{"id":"https://openalex.org/W7152395157","doi":"https://doi.org/10.1145/3774904.3792381","title":"Proteus: Towards Accurate and Low-overhead In-Network Malicious Traffic Detection","display_name":"Proteus: Towards Accurate and Low-overhead In-Network Malicious Traffic Detection","publication_year":2026,"publication_date":"2026-04-09","ids":{"openalex":"https://openalex.org/W7152395157","doi":"https://doi.org/10.1145/3774904.3792381"},"language":null,"primary_location":{"id":"doi:10.1145/3774904.3792381","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774904.3792381","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2026","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3774904.3792381","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030891963","display_name":"Longlong Zhu","orcid":"https://orcid.org/0000-0001-6128-3065"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Longlong Zhu","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0001-6128-3065","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109778692","display_name":"Linying Zheng","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Linying Zheng","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0009-0007-6346-8275","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133277877","display_name":"Qing Shu","orcid":"https://orcid.org/0009-0008-9925-1497"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qing Shu","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0009-0008-9925-1497","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133276298","display_name":"Zedi Chen","orcid":"https://orcid.org/0009-0002-5346-9577"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zedi Chen","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0009-0002-5346-9577","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jiashuo Yu","orcid":"https://orcid.org/0009-0001-9056-8534"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiashuo Yu","raw_affiliation_strings":["Fuzhou University, Fuzhou, Fujian, China"],"raw_orcid":"https://orcid.org/0009-0001-9056-8534","affiliations":[{"raw_affiliation_string":"Fuzhou University, Fuzhou, Fujian, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Yuhan Wu","orcid":"https://orcid.org/0009-0003-8364-1611"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuhan Wu","raw_affiliation_strings":["Fuzhou University, Fuzhou, Fujian, China"],"raw_orcid":"https://orcid.org/0009-0003-8364-1611","affiliations":[{"raw_affiliation_string":"Fuzhou University, Fuzhou, Fujian, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114233044","display_name":"Shaopeng Zhou","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shaopeng Zhou","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0009-0007-7737-6283","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128808948","display_name":"Hongyan Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongyan Liu","raw_affiliation_strings":["Fuzhou University, Fuzhou, Fujian, China"],"raw_orcid":"https://orcid.org/0000-0001-7753-0294","affiliations":[{"raw_affiliation_string":"Fuzhou University, Fuzhou, Fujian, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101708792","display_name":"Dong Zhang","orcid":"https://orcid.org/0000-0002-6379-0244"},"institutions":[{"id":"https://openalex.org/I80947539","display_name":"Fuzhou University","ror":"https://ror.org/011xvna82","country_code":"CN","type":"education","lineage":["https://openalex.org/I80947539"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dong Zhang","raw_affiliation_strings":["Fuzhou University, Fuzhou, Fujian, China"],"raw_orcid":"https://orcid.org/0000-0002-6379-0244","affiliations":[{"raw_affiliation_string":"Fuzhou University, Fuzhou, Fujian, China","institution_ids":["https://openalex.org/I80947539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013518014","display_name":"Chunming Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunming Wu","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0001-7958-9687","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011791240","display_name":"Xiang Chen","orcid":"https://orcid.org/0000-0002-0249-9664"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiang Chen","raw_affiliation_strings":["Zhejiang