746050","https://openalex.org/W2912924201","https://openalex.org/W2916401208","https://openalex.org/W2919493784","https://openalex.org/W2944046640","https://openalex.org/W2944378183","https://openalex.org/W2953448948","https://openalex.org/W2962686197","https://openalex.org/W2964086552","https://openalex.org/W2965894868","https://openalex.org/W2967001080","https://openalex.org/W2998483179","https://openalex.org/W3000429356","https://openalex.org/W3011146004","https://openalex.org/W3021740526","https://openalex.org/W3022277606","https://openalex.org/W3048832564","https://openalex.org/W3112787034","https://openalex.org/W3117176175","https://openalex.org/W3136177669","https://openalex.org/W3146664580","https://openalex.org/W4231510805","https://openalex.org/W6639619044","https://openalex.org/W6684489972","https://openalex.org/W6704827125","https://openalex.org/W6762744983","https://openalex.org/W6765116793","https://openalex.org/W6791678350"],"related_works":["https://openalex.org/W3126382579","https://openalex.org/W3107650560","https://openalex.org/W4315588616","https://openalex.org/W4317422773","https://openalex.org/W2888805565","https://openalex.org/W2810542905","https://openalex.org/W2129350855","https://openalex.org/W2913821620","https://openalex.org/W3123667230","https://openalex.org/W4243064001"],"abstract_inverted_index":{"The":[0,174],"number":[1],"of":[2,26,45,56,66,82],"malware":[3],"attempts":[4],"that":[5,161,178],"try":[6],"to":[7,22,71,85,123,132,145],"bypass":[8],"the":[9,27,36,58,77,125,148,179,183],"existing":[10,37],"Network":[11],"Intrusion":[12],"Detection":[13],"System":[14],"(NIDS)":[15],"is":[16,121,130],"increasing.":[17],"To":[18,89],"detect":[19],"illegal":[20],"access":[21],"servers,":[23],"deep":[24],"analysis":[25],"server-side":[28],"network":[29,73],"traffic":[30,49,84,105,134,163],"has":[31],"become":[32],"increasingly":[33],"important.":[34],"However,":[35],"approaches":[38],"have":[39],"serious":[40],"performance":[41],"limitations":[42,52],"in":[43,107,157,186],"terms":[44],"real-time":[46],"and":[47,62,75,80],"accurate":[48],"detection.":[50],"These":[51],"are":[53,69,172],"mainly":[54],"because":[55],"i)":[57],"rigid":[59],"feature":[60],"extraction":[61],"rule":[63],"matching":[64],"techniques":[65],"NIDS,":[67],"which":[68,129],"insensitive":[70],"incremental":[72],"traffic,":[74],"ii)":[76],"strong":[78],"correlation":[79],"coupling":[81],"malicious":[83,162],"large":[86],"normal":[87],"traffic.":[88],"address":[90],"these":[91],"limitations,":[92],"we":[93,138],"propose":[94,139],"a":[95,112,140],"Few-shot":[96],"Latent":[97,113],"Dirichlet":[98,114],"Generative":[99],"Learning":[100],"(FLAG)":[101],"scheme":[102,181],"for":[103],"semantic-aware":[104],"detection":[106,187],"this":[108],"paper.":[109],"In":[110],"FLAG,":[111],"Allocation":[115],"(LDA)-based":[116],"pseudo":[117],"samples":[118,171],"generation":[119],"algorithm":[120],"designated":[122],"augment":[124],"few-shot":[126,170],"training":[127],"data,":[128],"essential":[131],"improve":[133,147],"classification":[135],"accuracy.":[136,188],"Furthermore,":[137],"Fuzziness":[141],"Recycle":[142],"Method":[143],"(FRM)":[144],"further":[146],"long":[149],"short-term":[150],"memory":[151],"(LSTM)-based":[152],"classifier\u2019s":[153],"robustness.":[154],"Experimental":[155],"results":[156,175],"real":[158],"scenarios":[159],"demonstrate":[160],"can":[164],"be":[165],"efficiently":[166],"detected":[167],"when":[168],"only":[169],"learned.":[173],"also":[176],"reveal":[177],"proposed":[180],"outperforms":[182],"state-of-the-art":[184],"methods":[185]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}