{"id":"https://openalex.org/W4399532372","doi":"https://doi.org/10.3233/jhs-230145","title":"HClass: Fast hybrid network traffic classification with bit and keyword level signatures","display_name":"HClass: Fast hybrid network traffic classification with bit and keyword level signatures","publication_year":2024,"publication_date":"2024-06-11","ids":{"openalex":"https://openalex.org/W4399532372","doi":"https://doi.org/10.3233/jhs-230145"},"language":"en","primary_location":{"id":"doi:10.3233/jhs-230145","is_oa":true,"landing_page_url":"https://doi.org/10.3233/jhs-230145","pdf_url":"https://content.iospress.com:443/download/journal-of-high-speed-networks/jhs230145?id=journal-of-high-speed-networks%2Fjhs230145","source":{"id":"https://openalex.org/S133922704","display_name":"Journal of High Speed Networks","issn_l":"0926-6801","issn":["0926-6801","1875-8940"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of High Speed Networks","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://content.iospress.com:443/download/journal-of-high-speed-networks/jhs230145?id=journal-of-high-speed-networks%2Fjhs230145","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055083020","display_name":"Pratibha Khandait","orcid":null},"institutions":[{"id":"https://openalex.org/I64295750","display_name":"Indian Institute of Technology Indore","ror":"https://ror.org/01hhf7w52","country_code":"IN","type":"education","lineage":["https://openalex.org/I64295750"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Pratibha Khandait","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Indore, India"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Indore, India","institution_ids":["https://openalex.org/I64295750"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028480555","display_name":"Neminath Hubballi","orcid":"https://orcid.org/0000-0001-9669-9773"},"institutions":[{"id":"https://openalex.org/I64295750","display_name":"Indian Institute of Technology Indore","ror":"https://ror.org/01hhf7w52","country_code":"IN","type":"education","lineage":["https://openalex.org/I64295750"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Neminath Hubballi","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Indore, India"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Indore, India","institution_ids":["https://openalex.org/I64295750"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5028480555"],"corresponding_institution_ids":["https://openalex.org/I64295750"],"apc_list":null,"apc_paid":null,"fwci":0.7088,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.74197541,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"30","issue":"4","first_page":"517","last_page":"533"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8758439421653748},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.6717612147331238},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.6517378687858582},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.5621837973594666},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.5373806953430176},{"id":"https://openalex.org/keywords/regular-expression","display_name":"Regular expression","score":0.524169921875},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5084530115127563},{"id":"https://openalex.org/keywords/string-searching-algorithm","display_name":"String searching algorithm","score":0.5055794715881348},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.48695406317710876},{"id":"https://openalex.org/keywords/network-processor","display_name":"Network processor","score":0.4510174095630646},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4508667588233948},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.44100499153137207},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.423194944858551},{"id":"https://openalex.org/keywords/pattern-matching","display_name":"Pattern matching","score":0.3803882300853729},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.35658517479896545},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.28403598070144653},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.2212216854095459},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.21840912103652954},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.20646154880523682},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.13963037729263306}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8758439421653748},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.6717612147331238},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.6517378687858582},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.5621837973594666},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.5373806953430176},{"id":"https://openalex.org/C121329065","wikidata":"https://www.wikidata.org/wiki/Q185612","display_name":"Regular expression","level":2,"score":0.524169921875},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5084530115127563},{"id":"https://openalex.org/C7757238","wikidata":"https://www.wikidata.org/wiki/Q374040","display_name":"String searching algorithm","level":3,"score":0.5055794715881348},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.48695406317710876},{"id":"https://openalex.org/C74366991","wikidata":"https://www.wikidata.org/wiki/Q2755335","display_name":"Network processor","level":3,"score":0.4510174095630646},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4508667588233948},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.44100499153137207},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.423194944858551},{"id":"https://openalex.org/C68859911","wikidata":"https://www.wikidata.org/wiki/Q1503724","display_name":"Pattern