{"id":"https://openalex.org/W2901957605","doi":"https://doi.org/10.3390/bdcc2040035","title":"The Next Generation Cognitive Security Operations Center: Network Flow Forensics Using Cybersecurity Intelligence","display_name":"The Next Generation Cognitive Security Operations Center: Network Flow Forensics Using Cybersecurity Intelligence","publication_year":2018,"publication_date":"2018-11-22","ids":{"openalex":"https://openalex.org/W2901957605","doi":"https://doi.org/10.3390/bdcc2040035","mag":"2901957605"},"language":"en","primary_location":{"id":"doi:10.3390/bdcc2040035","is_oa":true,"landing_page_url":"https://doi.org/10.3390/bdcc2040035","pdf_url":"https://www.mdpi.com/2504-2289/2/4/35/pdf?version=1542871490","source":{"id":"https://openalex.org/S4210238752","display_name":"Big Data and Cognitive Computing","issn_l":"2504-2289","issn":["2504-2289"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Big Data and Cognitive Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2504-2289/2/4/35/pdf?version=1542871490","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064140827","display_name":"Konstantinos Demertzis","orcid":"https://orcid.org/0000-0003-1330-5228"},"institutions":[{"id":"https://openalex.org/I147962203","display_name":"Democritus University of Thrace","ror":"https://ror.org/03bfqnx40","country_code":"GR","type":"education","lineage":["https://openalex.org/I147962203"]}],"countries":["GR"],"is_corresponding":true,"raw_author_name":"Konstantinos Demertzis","raw_affiliation_strings":["Department of Civil Engineering, School of Engineering, Democritus University of Thrace, Xanthi 67100, Greece"],"raw_orcid":"https://orcid.org/0000-0003-1330-5228","affiliations":[{"raw_affiliation_string":"Department of Civil Engineering, School of Engineering, Democritus University of Thrace, Xanthi 67100, Greece","institution_ids":["https://openalex.org/I147962203"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5099994606","display_name":"Panayiotis Kikiras","orcid":null},"institutions":[{"id":"https://openalex.org/I145722265","display_name":"University of Thessaly","ror":"https://ror.org/04v4g9h31","country_code":"GR","type":"education","lineage":["https://openalex.org/I145722265"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Panayiotis Kikiras","raw_affiliation_strings":["Department of Computer Science, School of Science, University of Thessaly, Lamia 35131, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, School of Science, University of Thessaly, Lamia 35131, Greece","institution_ids":["https://openalex.org/I145722265"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059860750","display_name":"Nikos Tziritas","orcid":"https://orcid.org/0000-0002-2091-2037"},"institutions":[{"id":"https://openalex.org/I4210145761","display_name":"Shenzhen Institutes of Advanced Technology","ror":"https://ror.org/04gh4er46","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210145761"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nikos Tziritas","raw_affiliation_strings":["Research Center for Cloud Computing, Shenzhen Institutes of Advanced Technology, Chinese Academy of Sciences, Shenzhen 518000, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Research Center for Cloud Computing, Shenzhen Institutes of Advanced Technology, Chinese Academy of Sciences, Shenzhen 518000, China","institution_ids":["https://openalex.org/I4210145761"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016419623","display_name":"Salvador Llopis S\u00e1nchez","orcid":"https://orcid.org/0000-0003-3828-4136"},"institutions":[{"id":"https://openalex.org/I60053951","display_name":"Universitat Polit\u00e8cnica de Val\u00e8ncia","ror":"https://ror.org/01460j859","country_code":"ES","type":"education","lineage":["https://openalex.org/I60053951"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Salvador Llopis Sanchez","raw_affiliation_strings":["Communications Department, Universitat Politecnica de Valencia, Valencia 46022, Spain"],"raw_orcid":"https://orcid.org/0000-0003-3828-4136","affiliations":[{"raw_affiliation_string":"Communications Department, Universitat Politecnica de Valencia, Valencia 46022, Spain","institution_ids":["https://openalex.org/I60053951"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5013635993","display_name":"Lazaros Iliadis","orcid":"https://orcid.org/0000-0002-6404-1528"},"institutions":[{"id":"https://openalex.org/I147962203","display_name":"Democritus University of Thrace","ror":"https://ror.org/03bfqnx40","country_code":"GR","type":"education","lineage":["https://openalex.org/I147962203"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Lazaros Iliadis","raw_affiliation_strings":["Department of Civil Engineering, School of Engineering, Democritus University of Thrace, Xanthi 67100, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Civil Engineering, School of Engineering, Democritus University of Thrace, Xanthi 67100, Greece","institution_ids":["https://openalex.org/I147962203"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5064140827"],"corresponding_institution_ids":["https://openalex.org/I147962203"],"apc_list":{"value":1400,"currency":"CHF","value_usd":1515},"apc_paid":{"value":1400,"currency":"CHF","value_usd":1515},"fwci":2.4603,"has_fulltext":true,"cited_by_count":44,"citation_normalized_percentile":{"value":0.90489933,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"2","issue":"4","first_page":"35","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.784533679485321},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6508409976959229},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6222031116485596},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.6143786311149597},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5868532657623291},{"id":"https://openalex.org/keywords/computer-forensics","display_name":"Computer forensics","score":0.5338970422744751},{"id":"https://openalex.org/keywords/network-forensics","display_name":"Network