{"id":"https://openalex.org/W3010585105","doi":"https://doi.org/10.23919/cnsm46954.2019.9012684","title":"Exploring NAT Detection and Host Identification Using Machine Learning","display_name":"Exploring NAT Detection and Host Identification Using Machine Learning","publication_year":2019,"publication_date":"2019-10-01","ids":{"openalex":"https://openalex.org/W3010585105","doi":"https://doi.org/10.23919/cnsm46954.2019.9012684","mag":"3010585105"},"language":"en","primary_location":{"id":"doi:10.23919/cnsm46954.2019.9012684","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm46954.2019.9012684","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 15th International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052870242","display_name":"Ali Safari Khatouni","orcid":"https://orcid.org/0000-0002-6435-6933"},"institutions":[{"id":"https://openalex.org/I129902397","display_name":"Dalhousie University","ror":"https://ror.org/01e6qks80","country_code":"CA","type":"education","lineage":["https://openalex.org/I129902397"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Ali Safari Khatouni","raw_affiliation_strings":["Dalhousie University, Canada"],"affiliations":[{"raw_affiliation_string":"Dalhousie University, Canada","institution_ids":["https://openalex.org/I129902397"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100322320","display_name":"Lan Zhang","orcid":"https://orcid.org/0000-0003-1004-8588"},"institutions":[{"id":"https://openalex.org/I129902397","display_name":"Dalhousie University","ror":"https://ror.org/01e6qks80","country_code":"CA","type":"education","lineage":["https://openalex.org/I129902397"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Lan Zhang","raw_affiliation_strings":["Dalhousie University, Canada"],"affiliations":[{"raw_affiliation_string":"Dalhousie University, Canada","institution_ids":["https://openalex.org/I129902397"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043396552","display_name":"Khurram Aziz","orcid":"https://orcid.org/0000-0002-6928-6110"},"institutions":[{"id":"https://openalex.org/I129902397","display_name":"Dalhousie University","ror":"https://ror.org/01e6qks80","country_code":"CA","type":"education","lineage":["https://openalex.org/I129902397"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Khurram Aziz","raw_affiliation_strings":["Dalhousie University, Canada"],"affiliations":[{"raw_affiliation_string":"Dalhousie University, Canada","institution_ids":["https://openalex.org/I129902397"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010372337","display_name":"Ibrahim Zincir","orcid":"https://orcid.org/0000-0002-4910-7437"},"institutions":[{"id":"https://openalex.org/I59944920","display_name":"Ya\u015far University","ror":"https://ror.org/00dz1eb96","country_code":"TR","type":"education","lineage":["https://openalex.org/I59944920"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Ibrahim Zincir","raw_affiliation_strings":["Yasar University, Turkey"],"affiliations":[{"raw_affiliation_string":"Yasar University, Turkey","institution_ids":["https://openalex.org/I59944920"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5008462534","display_name":"A. Nur Zincir\u2010Heywood","orcid":"https://orcid.org/0000-0003-2796-7265"},"institutions":[{"id":"https://openalex.org/I129902397","display_name":"Dalhousie University","ror":"https://ror.org/01e6qks80","country_code":"CA","type":"education","lineage":["https://openalex.org/I129902397"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Nur Zincir-Heywood","raw_affiliation_strings":["Dalhousie University, Canada"],"affiliations":[{"raw_affiliation_string":"Dalhousie University, Canada","institution_ids":["https://openalex.org/I129902397"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5052870242"],"corresponding_institution_ids":["https://openalex.org/I129902397"],"apc_list":null,"apc_paid":null,"fwci":1.1201,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.8442312,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/nat","display_name":"Nat","score":0.8442865610122681},{"id":"https://openalex.org/keywords/network-address-translation","display_name":"Network address translation","score":0.8413316011428833},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8072729110717773},{"id":"https://openalex.org/keywords/nat-traversal","display_name":"NAT traversal","score":0.6791325807571411},{"id":"https://openalex.org/keywords/anonymity","display_name":"Anonymity","score":0.6766566038131714},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5622499585151672},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5480650663375854},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.5291517376899719},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5088420510292053},{"id":"https://openalex.org/keywords/port","display_name":"Port (circuit theory)","score":0.4615798592567444},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4297887980937958},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4092586040496826},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.22299429774284363},{"id":"https://openalex.org/keywords/internet-protocol","display_name":"Internet