{"id":"https://openalex.org/W4417222812","doi":"https://doi.org/10.1145/3733801.3764203","title":"Towards Behavior Grammar-Driven IoT Network Traffic Generation using MUD Specifications","display_name":"Towards Behavior Grammar-Driven IoT Network Traffic Generation using MUD Specifications","publication_year":2025,"publication_date":"2025-10-13","ids":{"openalex":"https://openalex.org/W4417222812","doi":"https://doi.org/10.1145/3733801.3764203"},"language":null,"primary_location":{"id":"doi:10.1145/3733801.3764203","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733801.3764203","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3733801.3764203","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 Workshop on CPS&IoT Security and Privacy","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3733801.3764203","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Shuai Zhang","orcid":"https://orcid.org/0009-0009-1288-5460"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shuai Zhang","raw_affiliation_strings":["School of Electrical Engineering and Telecommunications, UNSW Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0009-0009-1288-5460","affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Telecommunications, UNSW Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103534201","display_name":"Shayan Azizi","orcid":"https://orcid.org/0009-0003-1929-2605"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shayan Azizi","raw_affiliation_strings":["School of Electrical Engineering and Telecommunications, UNSW Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0009-0003-1929-2605","affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Telecommunications, UNSW Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059529586","display_name":"Aditya Joshi","orcid":"https://orcid.org/0000-0003-2200-9703"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Aditya Joshi","raw_affiliation_strings":["School of Computer Science and Engineering, UNSW Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0003-2200-9703","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, UNSW Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029634834","display_name":"Gustavo Batista","orcid":"https://orcid.org/0000-0002-3482-8442"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Gustavo Batista","raw_affiliation_strings":["School of Computer Science and Engineering, UNSW Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-3482-8442","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, UNSW Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030677680","display_name":"Hassan Habibi Gharakheili","orcid":"https://orcid.org/0000-0002-9333-7635"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hassan Habibi Gharakheili","raw_affiliation_strings":["School of Electrical Engineering and Telecommunications, UNSW Sydney, Sydney, NSW, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9333-7635","affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Telecommunications, UNSW Sydney, Sydney, NSW, Australia","institution_ids":["https://openalex.org/I31746571"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I31746571"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"98","last_page":"104"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.5482000112533569,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.5482000112533569,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.21070000529289246,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.04809999838471413,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/traffic-generation-model","display_name":"Traffic generation model","score":0.5856000185012817},{"id":"https://openalex.org/keywords/grammar","display_name":"Grammar","score":0.5720999836921692},{"id":"https://openalex.org/keywords/generator","display_name":"Generator (circuit theory)","score":0.5077000260353088},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4607999920845032},{"id":"https://openalex.org/keywords/rule-based-machine-translation","display_name":"Rule-based machine translation","score":0.4586000144481659},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.4187000095844269},{"id":"https://openalex.org/keywords/extensibility","display_name":"Extensibility","score":0.38440001010894775}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.743399977684021},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.5856000185012817},{"id":"https://openalex.org/C26022165","wikidata":"https://www.wikidata.org/wiki/Q8091","display_name":"Grammar","level":2,"score":0.5720999836921692},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.5077000260353088},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4607999920845032},{"id":"https://openalex.org/C53893814","wikidata":"https://www.wikidata.org/wiki/Q7378909","display_name":"Rule-based machine