{"id":"https://openalex.org/W4237357939","doi":"https://doi.org/10.1145/3447382","title":"A Look Behind the Curtain: Traffic Classification in an Increasingly Encrypted Web","display_name":"A Look Behind the Curtain: Traffic Classification in an Increasingly Encrypted Web","publication_year":2021,"publication_date":"2021-02-18","ids":{"openalex":"https://openalex.org/W4237357939","doi":"https://doi.org/10.1145/3447382"},"language":"en","primary_location":{"id":"doi:10.1145/3447382","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3447382","pdf_url":null,"source":{"id":"https://openalex.org/S4210193547","display_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","issn_l":"2476-1249","issn":["2476-1249"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032195882","display_name":"Iman Akbari","orcid":null},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Iman Akbari","raw_affiliation_strings":["University of Waterloo, Waterloo, ON, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Waterloo, Waterloo, ON, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039801401","display_name":"Mohammad A. Salahuddin","orcid":"https://orcid.org/0000-0002-5431-3278"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mohammad A. Salahuddin","raw_affiliation_strings":["University of Waterloo, Waterloo, ON, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Waterloo, Waterloo, ON, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112612040","display_name":"Leni Ven","orcid":null},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Leni Aniva","raw_affiliation_strings":["University of Waterloo, Waterloo, ON, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Waterloo, Waterloo, ON, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062253146","display_name":"Noura Limam","orcid":"https://orcid.org/0000-0002-7759-3751"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Noura Limam","raw_affiliation_strings":["University of Waterloo, Waterloo, ON, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Waterloo, Waterloo, ON, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038723583","display_name":"Raouf Boutaba","orcid":"https://orcid.org/0000-0001-7936-6862"},"institutions":[{"id":"https://openalex.org/I151746483","display_name":"University of Waterloo","ror":"https://ror.org/01aff2v68","country_code":"CA","type":"education","lineage":["https://openalex.org/I151746483"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Raouf Boutaba","raw_affiliation_strings":["University of Waterloo, Waterloo, ON, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Waterloo, Waterloo, ON, Canada","institution_ids":["https://openalex.org/I151746483"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010916846","display_name":"Bertrand Mathieu","orcid":"https://orcid.org/0000-0003-4020-3761"},"institutions":[{"id":"https://openalex.org/I19370010","display_name":"Orange (France)","ror":"https://ror.org/035j0tq82","country_code":"FR","type":"company","lineage":["https://openalex.org/I19370010"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Bertrand Mathieu","raw_affiliation_strings":["Orange Labs, Lannion, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Orange Labs, Lannion, France","institution_ids":["https://openalex.org/I19370010"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017971528","display_name":"St\u00e9phanie Moteau","orcid":null},"institutions":[{"id":"https://openalex.org/I19370010","display_name":"Orange (France)","ror":"https://ror.org/035j0tq82","country_code":"FR","type":"company","lineage":["https://openalex.org/I19370010"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Stephanie Moteau","raw_affiliation_strings":["Orange Labs, Lannion, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Orange Labs, Lannion, France","institution_ids":["https://openalex.org/I19370010"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5021384705","display_name":"St\u00e9phane Tuffin","orcid":null},"institutions":[{"id":"https://openalex.org/I19370010","display_name":"Orange (France)","ror":"https://ror.org/035j0tq82","country_code":"FR","type":"company","lineage":["https://openalex.org/I19370010"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Stephane Tuffin","raw_affiliation_strings":["Orange Labs, Lannion, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Orange Labs, Lannion, France","institution_ids":["https://openalex.org/I19370010"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5032195882"],"corresponding_institution_ids":["https://openalex.org/I151746483"],"apc_list":null,"apc_paid":null,"fwci":6.4361,"has_fulltext":false,"cited_by_count":64,"citation_normalized_percentile":{"value":0.97160716,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"5","issue":"1","first_page":"1","last_page":"26"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.7920922636985779},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7645875811576843},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.6594456434249878},{"id":"https://openalex.org/keywords/feature-engineering","display_name":"Feature engineering","score":0.6059142351150513},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.5695594549179077},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5077232122421265},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.47650185227394104},{"id":"https://openalex.org/keywords/provisioning","display_name":"Provisioning","score":0.46251192688941956},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.44684284925460815},{"id":"https://openalex.org/keywords/header","display_name":"Header","score":0.43982842564582825},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.43023547530174255},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.37579798698425293},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.36226609349250793},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3587101697921753},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.18060362339019775}],"concepts":[{