{"id":"https://openalex.org/W2887791728","doi":"https://doi.org/10.1145/3229543.3229548","title":"Efficient Distribution-Derived Features for High-Speed Encrypted Flow Classification","display_name":"Efficient Distribution-Derived Features for High-Speed Encrypted Flow Classification","publication_year":2018,"publication_date":"2018-01-01","ids":{"openalex":"https://openalex.org/W2887791728","doi":"https://doi.org/10.1145/3229543.3229548","mag":"2887791728"},"language":"en","primary_location":{"id":"doi:10.1145/3229543.3229548","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3229543.3229548","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2018 Workshop on Network Meets AI & ML - NetAI'18","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102018078","display_name":"Johan Garcia","orcid":"https://orcid.org/0000-0003-3461-7079"},"institutions":[{"id":"https://openalex.org/I43968019","display_name":"Karlstad University","ror":"https://ror.org/05s754026","country_code":"SE","type":"education","lineage":["https://openalex.org/I43968019"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Johan Garcia","raw_affiliation_strings":["Karlstad University, Karlstad, Sweden"],"affiliations":[{"raw_affiliation_string":"Karlstad University, Karlstad, Sweden","institution_ids":["https://openalex.org/I43968019"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5111972869","display_name":"Topi Korhonen","orcid":null},"institutions":[{"id":"https://openalex.org/I43968019","display_name":"Karlstad University","ror":"https://ror.org/05s754026","country_code":"SE","type":"education","lineage":["https://openalex.org/I43968019"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Topi Korhonen","raw_affiliation_strings":["Karlstad University, Karlstad, Sweden"],"affiliations":[{"raw_affiliation_string":"Karlstad University, Karlstad, Sweden","institution_ids":["https://openalex.org/I43968019"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5102018078"],"corresponding_institution_ids":["https://openalex.org/I43968019"],"apc_list":null,"apc_paid":null,"fwci":1.1846,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.84460632,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"21","last_page":"27"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9760000109672546,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7451334595680237},{"id":"https://openalex.org/keywords/histogram","display_name":"Histogram","score":0.7226149439811707},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.5827120542526245},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.554552435874939},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5380951762199402},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.5064429044723511},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.43558356165885925},{"id":"https://openalex.org/keywords/log-normal-distribution","display_name":"Log-normal distribution","score":0.4316335618495941},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.39451825618743896},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.17392167448997498},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.12148642539978027}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7451334595680237},{"id":"https://openalex.org/C53533937","wikidata":"https://www.wikidata.org/wiki/Q185020","display_name":"Histogram","level":3,"score":0.7226149439811707},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.5827120542526245},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.554552435874939},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5380951762199402},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.5064429044723511},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.43558356165885925},{"id":"https://openalex.org/C151620405","wikidata":"https://www.wikidata.org/wiki/Q826116","display_name":"Log-normal distribution","level":2,"score":0.4316335618495941},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39451825618743896},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.17392167448997498},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.12148642539978027},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3229543.3229548","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3229543.3229548","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2018 Workshop on Network Meets AI & ML - NetAI'18","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Decent work and economic