{"id":"https://openalex.org/W4416549387","doi":"https://doi.org/10.1145/3719027.3744804","title":"MM4flow: A Pre-trained Multi-modal Model for Versatile Network Traffic Analysis","display_name":"MM4flow: A Pre-trained Multi-modal Model for Versatile Network Traffic Analysis","publication_year":2025,"publication_date":"2025-11-19","ids":{"openalex":"https://openalex.org/W4416549387","doi":"https://doi.org/10.1145/3719027.3744804"},"language":null,"primary_location":{"id":"doi:10.1145/3719027.3744804","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3719027.3744804","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103925988","display_name":"Lin Yang","orcid":"https://orcid.org/0000-0001-9306-2056"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Luming Yang","raw_affiliation_strings":["National University of Defense Technology, Changsha, Hunan, China"],"raw_orcid":"https://orcid.org/0000-0001-9306-2056","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, Changsha, Hunan, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100383303","display_name":"Lin Liu","orcid":"https://orcid.org/0000-0002-5930-8881"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lin Liu","raw_affiliation_strings":["National University of Defense Technology, Changsha, Hunan, China"],"raw_orcid":"https://orcid.org/0000-0002-5930-8881","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, Changsha, Hunan, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037501616","display_name":"Junjie Huang","orcid":"https://orcid.org/0000-0003-2986-4665"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"JunJie Huang","raw_affiliation_strings":["National University of Defense Technology, Changsha, Hunan, China"],"raw_orcid":"https://orcid.org/0000-0003-2986-4665","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, Changsha, Hunan, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045206037","display_name":"Zhuotao Liu","orcid":"https://orcid.org/0000-0002-7532-0434"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuotao Liu","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-7532-0434","affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083787469","display_name":"Shiyu Liang","orcid":"https://orcid.org/0009-0003-2917-2033"},"institutions":[{"id":"https://openalex.org/I183067930","display_name":"Shanghai Jiao Tong University","ror":"https://ror.org/0220qvk04","country_code":"CN","type":"education","lineage":["https://openalex.org/I183067930"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shiyu Liang","raw_affiliation_strings":["Shanghai Jiao Tong University, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0003-2917-2033","affiliations":[{"raw_affiliation_string":"Shanghai Jiao Tong University, Shanghai, China","institution_ids":["https://openalex.org/I183067930"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082564456","display_name":"Shaojing Fu","orcid":"https://orcid.org/0000-0002-7275-8190"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shaojing Fu","raw_affiliation_strings":["National University of Defense Technology, Changsha, Hunan, China"],"raw_orcid":"https://orcid.org/0000-0002-7275-8190","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, Changsha, Hunan, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"last","author":{"id":null,"display_name":"Yongjun Wang","orcid":"https://orcid.org/0000-0002-1796-5576"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongjun Wang","raw_affiliation_strings":["National University of Defense Technology, Changsha, Hunan, China"],"raw_orcid":"https://orcid.org/0000-0002-1796-5576","affiliations":[{"raw_affiliation_string":"National University of Defense Technology, Changsha, Hunan, China","institution_ids":["https://openalex.org/I170215575"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1664","last_page":"1678"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.982699990272522,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.982699990272522,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.006200000178068876,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14258","display_name":"Legal and Policy Issues","score":0.0017999999690800905,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adaptability","display_name":"Adaptability","score":0.7020000219345093},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5426999926567078},{"id":"https://openalex.org/keywords/limiting","display_name":"Limiting","score":0.5426999926567078},{"id":"https://openalex.org/keywords/traffic-generation-model","display_name":"Traffic generation model","score":0.49410000443458557},{"id":"https://openalex.org/keywords/downstream","display_name":"Downstream (manufacturing)","score":0.461899995803833},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.4560000002384186},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4544999897480011},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.45329999923706055},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.428600013256073},{"id":"https://openalex.org/keywords/network-architecture","display_name":"Network architecture","score":0.38920000195503235}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8015999794006348},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.7020000219345093},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5426999926567078},{"id":"https://openalex.org/C188198153","wikidata":"https://www.wikidata.org/wiki/Q1613840","display_name":"Limiting","level":2,"score":0.5426999926567078},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5085999965667725},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.49410000443458557},{"id":"https://openalex.org/C2776207758","wikidata":"https://www.wikidata.org/wiki/Q5303302","display_name":"Downstream (manufacturing)","level":2,"score":0.461899995803833},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.4560000002384186},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4544999897480011},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.45329999923706055},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4388999938964844},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.428600013256073},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3912000060081482},{"id":"https://openalex.org/C193415008","wikidata":"https://www.wikidata.org/wiki/Q639681","display_name":"Network architecture","level":2,"score":0.38920000195503235},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.38760000467300415},{"id":"https://openalex.org/C761482","wikidata":"https://www.wikidata.org/wiki/Q118093","display_name":"Transmission (telecommunications)","level":2,"score":0.38670000433921814},{"id":"https://openalex.org/C46451311","wikidata":"https://www.wikidata.org/wiki/Q262550","display_name":"Traffic shaping","level":4,"score":0.382999986410141},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.3783999979496002},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.34389999508857727},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.3260999917984009},{"id":"https://openalex.org/C139940560","wikidata":"https://www.wikidata.org/wiki/Q290036","display_name":"Network simulation","level":2,"score":0.32260000705718994},{"id":"https://openalex.org/C201100257","wikidata":"https://www.wikidata.org/wiki/Q393287","display_name":"Network traffic control","level":3,"score":0.3158000111579895},{"id":"https://openalex.org/C203274722","wikidata":"https://www.wikidata.org/wiki/Q7001161","display_name":"Network performance","level":2,"score":0.3068000078201294},{"id":"https://openalex.org/C557945733","wikidata":"https://www.wikidata.org/wiki/Q389772","display_name":"Data transmission","level":2,"score":0.30000001192092896},{"id":"https://openalex.org/C133462117","wikidata":"https://www.wikidata.org/wiki/Q4929239","display_name":"Data collection","level":2,"score":0.2955999970436096},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2930000126361847},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2784000039100647},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2768000066280365},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.27219998836517334},{"id":"https://openalex.org/C144745244","wikidata":"https://www.wikidata.org/wiki/Q4927286","display_name":"Blocking (statistics)","level":2,"score":0.26589998602867126},{"id":"https://openalex.org/C48677424","wikidata":"https://www.wikidata.org/wiki/Q6888088","display_name":"Mode (computer interface)","level":2,"score":0.26339998841285706},{"id":"https://openalex.org/C89198739","wikidata":"https://www.wikidata.org/wiki/Q3079880","display_name":"Data stream mining","level":2,"score":0.2590999901294708},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.2590000033378601}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3719027.3744804","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3719027.3744804","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":52,"referenced_works":["https://openalex.org/W2012095206","https://openalex.org/W2019821286","https://openalex.org/W2025768430","https://openalex.org/W2061338198","https://openalex.org/W2148913232","https://openalex.org/W2190207511","https://openalex.org/W2272516773","https://openalex.org/W2343828539","https://openalex.org/W2534437878","https://openalex.org/W2537766808","https://openalex.org/W2560100