{"id":"https://openalex.org/W3206444595","doi":"https://doi.org/10.1145/3485832.3485925","title":"MAppGraph: Mobile-App Classification on Encrypted Network Traffic using Deep Graph Convolution Neural Networks","display_name":"MAppGraph: Mobile-App Classification on Encrypted Network Traffic using Deep Graph Convolution Neural Networks","publication_year":2021,"publication_date":"2021-12-06","ids":{"openalex":"https://openalex.org/W3206444595","doi":"https://doi.org/10.1145/3485832.3485925","mag":"3206444595"},"language":"en","primary_location":{"id":"doi:10.1145/3485832.3485925","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3485832.3485925","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":"1063-9527","issn":["1063-9527","2576-9103"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual Computer Security Applications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://research.aalto.fi/en/publications/55913ef0-6e04-442b-8745-76af3384d861","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5036844004","display_name":"Thai-Dien Pham","orcid":null},"institutions":[{"id":"https://openalex.org/I4210141097","display_name":"T\u00e2n T\u1ea1o University","ror":"https://ror.org/03q6f0894","country_code":"VN","type":"education","lineage":["https://openalex.org/I4210141097"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Thai-Dien Pham","raw_affiliation_strings":["Tan Tao University, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tan Tao University, Vietnam","institution_ids":["https://openalex.org/I4210141097"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030376211","display_name":"Thien-Lac Ho","orcid":null},"institutions":[{"id":"https://openalex.org/I4210141097","display_name":"T\u00e2n T\u1ea1o University","ror":"https://ror.org/03q6f0894","country_code":"VN","type":"education","lineage":["https://openalex.org/I4210141097"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Thien-Lac Ho","raw_affiliation_strings":["Tan Tao University, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tan Tao University, Vietnam","institution_ids":["https://openalex.org/I4210141097"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024736417","display_name":"Tram Truong-Huu","orcid":"https://orcid.org/0000-0003-1049-9557"},"institutions":[{"id":"https://openalex.org/I168639165","display_name":"Singapore Institute of Technology","ror":"https://ror.org/01v2c2791","country_code":"SG","type":"education","lineage":["https://openalex.org/I168639165"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Tram Truong-Huu","raw_affiliation_strings":["Singapore Institute of Technology, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Singapore Institute of Technology, Singapore","institution_ids":["https://openalex.org/I168639165"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008183672","display_name":"Tien-Dung Cao","orcid":"https://orcid.org/0000-0003-4805-8132"},"institutions":[{"id":"https://openalex.org/I4210141097","display_name":"T\u00e2n T\u1ea1o University","ror":"https://ror.org/03q6f0894","country_code":"VN","type":"education","lineage":["https://openalex.org/I4210141097"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Tien-Dung Cao","raw_affiliation_strings":["Tan Tao University, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tan Tao University, Vietnam","institution_ids":["https://openalex.org/I4210141097"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060331063","display_name":"Hong\u2010Linh Truong","orcid":"https://orcid.org/0000-0003-1465-9722"},"institutions":[{"id":"https://openalex.org/I9927081","display_name":"Aalto University","ror":"https://ror.org/020hwjq30","country_code":"FI","type":"education","lineage":["https://openalex.org/I9927081"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Hong-Linh Truong","raw_affiliation_strings":["Aalto University, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Aalto University, Finland","institution_ids":["https://openalex.org/I9927081"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.2577,"has_fulltext":false,"cited_by_count":59,"citation_normalized_percentile":{"value":0.95567768,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1025","last_page":"1038"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8572684526443481},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.7505004405975342},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.7245078086853027},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.527470052242279},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.41498565673828125},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.4112759828567505},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.3892497420310974},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3427829146385193},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2761669158935547}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8572684526443481},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.7505004405975342},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.7245078086853027},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.527470052242279},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.41498565673828125},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.4112759828567505},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.3892497420310974},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3427829146385193},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2761669158935547}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3485832.3485925","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3485832.3485925","pdf_url":null,"source":{"id":"https://openalex.org/S4306417673","display_name":"Annual