{"id":"https://openalex.org/W4400036903","doi":"https://doi.org/10.1145/3652037.3663908","title":"Zeekflow+: A Deep LSTM Autoencoder with Integrated Random Forest Classifier for Binary and Multi-class Classification in Network Traffic Data","display_name":"Zeekflow+: A Deep LSTM Autoencoder with Integrated Random Forest Classifier for Binary and Multi-class Classification in Network Traffic Data","publication_year":2024,"publication_date":"2024-06-26","ids":{"openalex":"https://openalex.org/W4400036903","doi":"https://doi.org/10.1145/3652037.3663908"},"language":"en","primary_location":{"id":"doi:10.1145/3652037.3663908","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3652037.3663908","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3652037.3663908","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th International Conference on PErvasive Technologies Related to Assistive Environments","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3652037.3663908","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5099517497","display_name":"Emmanouil Arapidis","orcid":null},"institutions":[{"id":"https://openalex.org/I4210093649","display_name":"Information Technologies Institute","ror":"https://ror.org/0069akp70","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210093649"]}],"countries":["GR"],"is_corresponding":true,"raw_author_name":"Emmanouil Arapidis","raw_affiliation_strings":["INFILI Technologies SA, Greece"],"raw_orcid":"https://orcid.org/0009-0000-1696-622X","affiliations":[{"raw_affiliation_string":"INFILI Technologies SA, Greece","institution_ids":["https://openalex.org/I4210093649"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030451270","display_name":"Nikos Temenos","orcid":"https://orcid.org/0000-0002-1763-9930"},"institutions":[{"id":"https://openalex.org/I4210144519","display_name":"Institute of Communication and Computer Systems","ror":"https://ror.org/0483fn738","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210144519"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Nikos Temenos","raw_affiliation_strings":["Institute of Communication and Computer Systems, Greece"],"raw_orcid":"https://orcid.org/0000-0002-1763-9930","affiliations":[{"raw_affiliation_string":"Institute of Communication and Computer Systems, Greece","institution_ids":["https://openalex.org/I4210144519"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092557363","display_name":"Dimitrios Giagkos","orcid":"https://orcid.org/0009-0003-7059-8917"},"institutions":[{"id":"https://openalex.org/I4210093649","display_name":"Information Technologies Institute","ror":"https://ror.org/0069akp70","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210093649"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Dimitris Giagkos","raw_affiliation_strings":["INFILI Technologies SA, Greece"],"raw_orcid":"https://orcid.org/0009-0003-7059-8917","affiliations":[{"raw_affiliation_string":"INFILI Technologies SA, Greece","institution_ids":["https://openalex.org/I4210093649"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057865801","display_name":"Ioannis Rallis","orcid":"https://orcid.org/0000-0003-4491-5854"},"institutions":[{"id":"https://openalex.org/I4210144519","display_name":"Institute of Communication and Computer Systems","ror":"https://ror.org/0483fn738","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210144519"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Ioannis Rallis","raw_affiliation_strings":["Institute of Communication and Computer Systems, Greece"],"raw_orcid":"https://orcid.org/0000-0003-4491-5854","affiliations":[{"raw_affiliation_string":"Institute of Communication and Computer Systems, Greece","institution_ids":["https://openalex.org/I4210144519"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023077279","display_name":"Dimitris Kalogeras","orcid":"https://orcid.org/0000-0002-9550-0088"},"institutions":[{"id":"https://openalex.org/I4210144519","display_name":"Institute of Communication and Computer Systems","ror":"https://ror.org/0483fn738","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210144519"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Dimitris Kalogeras","raw_affiliation_strings":["Institute of Communication and Computer Systems, Greece"],"raw_orcid":"https://orcid.org/0000-0002-9550-0088","affiliations":[{"raw_affiliation_string":"Institute of Communication and Computer Systems, Greece","institution_ids":["https://openalex.org/I4210144519"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025095400","display_name":"Nikolaos Papadakis","orcid":"https://orcid.org/0000-0002-0497-9565"},"institutions":[{"id":"https://openalex.org/I4210093649","display_name":"Information Technologies Institute","ror":"https://ror.org/0069akp70","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210093649"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Nikolaos Papadakis","raw_affiliation_strings":["INFILI Technologies SA, Greece"],"raw_orcid":"https://orcid.org/0000-0002-0497-9565","affiliations":[{"raw_affiliation_string":"INFILI Technologies SA, Greece","institution_ids":["https://openalex.org/I4210093649"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052912203","display_name":"\u0391\u03bd\u03c4\u03ce\u03bd\u03b9\u03bf\u03c2 \u039b\u03af\u03c4\u03ba\u03b5","orcid":"https://orcid.org/0000-0002-7658-2559"},"institutions":[{"id":"https://openalex.org/I4210093649","display_name":"Information Technologies Institute","ror":"https://ror.org/0069akp70","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210093649"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Antonis Litke","raw_affiliation_strings":["INFILI Technologies SA, Greece"],"raw_orcid":"https://orcid.org/0000-0002-7658-2559","affiliations":[{"raw_affiliation_string":"INFILI Technologies SA, Greece","institution_ids":["https://openalex.org/I4210093649"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067906652","display_name":"Sotirios Messinis","orcid":"https://orcid.org/0000-0001-5998-2940"},"institutions":[{"id":"https://openalex.org/I4210144519","display_name":"Institute of Communication and Computer Systems","ror":"https://ror.org/0483fn738","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210144519"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Sotirios C. Messinis","raw_affiliation_strings":["Institute of Communication and Computer Systems, Greece"],"raw_orcid":"https://orcid.org/0000-0001-5998-2940","affiliations":[{"raw_affiliation_string":"Institute of Communication and Computer Systems, Greece","institution_ids":["https://openalex.org/I4210144519"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5099517497"],"corresponding_institution_ids":["https://openalex.org/I4210093649"],"apc_list":null,"apc_paid":null,"fwci":1.3456,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.81371313,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"613","last_page":"618"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11344","display_name":"Traffic