{"id":"https://openalex.org/W2016475179","doi":"https://doi.org/10.1145/1570256.1570358","title":"Classifying SSH encrypted traffic with minimum packet header features using genetic programming","display_name":"Classifying SSH encrypted traffic with minimum packet header features using genetic programming","publication_year":2009,"publication_date":"2009-07-08","ids":{"openalex":"https://openalex.org/W2016475179","doi":"https://doi.org/10.1145/1570256.1570358","mag":"2016475179"},"language":"en","primary_location":{"id":"doi:10.1145/1570256.1570358","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1570256.1570358","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 11th Annual Conference Companion on Genetic and Evolutionary Computation Conference: Late Breaking Papers","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064562846","display_name":"Riyad Alshammari","orcid":"https://orcid.org/0000-0002-0529-2458"},"institutions":[{"id":"https://openalex.org/I129902397","display_name":"Dalhousie University","ror":"https://ror.org/01e6qks80","country_code":"CA","type":"education","lineage":["https://openalex.org/I129902397"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Riyad Alshammari","raw_affiliation_strings":["Dalhousie University, Halifax, NS, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dalhousie University, Halifax, NS, Canada","institution_ids":["https://openalex.org/I129902397"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004241713","display_name":"Peter Lichodzijewski","orcid":null},"institutions":[{"id":"https://openalex.org/I129902397","display_name":"Dalhousie University","ror":"https://ror.org/01e6qks80","country_code":"CA","type":"education","lineage":["https://openalex.org/I129902397"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Peter I. Lichodzijewski","raw_affiliation_strings":["Dalhousie University, Halifax, NS, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dalhousie University, Halifax, NS, Canada","institution_ids":["https://openalex.org/I129902397"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003699164","display_name":"Malcolm I. Heywood","orcid":"https://orcid.org/0000-0002-1521-0671"},"institutions":[{"id":"https://openalex.org/I129902397","display_name":"Dalhousie University","ror":"https://ror.org/01e6qks80","country_code":"CA","type":"education","lineage":["https://openalex.org/I129902397"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Malcolm Heywood","raw_affiliation_strings":["Dalhousie University, Halifax, NS, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dalhousie University, Halifax, NS, Canada","institution_ids":["https://openalex.org/I129902397"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5008462534","display_name":"A. Nur Zincir\u2010Heywood","orcid":"https://orcid.org/0000-0003-2796-7265"},"institutions":[{"id":"https://openalex.org/I129902397","display_name":"Dalhousie University","ror":"https://ror.org/01e6qks80","country_code":"CA","type":"education","lineage":["https://openalex.org/I129902397"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"A. Nur Zincir-Heywood","raw_affiliation_strings":["Dalhousie University, Halifax, NS, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dalhousie University, Halifax, NS, Canada","institution_ids":["https://openalex.org/I129902397"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I129902397"],"apc_list":null,"apc_paid":null,"fwci":1.2185,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.79091296,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"2539","last_page":"2546"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/header","display_name":"Header","score":0.8612769246101379},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7723985910415649},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.7002267837524414},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6834328770637512},{"id":"https://openalex.org/keywords/genetic-programming","display_name":"Genetic programming","score":0.6211715936660767},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5900022387504578},{"id":"https://openalex.org/keywords/adaboost","display_name":"AdaBoost","score":0.5568093657493591},{"id":"https://openalex.org/keywords/throughput","display_name":"Throughput","score":0.5285162925720215},{"id":"https://openalex.org/keywords/genetic-algorithm","display_name":"Genetic algorithm","score":0.5034837126731873},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4914513826370239},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.4845229983329773},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.43114393949508667},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4287394881248474},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3930598795413971},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38376739621162415},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3763168752193451},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.1677476465702057},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.10283300280570984}],"concepts":[{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.8612769246101379},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7723985910415649},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.7002267837524414},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6834328770637512},{"id":"https://openalex.org/C110332635","wikidata":"https://www.wikidata.org/wiki/Q629498","display_name":"Genetic