University, Hangzhou, Zhejiang, China"],"raw_orcid":"https://orcid.org/0000-0002-0249-9664","affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":11,"corresponding_author_ids":["https://openalex.org/A5030891963"],"corresponding_institution_ids":["https://openalex.org/I76130692"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.80147826,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2929","last_page":"2939"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.4837000072002411,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.4837000072002411,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.21140000224113464,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.07159999758005142,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.2867000102996826},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.260699987411499},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.24899999797344208},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.24070000648498535},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.23180000483989716}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5777999758720398},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32280001044273376},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.2867000102996826},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.27219998836517334},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.260699987411499},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.24899999797344208},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.24070000648498535},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.23180000483989716},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.22169999778270721},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.22050000727176666}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3774904.3792381","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774904.3792381","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2026","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3774904.3792381","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3774904.3792381","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Web Conference 2026","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1678356000","https://openalex.org/W2118404561","https://openalex.org/W2295598076","https://openalex.org/W2296509296","https://openalex.org/W2907492528","https://openalex.org/W3197527842","https://openalex.org/W4283207618","https://openalex.org/W4308632443","https://openalex.org/W4399876878","https://openalex.org/W4401508408","https://openalex.org/W4401508524","https://openalex.org/W4410090060"],"related_works":[],"abstract_inverted_index":{"Network":[0],"intrusion":[1],"detection":[2,97],"systems":[3],"(NIDS)":[4],"are":[5,46],"essential":[6],"for":[7,145],"web":[8],"security":[9],"by":[10,183],"identifying":[11],"and":[12,105,119,141,151,188,209],"dropping":[13],"malicious":[14,95],"traffic.":[15],"Existing":[16],"in-network":[17,94],"NIDS":[18],"leverage":[19],"the":[20,114,148],"Tbps-level":[21],"packet":[22],"processing":[23],"capability":[24],"of":[25,72],"programmable":[26,49,197],"switches":[27,50,198],"to":[28,40,70,82,112,147,178,180],"achieve":[29],"high-speed":[30],"flow":[31,165],"classification.":[32],"They":[33],"translate":[34],"complex":[35],"trained":[36],"machine":[37],"learning":[38],"models":[39],"decision":[41],"trees":[42],"(DTs),":[43],"where":[44,122],"DTs":[45],"deployed":[47],"on":[48,128],"via":[51,167],"single-DT":[52,62],"or":[53,175],"multiple-DT":[54,75],"deployment.":[55],"However,":[56],"they":[57],"face":[58],"a":[59,136],"fundamental":[60],"trade-off:":[61],"deployment":[63,76],"suffers":[64,77],"from":[65,78],"low":[66,106],"classification":[67,103,186,203,211],"accuracy":[68,104,149,187],"due":[69,81],"over-pruning":[71],"trees,":[73],"while":[74,162],"high":[79,102],"overhead":[80,159],"deploying":[83],"multiple":[84],"tree":[85],"replicas.":[86],"In":[87],"this":[88],"paper,":[89],"we":[90],"propose":[91],"Proteus,":[92],"an":[93],"traffic":[96],"system":[98],"that":[99,200],"achieves":[100],"both":[101,185],"overhead.":[107],"Its":[108],"key":[109],"idea":[110],"is":[111],"split":[113],"original":[115],"DT":[116,137],"into":[117,138],"critical":[118,140],"normal":[120,143],"sub-trees,":[121],"these":[123],"sub-trees":[124,144,161,177],"have":[125],"different":[126],"impacts":[127],"overall":[129],"accuracy.":[130],"More":[131],"precisely,":[132],"Proteus":[133,201],"first":[134],"splits":[135],"one":[139],"several":[142],"adapting":[146],"requirement":[150],"switch":[152,189,206],"resource":[153,190,207],"budgets.":[154],"Second,":[155],"it":[156,172],"minimizes":[157],"coordination":[158],"between":[160],"ensuring":[163],"full":[164],"coverage":[166],"mixed-integer":[168],"linear":[169],"programming.":[170],"Third,":[171],"dynamically":[173],"reallocates":[174],"migrates":[176],"adapt":[179],"changing":[181],"resources":[182],"monitoring":[184],"changes.":[191],"Testbed":[192],"experiments":[193],"with":[194],"12.8":[195],"Tbps":[196],"show":[199],"improves":[202],"accuracy,":[204],"reduces":[205,210],"consumption,":[208],"latency.":[212]},"counts_by_year":[],"updated_date":"2026-04-29T09:16:38.111599","created_date":"2026-04-10T00:00:00"}