translation","level":2,"score":0.4586000144481659},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4203000068664551},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4187000095844269},{"id":"https://openalex.org/C32833848","wikidata":"https://www.wikidata.org/wiki/Q4115054","display_name":"Extensibility","level":2,"score":0.38440001010894775},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.350600004196167},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.3330000042915344},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3070000112056732},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2980000078678131},{"id":"https://openalex.org/C167822520","wikidata":"https://www.wikidata.org/wiki/Q176452","display_name":"Finite-state machine","level":2,"score":0.29440000653266907},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.29420000314712524},{"id":"https://openalex.org/C59519942","wikidata":"https://www.wikidata.org/wiki/Q650665","display_name":"Drone","level":2,"score":0.2865999937057495},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2809999883174896},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.28060001134872437},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C207512268","wikidata":"https://www.wikidata.org/wiki/Q3074551","display_name":"Traffic flow (computer networking)","level":2,"score":0.2535000145435333},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2524999976158142},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2500999867916107}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3733801.3764203","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733801.3764203","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3733801.3764203","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 Workshop on CPS&IoT Security and Privacy","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3733801.3764203","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3733801.3764203","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3733801.3764203","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 Workshop on CPS&IoT Security and Privacy","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4417222812.pdf","grobid_xml":"https://content.openalex.org/works/W4417222812.grobid-xml"},"referenced_works_count":19,"referenced_works":["https://openalex.org/W2134878402","https://openalex.org/W2154065358","https://openalex.org/W2321624443","https://openalex.org/W2485229854","https://openalex.org/W2886897065","https://openalex.org/W2888505697","https://openalex.org/W2930144424","https://openalex.org/W2964143609","https://openalex.org/W3031385726","https://openalex.org/W4206517246","https://openalex.org/W4226213111","https://openalex.org/W4285292068","https://openalex.org/W4290991003","https://openalex.org/W4362683524","https://openalex.org/W4391090452","https://openalex.org/W4391989542","https://openalex.org/W4392964588","https://openalex.org/W4400411057","https://openalex.org/W4400524872"],"related_works":[],"abstract_inverted_index":{"The":[0],"operation":[1],"of":[2,124],"IoT":[3,46,81,147,182],"networks":[4],"in":[5,48,98,164],"critical":[6],"environments":[7],"requires":[8],"robust":[9],"methods":[10],"for":[11,23,32,54,141,156],"monitoring":[12],"device":[13],"behaviors.":[14],"As":[15],"Machine":[16],"Learning":[17],"(ML)":[18],"models":[19],"are":[20,109],"increasingly":[21],"used":[22],"traffic":[24,29,55,63,83,159,178],"analysis":[25],"and":[26,95,122,126,132,136,169],"classification,":[27],"synthetic":[28,78,189],"becomes":[30],"essential":[31],"validating":[33],"their":[34,58],"performance":[35],"across":[36,145],"varied":[37],"scenarios.":[38],"Manufacturer":[39],"Usage":[40],"Description":[41],"(MUD)":[42],"profiles":[43],"specify":[44],"expected":[45],"behaviors":[47,128],"a":[49,73,89,115,165],"structured":[50,138],"format,":[51],"offering":[52],"potential":[53],"modeling,":[56],"although":[57],"use":[59],"to":[60,76,193],"generate":[61,77,135],"representative":[62,80],"remains":[64],"largely":[65],"unexplored.":[66],"This":[67],"paper":[68],"introduces":[69],"behavior":[70,116,162,176],"grammar":[71,104,117,139],"as":[72],"formal":[74],"approach":[75],"yet":[79],"network":[82,183],"using":[84],"MUD":[85,143],"profiles.":[86],"We":[87,112,134,150,171],"propose":[88],"framework":[90,118],"that":[91,119,186],"captures":[92],"state":[93],"transitions":[94],"statistical":[96],"distributions":[97],"service":[99],"flows":[100,144],"through":[101],"an":[102,153],"extensible":[103],"model.":[105],"Our":[106],"specific":[107],"contributions":[108],"threefold:":[110],"(1)":[111],"develop":[113],"MUDactivity,":[114],"describes":[120],"patterns":[121],"sequences":[123],"packet-":[125],"flow-level":[127],"by":[129],"encoding":[130],"states":[131],"transitions.":[133],"release":[137],"files":[140],"19":[142],"ten":[146],"devices;":[148],"(2)":[149],"build":[151],"SynGen,":[152],"automated":[154],"tool":[155],"generating":[157],"realistic":[158],"from":[160],"MUD-based":[161],"grammars":[163],"containerized,":[166],"virtualized":[167],"network;":[168],"(3)":[170],"evaluate":[172],"how":[173],"accurately":[174],"our":[175],"grammar-based":[177],"generator":[179],"mimics":[180],"real":[181],"activity,":[184],"showing":[185],"it":[187],"produces":[188],"data":[190],"very":[191],"similar":[192],"real-world":[194],"traffic.":[195]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-12-11T00:00:00"}