Computer Security Applications Conference","issn_l":"1063-9527","issn":["1063-9527","2576-9103"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annual Computer Security Applications Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:aaltodoc.aalto.fi:123456789/111578","is_oa":true,"landing_page_url":"https://research.aalto.fi/en/publications/55913ef0-6e04-442b-8745-76af3384d861","pdf_url":null,"source":{"id":"https://openalex.org/S4306401662","display_name":"Aaltodoc (Aalto University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I9927081","host_organization_name":"Aalto University","host_organization_lineage":["https://openalex.org/I9927081"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:aaltodoc.aalto.fi:123456789/111578","is_oa":true,"landing_page_url":"https://research.aalto.fi/en/publications/55913ef0-6e04-442b-8745-76af3384d861","pdf_url":null,"source":{"id":"https://openalex.org/S4306401662","display_name":"Aaltodoc (Aalto University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I9927081","host_organization_name":"Aalto University","host_organization_lineage":["https://openalex.org/I9927081"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W569478347","https://openalex.org/W2096118443","https://openalex.org/W2123402141","https://openalex.org/W2165698076","https://openalex.org/W2168924027","https://openalex.org/W2190207511","https://openalex.org/W2334842536","https://openalex.org/W2546771983","https://openalex.org/W2560100125","https://openalex.org/W2587076123","https://openalex.org/W2594899909","https://openalex.org/W2621148797","https://openalex.org/W2750674396","https://openalex.org/W2765490659","https://openalex.org/W2783320270","https://openalex.org/W2790262412","https://openalex.org/W2888096149","https://openalex.org/W2897202622","https://openalex.org/W2963403784","https://openalex.org/W2965144582","https://openalex.org/W2971865858","https://openalex.org/W2991162492","https://openalex.org/W2998483179","https://openalex.org/W3007562398","https://openalex.org/W3102554291","https://openalex.org/W3197584391"],"related_works":["https://openalex.org/W4293226380","https://openalex.org/W2100090372","https://openalex.org/W4361205702","https://openalex.org/W2179036394","https://openalex.org/W2012465643","https://openalex.org/W4206905835","https://openalex.org/W2613715541","https://openalex.org/W2773751105","https://openalex.org/W4293863212","https://openalex.org/W2050261031"],"abstract_inverted_index":{"Identifying":[0],"mobile":[1,49,69,99,180,203,245],"apps":[2,181,204],"based":[3],"on":[4,205],"network":[5,13,26,242],"traffic":[6,27,57,110,199],"has":[7],"multiple":[8,23],"benefits":[9],"for":[10,239],"security":[11,240],"and":[12,64,129,188,209,235,241],"management.":[14],"However,":[15],"it":[16,52],"is":[17,28,53],"a":[18,94,107,117,183,190,201],"challenging":[19],"task":[20],"due":[21,59],"to":[22,35,55,60,74,97,159,173,228,231],"reasons.":[24],"First,":[25],"encrypted":[29,157],"using":[30,45],"an":[31,113],"end-to-end":[32],"encryption":[33,77],"mechanism":[34],"protect":[36],"data":[37],"privacy.":[38],"Second,":[39],"user":[40],"behavior":[41,58,178],"changes":[42],"dynamically":[43],"when":[44],"different":[46],"functionalities":[47],"of":[48,109,126,131,163,179,186,200,244],"apps.":[50,70],"Third,":[51],"hard":[54],"differentiate":[56],"common":[61],"shared":[62],"libraries":[63],"content":[65],"delivery":[66],"within":[67],"modern":[68],"Existing":[71],"techniques":[72,234],"managed":[73],"address":[75,128],"the":[76,81,103,132,136,142,147,164,175,206],"issue":[78],"but":[79],"not":[80],"others,":[82],"thus":[83],"achieving":[84],"low":[85],"detection/classification":[86],"accuracy.":[87],"In":[88],"this":[89],"paper,":[90],"we":[91,197],"present":[92],"MAppGraph,":[93],"novel":[95],"technique":[96],"classify":[98],"apps,":[100],"addressing":[101],"all":[102],"above":[104],"issues.":[105],"Given":[106],"chunk":[108],"generated":[111],"by":[112,124,135,141,226],"app,":[114,137],"MAppGraph":[115,221],"constructs":[116],"communication":[118,144,177],"graph":[119,169],"whose":[120],"nodes":[121],"are":[122,139],"defined":[123],"tuples":[125],"IP":[127],"port":[130],"services":[133],"connected":[134],"edges":[138],"established":[140],"weighted":[143],"correlation":[145],"among":[146],"nodes.":[148,165],"We":[149,166],"extract":[150],"information":[151],"from":[152,182],"packet":[153],"headers":[154],"without":[155],"analyzing":[156],"payload":[158],"form":[160],"feature":[161],"vectors":[162],"leverage":[167],"deep":[168],"convolution":[170],"neural":[171],"networks":[172],"learn":[174],"diverse":[176],"large":[184],"number":[185],"graphs":[187],"achieve":[189],"fast":[191],"classification.":[192],"To":[193],"validate":[194],"our":[195],"technique,":[196],"collect":[198],"hundred":[202],"Android":[207],"platform":[208],"run":[210],"extensive":[211],"experiments":[212],"with":[213],"various":[214],"experimental":[215],"scenarios.":[216],"The":[217],"results":[218],"show":[219],"that":[220],"significantly":[222],"improves":[223],"classification":[224],"accuracy":[225],"up":[227],"20%":[229],"compared":[230],"recently":[232],"developed":[233],"demonstrates":[236],"its":[237],"practicality":[238],"management":[243],"services.":[246]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":17},{"year":2022,"cited_by_count":2}],"updated_date":"2026-08-30T07:30:35.949966","created_date":"2025-10-10T00:00:00"}