125","https://openalex.org/W2591712613","https://openalex.org/W2605422749","https://openalex.org/W2606697812","https://openalex.org/W2743678626","https://openalex.org/W2906631928","https://openalex.org/W2960741711","https://openalex.org/W2963065250","https://openalex.org/W2963403784","https://openalex.org/W2963516518","https://openalex.org/W2963655955","https://openalex.org/W2963704216","https://openalex.org/W2976836186","https://openalex.org/W3012902672","https://openalex.org/W3035333188","https://openalex.org/W3106784008","https://openalex.org/W3116203245","https://openalex.org/W3120227884","https://openalex.org/W3134226201","https://openalex.org/W3145680685","https://openalex.org/W3156309235","https://openalex.org/W3178649685","https://openalex.org/W3189612867","https://openalex.org/W3192392107","https://openalex.org/W3202986187","https://openalex.org/W3206444595","https://openalex.org/W4205603472","https://openalex.org/W4224315052","https://openalex.org/W4283829196","https://openalex.org/W4285292284","https://openalex.org/W4290874972","https://openalex.org/W4293004633","https://openalex.org/W4293093536","https://openalex.org/W4296473472","https://openalex.org/W4306406279","https://openalex.org/W4367047070","https://openalex.org/W4382239858","https://openalex.org/W4385577745","https://openalex.org/W4387298163","https://openalex.org/W4387448885","https://openalex.org/W4402896928","https://openalex.org/W4407129833"],"related_works":[],"abstract_inverted_index":{"Network":[0],"traffic":[1,91,135,140],"analysis":[2],"is":[3,115],"a":[4,27,83,138,153,167],"critical":[5],"research":[6],"area,":[7],"playing":[8],"an":[9,128,229],"essential":[10],"role":[11],"in":[12,42,232],"enhancing":[13],"network":[14,19,90,95,159],"security":[15],"and":[16,70,103,110,123,191],"ensuring":[17],"high-quality":[18,249],"services.":[20],"Existing":[21],"methods,":[22],"which":[23,64,106],"primarily":[24],"rely":[25],"on":[26,149,172,203,248],"single":[28],"modality,":[29],"face":[30],"two":[31,98,118],"significant":[32],"limitations.":[33],"First,":[34],"while":[35],"existing":[36,54,224],"approaches":[37],"may":[38],"achieve":[39],"strong":[40],"performance":[41],"specific":[43,162],"tasks,":[44,164],"they":[45],"often":[46],"lack":[47],"sufficient":[48],"adaptability":[49],"for":[50,88,158,234,253],"diverse":[51],"tasks.":[52,210,255],"Second,":[53],"pre-trained":[55,84,225,242],"models":[56],"are":[57],"only":[58],"trained":[59],"with":[60,63,152,196],"GB-scale":[61],"traffic,":[62],"increases":[65],"the":[66,72,108,241,246],"risk":[67],"of":[68,117,181],"over-fitting":[69],"limiting":[71],"models'":[73],"overall":[74],"performance.":[75],"To":[76],"address":[77],"these":[78],"challenges,":[79],"we":[80,165],"propose":[81],"MM4flow,":[82],"multi-modal":[85,124,182],"model":[86],"designed":[87],"versatile":[89],"analysis.":[92],"We":[93,126,200],"divide":[94],"flows":[96],"into":[97],"modalities:":[99],"raw":[100],"byte":[101],"streams":[102],"transmission":[104],"patterns,":[105],"encapsulate":[107],"content":[109,190],"behavior":[111,192],"information,":[112,183],"respectively.":[113],"MM4flow":[114,145,185,202,215,227,243],"composed":[116],"key":[119],"stages:":[120],"uni-modal":[121,147],"pre-training":[122,148],"fine-tuning.":[125],"develop":[127],"efficient":[129],"data":[130,252],"collection":[131],"scheme":[132],"enabling":[133,184],"TB-scale":[134],"pre-training.":[136],"Leveraging":[137],"real-world":[139],"that":[141,214],"exceeds":[142],"70":[143],"TB,":[144],"conducts":[146],"each":[150],"modality":[151],"modified":[154],"BERT":[155],"architecture":[156],"tailored":[157],"flows.":[160],"For":[161],"downstream":[163,254],"introduce":[166],"modal":[168],"fusion":[169,176],"module":[170,177],"based":[171],"cross-attention":[173],"mechanisms.":[174],"The":[175],"facilitates":[178],"effective":[179],"integration":[180],"to":[186,223],"fully":[187],"utilize":[188],"both":[189],"cues":[193],"during":[194],"fine-tuning":[195],"minimal":[197],"labeled":[198,250],"dataset.":[199],"evaluate":[201],"six":[204,208],"public":[205],"datasets":[206],"covering":[207],"various":[209],"Extensive":[211],"experiments":[212],"demonstrate":[213],"achieves":[216,228],"superior":[217],"accuracy":[218,233],"than":[219],"baselines.":[220],"Especially,":[221],"compared":[222],"models,":[226],"84%":[230],"improvement":[231],"website":[235],"identification":[236],"under":[237],"encrypted":[238],"tunnels.":[239],"Moreover,":[240],"significantly":[244],"reduces":[245],"reliance":[247],"training":[251]},"counts_by_year":[{"year":2026,"cited_by_count":4}],"updated_date":"2026-07-19T07:52:34.831488","created_date":"2025-11-23T00:00:00"}