{"id":"https://openalex.org/W7128800222","doi":"https://doi.org/10.1109/tsc.2026.3664705","title":"Time Will Tell: Criss-Cross Transformer for Encrypted Traffic Analysis","display_name":"Time Will Tell: Criss-Cross Transformer for Encrypted Traffic Analysis","publication_year":2026,"publication_date":"2026-02-13","ids":{"openalex":"https://openalex.org/W7128800222","doi":"https://doi.org/10.1109/tsc.2026.3664705"},"language":null,"primary_location":{"id":"doi:10.1109/tsc.2026.3664705","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2026.3664705","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Hua Ding","orcid":"https://orcid.org/0009-0006-7845-4995"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hua Ding","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0006-7845-4995","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085364987","display_name":"Lixing Chen","orcid":"https://orcid.org/0000-0002-1805-0183"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lixing Chen","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-1805-0183","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100392843","display_name":"Bin Zhang","orcid":"https://orcid.org/0000-0002-4879-0211"},"institutions":[{"id":"https://openalex.org/I153473198","display_name":"North China Electric Power University","ror":"https://ror.org/04qr5t414","country_code":"CN","type":"education","lineage":["https://openalex.org/I153473198"]},{"id":"https://openalex.org/I4392738113","display_name":"China Electric Power Research Institute","ror":"https://ror.org/05ehpzy81","country_code":null,"type":"facility","lineage":["https://openalex.org/I17442442","https://openalex.org/I4392738113"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Bo Zhang","raw_affiliation_strings":["China Electric Power Research Institute, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"China Electric Power Research Institute, Beijing, China","institution_ids":["https://openalex.org/I153473198","https://openalex.org/I4392738113"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121943494","display_name":"Shenghong Li","orcid":null},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shenghong Li","raw_affiliation_strings":["School of Computer Science, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-0767-2307","affiliations":[{"raw_affiliation_string":"School of Computer Science, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Hao Peng","orcid":"https://orcid.org/0000-0003-0586-7132"},"institutions":[{"id":"https://openalex.org/I135237710","display_name":"Zhejiang Normal University","ror":"https://ror.org/01vevwk45","country_code":"CN","type":"education","lineage":["https://openalex.org/I135237710"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Peng","raw_affiliation_strings":["School of Computer Science and Technology, Zhejiang Normal University, Jinhua, China"],"raw_orcid":"https://orcid.org/0000-0003-0586-7132","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Zhejiang Normal University, Jinhua, China","institution_ids":["https://openalex.org/I135237710"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010329792","display_name":"Zhe Qu","orcid":"https://orcid.org/0000-0003-2211-2137"},"institutions":[{"id":"https://openalex.org/I139660479","display_name":"Central South University","ror":"https://ror.org/00f1zfq44","country_code":"CN","type":"education","lineage":["https://openalex.org/I139660479"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhe Qu","raw_affiliation_strings":["School of Computer Science and Engineering, Central South University, Changsha, China"],"raw_orcid":"https://orcid.org/0000-0003-2211-2137","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Central South University, Changsha, China","institution_ids":["https://openalex.org/I139660479"]}]},{"author_position":"last","author":{"id":null,"display_name":"Yang Bai","orcid":"https://orcid.org/0000-0002-1037-3973"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Bai","raw_affiliation_strings":["School of Automation and Intelligent Sensing, Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-1037-3973","affiliations":[{"raw_affiliation_string":"School of Automation and Intelligent Sensing, Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.15302117,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"19","issue":"2","first_page":"1549","last_page":"1562"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9814000129699707,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9814000129699707,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.006300000008195639,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.005100000184029341,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.9179999828338623},{"id":"https://openalex.org/keywords/traffic-analysis","display_name":"Traffic