{"id":"https://openalex.org/W2020628451","doi":"https://doi.org/10.1109/icitst.2009.5402624","title":"Detection of applications within encrypted tunnels using packet size distributions","display_name":"Detection of applications within encrypted tunnels using packet size distributions","publication_year":2009,"publication_date":"2009-11-01","ids":{"openalex":"https://openalex.org/W2020628451","doi":"https://doi.org/10.1109/icitst.2009.5402624","mag":"2020628451"},"language":"en","primary_location":{"id":"doi:10.1109/icitst.2009.5402624","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icitst.2009.5402624","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2009 International Conference for Internet Technology and Secured Transactions, (ICITST)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030618085","display_name":"Ghulam Mujtaba","orcid":"https://orcid.org/0000-0002-7317-4357"},"institutions":[{"id":"https://openalex.org/I143804889","display_name":"Loughborough University","ror":"https://ror.org/04vg4w365","country_code":"GB","type":"education","lineage":["https://openalex.org/I143804889"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"G. Mujtaba","raw_affiliation_strings":["Electronic and Electrical Engineering Department, Loughborough University, UK","Electronic and Electrical Engineering Department Loughborough University, UK"],"affiliations":[{"raw_affiliation_string":"Electronic and Electrical Engineering Department, Loughborough University, UK","institution_ids":["https://openalex.org/I143804889"]},{"raw_affiliation_string":"Electronic and Electrical Engineering Department Loughborough University, UK","institution_ids":["https://openalex.org/I143804889"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5111581791","display_name":"David J. Parish","orcid":null},"institutions":[{"id":"https://openalex.org/I143804889","display_name":"Loughborough University","ror":"https://ror.org/04vg4w365","country_code":"GB","type":"education","lineage":["https://openalex.org/I143804889"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"D.J. Parish","raw_affiliation_strings":["Electronic and Electrical Engineering Department, Loughborough University, UK","Electronic and Electrical Engineering Department Loughborough University, UK"],"affiliations":[{"raw_affiliation_string":"Electronic and Electrical Engineering Department, Loughborough University, UK","institution_ids":["https://openalex.org/I143804889"]},{"raw_affiliation_string":"Electronic and Electrical Engineering Department Loughborough University, UK","institution_ids":["https://openalex.org/I143804889"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5030618085"],"corresponding_institution_ids":["https://openalex.org/I143804889"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.0841848,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9711999893188477,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7839065790176392},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.7385322451591492},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.7165592312812805},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.625169038772583},{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.5929069519042969},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4692281186580658},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.43703943490982056},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.3131323456764221},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.19522032141685486},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.14116111397743225}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7839065790176392},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.7385322451591492},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.7165592312812805},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.625169038772583},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.5929069519042969},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4692281186580658},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.43703943490982056},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.3131323456764221},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.19522032141685486},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.14116111397743225},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C104062141","wikidata":"https://www.wikidata.org/wiki/Q2601295","display_name":"Extremal black hole","level":3,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icitst.2009.5402624","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icitst.2009.5402624","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2009 International Conference for Internet Technology and Secured Transactions, (ICITST)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":2,"referenced_works":["https://openalex.org/W2057363223","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W2289378658","https://openalex.org/W1531360494","https://openalex.org/W1982325601","https://openalex.org/W2093529019","https://openalex.org/W87530933","https://openalex.org/W4240432851","https://openalex.org/W154233216","https://openalex.org/W2626486901","https://openalex.org/W2026856585","https://openalex.org/W1988007309"],"abstract_inverted_index":{"In":[0],"protocol":[1,5],"tunnelling,":[2],"one":[3],"application":[4],"is":[6,51,121,129,145],"encapsulated":[7],"within":[8],"another":[9],"carrier":[10],"protocol.":[11],"Application-layer":[12],"tunnels":[13,74],"are":[14,23,38,67,94],"security":[15],"threat":[16],"for":[17,56,112,123,131],"networks":[18],"because":[19],"those":[20],"applications":[21,59,92,149],"which":[22,93],"sometimes":[24],"restricted":[25],"by":[26],"firewalls":[27],"like":[28,44],"high":[29],"data-rate":[30],"games,":[31],"peer-to-peer":[32],"file":[33],"sharing,":[34],"video":[35],"streaming,":[36],"etc":[37],"carried":[39],"through":[40],"the":[41,48,61,82,103,118,132,135,142],"allowed":[42],"protocols":[43,80],"HTTP,":[45],"SSH,":[46],"hence":[47],"firewall":[49],"policy":[50],"thwarted.":[52],"The":[53],"existing":[54],"techniques":[55],"detection":[57],"of":[58,134],"across":[60],"network,":[62],"e.g.":[63],"packet":[64,104,138,154],"data":[65],"analysis":[66,133],"not":[68],"very":[69],"successful,":[70],"especially":[71],"in":[72,157],"encrypted":[73,97,124,158],"i.e":[75],"ones":[76],"using":[77,96,153],"HTTPS,":[78],"TLS/SSL":[79],"as":[81],"carrier.":[83],"This":[84],"work":[85,100],"describes":[86],"a":[87],"statistical":[88],"approach":[89],"to":[90,107],"detect":[91],"running":[95],"tunnels.":[98,125,159],"Previous":[99],"has":[101],"shown":[102,146],"size":[105,139,155],"distribution":[106,156],"be":[108,151],"an":[109],"effective":[110],"metric":[111],"detecting":[113],"most":[114],"network":[115],"applications.":[116],"Here":[117],"same":[119],"technique":[120],"applied":[122],"Statistical":[126],"Chi-square":[127],"test":[128],"used":[130],"selected":[136],"applications'":[137],"distributions.":[140],"From":[141],"results,":[143],"it":[144],"that":[147],"tunneled":[148],"can":[150],"detected":[152]},"counts_by_year":[{"year":2019,"cited_by_count":2},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}