{"id":"https://openalex.org/W4409617493","doi":"https://doi.org/10.1186/s42400-024-00301-0","title":"Enmob: Unveil the Behavior with Multi-flow Analysis of Encrypted App Traffic","display_name":"Enmob: Unveil the Behavior with Multi-flow Analysis of Encrypted App Traffic","publication_year":2025,"publication_date":"2025-04-20","ids":{"openalex":"https://openalex.org/W4409617493","doi":"https://doi.org/10.1186/s42400-024-00301-0"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-024-00301-0","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00301-0","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00301-0","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00301-0","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008751520","display_name":"Mengmeng Ge","orcid":"https://orcid.org/0000-0001-6912-6152"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]},{"id":"https://openalex.org/I4210161462","display_name":"Heilongjiang Institute of Technology","ror":"https://ror.org/05x0m9n95","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210161462"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Ge Mengmeng","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, 92 West Dazhi St, Harbin, 150001, Heilongjiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, 92 West Dazhi St, Harbin, 150001, Heilongjiang, China","institution_ids":["https://openalex.org/I204983213","https://openalex.org/I4210161462"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5117225624","display_name":"Feng Ruitao","orcid":null},"institutions":[{"id":"https://openalex.org/I66809481","display_name":"Southern Cross University","ror":"https://ror.org/001xkv632","country_code":"AU","type":"education","lineage":["https://openalex.org/I66809481"]},{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["AU","SG"],"is_corresponding":false,"raw_author_name":"Feng Ruitao","raw_affiliation_strings":["Faculty of Science and Engineering, Southern Cross University, Gold Coast Airport, Terminal Dr, Bilinga, QLD, 4225, Australia","School of Computing and Information Systems, Singapore Management University, 81 Victoria St, Singapore, 188065, Singapore, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Science and Engineering, Southern Cross University, Gold Coast Airport, Terminal Dr, Bilinga, QLD, 4225, Australia","institution_ids":["https://openalex.org/I66809481"]},{"raw_affiliation_string":"School of Computing and Information Systems, Singapore Management University, 81 Victoria St, Singapore, 188065, Singapore, Singapore","institution_ids":["https://openalex.org/I79891267"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101913329","display_name":"Likun Liu","orcid":"https://orcid.org/0000-0002-2113-4679"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]},{"id":"https://openalex.org/I4210161462","display_name":"Heilongjiang Institute of Technology","ror":"https://ror.org/05x0m9n95","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210161462"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liu Likun","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, 92 West Dazhi St, Harbin, 150001, Heilongjiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, 92 West Dazhi St, Harbin, 150001, Heilongjiang, China","institution_ids":["https://openalex.org/I204983213","https://openalex.org/I4210161462"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072540013","display_name":"Xiangzhan Yu","orcid":"https://orcid.org/0000-0002-1183-2844"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]},{"id":"https://openalex.org/I4210161462","display_name":"Heilongjiang Institute of Technology","ror":"https://ror.org/05x0m9n95","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210161462"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Xiangzhan","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, 92 West Dazhi St, Harbin, 150001, Heilongjiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, 92 West Dazhi St, Harbin, 150001, Heilongjiang, China","institution_ids":["https://openalex.org/I204983213","https://openalex.org/I4210161462"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020969200","display_name":"S. Vinay","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]},{"id":"https://openalex.org/I21419654","display_name":"Nanyang Polytechnic","ror":"https://ror.org/04af7ga89","country_code":"SG","type":"education","lineage":["https://openalex.org/I1280293394","https://openalex.org/I21419654"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Sachidananda Vinay","raw_affiliation_strings":["School of Computer Science and Engineering, Nanyang Technlogical University, 50 Nanyang Ave, Singapore, 639798, Singapore, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Nanyang Technlogical University, 50 Nanyang Ave, Singapore, 639798, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005","https://openalex.org/I21419654"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084396416","display_name":"Xiaofei Xie","orcid":"https://orcid.org/0000-0002-1288-6502"},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Xie Xiaofei","raw_affiliation_strings":["School of Computing and Information Systems, Singapore Management University, 81 Victoria St, Singapore, 188065, Singapore, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing and Information Systems, Singapore Management University, 81 Victoria St, Singapore, 188065, Singapore, Singapore","institution_ids":["https://openalex.org/I79891267"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088854393","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0002-2517-9436"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]},{"id":"https://openalex.org/I21419654","display_name":"Nanyang Polytechnic","ror":"https://ror.org/04af7ga89","country_code":"SG","type":"education","lineage":["https://openalex.org/I1280293394","https://openalex.org/I21419654"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Liu