analysis","score":0.5695000290870667},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.448199987411499},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.36739999055862427},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.34929999709129333},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.30820000171661377}],"concepts":[{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.9179999828338623},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7554000020027161},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.5695000290870667},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.448199987411499},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4124000072479248},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38269999623298645},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.36739999055862427},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.34929999709129333},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.34860000014305115},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.30820000171661377},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.3012000024318695},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2782000005245209},{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.2727999985218048},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.26080000400543213},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.257999986410141}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tsc.2026.3664705","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2026.3664705","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7365099787712097,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G2021933889","display_name":null,"funder_award_id":"2024JJ6527","funder_id":"https://openalex.org/F4320322866","funder_display_name":"Natural Science Foundation of Hainan Province"},{"id":"https://openalex.org/G5066377607","display_name":null,"funder_award_id":"62302525","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6574529893","display_name":null,"funder_award_id":"2025M771527","funder_id":"https://openalex.org/F4320321543","funder_display_name":"China Postdoctoral Science Foundation"},{"id":"https://openalex.org/G8128042501","display_name":null,"funder_award_id":"62303306","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G97583977","display_name":null,"funder_award_id":"62372297","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321543","display_name":"China Postdoctoral Science Foundation","ror":"https://ror.org/0426zh255"},{"id":"https://openalex.org/F4320322866","display_name":"Natural Science Foundation of Hainan Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0,214],"widespread":[1],"adoption":[2],"of":[3,33,46,54,151,160,201],"encryption":[4],"across":[5,138,147],"web-based":[6],"services":[7],"is":[8,240,263],"compelling":[9],"both":[10],"malicious":[11],"attackers":[12],"and":[13,75,116,125,140,168,204],"network":[14,258],"defenders":[15],"to":[16,21,42,92,123,182,221,242,253],"tailor":[17],"their":[18],"tool":[19],"repositories":[20],"encrypted":[22,29,34,50,55,73,97,127,152,176,183,229],"traffic.":[23,153],"For":[24],"various":[25],"security":[26],"applications":[27],"in":[28,49,96,192,198,245],"networks,":[30],"the":[31,38,43,52,59,72,130,134,141,199,246],"analysis":[32],"traffic":[35,56,74,98,177,184,230],"lies":[36],"as":[37,58],"fundamental":[39],"basis.":[40],"Due":[41],"inherent":[44,68],"concealment":[45],"content-related":[47],"information":[48],"packets,":[51],"dynamics":[53],"emerge":[57],"discernible":[60],"variable":[61],"warranting":[62],"comprehensive":[63],"analysis.":[64,99,260],"This":[65],"paper":[66],"explores":[67],"temporal":[69,136,145],"correlations":[70,137,146],"within":[71],"proposes":[76],"a":[77,105,156],"novel":[78],"algorithm":[79],"called":[80],"<underline":[81,84,87],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[82,85,88,114,118,267],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">C</u>riss-cross":[83],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">T</u>raffic":[86],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">T</u>ransformer":[89],"(CTT),":[90],"tailored":[91],"address":[93],"unique":[94],"challenges":[95],"CTT":[100,154,172,197,218,233],"distinguishes":[101],"itself":[102],"by":[103],"employing":[104],"specialized":[106],"time":[107],"series":[108],"Transformer":[109],"that":[110,188,217],"innovatively":[111],"utilizes":[112],"<italic":[113,117],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">patching</i>":[115],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">criss-cross":[119],"attention":[120],"module</i>":[121],"(CAM)":[122],"dissect":[124],"interpret":[126],"traffic,":[128],"with":[129],"\u201ccriss\u201d":[131],"part":[132,143],"mining":[133],"long-/short-term":[135],"time,":[139],"\u201ccross\u201d":[142],"capturing":[144],"multiple":[148],"feature":[149],"dimensions":[150],"provides":[155],"unified":[157],"framework":[158],"capable":[159],"accommodating":[161],"diverse":[162],"analytical":[163],"granularities,":[164],"including":[165],"packet-level,":[166],"flow-level,":[167],"packet-to-flow":[169],"level.":[170],"Notably,":[171],"not":[173],"only":[174],"encompasses":[175],"classification":[178],"but":[179],"also":[180],"extends":[181],"forecasting,":[185],"an":[186],"area":[187],"remains":[189],"largely":[190],"underexplored":[191],"existing":[193],"literature.":[194],"We":[195],"evaluate":[196],"context":[200],"fingerprinting":[202],"attacks":[203],"malware":[205],"detection":[206],"over":[207,225,235],"5":[208],"real-world":[209],"datasets":[210],"against":[211],"13":[212],"benchmarks.":[213],"results":[215],"indicate":[216],"achieves":[219],"up":[220],"15.56%":[222],"performance":[223],"improvement":[224],"SOTA":[226,243],"solutions":[227],"for":[228],"classification.":[231],"Particularly,":[232],"demonstrates":[234],"92.5%":[236],"forecasting":[237],"accuracy,":[238],"which":[239],"comparable":[241],"performances":[244],"seen-and-classify":[247],"scenario,":[248],"suggesting":[249],"its":[250],"potential":[251],"applicability":[252],"broader":[254],"domains":[255],"like":[256],"social":[257],"behavioral":[259],"Our":[261],"code":[262],"available":[264],"at":[265],"<uri":[266],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">https://github.com/Amanda-HuaDing/Criss-cross_Traffic_Transformer</uri>.":[268]},"counts_by_year":[],"updated_date":"2026-04-11T06:13:24.991567","created_date":"2026-02-14T00:00:00"}