growth","score":0.4000000059604645,"id":"https://metadata.un.org/sdg/8"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321759","display_name":"Stiftelsen f\u00f6r Kunskaps- och Kompetensutveckling","ror":"https://ror.org/02cbq7e25"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W1585743408","https://openalex.org/W1588516554","https://openalex.org/W1639725420","https://openalex.org/W1971992994","https://openalex.org/W1982366717","https://openalex.org/W1985727365","https://openalex.org/W2005802709","https://openalex.org/W2008686970","https://openalex.org/W2076448839","https://openalex.org/W2096118443","https://openalex.org/W2097994458","https://openalex.org/W2135511047","https://openalex.org/W2146194630","https://openalex.org/W2149620753","https://openalex.org/W2151650659","https://openalex.org/W2158698691","https://openalex.org/W2166325326","https://openalex.org/W2166481425","https://openalex.org/W2167778199","https://openalex.org/W2190207511","https://openalex.org/W2245787472","https://openalex.org/W2613715541","https://openalex.org/W2742275837","https://openalex.org/W2752585447","https://openalex.org/W2756467403","https://openalex.org/W2785329764","https://openalex.org/W2808617136","https://openalex.org/W2885862920","https://openalex.org/W2913399920","https://openalex.org/W3008021358","https://openalex.org/W3105187411","https://openalex.org/W3131845830","https://openalex.org/W3150719513","https://openalex.org/W4255375128","https://openalex.org/W4299542564"],"related_works":["https://openalex.org/W2493033802","https://openalex.org/W2083114504","https://openalex.org/W2011669161","https://openalex.org/W2179036394","https://openalex.org/W2012465643","https://openalex.org/W4206905835","https://openalex.org/W2613715541","https://openalex.org/W2773751105","https://openalex.org/W4293863212","https://openalex.org/W2050261031"],"abstract_inverted_index":{"Flow":[0],"classification":[1,28,184],"is":[2,21,29],"an":[3],"important":[4],"tool":[5],"to":[6,96,187],"enable":[7],"efficient":[8],"network":[9,169],"resource":[10],"usage,":[11],"support":[12],"traffic":[13,20,164],"engineering,":[14],"and":[15,67,139,156],"aid":[16],"QoS":[17],"mechanisms.":[18],"As":[19],"increasingly":[22],"becoming":[23],"encrypted":[24,45],"by":[25],"default,":[26],"flow":[27,52],"turning":[30],"towards":[31],"the":[32,56,103,108,144,180],"use":[33],"of":[34,59,72,153],"machine":[35],"learning":[36],"methods":[37],"employing":[38],"features":[39,53,182,190],"that":[40,54,143,172],"are":[41,75],"also":[42,119],"available":[43],"for":[44,112,123],"traffic.":[46],"In":[47],"this":[48],"work":[49],"we":[50],"evaluate":[51],"capture":[55],"distributional":[57,104],"properties":[58,105],"in-flow":[60],"per-packet":[61],"metrics":[62],"such":[63,73,82],"as":[64,83],"packet":[65],"size":[66],"inter-arrival":[68],"time.":[69],"The":[70],"characteristics":[71],"distributions":[74],"often":[76],"captured":[77],"with":[78,175],"general":[79,188],"statistical":[80,129,189],"measures":[81],"standard":[84],"deviation,":[85],"variance,":[86],"etc.":[87],"We":[88],"instead":[89],"propose":[90],"a":[91,113,167,176],"Kolmogorov-Smirnov":[92],"discretization":[93],"(KSD)":[94],"algorithm":[95],"perform":[97],"histogram":[98,115],"bin":[99,198],"construction":[100],"based":[101,191],"on":[102,192],"observed":[106],"in":[107],"data.":[109],"This":[110],"allows":[111],"richer,":[114],"based,":[116],"representation":[117],"which":[118],"requires":[120],"less":[121],"resources":[122],"feature":[124],"computation":[125],"than":[126],"higher":[127,193],"order":[128,194],"moments.":[130],"A":[131],"comprehensive":[132],"evaluation":[133,161],"using":[134,162],"synthetic":[135],"data":[136],"from":[137,166],"Gaussian":[138],"Beta":[140],"mixtures":[141],"show":[142],"KSD":[145],"approach":[146],"provides":[147],"Jensen-Shannon":[148],"distance":[149],"results":[150],"surpassing":[151],"those":[152],"uniform":[154],"binning":[155],"probabilistic":[157],"binning.":[158],"An":[159],"empirical":[160],"live":[163],"traces":[165],"cellular":[168],"further":[170],"shows":[171],"when":[173],"coupled":[174],"random":[177],"forest":[178],"classifier":[179],"KSD-constructed":[181],"improve":[183],"performance":[185],"compared":[186],"moments,":[195],"or":[196],"alternative":[197],"placement":[199],"approaches.":[200]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":2}],"updated_date":"2026-04-21T08:09:41.155169","created_date":"2025-10-10T00:00:00"}