Yang","raw_affiliation_strings":["School of Computer Science and Engineering, Nanyang Technlogical University, 50 Nanyang Ave, Singapore, 639798, Singapore, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Nanyang Technlogical University, 50 Nanyang Ave, Singapore, 639798, Singapore, Singapore","institution_ids":["https://openalex.org/I172675005","https://openalex.org/I21419654"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5008751520"],"corresponding_institution_ids":["https://openalex.org/I204983213","https://openalex.org/I4210161462"],"apc_list":null,"apc_paid":null,"fwci":5.7171,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":{"value":0.953336,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"8","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.669745922088623},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5886933207511902},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.36315491795539856}],"concepts":[{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.669745922088623},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5886933207511902},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.36315491795539856}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-024-00301-0","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00301-0","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00301-0","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:12864f6432a147ca82cc5f6c1902e0ee","is_oa":true,"landing_page_url":"https://doaj.org/article/12864f6432a147ca82cc5f6c1902e0ee","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 8, Iss 1, Pp 1-17 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-024-00301-0","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00301-0","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00301-0","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2249560901","display_name":null,"funder_award_id":"2022YFC3321102","funder_id":"https://openalex.org/F4320335774","funder_display_name":"Key Technologies Research and Development Program"}],"funders":[{"id":"https://openalex.org/F4320335774","display_name":"Key Technologies Research and Development Program","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4409617493.pdf","grobid_xml":"https://content.openalex.org/works/W4409617493.grobid-xml"},"referenced_works_count":35,"referenced_works":["https://openalex.org/W1510529350","https://openalex.org/W2082384736","https://openalex.org/W2148913232","https://openalex.org/W2190207511","https://openalex.org/W2295321789","https://openalex.org/W2343828539","https://openalex.org/W2606697812","https://openalex.org/W2613548641","https://openalex.org/W2743678626","https://openalex.org/W2770807865","https://openalex.org/W2800509541","https://openalex.org/W2891280833","https://openalex.org/W2892214024","https://openalex.org/W2898413119","https://openalex.org/W2910469672","https://openalex.org/W2918408501","https://openalex.org/W2919493784","https://openalex.org/W2942239200","https://openalex.org/W2963197901","https://openalex.org/W2963704216","https://openalex.org/W3007562398","https://openalex.org/W3009085159","https://openalex.org/W3048314935","https://openalex.org/W3116203245","https://openalex.org/W3116274835","https://openalex.org/W3120227884","https://openalex.org/W3128341305","https://openalex.org/W3136284412","https://openalex.org/W3145680685","https://openalex.org/W3162713625","https://openalex.org/W3163510368","https://openalex.org/W3194722421","https://openalex.org/W3205483739","https://openalex.org/W4212855174","https://openalex.org/W4366147360"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Abstract":[0],"In":[1],"the":[2,10,20,42,94],"contemporary":[3],"digital":[4],"landscape,":[5],"mobile":[6],"applications":[7,47],"have":[8],"become":[9],"predominant":[11],"conduit":[12],"for":[13,55,117],"internet":[14],"connectivity":[15],"and":[16,68,101,114,119,158],"daily":[17],"tasks.":[18],"Simultaneously,":[19],"advent":[21],"of":[22,45,79,97,128,137,151],"application":[23,57,98,106,155,162],"encryption":[24],"technology":[25],"has":[26],"safeguarded":[27],"users\u2019":[28],"privacy.":[29],"However,":[30],"this":[31,84],"encryption,":[32],"while":[33],"fortifying":[34],"privacy,":[35],"introduces":[36,88],"challenges":[37],"to":[38,72,104],"security":[39],"by":[40],"hindering":[41],"effective":[43],"management":[44],"network":[46,121,139,172],"within":[48],"encrypted":[49,56,105],"data":[50],"streams.":[51],"Conventional":[52],"detection":[53,174],"methods":[54],"traffic,":[58,122],"relying":[59],"heavily":[60],"on":[61],"statistical":[62],"metrics":[63],"like":[64],"payload,":[65],"packet":[66],"size,":[67],"distribution,":[69],"are":[70],"constrained":[71],"single":[73,171],"traffic":[74,100,140,157],"flows,":[75],"often":[76],"yielding":[77],"results":[78],"limited":[80],"specificity.":[81],"To":[82],"address":[83],"limitation,":[85],"our":[86,129,145],"paper":[87],"an":[89,148],"innovative":[90],"approach":[91,130],"that":[92,144],"elucidates":[93],"multi-flow":[95],"nature":[96],"behavior":[99,156],"provides":[102],"context":[103],"traffic.":[107,163],"This":[108],"method":[109,146],"offers":[110],"a":[111,134,167,177],"more":[112],"nuanced":[113],"comprehensive":[115],"perspective":[116],"understanding":[118],"representing":[120],"even":[123],"when":[124],"encrypted.":[125],"The":[126],"efficacy":[127],"was":[131],"evaluated":[132],"using":[133],"substantial":[135,168],"volume":[136],"real":[138],"data.":[141],"Results":[142],"indicate":[143],"achieves":[147],"average":[149],"accuracy":[150],"0.958":[152],"in":[153,160],"identifying":[154],"0.955":[159],"classifying":[161],"These":[164],"outcomes":[165],"signify":[166],"enhancement":[169],"over":[170],"flow-based":[173],"methods,":[175],"demonstrating":[176],"notable":[178],"5.3%":[179],"improvement.":[180]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2}],"updated_date":"2026-05-23T08:51:43.019350","created_date":"2025-10-10T00:00:00"}
