{"id":"https://openalex.org/W4407851768","doi":"https://doi.org/10.1109/tnsm.2025.3540753","title":"Adapting to the Evolution: Enhancing Intrusion Detection Through Machine Learning in the QUIC Protocol Era","display_name":"Adapting to the Evolution: Enhancing Intrusion Detection Through Machine Learning in the QUIC Protocol Era","publication_year":2025,"publication_date":"2025-02-21","ids":{"openalex":"https://openalex.org/W4407851768","doi":"https://doi.org/10.1109/tnsm.2025.3540753"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2025.3540753","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2025.3540753","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5104252194","display_name":"Adam Kadi","orcid":"https://orcid.org/0009-0007-3659-4276"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I194210350","display_name":"\u00c9cole Nationale Sup\u00e9rieure d'Ing\u00e9nieurs de Caen","ror":"https://ror.org/01fpqqe90","country_code":"FR","type":"education","lineage":["https://openalex.org/I194210350","https://openalex.org/I4210105918"]},{"id":"https://openalex.org/I4210105918","display_name":"Normandie Universit\u00e9","ror":"https://ror.org/01k40cz91","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210105918"]},{"id":"https://openalex.org/I4210139483","display_name":"GREYC","ror":"https://ror.org/043749971","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I194210350","https://openalex.org/I4210105918","https://openalex.org/I4210105918","https://openalex.org/I4210139483","https://openalex.org/I4210159245","https://openalex.org/I98702875"]},{"id":"https://openalex.org/I98702875","display_name":"Universit\u00e9 de Caen Normandie","ror":"https://ror.org/051kpcy16","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210105918","https://openalex.org/I98702875"]}],"countries":["FR"],"is_corresponding":true,"raw_author_name":"Adam Kadi","raw_affiliation_strings":["ENSICAEN, UNICAEN, CNRS, GREYC, Normandie Universit&#x00E9;, Caen, France","UNICAEN, CNRS, ENSICAEN Normandie Univ, GREYC, Caen France"],"raw_orcid":"https://orcid.org/0009-0007-3659-4276","affiliations":[{"raw_affiliation_string":"ENSICAEN, UNICAEN, CNRS, GREYC, Normandie Universit&#x00E9;, Caen, France","institution_ids":["https://openalex.org/I4210139483","https://openalex.org/I98702875","https://openalex.org/I1294671590","https://openalex.org/I4210105918"]},{"raw_affiliation_string":"UNICAEN, CNRS, ENSICAEN Normandie Univ, GREYC, Caen France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I194210350","https://openalex.org/I98702875","https://openalex.org/I4210139483","https://openalex.org/I4210105918"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042499396","display_name":"Lyes Khoukhi","orcid":"https://orcid.org/0000-0002-1922-769X"},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I194210350","display_name":"\u00c9cole Nationale Sup\u00e9rieure d'Ing\u00e9nieurs de Caen","ror":"https://ror.org/01fpqqe90","country_code":"FR","type":"education","lineage":["https://openalex.org/I194210350","https://openalex.org/I4210105918"]},{"id":"https://openalex.org/I4210105918","display_name":"Normandie Universit\u00e9","ror":"https://ror.org/01k40cz91","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210105918"]},{"id":"https://openalex.org/I4210139483","display_name":"GREYC","ror":"https://ror.org/043749971","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I194210350","https://openalex.org/I4210105918","https://openalex.org/I4210105918","https://openalex.org/I4210139483","https://openalex.org/I4210159245","https://openalex.org/I98702875"]},{"id":"https://openalex.org/I98702875","display_name":"Universit\u00e9 de Caen Normandie","ror":"https://ror.org/051kpcy16","country_code":"FR","type":"education","lineage":["https://openalex.org/I4210105918","https://openalex.org/I98702875"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Lyes Khoukhi","raw_affiliation_strings":["ENSICAEN, UNICAEN, CNRS, GREYC, Normandie Universit&#x00E9;, Caen, France","UNICAEN, CNRS, ENSICAEN Normandie Univ, GREYC, Caen France"],"raw_orcid":"https://orcid.org/0000-0002-1922-769X","affiliations":[{"raw_affiliation_string":"ENSICAEN, UNICAEN, CNRS, GREYC, Normandie Universit&#x00E9;, Caen, France","institution_ids":["https://openalex.org/I4210139483","https://openalex.org/I98702875","https://openalex.org/I1294671590","https://openalex.org/I4210105918"]},{"raw_affiliation_string":"UNICAEN, CNRS, ENSICAEN