Protocol","score":0.179264098405838}],"concepts":[{"id":"https://openalex.org/C182516595","wikidata":"https://www.wikidata.org/wiki/Q376660","display_name":"Nat","level":2,"score":0.8442865610122681},{"id":"https://openalex.org/C147873670","wikidata":"https://www.wikidata.org/wiki/Q11182","display_name":"Network address translation","level":4,"score":0.8413316011428833},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8072729110717773},{"id":"https://openalex.org/C113707754","wikidata":"https://www.wikidata.org/wiki/Q581558","display_name":"NAT traversal","level":5,"score":0.6791325807571411},{"id":"https://openalex.org/C178005623","wikidata":"https://www.wikidata.org/wiki/Q308859","display_name":"Anonymity","level":2,"score":0.6766566038131714},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5622499585151672},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5480650663375854},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.5291517376899719},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5088420510292053},{"id":"https://openalex.org/C32802771","wikidata":"https://www.wikidata.org/wiki/Q2443617","display_name":"Port (circuit theory)","level":2,"score":0.4615798592567444},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4297887980937958},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4092586040496826},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.22299429774284363},{"id":"https://openalex.org/C35341882","wikidata":"https://www.wikidata.org/wiki/Q8795","display_name":"Internet Protocol","level":3,"score":0.179264098405838},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/cnsm46954.2019.9012684","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cnsm46954.2019.9012684","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 15th International Conference on Network and Service Management (CNSM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5299999713897705}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W125674153","https://openalex.org/W1595294668","https://openalex.org/W1714781699","https://openalex.org/W1970438677","https://openalex.org/W1976087243","https://openalex.org/W1978617684","https://openalex.org/W1982812298","https://openalex.org/W2006269744","https://openalex.org/W2022816339","https://openalex.org/W2024393197","https://openalex.org/W2034382230","https://openalex.org/W2046007765","https://openalex.org/W2050821053","https://openalex.org/W2122210511","https://openalex.org/W2137632784","https://openalex.org/W2288359499","https://openalex.org/W2470647078","https://openalex.org/W2577666727","https://openalex.org/W2588675103","https://openalex.org/W2740220866","https://openalex.org/W2750890123","https://openalex.org/W3003395041","https://openalex.org/W4292106049","https://openalex.org/W6637504944"],"related_works":["https://openalex.org/W2069788412","https://openalex.org/W2371365544","https://openalex.org/W1555739159","https://openalex.org/W2368619280","https://openalex.org/W2104434117","https://openalex.org/W2159269118","https://openalex.org/W2113661795","https://openalex.org/W2993382487","https://openalex.org/W2010198837","https://openalex.org/W1940132419"],"abstract_inverted_index":{"The":[0],"usage":[1],"of":[2,47,58,129,163,166],"Network":[3],"Address":[4],"Translation":[5],"(NAT)":[6],"devices":[7,69,100],"is":[8,74],"common":[9],"among":[10],"end":[11],"users,":[12,51],"organizations,":[13],"and":[14,70,82,111,124,151],"Internet":[15],"Service":[16],"Providers.":[17],"NAT":[18,64,68,99,149],"provides":[19,43],"anonymity":[20,42],"for":[21,49],"users":[22,61],"within":[23],"an":[24,44,126],"organization":[25],"by":[26,59,101],"replacing":[27],"their":[28],"internal":[29],"IP":[30,107],"addresses":[31],"with":[32,133,155],"a":[33,90,121],"single":[34],"external":[35],"wide":[36],"area":[37],"network":[38],"address.":[39],"While":[40],"such":[41],"added":[45],"measure":[46],"security":[48],"legitimate":[50],"it":[52],"can":[53],"also":[54,159],"be":[55],"taken":[56],"advantage":[57],"malicious":[60,78],"hiding":[62],"behind":[63,72,98],"devices.":[65],"Thus,":[66],"identifying":[67],"hosts":[71,97,152],"them":[73],"essential":[75],"to":[76,95],"detect":[77,96],"behaviors":[79,150],"in":[80],"traffic":[81,117],"application":[83,112],"usage.":[84],"In":[85],"this":[86],"paper,":[87],"we":[88],"propose":[89],"machine":[91],"learning":[92],"based":[93],"solution":[94],"using":[102],"flow":[103],"level":[104],"statistics":[105],"(excluding":[106],"addresses,":[108],"port":[109],"numbers,":[110],"layer":[113],"information)":[114],"from":[115,137],"passive":[116],"measurements.":[118],"We":[119],"capture":[120],"large":[122],"dataset":[123],"perform":[125],"extensive":[127],"evaluation":[128],"our":[130],"proposed":[131,145,168],"approach":[132,146],"four":[134],"existing":[135],"approaches":[136],"the":[138,144,161,167],"literature.":[139],"Our":[140],"results":[141],"show":[142],"that":[143],"could":[147],"identify":[148],"not":[153],"only":[154],"higher":[156],"accuracy":[157],"but":[158],"demonstrates":[160],"impact":[162],"parameter":[164],"sensitivity":[165],"approach.":[169]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}