{"id":"https://openalex.org/W4367047070","doi":"https://doi.org/10.1145/3543507.3583227","title":"TFE-GNN: A Temporal Fusion Encoder Using Graph Neural Networks for Fine-grained Encrypted Traffic Classification","display_name":"TFE-GNN: A Temporal Fusion Encoder Using Graph Neural Networks for Fine-grained Encrypted Traffic Classification","publication_year":2023,"publication_date":"2023-04-26","ids":{"openalex":"https://openalex.org/W4367047070","doi":"https://doi.org/10.1145/3543507.3583227"},"language":"en","primary_location":{"id":"doi:10.1145/3543507.3583227","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3543507.3583227","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3543507.3583227","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2023","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3543507.3583227","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5081817897","display_name":"Haozhen Zhang","orcid":"https://orcid.org/0000-0003-4048-4516"},"institutions":[{"id":"https://openalex.org/I3131625388","display_name":"University Town of Shenzhen","ror":"https://ror.org/05f5j6225","country_code":"CN","type":"education","lineage":["https://openalex.org/I3131625388"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haozhen Zhang","raw_affiliation_strings":["Shenzhen International Graduate School, Tsinghua University, China"],"raw_orcid":"https://orcid.org/0000-0003-4048-4516","affiliations":[{"raw_affiliation_string":"Shenzhen International Graduate School, Tsinghua University, China","institution_ids":["https://openalex.org/I3131625388","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027733268","display_name":"Le Yu","orcid":"https://orcid.org/0000-0003-1457-6329"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Le Yu","raw_affiliation_strings":["Department of Computing, The Hong Kong Polytechnic University, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0003-1457-6329","affiliations":[{"raw_affiliation_string":"Department of Computing, The Hong Kong Polytechnic University, Hong Kong","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101600503","display_name":"Xi Xiao","orcid":"https://orcid.org/0000-0003-1521-9542"},"institutions":[{"id":"https://openalex.org/I3131625388","display_name":"University Town of Shenzhen","ror":"https://ror.org/05f5j6225","country_code":"CN","type":"education","lineage":["https://openalex.org/I3131625388"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xi Xiao","raw_affiliation_strings":["Shenzhen International Graduate School, Tsinghua University, China"],"raw_orcid":"https://orcid.org/0000-0003-1521-9542","affiliations":[{"raw_affiliation_string":"Shenzhen International Graduate School, Tsinghua University, China","institution_ids":["https://openalex.org/I3131625388","https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100734609","display_name":"Qing Li","orcid":"https://orcid.org/0000-0002-6071-473X"},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qing Li","raw_affiliation_strings":["Peng Cheng Laboratory, China"],"raw_orcid":"https://orcid.org/0000-0002-6071-473X","affiliations":[{"raw_affiliation_string":"Peng Cheng Laboratory, China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023695406","display_name":"Francesco Mercaldo","orcid":"https://orcid.org/0000-0002-9425-1657"},"institutions":[{"id":"https://openalex.org/I129627893","display_name":"University of Molise","ror":"https://ror.org/04z08z627","country_code":"IT","type":"education","lineage":["https://openalex.org/I129627893"]},{"id":"https://openalex.org/I4210130157","display_name":"Institute of Informatics and Telematics","ror":"https://ror.org/02gdcn153","country_code":"IT","type":"facility","lineage":["https://openalex.org/I4210130157","https://openalex.org/I4210155236"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Francesco Mercaldo","raw_affiliation_strings":["University of Molise, Italy and IIT-CNR, Italy"],"raw_orcid":"https://orcid.org/0000-0002-9425-1657","affiliations":[{"raw_affiliation_string":"University of Molise, Italy and IIT-CNR, Italy","institution_ids":["https://openalex.org/I129627893","https://openalex.org/I4210130157"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100400376","display_name":"Xiapu Luo","orcid":"https://orcid.org/0000-0002-9082-3208"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Xiapu Luo","raw_affiliation_strings":["Department of Computing, The Hong Kong Polytechnic University, Hong Kong"],"raw_orcid":"https://orcid.org/0000-0002-9082-3208","affiliations":[{"raw_affiliation_string":"Department of Computing, The Hong Kong Polytechnic University, Hong Kong","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004834139","display_name":"Qixu Liu","orcid":"https://orcid.org/0000-0003-0895-9585"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qixu Liu","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, China"],"raw_orcid":"https://orcid.org/0000-0003-0895-9585","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":19.4055,"has_fulltext":true,"cited_by_count":120,"citation_normalized_percentile":{"value":0.9955602,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"2066","last_page":"2075"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9900000095367432,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/header","display_name":"Header","score":0.8508967161178589},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7645326256752014},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.7207465171813965},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.6019541621208191},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5679934620857239},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5299091339111328},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.5253999829292297},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.5179325938224792},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.46505436301231384},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.4410625696182251},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.39147454500198364},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.36902081966400146},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.27326691150665283},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