{"id":"https://openalex.org/W2062248396","doi":"https://doi.org/10.1145/1815396.1815567","title":"Statistical classification of services tunneled into SSH connections by a K-means based learning algorithm","display_name":"Statistical classification of services tunneled into SSH connections by a K-means based learning algorithm","publication_year":2010,"publication_date":"2010-06-28","ids":{"openalex":"https://openalex.org/W2062248396","doi":"https://doi.org/10.1145/1815396.1815567","mag":"2062248396"},"language":"en","primary_location":{"id":"doi:10.1145/1815396.1815567","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1815396.1815567","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 6th International Wireless Communications and Mobile Computing Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013631613","display_name":"Gianluca Maiolini","orcid":null},"institutions":[{"id":"https://openalex.org/I4210132533","display_name":"Datamat (Italy)","ror":"https://ror.org/03pcn5m15","country_code":"IT","type":"company","lineage":["https://openalex.org/I4210132533"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"G. Maiolini","raw_affiliation_strings":["Elsag Datamat SpA, Rome, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Elsag Datamat SpA, Rome, Italy","institution_ids":["https://openalex.org/I4210132533"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074428250","display_name":"Andrea Baiocchi","orcid":"https://orcid.org/0000-0002-9337-9421"},"institutions":[{"id":"https://openalex.org/I861853513","display_name":"Sapienza University of Rome","ror":"https://ror.org/02be6w209","country_code":"IT","type":"education","lineage":["https://openalex.org/I861853513"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"A. Baiocchi","raw_affiliation_strings":["University of Rome, Sapienza, Rome"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Rome, Sapienza, Rome","institution_ids":["https://openalex.org/I861853513"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025282612","display_name":"Antonello Rizzi","orcid":null},"institutions":[{"id":"https://openalex.org/I861853513","display_name":"Sapienza University of Rome","ror":"https://ror.org/02be6w209","country_code":"IT","type":"education","lineage":["https://openalex.org/I861853513"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"A. Rizzi","raw_affiliation_strings":["University of Rome, Sapienza, Rome"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Rome, Sapienza, Rome","institution_ids":["https://openalex.org/I861853513"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5025232104","display_name":"C. Di Iollo","orcid":null},"institutions":[{"id":"https://openalex.org/I4210132533","display_name":"Datamat (Italy)","ror":"https://ror.org/03pcn5m15","country_code":"IT","type":"company","lineage":["https://openalex.org/I4210132533"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"C. Di Iollo","raw_affiliation_strings":["Elsag Datamat SpA, Rome, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Elsag Datamat SpA, Rome, Italy","institution_ids":["https://openalex.org/I4210132533"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.2725,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.51205741,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"742","last_page":"746"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/telnet","display_name":"Telnet","score":0.8778703808784485},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7411841750144958},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6680845022201538},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.5408897399902344},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.5250261425971985},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5164613723754883},{"id":"https://openalex.org/keywords/statistical-classification","display_name":"Statistical classification","score":0.4606781601905823},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.4533076882362366},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.42020896077156067},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.41895878314971924},{"id":"https://openalex.org/keywords/ssh-file-transfer-protocol","display_name":"SSH File Transfer Protocol","score":0.41305097937583923},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38559675216674805},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3385775685310364},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3062678575515747},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.19855934381484985},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.18932047486305237},{"id":"https://openalex.org/keywords/file-transfer-protocol","display_name":"File Transfer Protocol","score":0.12778988480567932},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09191694855690002},{"id":"https://openalex.org/keywords/file-system","display_name":"File