{"id":"https://openalex.org/W7117306585","doi":"https://doi.org/10.1109/ton.2025.3648394","title":"SOFA: Service-Oriented Fine-Grained Attack Traffic Detection With Meta Learning","display_name":"SOFA: Service-Oriented Fine-Grained Attack Traffic Detection With Meta Learning","publication_year":2025,"publication_date":"2025-12-26","ids":{"openalex":"https://openalex.org/W7117306585","doi":"https://doi.org/10.1109/ton.2025.3648394"},"language":null,"primary_location":{"id":"doi:10.1109/ton.2025.3648394","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ton.2025.3648394","pdf_url":null,"source":{"id":"https://openalex.org/S5407042750","display_name":"IEEE Transactions on Networking","issn_l":"2998-4157","issn":["2998-4157"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Networking","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Peng Fang","orcid":"https://orcid.org/0009-0002-9037-2010"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Fang","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0002-9037-2010","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067176504","display_name":"Feiyang Huang","orcid":"https://orcid.org/0000-0002-7241-1509"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Feiyang Huang","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101902155","display_name":"Ziming Zhao","orcid":"https://orcid.org/0000-0003-1455-4330"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziming Zhao","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-1455-4330","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121351814","display_name":"Fan Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fan Zhang","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-6087-8243","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"last","author":{"id":null,"display_name":"Wenrui Ma","orcid":"https://orcid.org/0009-0003-9649-1499"},"institutions":[{"id":"https://openalex.org/I75059550","display_name":"Zhejiang Gongshang University","ror":"https://ror.org/0569mkk41","country_code":"CN","type":"education","lineage":["https://openalex.org/I75059550"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenrui Ma","raw_affiliation_strings":["School of Computer Science and Technology, Zhejiang Gongshang University, Hangzhou, China"],"raw_orcid":"https://orcid.org/0009-0003-9649-1499","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Zhejiang Gongshang University, Hangzhou, China","institution_ids":["https://openalex.org/I75059550"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.59972354,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"34","issue":null,"first_page":"2430","last_page":"2445"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.8324000239372253,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.8324000239372253,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.053300000727176666,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.02879999950528145,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5530999898910522},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.41780000925064087},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.38440001010894775},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.3831000030040741},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.3822999894618988},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.3411000072956085},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.3287000060081482}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.70169997215271},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5530999898910522},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.41780000925064087},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4140999913215637},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.38440001010894775},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.3831000030040741},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.3822999894618988},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3506999909877777},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3411000072956085},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.3287000060081482},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.31940001249313354},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2883000075817108},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.2768000066280365},{"id":"https://openalex.org/C181889124","wikidata":"https://www.wikidata.org/wiki/Q380204","display_name":"Service level","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C109747225","wikidata":"https://www.wikidata.org/wiki/Q815758","display_name":"Scarcity","level":2,"score":0.259799987077713},{"id":"https://openalex.org/C2776973144","wikidata":"https://www.wikidata.org/wiki/Q6880649","display_name":"Misuse detection","level":4,"score":0.2590000033378601},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2574000060558319}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ton.2025.3648394","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ton.2025.3648394","pdf_url":null,"source":{"id":"https://openalex.org/S5407042750","display_name":"IEEE Transactions on Networking","issn_l":"2998-4157","issn":["2998-4157"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Networking","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4934141650","display_name":null,"funder_award_id":"2023C01039","funder_id":"https://openalex.org/F4320327780","funder_display_name":"Key