Normandie Univ, GREYC, Caen France","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I194210350","https://openalex.org/I98702875","https://openalex.org/I4210139483","https://openalex.org/I4210105918"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011895061","display_name":"Jouni Viinikka","orcid":"https://orcid.org/0009-0004-1618-004X"},"institutions":[{"id":"https://openalex.org/I4210110254","display_name":"Laboratoire de Physique Corpusculaire de Caen","ror":"https://ror.org/022txr781","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I194210350","https://openalex.org/I4210105918","https://openalex.org/I4210105918","https://openalex.org/I4210110254","https://openalex.org/I4210133362","https://openalex.org/I98702875"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Jouni Viinikka","raw_affiliation_strings":["6cure, Caen, France","6cure Caen, France","6cure, R&D (France)"],"raw_orcid":"https://orcid.org/0009-0004-1618-004X","affiliations":[{"raw_affiliation_string":"6cure, Caen, France","institution_ids":["https://openalex.org/I4210110254"]},{"raw_affiliation_string":"6cure Caen, France","institution_ids":["https://openalex.org/I4210110254"]},{"raw_affiliation_string":"6cure, R&D (France)","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016831285","display_name":"Pierre-Edouard Fabre","orcid":null},"institutions":[{"id":"https://openalex.org/I4210110254","display_name":"Laboratoire de Physique Corpusculaire de Caen","ror":"https://ror.org/022txr781","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I194210350","https://openalex.org/I4210105918","https://openalex.org/I4210105918","https://openalex.org/I4210110254","https://openalex.org/I4210133362","https://openalex.org/I98702875"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Pierre-Edouard Fabre","raw_affiliation_strings":["6cure, Caen, France","IAE Paris - Sorbonne Business School (8 bis, rue de la Croix Jarry, 75013, Paris - France)","6cure Caen, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"6cure, Caen, France","institution_ids":["https://openalex.org/I4210110254"]},{"raw_affiliation_string":"IAE Paris - Sorbonne Business School (8 bis, rue de la Croix Jarry, 75013, Paris - France)","institution_ids":[]},{"raw_affiliation_string":"6cure Caen, France","institution_ids":["https://openalex.org/I4210110254"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5104252194"],"corresponding_institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I194210350","https://openalex.org/I4210105918","https://openalex.org/I4210139483","https://openalex.org/I98702875"],"apc_list":null,"apc_paid":null,"fwci":5.4066,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.95044582,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":"22","issue":"2","first_page":"1929","last_page":"1944"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9427000284194946,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9427000284194946,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7727459669113159},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.6745238304138184},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6172422766685486},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.47879084944725037},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.35794132947921753},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.33130943775177},{"id":"https://openalex.org/keywords/medicine","display_name":"Medicine","score":0.09768271446228027}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7727459669113159},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.6745238304138184},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6172422766685486},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.47879084944725037},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.35794132947921753},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.33130943775177},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.09768271446228027},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tnsm.2025.3540753","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2025.3540753","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},{"id":"pmh:oai:HAL:hal-05410763v1","is_oa":false,"landing_page_url":"https://hal.science/hal-05410763","pdf_url":null,"source":{"id":"https://openalex.org/S4406922466","display_name":"SPIRE - Sciences Po Institutional REpository","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Network and Service Management, 2025, 22 (2), pp.1929-1944. &#x27E8;10.1109/TNSM.2025.3540753&#x27E9;","raw_type":"Journal articles"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1985987493","https://openalex.org/W2031163547","https://openalex.org/W2052175424","https://openalex.org/W2102262986","https://openalex.org/W2296509296","https://openalex.org/W2545990795","https://openalex.org/W2558483943","https://openalex.org/W2789828921","https://openalex.org/W2908669990","https://openalex.org/W2982682021","https://openalex.org/W3024012711","https://openalex.org/W3163217117","https://openalex.org/W3175402960","https://openalex.org/W3187104866","https://openalex.org/W4225002643","https://openalex.org/W4281622875","https://openalex.org/W4312075150","https://openalex.org/W4378900947","https://openalex.org/W4382281941","https://openalex.org/W4392388421","https://openalex.org/W6747435960","https://openalex.org/W6856288093"],"related_works":["https://openalex.org/W2357468538","https://openalex.org/W1577110157","https://openalex.org/W2355007334","https://openalex.org/W2390009783","https://openalex.org/W4254602698","https://openalex.org/W2394461323","https://openalex.org/W2349441905","https://openalex.org/W2361044160","https://openalex.org/W3120792425","https://openalex.org/W1483130311"],"abstract_inverted_index":{"The":[0,22],"advent":[1],"of":[2,14,26,32,97,174,189,207,218,221,234],"the":[3,12,18,27,52,70,131,135,187,196,205,219,222,232,252],"QUIC":[4,28,136],"protocol":[5,29,50,137],"may":[6,178],"herald":[7],"a":[8,105,122,126,172,215,226],"significant":[9,56],"shift":[10],"in":[11,17,58,78,149,200],"composition":[13],"online":[15],"traffic":[16,45,61,169,197],"years":[19],"to":[20,54,82,114,214,247],"come.":[21],"transport":[23],"layer":[24],"encryption":[25],"is":[30,152],"one":[31],"its":[33,139],"main":[34,156],"evolutions,":[35],"especially":[36],"for":[37,141,165,210,230],"metadata":[38],"that":[39,108,170,184],"was":[40],"previously":[41],"transmitted":[42],"over":[43],"TCP":[44],"without":[46],"encryption.":[47],"This":[48,243],"new":[49,95,106],"has":[51,75],"potential":[53],"require":[55],"alterations":[57],"future":[59],"Internet":[60],"analysis":[62,182],"methods":[63],"and":[64,138,145,167],"impact":[65],"network":[66,84,98],"intrusion":[67,143],"detection.":[68],"On":[69],"other":[71],"side,":[72],"Machine":[73],"learning":[74,112,238],"been":[76],"used":[77],"several":[79,235],"research":[80],"projects":[81],"identify":[83,115],"intrusions,":[85],"with":[86,121,162],"positive":[87],"outcomes.":[88],"However,":[89],"we":[90,103],"must":[91],"take":[92],"into":[93,154],"account":[94],"evolution":[96],"traffic.":[99],"In":[100],"this":[101,150],"paper,":[102],"propose":[104],"approach":[107],"employs":[109],"supervised":[110,236],"machine":[111,237],"algorithms":[113,239],"flows":[116,198],"generated":[117],"by":[118,134],"bots":[119],"interacting":[120],"Web":[123],"server":[124],"during":[125],"DDoS":[127],"attack,":[128],"focusing":[129],"on":[130,186,240],"challenges":[132],"posed":[133],"implications":[140],"effective":[142],"detection":[144],"cybersecurity.":[146],"Our":[147],"contribution":[148],"work":[151],"divided":[153],"three":[155],"parts:":[157],"1)":[158],"A":[159],"guided":[160],"process":[161],"model":[163],"architecture":[164],"emulating":[166],"collecting":[168],"depict":[171],"range":[173],"situations":[175],"our":[176,241],"system":[177],"encounter;":[179],"2)":[180],"an":[181],"module":[183],"consists":[185],"creation":[188],"two":[190],"labeled":[191],"datasets,":[192,212],"where":[193],"observations":[194],"represent":[195],"detected":[199],"PCAP":[201],"files.":[202],"We":[203],"studied":[204],"relevance":[206],"different":[208],"features":[209],"these":[211],"contributing":[213],"thorough":[216],"understanding":[217],"quality":[220],"data":[223],"used;":[224],"3)":[225],"real":[227],"world":[228],"experimention":[229],"evaluating":[231],"effectiveness":[233],"datasets.":[242],"experimentation":[244],"allows":[245],"us":[246],"determine":[248],"which":[249],"algorithm":[250],"provides":[251],"best":[253],"prediction":[254],"results.":[255]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}