Prediction and Management Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/2215","display_name":"Building and Construction"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.9242894053459167},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.7347195744514465},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7166250944137573},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.6554794311523438},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.571300208568573},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5692622661590576},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.5543243885040283},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5297537446022034},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.5085762739181519},{"id":"https://openalex.org/keywords/binary-classification","display_name":"Binary classification","score":0.49350059032440186},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.34432268142700195},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.14440622925758362},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.12222421169281006}],"concepts":[{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.9242894053459167},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7347195744514465},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7166250944137573},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.6554794311523438},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.571300208568573},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5692622661590576},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.5543243885040283},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5297537446022034},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.5085762739181519},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.49350059032440186},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34432268142700195},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.14440622925758362},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.12222421169281006},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3652037.3663908","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3652037.3663908","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3652037.3663908","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th International Conference on PErvasive Technologies Related to Assistive Environments","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3652037.3663908","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3652037.3663908","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3652037.3663908","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th International Conference on PErvasive Technologies Related to Assistive Environments","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Life in Land","score":0.7099999785423279,"id":"https://metadata.un.org/sdg/15"}],"awards":[{"id":"https://openalex.org/G511431143","display_name":null,"funder_award_id":"101094901","funder_id":"https://openalex.org/F4320334322","funder_display_name":"HORIZON EUROPE Framework Programme"},{"id":"https://openalex.org/G6161857907","display_name":null,"funder_award_id":"101094901","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G8141373255","display_name":null,"funder_award_id":"101094901","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"},{"id":"https://openalex.org/F4320334322","display_name":"HORIZON EUROPE Framework Programme","ror":null}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4400036903.pdf"},"referenced_works_count":19,"referenced_works":["https://openalex.org/W2105103777","https://openalex.org/W2122646361","https://openalex.org/W2293634267","https://openalex.org/W2606697812","https://openalex.org/W2743138268","https://openalex.org/W2808472075","https://openalex.org/W2912204801","https://openalex.org/W3013518474","https://openalex.org/W3028158573","https://openalex.org/W3108036267","https://openalex.org/W3109037541","https://openalex.org/W3132316130","https://openalex.org/W3164952570","https://openalex.org/W4210999997","https://openalex.org/W4280616946","https://openalex.org/W4308156973","https://openalex.org/W4313590336","https://openalex.org/W4323926691","https://openalex.org/W4390708442"],"related_works":["https://openalex.org/W3013693939","https://openalex.org/W2889302474","https://openalex.org/W4321789545","https://openalex.org/W4309131238","https://openalex.org/W4380355000","https://openalex.org/W3011239835","https://openalex.org/W4200234001","https://openalex.org/W4382934300","https://openalex.org/W2121061354","https://openalex.org/W4285388059"],"abstract_inverted_index":{"This":[0,81],"work":[1],"proposes":[2],"Zeekflow+,":[3],"a":[4],"Deep":[5,27,96],"LSTM":[6,28,97],"Autoencoder":[7],"(AE)":[8],"architecture":[9,113],"with":[10,157],"integrated":[11],"Random":[12],"Forest":[13],"(RF)":[14],"classifier":[15,88],"for":[16,49,73,142,167],"effective":[17],"binary":[18,50,65,143],"&":[19],"multi-class":[20,71,115],"classification":[21,51,66,116,128,144],"of":[22,40,60,78,110,135],"network":[23],"traffic":[24],"data.":[25,100],"The":[26],"AE":[29,98],"is":[30,82,140],"used":[31,141],"to":[32,52,70],"extract":[33],"underlying":[34],"patterns":[35],"existing":[36],"within":[37],"the":[38,41,58,61,64,76,79,86,90,95,104,108,111,123,133,136,147,158],"features":[39],"input":[42],"data":[43],"and":[44,94,126],"encode":[45],"them":[46],"accordingly,":[47],"allowing":[48],"malicious":[53],"or":[54],"benign":[55],"behavior.":[56],"Through":[57],"use":[59],"RF":[62,87],"classifier,":[63],"capabilities":[67],"are":[68],"extended":[69],"ones":[72],"effectively":[74],"identifying":[75],"origin":[77],"attacks.":[80],"achieved":[83],"by":[84],"training":[85],"using":[89],"total":[91],"reconstruction":[92],"loss":[93],"encoded":[99],"Experimental":[101],"results":[102,159],"on":[103],"USTC-TFC2016":[105],"dataset,":[106,149],"showcase":[107],"performance":[109,162],"Zeekflow+":[112,137],"in":[114,118,122,146],"resulting":[117],"more":[119],"than":[120],"99%":[121],"precision,":[124],"recall":[125],"F1-Score":[127],"metrics.":[129],"To":[130],"further":[131],"demonstrate":[132],"effectiveness":[134],"architecture,":[138],"it":[139,165],"task":[145],"same":[148],"while":[150],"considering":[151],"different":[152],"Floating":[153],"Point":[154],"arithmetic":[155],"quantizations":[156],"showing":[160],"negligible":[161],"drop,":[163],"making":[164],"suitable":[166],"real-time":[168],"IoT":[169],"edge":[170],"device":[171],"deployment.":[172]},"counts_by_year":[{"year":2025,"cited_by_count":4}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2024-06-27T00:00:00"}