programming","level":2,"score":0.6211715936660767},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5900022387504578},{"id":"https://openalex.org/C141404830","wikidata":"https://www.wikidata.org/wiki/Q2823869","display_name":"AdaBoost","level":3,"score":0.5568093657493591},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.5285162925720215},{"id":"https://openalex.org/C8880873","wikidata":"https://www.wikidata.org/wiki/Q187787","display_name":"Genetic algorithm","level":2,"score":0.5034837126731873},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4914513826370239},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.4845229983329773},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.43114393949508667},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4287394881248474},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3930598795413971},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38376739621162415},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3763168752193451},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.1677476465702057},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10283300280570984},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1570256.1570358","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1570256.1570358","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 11th Annual Conference Companion on Genetic and Evolutionary Computation Conference: Late Breaking Papers","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.46000000834465027}],"awards":[],"funders":[{"id":"https://openalex.org/F4320322675","display_name":"Mitacs","ror":"https://ror.org/00cjrc276"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1521553548","https://openalex.org/W1591480890","https://openalex.org/W1602622186","https://openalex.org/W1950070584","https://openalex.org/W1984987629","https://openalex.org/W1993028889","https://openalex.org/W1995945562","https://openalex.org/W1998452541","https://openalex.org/W2012095206","https://openalex.org/W2073089243","https://openalex.org/W2105802878","https://openalex.org/W2114968414","https://openalex.org/W2119271160","https://openalex.org/W2120152316","https://openalex.org/W2121973001","https://openalex.org/W2122226347","https://openalex.org/W2125722086","https://openalex.org/W2133473417","https://openalex.org/W2134632326","https://openalex.org/W2169157770","https://openalex.org/W2549507697","https://openalex.org/W2751318774","https://openalex.org/W2911631328","https://openalex.org/W2914982603","https://openalex.org/W6758168668","https://openalex.org/W6991957103"],"related_works":["https://openalex.org/W3044308011","https://openalex.org/W3175867593","https://openalex.org/W1971040605","https://openalex.org/W1523103140","https://openalex.org/W4293863310","https://openalex.org/W3160314615","https://openalex.org/W2904326537","https://openalex.org/W4212842074","https://openalex.org/W4386875655","https://openalex.org/W2313462451"],"abstract_inverted_index":{"The":[0],"classification":[1],"of":[2,56,74,85,104,120,143],"Encrypted":[3],"Traffic,":[4],"namely":[5],"Secure":[6],"Shell":[7],"(SSH),":[8],"on":[9,90],"the":[10,46,50,67,72,83,115,132],"fly":[11],"from":[12,131],"network":[13],"TCP":[14],"traffic":[15,88],"represents":[16],"a":[17,54],"particularly":[18],"challenging":[19],"application":[20],"domain":[21,69],"for":[22],"machine":[23],"learning.":[24],"Solutions":[25],"should":[26],"ideally":[27],"be":[28],"both":[29],"simple":[30],"-":[31,36,108,113],"therefore":[32],"efficient":[33],"to":[34,41,48],"deploy":[35],"and":[37,70,100,106,129],"accurate.":[38],"Recent":[39],"advances":[40],"teambased":[42],"Genetic":[43,122],"Programming":[44,123],"provide":[45],"opportunity":[47],"decompose":[49],"original":[51],"problem":[52,68],"into":[53,66],"subset":[55],"classifiers":[57],"with":[58],"non-overlapping":[59],"behaviors,":[60],"in":[61,77],"effect":[62],"providing":[63,144],"further":[64],"insight":[65],"increasing":[71],"throughput":[73],"solutions.":[75],"Thus,":[76],"this":[78],"work":[79],"we":[80],"have":[81],"investigated":[82],"identification":[84],"SSH":[86],"encrypted":[87],"based":[89,138],"packet":[91],"header":[92],"features":[93],"without":[94,147],"using":[95],"IP":[96],"addresses,":[97],"port":[98],"numbers":[99],"payload":[101],"data.":[102],"Evaluation":[103],"C4.5":[105],"AdaBoost":[107],"representing":[109],"current":[110],"best":[111],"practice":[112],"against":[114],"Symbiotic":[116],"Bid-based":[117],"(SBB)":[118],"paradigm":[119],"team-based":[121],"(GP)":[124],"under":[125],"data":[126],"sets":[127],"common":[128],"independent":[130],"training":[133],"condition":[134],"indicates":[135],"that":[136],"SBB":[137],"GP":[139],"solutions":[140,146],"are":[141],"capable":[142],"simpler":[145],"sacrificing":[148],"accuracy.":[149]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}