1844436526298523},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.16318804025650024},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.10316303372383118}],"concepts":[{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.8508967161178589},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7645326256752014},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.7207465171813965},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.6019541621208191},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5679934620857239},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5299091339111328},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.5253999829292297},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.5179325938224792},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.46505436301231384},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.4410625696182251},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39147454500198364},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.36902081966400146},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.27326691150665283},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1844436526298523},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.16318804025650024},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.10316303372383118},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3543507.3583227","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3543507.3583227","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3543507.3583227","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2023","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3543507.3583227","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3543507.3583227","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3543507.3583227","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2023","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.5,"display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G1159778067","display_name":"\u6d41\u91cf\u6570\u636e\u9a71\u52a8\u7684\u9c81\u68d2\u81ea\u9002\u5e94\u5206\u7c7b\u7b97\u6cd5\u7814\u7a76","funder_award_id":"61972219","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3769346228","display_name":null,"funder_award_id":"61972219,62202406,61972189","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6027343913","display_name":null,"funder_award_id":"61972189","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6067591167","display_name":null,"funder_award_id":"62202406","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321133","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35"},{"id":"https://openalex.org/F4320326705","display_name":"Science, Technology and Innovation Commission of Shenzhen Municipality","ror":null},{"id":"https://openalex.org/F4320337986","display_name":"Tsinghua Shenzhen International Graduate School","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4367047070.pdf","grobid_xml":"https://content.openalex.org/works/W4367047070.grobid-xml"},"referenced_works_count":23,"referenced_works":["https://openalex.org/W1677182931","https://openalex.org/W1966741850","https://openalex.org/W2064675550","https://openalex.org/W2269460187","https://openalex.org/W2272516773","https://openalex.org/W2295321789","https://openalex.org/W2792969299","https://openalex.org/W2796264811","https://openalex.org/W2963516518","https://openalex.org/W2963704216","https://openalex.org/W2991044292","https://openalex.org/W3012902672","https://openalex.org/W3120227884","https://openalex.org/W3145680685","https://openalex.org/W3174009192","https://openalex.org/W3181596493","https://openalex.org/W3183098327","https://openalex.org/W3185782854","https://openalex.org/W3206444595","https://openalex.org/W3217478367","https://openalex.org/W4281623355","https://openalex.org/W4285292284","https://openalex.org/W4299301436"],"related_works":["https://openalex.org/W1574986946","https://openalex.org/W171785150","https://openalex.org/W3044308011","https://openalex.org/W4233480150","https://openalex.org/W1565224167","https://openalex.org/W4238950177","https://openalex.org/W4212842074","https://openalex.org/W2152125195","https://openalex.org/W2018792058","https://openalex.org/W1602622186"],"abstract_inverted_index":{"Encrypted":[0],"traffic":[1,53,88,137],"classification":[2,138],"is":[3],"receiving":[4],"widespread":[5],"attention":[6],"from":[7],"researchers":[8],"and":[9,34,63,105,109],"industrial":[10],"companies.":[11],"However,":[12],"the":[13,32,40,103],"existing":[14],"methods":[15,133],"only":[16],"extract":[17],"flow-level":[18],"features,":[19],"failing":[20,37],"to":[21,38,114],"handle":[22],"short":[23],"flows":[24],"because":[25],"of":[26],"unreliable":[27],"statistical":[28],"properties,":[29],"or":[30],"treat":[31],"header":[33,104],"payload":[35,106],"equally,":[36],"mine":[39],"potential":[41],"correlation":[42],"between":[43],"bytes.":[44],"Therefore,":[45],"in":[46,134],"this":[47],"paper,":[48],"we":[49,80],"propose":[50],"a":[51,64,82,86,94,116],"byte-level":[52],"graph":[54,89],"construction":[55],"approach":[56],"based":[57],"on":[58,123],"point-wise":[59],"mutual":[60],"information":[61],"(PMI),":[62],"model":[65],"named":[66],"Temporal":[67],"Fusion":[68],"Encoder":[69],"using":[70],"Graph":[71],"Neural":[72],"Networks":[73],"(TFE-GNN)":[74],"for":[75],"feature":[76,96,118],"extraction.":[77],"In":[78],"particular,":[79],"design":[81],"dual":[83],"embedding":[84],"layer,":[85],"GNN-based":[87],"encoder":[90],"as":[91,93],"well":[92],"cross-gated":[95],"fusion":[97],"mechanism,":[98],"which":[99],"can":[100],"first":[101],"embed":[102],"bytes":[107],"separately":[108],"then":[110],"fuses":[111],"them":[112],"together":[113],"obtain":[115],"stronger":[117],"representation.":[119],"The":[120],"experimental":[121],"results":[122],"two":[124],"real":[125],"datasets":[126],"demonstrate":[127],"that":[128],"TFE-GNN":[129],"outperforms":[130],"multiple":[131],"state-of-the-art":[132],"fine-grained":[135],"encrypted":[136],"tasks.":[139]},"counts_by_year":[{"year":2026,"cited_by_count":26},{"year":2025,"cited_by_count":59},{"year":2024,"cited_by_count":33},{"year":2023,"cited_by_count":2}],"updated_date":"2026-06-23T13:55:30.953635","created_date":"2025-10-10T00:00:00"}