matching","level":2,"score":0.3803882300853729},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35658517479896545},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.28403598070144653},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.2212216854095459},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.21840912103652954},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.20646154880523682},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13963037729263306},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/jhs-230145","is_oa":true,"landing_page_url":"https://doi.org/10.3233/jhs-230145","pdf_url":"https://content.iospress.com:443/download/journal-of-high-speed-networks/jhs230145?id=journal-of-high-speed-networks%2Fjhs230145","source":{"id":"https://openalex.org/S133922704","display_name":"Journal of High Speed Networks","issn_l":"0926-6801","issn":["0926-6801","1875-8940"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of High Speed Networks","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.3233/jhs-230145","is_oa":true,"landing_page_url":"https://doi.org/10.3233/jhs-230145","pdf_url":"https://content.iospress.com:443/download/journal-of-high-speed-networks/jhs230145?id=journal-of-high-speed-networks%2Fjhs230145","source":{"id":"https://openalex.org/S133922704","display_name":"Journal of High Speed Networks","issn_l":"0926-6801","issn":["0926-6801","1875-8940"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of High Speed Networks","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320313903","display_name":"Tata Consultancy Services","ror":"https://ror.org/01b9n8m42"},{"id":"https://openalex.org/F4320330412","display_name":"Scheme for Promotion of Academic and Research Collaboration","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4399532372.pdf","grobid_xml":"https://content.openalex.org/works/W4399532372.grobid-xml"},"referenced_works_count":32,"referenced_works":["https://openalex.org/W1972428331","https://openalex.org/W2014456696","https://openalex.org/W2019774807","https://openalex.org/W2023402449","https://openalex.org/W2027355980","https://openalex.org/W2056325176","https://openalex.org/W2083254762","https://openalex.org/W2096118443","https://openalex.org/W2104114371","https://openalex.org/W2119271160","https://openalex.org/W2122226347","https://openalex.org/W2134826720","https://openalex.org/W2138449377","https://openalex.org/W2171634548","https://openalex.org/W2340557351","https://openalex.org/W2511505324","https://openalex.org/W2742275837","https://openalex.org/W2767102391","https://openalex.org/W2783657833","https://openalex.org/W2790982910","https://openalex.org/W2792186710","https://openalex.org/W2892062861","https://openalex.org/W2919493784","https://openalex.org/W2922268078","https://openalex.org/W2957009961","https://openalex.org/W2981318525","https://openalex.org/W3011161512","https://openalex.org/W3033916366","https://openalex.org/W3097529015","https://openalex.org/W4200557863","https://openalex.org/W4280529340","https://openalex.org/W4296229353"],"related_works":["https://openalex.org/W2159281873","https://openalex.org/W2041550843","https://openalex.org/W2184740474","https://openalex.org/W1492858093","https://openalex.org/W2537489883","https://openalex.org/W4242309756","https://openalex.org/W2017644937","https://openalex.org/W2393727648","https://openalex.org/W2002288953","https://openalex.org/W2135762134"],"abstract_inverted_index":{"Deep":[0],"Packet":[1],"Inspection":[2],"(DPI)":[3],"methods":[4,12,115],"are":[5,94,147],"extensively":[6],"used":[7],"in":[8,83,188],"traffic":[9,79],"classification.":[10],"These":[11],"extract":[13],"unique":[14],"application":[15],"content":[16],"either":[17],"at":[18,43],"byte":[19],"or":[20,32],"bit":[21,108],"level":[22,123],"granularity":[23,45],"and":[24,40,55,109,130,149,155,175,179],"represent":[25],"them":[26],"as":[27],"signatures.":[28,111],"DPI":[29,64],"involves":[30],"string":[31],"regular":[33],"expression":[34],"matching,":[35],"which":[36],"is":[37],"computationally":[38],"expensive,":[39],"evaluating":[41],"signatures":[42,146,158],"bit-level":[44,118],"makes":[46],"it":[47,138],"even":[48],"more":[49],"inefficient.":[50],"With":[51],"the":[52,56,60,152,156,160],"ever-increasing":[53],"bandwidth":[54],"high-speed":[57],"internet":[58],"traffic,":[59],"software":[61,84,128],"implementations":[62,129,187],"of":[63,107,183],"have":[65],"become":[66],"a":[67,76,99,105,140],"performance":[68,178],"bottleneck.":[69],"In":[70],"this":[71],"paper,":[72],"we":[73,97,113],"propose":[74,98,114],"HClass,":[75],"DPI-based":[77],"network":[78],"classifier":[80],"completely":[81],"implemented":[82],"to":[85,116,125,163],"speed":[86],"up":[87],"signature":[88,101,119,142],"matching.":[89],"Our":[90],"contributions":[91],"with":[92,104,121,127,133,170,185],"HClass":[93,171,184],"three-fold.":[95],"First,":[96],"hybrid":[100],"matching":[102,120,143],"technique":[103],"combination":[106],"byte-level":[110],"Second,":[112],"perform":[117,168],"byte/word":[122],"operations":[124],"cope":[126],"be":[131],"compatible":[132],"general-purpose":[134],"CPU":[135],"operations.":[136],"Third,":[137],"uses":[139],"two-phase":[141],"where":[144],"first-phase":[145],"short":[148],"quickly":[150],"identify":[151],"potential":[153,161],"application(s),":[154],"second-phase":[157],"verify":[159],"application(s)":[162],"reduce":[164],"false":[165],"positives.":[166],"We":[167],"experiments":[169],"on":[172],"three":[173],"datasets":[174],"report":[176],"classification":[177],"execution":[180],"time":[181],"improvement":[182],"our":[186],"C":[189],"language.":[190]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2025-10-10T00:00:00"}