Research and Development Program of Jiangxi Province"},{"id":"https://openalex.org/G6027343793","display_name":null,"funder_award_id":"62227805","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6696847361","display_name":null,"funder_award_id":"62572437","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320327780","display_name":"Key Research and Development Program of Jiangxi Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":67,"referenced_works":["https://openalex.org/W2008704879","https://openalex.org/W2011777324","https://openalex.org/W2036983007","https://openalex.org/W2093331366","https://openalex.org/W2148143831","https://openalex.org/W2470394683","https://openalex.org/W2558600380","https://openalex.org/W2597472767","https://openalex.org/W2606697812","https://openalex.org/W2607219512","https://openalex.org/W2618043096","https://openalex.org/W2743617586","https://openalex.org/W2765227388","https://openalex.org/W2800788706","https://openalex.org/W2892214024","https://openalex.org/W2920544805","https://openalex.org/W2963197901","https://openalex.org/W2964105864","https://openalex.org/W3007562398","https://openalex.org/W3009498435","https://openalex.org/W3012902672","https://openalex.org/W3021740526","https://openalex.org/W3046698617","https://openalex.org/W3047608117","https://openalex.org/W3093725613","https://openalex.org/W3095795790","https://openalex.org/W3108975329","https://openalex.org/W3128341305","https://openalex.org/W3137832402","https://openalex.org/W3142930122","https://openalex.org/W3145680685","https://openalex.org/W3157745594","https://openalex.org/W3165871547","https://openalex.org/W3173170122","https://openalex.org/W3180062783","https://openalex.org/W3197914403","https://openalex.org/W3200397134","https://openalex.org/W3204162860","https://openalex.org/W4200262901","https://openalex.org/W4205270295","https://openalex.org/W4224315052","https://openalex.org/W4226056551","https://openalex.org/W4226086258","https://openalex.org/W4229774059","https://openalex.org/W4293386228","https://openalex.org/W4309346044","https://openalex.org/W4317603593","https://openalex.org/W4319994093","https://openalex.org/W4321020904","https://openalex.org/W4322706638","https://openalex.org/W4324007233","https://openalex.org/W4379659755","https://openalex.org/W4385488530","https://openalex.org/W4385819961","https://openalex.org/W4386363082","https://openalex.org/W4388624483","https://openalex.org/W4388867259","https://openalex.org/W4390571282","https://openalex.org/W4391093786","https://openalex.org/W4395108879","https://openalex.org/W4396599335","https://openalex.org/W4396757496","https://openalex.org/W4401508184","https://openalex.org/W4401691527","https://openalex.org/W4403445983","https://openalex.org/W4409150041","https://openalex.org/W4409474302"],"related_works":[],"abstract_inverted_index":{"Enterprise":[0],"networks":[1],"face":[2],"an":[3],"ever-growing":[4],"threat":[5,201],"from":[6,11,40],"various":[7],"unknown":[8],"cyberattacks":[9],"originating":[10],"the":[12,45,57,103,112,140,187],"Internet.":[13],"Anomaly-based":[14],"Network":[15],"Intrusion":[16],"Detection":[17],"Systems":[18],"(NIDS)":[19],"have":[20,30],"become":[21],"essential":[22],"for":[23,87,119,191],"safeguarding":[24],"corporate":[25],"networks,":[26],"but":[27],"existing":[28,178],"technologies":[29],"some":[31],"limitations":[32,141],"in":[33,180,195],"practice.":[34],"(i)":[35],"The":[36,50,130],"interweaving":[37],"of":[38,47,52,59,149,177,189],"traffic":[39,77,99,124],"different":[41],"service":[42,109],"types":[43,110],"increases":[44],"difficulty":[46],"identification.":[48],"(ii)":[49],"scarcity":[51],"labeled":[53],"malicious":[54,145],"samples":[55],"hinders":[56],"detection":[58,100,148],"both":[60,150],"known":[61,151],"and":[62,78,114,152,171,199],"emerging":[63,153],"threats.":[64],"To":[65],"tackle":[66],"these":[67],"issues,":[68],"we":[69,94],"propose":[70],"a":[71,83,97,134,174,196],"service-oriented":[72],"approach":[73],"to":[74,81,138],"model":[75],"benign":[76],"leverage":[79],"meta-learning":[80],"construct":[82],"robust":[84],"metric":[85],"space":[86],"precise":[88],"sample":[89],"comparison.":[90],"Based":[91],"on":[92,158],"this,":[93],"develop":[95],"SOFA,":[96],"two-stage":[98],"framework.":[101],"In":[102],"first":[104],"stage,":[105],"SOFA":[106,157,190],"identifies":[107],"distinct":[108],"within":[111],"network":[113,137,162,193],"trains":[115],"independent":[116],"one-class":[117],"models":[118],"each,":[120],"ensuring":[121],"service-specific":[122],"attack":[123,182],"is":[125],"detected":[126],"with":[127],"high":[128],"precision.":[129],"second":[131],"stage":[132],"employs":[133],"ResNet-based":[135],"Siamese":[136],"overcome":[139],"posed":[142],"by":[143],"scarce":[144],"samples,":[146],"enhancing":[147],"attacks.":[154],"We":[155],"evaluate":[156],"four":[159],"widely":[160],"used":[161],"tracing":[163],"datasets,":[164],"demonstrating":[165],"that":[166],"it":[167],"achieves":[168],"state-of-the-art":[169],"performance":[170],"significantly":[172],"outperforms":[173],"diverse":[175],"set":[176],"methods":[179],"fine-grained":[181],"detection.":[183],"These":[184],"results":[185],"highlight":[186],"potential":[188],"improving":[192],"security":[194],"highly":[197],"dynamic":[198],"unbalanced":[200],"environment.":[202]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-12-26T00:00:00"}