{"id":"https://openalex.org/W4386998212","doi":"https://doi.org/10.1145/3625306","title":"Efficient IoT Traffic Inference: From Multi-view Classification to Progressive Monitoring","display_name":"Efficient IoT Traffic Inference: From Multi-view Classification to Progressive Monitoring","publication_year":2023,"publication_date":"2023-09-24","ids":{"openalex":"https://openalex.org/W4386998212","doi":"https://doi.org/10.1145/3625306"},"language":"en","primary_location":{"id":"doi:10.1145/3625306","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3625306","pdf_url":null,"source":{"id":"https://openalex.org/S4210175912","display_name":"ACM Transactions on Internet of Things","issn_l":"2577-6207","issn":["2577-6207","2691-1914"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Internet of Things","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088816698","display_name":"Arman Pashamokhtari","orcid":"https://orcid.org/0000-0002-0663-5061"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Arman Pashamokhtari","raw_affiliation_strings":["UNSW Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-0663-5061","affiliations":[{"raw_affiliation_string":"UNSW Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029634834","display_name":"Gustavo Batista","orcid":"https://orcid.org/0000-0002-3482-8442"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Gustavo Batista","raw_affiliation_strings":["UNSW Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3482-8442","affiliations":[{"raw_affiliation_string":"UNSW Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030677680","display_name":"Hassan Habibi Gharakheili","orcid":"https://orcid.org/0000-0002-9333-7635"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hassan Habibi Gharakheili","raw_affiliation_strings":["UNSW Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9333-7635","affiliations":[{"raw_affiliation_string":"UNSW Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I31746571"],"apc_list":null,"apc_paid":null,"fwci":1.2283,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.80582062,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"5","issue":"1","first_page":"1","last_page":"30"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8348811268806458},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6283394694328308},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.5959080457687378},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.5428592562675476},{"id":"https://openalex.org/keywords/outlier","display_name":"Outlier","score":0.5427414178848267},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.524857759475708},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5197793841362},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5177363753318787},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4968402683734894},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.49036502838134766},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.48025110363960266},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.4796714782714844},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.47341829538345337},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.17133182287216187}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8348811268806458},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6283394694328308},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.5959080457687378},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.5428592562675476},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.5427414178848267},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.524857759475708},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5197793841362},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5177363753318787},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4968402683734894},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.49036502838134766},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.48025110363960266},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.4796714782714844},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.47341829538345337},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.17133182287216187},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3625306","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3625306","pdf_url":null,"source":{"id":"https://openalex.org/S4210175912","display_name":"ACM Transactions on Internet of Things","issn_l":"2577-6207","issn":["2577-6207","2691-1914"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Internet of Things","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":52,"referenced_works":["https://openalex.org/W1515641485","https://openalex.org/W1627303300","https://openalex.org/W1966748751","https://openalex.org/W1985987493","https://openalex.org/W2290452516","https://openalex.org/W2460813369","https://openalex.org/W2590019597","https://openalex.org/W2621148797","https://openalex.org/W2734858986","https://openalex.org/W2766295581","https://openalex.org/W2797742547","https://openalex.org/W2799758613","https://openalex.org/W2806344036","https://openalex.org/W2808291452","https://openalex.org/W2886897065","https://openalex.org/W2887149310","https://openalex.org/W2888096149","https://openalex.org/W2888505697","https://openalex.org/W2895909303","https://openalex.org/W2901909474","https://openalex.org/W2913699715","https://openalex.org/W2921669466","https://openalex.org/W2929305171","https://openalex.org