{"id":"https://openalex.org/W3080354144","doi":"https://doi.org/10.1145/3407023.3409192","title":"DoH Insight","display_name":"DoH Insight","publication_year":2020,"publication_date":"2020-08-25","ids":{"openalex":"https://openalex.org/W3080354144","doi":"https://doi.org/10.1145/3407023.3409192","mag":"3080354144"},"language":"en","primary_location":{"id":"doi:10.1145/3407023.3409192","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3407023.3409192","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035109551","display_name":"Dmitrii Vekshin","orcid":"https://orcid.org/0000-0001-6287-9039"},"institutions":[{"id":"https://openalex.org/I44504214","display_name":"Czech Technical University in Prague","ror":"https://ror.org/03kqpb082","country_code":"CZ","type":"education","lineage":["https://openalex.org/I44504214"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Dmitrii Vekshin","raw_affiliation_strings":["FIT CTU in Prague, Prague, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FIT CTU in Prague, Prague, Czech Republic","institution_ids":["https://openalex.org/I44504214"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088718699","display_name":"Karel Hynek","orcid":"https://orcid.org/0000-0002-8281-618X"},"institutions":[{"id":"https://openalex.org/I44504214","display_name":"Czech Technical University in Prague","ror":"https://ror.org/03kqpb082","country_code":"CZ","type":"education","lineage":["https://openalex.org/I44504214"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Karel Hynek","raw_affiliation_strings":["FIT CTU in Prague, Prague, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FIT CTU in Prague, Prague, Czech Republic","institution_ids":["https://openalex.org/I44504214"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062180857","display_name":"Tom\u00e1\u0161 \u010cejka","orcid":"https://orcid.org/0000-0001-7794-9511"},"institutions":[{"id":"https://openalex.org/I54634078","display_name":"CESNET, z\u00e1jmov\u00e9 sdru\u017een\u00ed pr\u00e1vnick\u00fdch osob","ror":"https://ror.org/050dkka69","country_code":"CZ","type":"other","lineage":["https://openalex.org/I54634078"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Tomas Cejka","raw_affiliation_strings":["CESNET, z.s.p.o., Prague, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CESNET, z.s.p.o., Prague, Czech Republic","institution_ids":["https://openalex.org/I54634078"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.3008,"has_fulltext":false,"cited_by_count":77,"citation_normalized_percentile":{"value":0.96621873,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8256617784500122},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.7475113868713379},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.6982444524765015},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.5843284130096436},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5486295819282532},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42969459295272827},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3954186737537384},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3055194318294525}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8256617784500122},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.7475113868713379},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.6982444524765015},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5843284130096436},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5486295819282532},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42969459295272827},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3954186737537384},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3055194318294525}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3407023.3409192","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3407023.3409192","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 15th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.41999998688697815,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W80466363","https://openalex.org/W1504694836","https://openalex.org/W1828150029","https://openalex.org/W1930624869","https://openalex.org/W1993114740","https://openalex.org/W2004131797","https://openalex.org/W2111427271","https://openalex.org/W2112076978","https://openalex.org/W2125055259","https://openalex.org/W2147947791","https://openalex.org/W2148143831","https://openalex.org/W2356385263","https://openalex.org/W2572784818","https://openalex.org/W2809684781","https://openalex.org/W2937224677","https://openalex.org/W2972689670","https://openalex.org/W3008176860","https://openalex.org/W3155649056","https://openalex.org/W4246839670","https://openalex.org/W4393445776"],"related_works":["https://openalex.org/W2771198651","https://openalex.org/W2929621094","https://openalex.org/W2093401155","https://openalex.org/W2902215642","https://openalex.org/W3036889819","https://openalex.org/W4285407572","https://openalex.org/W4248917921","https://openalex.org/W2399380072","https://openalex.org/W2203413815","https://openalex.org/W3211806875"],"abstract_inverted_index":{"Over":[0],"the":[1,20,70,78,112,120,136,154,170],"past":[2],"few":[3],"years,":[4],"a":[5,37],"new":[6,40],"protocol":[7],"DNS":[8,29,55],"over":[9,126],"HTTPS":[10,96],"(DoH)":[11],"has":[12],"been":[13],"created":[14,149],"to":[15,56,86,110,134],"improve":[16],"users'":[17],"privacy":[18],"on":[19,51,69,77],"internet.":[21],"DoH":[22,114,123,142,167],"can":[23,92,164],"be":[24,93],"used":[25,140],"instead":[26],"of":[27,72,81,122,156],"traditional":[28],"for":[30,141],"domain":[31],"name":[32],"translation":[33],"with":[34,169],"encryption":[35],"as":[36],"benefit.":[38],"This":[39],"feature":[41],"also":[42,132],"brings":[43],"some":[44],"threats":[45],"because":[46],"various":[47],"security":[48],"tools":[49],"depend":[50],"readable":[52],"information":[53,89],"from":[54,95],"identify,":[57],"e.g.,":[58],"malware,":[59],"botnet":[60],"communication,":[61,143],"and":[62,159],"data":[63,100],"exfiltration.":[64],"Therefore,":[65],"this":[66],"paper":[67],"focuses":[68],"possibilities":[71],"encrypted":[73],"traffic":[74],"analysis,":[75],"especially":[76],"accurate":[79],"recognition":[80,124],"DoH.":[82],"The":[83,116],"aim":[84],"is":[85,125,131],"evaluate":[87],"what":[88],"(if":[90],"any)":[91],"gained":[94],"extended":[97],"IP":[98],"flow":[99],"using":[101],"machine":[102],"learning.":[103],"We":[104],"evaluated":[105],"five":[106],"popular":[107],"ML":[108],"methods":[109],"find":[111],"best":[113],"classifiers.":[115],"experiments":[117],"show":[118],"that":[119,138],"accuracy":[121],"99.9":[127,171],"%.":[128],"Additionally,":[129],"it":[130],"possible":[133],"identify":[135],"application":[137],"was":[139],"since":[144],"we":[145],"have":[146],"discovered":[147],"(using":[148],"datasets)":[150],"significant":[151],"differences":[152],"in":[153],"behavior":[155],"Firefox,":[157],"Chrome,":[158],"cloudflared.":[160],"Our":[161],"trained":[162],"classifier":[163],"distinguish":[165],"between":[166],"clients":[168],"%":[172],"accuracy.":[173]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":16},{"year":2022,"cited_by_count":16},{"year":2021,"cited_by_count":12},{"year":2020,"cited_by_count":2}],"updated_date":"2026-08-15T07:11:24.734988","created_date":"2020-09-01T00:00:00"}