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.7920922636985779},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7645875811576843},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.6594456434249878},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.6059142351150513},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.5695594549179077},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5077232122421265},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.47650185227394104},{"id":"https://openalex.org/C172191483","wikidata":"https://www.wikidata.org/wiki/Q1071806","display_name":"Provisioning","level":2,"score":0.46251192688941956},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44684284925460815},{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.43982842564582825},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.43023547530174255},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37579798698425293},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.36226609349250793},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3587101697921753},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.18060362339019775},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3447382","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3447382","pdf_url":null,"source":{"id":"https://openalex.org/S4210193547","display_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","issn_l":"2476-1249","issn":["2476-1249"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.4099999964237213}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W2073089243","https://openalex.org/W2158215699","https://openalex.org/W2187970900","https://openalex.org/W2591712613","https://openalex.org/W2613715541","https://openalex.org/W2743556905","https://openalex.org/W2743678626","https://openalex.org/W2750674396","https://openalex.org/W2771013472","https://openalex.org/W2772303842","https://openalex.org/W2772317693","https://openalex.org/W2784189535","https://openalex.org/W2809684781","https://openalex.org/W2898413119","https://openalex.org/W2911301616","https://openalex.org/W2912386632","https://openalex.org/W2917091861","https://openalex.org/W2919493784","https://openalex.org/W2963065250","https://openalex.org/W2963516518","https://openalex.org/W2963750397","https://openalex.org/W2965118803","https://openalex.org/W2978116268","https://openalex.org/W3000473108","https://openalex.org/W3039623901","https://openalex.org/W3045474099","https://openalex.org/W3045858585","https://openalex.org/W3160447194","https://openalex.org/W4239515884"],"related_works":["https://openalex.org/W2171597999","https://openalex.org/W2189136227","https://openalex.org/W1866537546","https://openalex.org/W2179036394","https://openalex.org/W4212842074","https://openalex.org/W1602622186","https://openalex.org/W4206905835","https://openalex.org/W4300427221","https://openalex.org/W2904326537","https://openalex.org/W2613715541"],"abstract_inverted_index":{"Traffic":[0],"classification":[1,55,200,229],"is":[2,68,112],"essential":[3],"in":[4,36,43,64,198,250],"network":[5,152],"management":[6],"for":[7,120,144,227],"operations":[8],"ranging":[9],"from":[10,184],"capacity":[11],"planning,":[12],"performance":[13],"monitoring,":[14],"volumetry,":[15],"and":[16,22,45,148,162,188,205,231,247],"resource":[17],"provisioning,":[18],"to":[19,103],"anomaly":[20],"detection":[21],"security.":[23],"Recently,":[24],"it":[25,67],"has":[26],"become":[27],"increasingly":[28],"challenging":[29],"with":[30,77,171,201,245],"the":[31,37,49,65,97],"widespread":[32],"adoption":[33],"of":[34,52,79,96,106,196,208,256],"encryption":[35],"Internet,":[38],"e.g.,":[39],"as":[40,115],"a":[41,87,136,150,180,185,211,241],"de-facto":[42],"HTTP/2":[44],"QUIC":[46,243],"protocols.":[47,108,234],"In":[48,131],"current":[50],"state":[51],"encrypted":[53,107,110,145,232],"traffic":[54,111,182,204],"using":[56],"Deep":[57],"Learning":[58],"(DL),":[59],"we":[60,134],"identify":[61],"fundamental":[62],"issues":[63],"way":[66],"typically":[69],"approached.":[70],"For":[71],"instance,":[72],"although":[73],"complex":[74],"DL":[75,224],"models":[76,85],"millions":[78],"parameters":[80],"are":[81,128],"being":[82],"used,":[83],"these":[84],"implement":[86],"relatively":[88],"simple":[89],"logic":[90],"based":[91,154],"on":[92,155,179,240],"certain":[93],"header":[94],"fields":[95],"TLS":[98],"handshake,":[99],"limiting":[100],"model":[101,225],"robustness":[102],"future":[104],"versions":[105],"Furthermore,":[109],"often":[113],"treated":[114],"any":[116],"other":[117],"raw":[118,203],"input":[119],"DL,":[121],"while":[122],"crucial":[123],"domain-specific":[124],"considerations":[125],"exist":[126],"that":[127,141,167,222],"commonly":[129],"ignored.":[130],"this":[132],"paper,":[133],"design":[135],"novel":[137],"feature":[138,173],"engineering":[139],"approach":[140,178,239],"generalizes":[142,226],"well":[143,170],"web":[146,233],"protocols,":[147],"develop":[149],"neural":[151],"architecture":[153],"Stacked":[156],"Long":[157],"Short-Term":[158],"Memory":[159],"(LSTM)":[160],"layers":[161],"Convolutional":[163],"Neural":[164],"Networks":[165],"(CNN)":[166],"works":[168],"very":[169],"our":[172,177,223,238],"design.":[174],"We":[175,192,220,235],"evaluate":[176,237],"real-world":[181],"dataset":[183,244],"major":[186],"ISP":[187],"Mobile":[189],"Network":[190],"Operator.":[191],"achieve":[193],"an":[194,253],"accuracy":[195,255],"95%":[197],"service":[199],"less":[202],"smaller":[206],"number":[207],"parameters,":[209],"out-performing":[210],"state-of-the-art":[212],"method":[213],"by":[214],"nearly":[215],"50%":[216],"fewer":[217],"false":[218],"classifications.":[219],"show":[221],"different":[228],"objectives":[230],"also":[236],"public":[242],"finer":[246],"application-level":[248],"granularity":[249],"labeling,":[251],"achieving":[252],"overall":[254],"99%.":[257]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":24},{"year":2023,"cited_by_count":13},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}