system","score":0.08031541109085083}],"concepts":[{"id":"https://openalex.org/C2776538122","wikidata":"https://www.wikidata.org/wiki/Q160470","display_name":"Telnet","level":4,"score":0.8778703808784485},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7411841750144958},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6680845022201538},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.5408897399902344},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.5250261425971985},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5164613723754883},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.4606781601905823},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.4533076882362366},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.42020896077156067},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.41895878314971924},{"id":"https://openalex.org/C88520388","wikidata":"https://www.wikidata.org/wiki/Q1126823","display_name":"SSH File Transfer Protocol","level":4,"score":0.41305097937583923},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38559675216674805},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3385775685310364},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3062678575515747},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.19855934381484985},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.18932047486305237},{"id":"https://openalex.org/C169485995","wikidata":"https://www.wikidata.org/wiki/Q42283","display_name":"File Transfer Protocol","level":3,"score":0.12778988480567932},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09191694855690002},{"id":"https://openalex.org/C2780940931","wikidata":"https://www.wikidata.org/wiki/Q174989","display_name":"File system","level":2,"score":0.08031541109085083},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C82820731","wikidata":"https://www.wikidata.org/wiki/Q2640620","display_name":"Self-certifying File System","level":3,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1815396.1815567","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1815396.1815567","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 6th International Wireless Communications and Mobile Computing Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:iris.uniroma1.it:11573/228147","is_oa":false,"landing_page_url":"http://hdl.handle.net/11573/228147","pdf_url":null,"source":{"id":"https://openalex.org/S4377196107","display_name":"IRIS Research product catalog (Sapienza University of Rome)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":5,"referenced_works":["https://openalex.org/W2120948237","https://openalex.org/W2125216345","https://openalex.org/W2134632326","https://openalex.org/W2143305710","https://openalex.org/W2295782180"],"related_works":["https://openalex.org/W2012465643","https://openalex.org/W77524159","https://openalex.org/W2773751105","https://openalex.org/W2214748173","https://openalex.org/W4293863212","https://openalex.org/W2050261031","https://openalex.org/W2361570807","https://openalex.org/W1575348850","https://openalex.org/W4206561551","https://openalex.org/W2349835884"],"abstract_inverted_index":{"Secure":[0],"SHell":[1],"is":[2,25,52],"a":[3],"TCP":[4,37],"based":[5,59,79],"protocol":[6],"designed":[7,106],"to":[8,21,28,107,140],"enhance":[9],"with":[10,77,137],"security":[11],"features":[12],"telnet":[13],"and":[14,57,94,104],"other":[15,132],"insecure":[16],"remote":[17,110,127],"management":[18,128],"tools.":[19],"Due":[20],"its":[22,120],"versatility,":[23],"it":[24],"often":[26],"exploited":[27],"forward":[29],"applications":[30],"(i.e.":[31],"HTTP,":[32],"SCP,":[33],"etc.)":[34],"into":[35],"encoded":[36,134],"traffic":[38,87,112,129],"flows.":[39],"The":[40],"point":[41],"which":[42],"makes":[43],"challenging":[44],"the":[45,48,71],"identification":[46],"of":[47,50,73,85,96,131],"uses":[49],"SSH":[51,75,109,133],"that":[53],"packets":[54],"are":[55],"enciphered":[56],"instruments":[58],"on":[60],"deep":[61],"packet":[62],"inspection":[63],"(DPI)":[64],"cannot":[65],"achieve":[66],"this":[67,99],"task.":[68],"We":[69],"approached":[70],"problem":[72],"early":[74],"classification":[76],"k-means":[78],"machine":[80],"by":[81],"studying":[82],"statistical":[83],"behavior":[84],"IP":[86],"parameters,":[88],"such":[89],"as":[90,113,115],"length,":[91],"arrival":[92],"time":[93],"direction":[95],"packets.":[97],"In":[98,122],"paper":[100],"we":[101],"describe":[102],"tools":[103],"networks":[105],"collect":[108],"administration":[111],"well":[114],"relevant":[116],"results":[117],"obtained":[118],"for":[119],"classification.":[121],"particular,":[123],"our":[124],"tool":[125],"identifies":[126],"out":[130],"appli":[135],"cations":[136],"accuracy":[138],"up":[139],"90.34.":[141]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2014,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}