/W2945594226","https://openalex.org/W2950767885","https://openalex.org/W2963899832","https://openalex.org/W2972478609","https://openalex.org/W2974043855","https://openalex.org/W2990242243","https://openalex.org/W3005444580","https://openalex.org/W3015181824","https://openalex.org/W3027399054","https://openalex.org/W3027485588","https://openalex.org/W3031385726","https://openalex.org/W3034611465","https://openalex.org/W3043781642","https://openalex.org/W3093697207","https://openalex.org/W3105750153","https://openalex.org/W3122864121","https://openalex.org/W3169530247","https://openalex.org/W3170657538","https://openalex.org/W3197507133","https://openalex.org/W3209498073","https://openalex.org/W3215587831","https://openalex.org/W3217140273","https://openalex.org/W4281945976","https://openalex.org/W4287752965","https://openalex.org/W4292070752","https://openalex.org/W4292202268","https://openalex.org/W4296437222","https://openalex.org/W4297825594","https://openalex.org/W4381744962"],"related_works":["https://openalex.org/W2883256816","https://openalex.org/W2499612753","https://openalex.org/W3111802945","https://openalex.org/W2946096271","https://openalex.org/W2295423552","https://openalex.org/W3107369729","https://openalex.org/W2012465643","https://openalex.org/W2773751105","https://openalex.org/W4293863212","https://openalex.org/W2050261031"],"abstract_inverted_index":{"Machine":[0],"learning-based":[1],"techniques":[2],"have":[3],"proven":[4],"to":[5,71,95,132,174,245,286,320],"be":[6,172],"effective":[7],"in":[8,29,56,149],"Internet-of-Things":[9],"(IoT)":[10],"network":[11,23,62],"behavioral":[12],"inference.":[13,107],"Existing":[14],"works":[15],"developed":[16],"data-driven":[17],"models":[18,170,202,223,319],"based":[19],"on":[20,180,238,310],"features":[21,103,184],"from":[22,163],"packets":[24],"and/or":[25],"flows,":[26],"but":[27],"mainly":[28],"a":[30,47,150,175,181,204,216,303,321,341],"static":[31],"and":[32,86,98,127,134,143,187,261,327,330,340,353,358,361],"ad-hoc":[33],"manner,":[34],"without":[35],"adequately":[36],"quantifying":[37],"their":[38],"gains":[39],"versus":[40,277],"costs.":[41],"In":[42,69],"this":[43],"article,":[44],"we":[45,119,166,214,315,347],"develop":[46,191,215,233],"generic":[48,76],"architecture":[49,77],"that":[50,129,168,195],"comprises":[51],"two":[52],"distinct":[53],"inference":[54,87],"modules":[55],"tandem,":[57],"which":[58],"begins":[59],"with":[60,155,258,307],"IoT":[61,105,116,160,212,225,288,323],"behavior":[63,117],"classification":[64,312,357],"followed":[65],"by":[66,185,283,302],"continuous":[67],"monitoring.":[68],"contrast":[70],"prior":[72],"relevant":[73],"works,":[74],"our":[75,164,273,287,317,350],"flexibly":[78],"accounts":[79],"for":[80,104,203,249,363],"various":[81,101],"traffic":[82,102,106,145,156,289],"features,":[83,146],"modeling":[84],"algorithms,":[85],"strategies.":[88],"We":[89,189,232,253,268,291],"argue":[90],"quantitative":[91],"metrics":[92],"are":[93],"required":[94],"systematically":[96],"compare":[97],"efficiently":[99],"select":[100],"This":[108],"article":[109],"1":[110],"makes":[111],"three":[112,228],"contributions:":[113],"(1)":[114],"For":[115,208],"classification,":[118],"identify":[120],"four":[121],"metrics,":[122],"namely,":[123],"cost,":[124],"accuracy,":[125],"availability,":[126],"frequency,":[128],"allow":[130],"us":[131],"characterize":[133],"quantify":[135],"the":[136,197,210,241,250,262,270,278,294,299,311],"efficacy":[137,271],"of":[138,141,158,183,200,220,230,240,264,272,280,305,325,338,344,356],"seven":[139],"sets":[140],"packet-based":[142],"flow-based":[144],"each":[147],"resulting":[148],"specialized":[151,201,281],"model.":[152],"By":[153],"experimenting":[154],"traces":[157,329],"25":[159],"devices":[161],"collected":[162],"testbed,":[165],"demonstrate":[167,292],"specialized-view":[169],"can":[171,297],"superior":[173],"single":[176],"combined-view":[177],"model":[178],"trained":[179],"plurality":[182],"accuracy":[186],"cost.":[188],"also":[190],"an":[192,234,334],"optimization":[193],"problem":[194],"selects":[196],"best":[198],"set":[199,296],"multi-view":[205],"classification.":[206],"(2)":[207],"monitoring":[209,318,359],"expected":[211],"behaviors,":[213],"progressive":[217],"system":[218],"consisting":[219],"one-class":[221,251,366],"clustering":[222],"(per":[224],"class)":[226],"at":[227],"levels":[229],"granularity.":[231],"outlier":[235],"detection":[236],"technique":[237],"top":[239],"convex":[242,364],"hull":[243],"algorithm":[244],"form":[246],"custom-shape":[247],"boundaries":[248],"models.":[252,367],"show":[254,331],"how":[255,293],"progression":[256],"helps":[257],"computing":[259],"costs":[260],"explainability":[263],"detecting":[265],"anomalies.":[266],"(3)":[267],"evaluate":[269],"optimally":[274],"selected":[275],"classifiers":[276,282],"superset":[279],"applying":[284],"them":[285],"traces.":[290],"optimal":[295],"reduce":[298],"processing":[300],"cost":[301],"factor":[304],"six":[306],"insignificant":[308],"impacts":[309],"accuracy.":[313],"Also,":[314],"apply":[316],"public":[322],"dataset":[324],"benign":[326],"attack":[328],"they":[332],"yield":[333],"average":[335],"true-positive":[336],"rate":[337,343],"94%":[339],"false-positive":[342],"5%.":[345],"Finally,":[346],"publicly":[348],"release":[349],"data":[351],"(training":[352],"testing":[354],"instances":[355],"tasks)":[360],"code":[362],"hull-based":[365]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}