forensics","score":0.5327674746513367},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5286546349525452},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4821562170982361},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.46324315667152405},{"id":"https://openalex.org/keywords/categorization","display_name":"Categorization","score":0.43100523948669434},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4216041564941406},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.4140464663505554},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.23918530344963074},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.23632237315177917}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.784533679485321},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6508409976959229},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6222031116485596},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.6143786311149597},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5868532657623291},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.5338970422744751},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.5327674746513367},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5286546349525452},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4821562170982361},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.46324315667152405},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.43100523948669434},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4216041564941406},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.4140464663505554},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.23918530344963074},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.23632237315177917},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":7,"locations":[{"id":"doi:10.3390/bdcc2040035","is_oa":true,"landing_page_url":"https://doi.org/10.3390/bdcc2040035","pdf_url":"https://www.mdpi.com/2504-2289/2/4/35/pdf?version=1542871490","source":{"id":"https://openalex.org/S4210238752","display_name":"Big Data and Cognitive Computing","issn_l":"2504-2289","issn":["2504-2289"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Big Data and Cognitive Computing","raw_type":"journal-article"},{"id":"pmh:oai:HAL:hal-02155863v1","is_oa":true,"landing_page_url":"https://hal.science/hal-02155863","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Big Data and Cognitive Computing, 2018, 2 (4), pp.35. ⟨10.3390/bdcc2040035⟩","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:HAL:hal-02157103v1","is_oa":true,"landing_page_url":"https://hal.science/hal-02157103","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Big Data and Cognitive Computing, 2018, 2 (4), pp.35. ⟨10.3390/bdcc2040035⟩","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:doaj.org/article:e3175726ae8044ba91178dae3c426a38","is_oa":false,"landing_page_url":"https://doaj.org/article/e3175726ae8044ba91178dae3c426a38","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Big Data and Cognitive Computing, Vol 2, Iss 4, p 35 (2018)","raw_type":"article"},{"id":"pmh:oai:ir.lib.uth.gr:11615/60211","is_oa":false,"landing_page_url":"http://hdl.handle.net/11615/60211","pdf_url":null,"source":{"id":"https://openalex.org/S4306400243","display_name":"University of Thessaly Institutional Repository (University of Thessaly)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145722265","host_organization_name":"University of Thessaly","host_organization_lineage":["https://openalex.org/I145722265"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Big Data and Cognitive Computing","raw_type":"journalArticle"},{"id":"pmh:oai:ir.lib.uth.gr:11615/73208","is_oa":false,"landing_page_url":"http://hdl.handle.net/11615/73208","pdf_url":null,"source":{"id":"https://openalex.org/S4306400243","display_name":"University of Thessaly Institutional Repository (University of Thessaly)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I145722265","host_organization_name":"University of Thessaly","host_organization_lineage":["https://openalex.org/I145722265"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Big Data and Cognitive Computing","raw_type":"journalArticle"},{"id":"pmh:oai:mdpi.com:/2504-2289/2/4/35/","is_oa":true,"landing_page_url":"http://dx.doi.org/10.3390/bdcc2040035","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Big Data and Cognitive Computing","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/bdcc2040035","is_oa":true,"landing_page_url":"https://doi.org/10.3390/bdcc2040035","pdf_url":"https://www.mdpi.com/2504-2289/2/4/35/pdf?version=1542871490","source":{"id":"https://openalex.org/S4210238752","display_name":"Big Data and Cognitive Computing","issn_l":"2504-2289","issn":["2504-2289"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Big Data and Cognitive Computing","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7599999904632568,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2901957605.pdf","grobid_xml":"https://content.openalex.org/works/W2901957605.grobid-xml"},"referenced_works_count":56,"referenced_works":["https://openalex.org/W80155331","https://openalex.org/W646279203","https://openalex.org/W746053470","https://openalex.org/W1523098686","https://openalex.org/W1534477342","https://openalex.org/W1567366855","https://openalex.org/W1579155438","https://openalex.org/W1800056794","https://openalex.org/W1981294881","https://openalex.org/W1990649188","https://openalex.org/W1994588724","https://openalex.org/W2032701480","https://openalex.org/W2066219618","https://openalex.org/W2075798023","https://openalex.org/W2079842810","https://openalex.org/W2083965867","https://openalex.org/W2088175567","https://openalex.org/W2089652478","https://openalex.org/W2105596342","https://openalex.org/W2132549764","https://openalex.org/W2133473417","https://openalex.org/W2135850590","https://openalex.org/W2137839571","https://openalex.org/W2140396831","https://openalex.org/W2143305710","https://openalex.org/W2150307351","https://openalex.org/W2158698691","https://openalex.org/W2161769853","https://openalex.org/W2170916850","https://openalex.org/W2180201744","https://openalex.org/W2184867197","https://openalex.org/W2228337304","https://openalex.org/W2258615064","https://openalex.org/W2393727648","https://openalex.org/W2487087946","https://openalex.org/W2488504005","https://openalex.org/W2492936106","https://openalex.org/W2493269872","https://openalex.org/W2528493629","https://openalex.org/W2534614934","https://openalex.org/W2546365070","https://openalex.org/W2594206166","https://openalex.org/W2616786996","https://openalex.org/W2763433824","https://openalex.org/W2771644997","https://openalex.org/W2777636894","https://openalex.org/W2810979057","https://openalex.org/W2911964244","https://openalex.org/W2963265635","https://openalex.org/W3099414278","https://openalex.org/W4230836120","https://openalex.org/W4232478844","https://openalex.org/W4238093955","https://openalex.org/W6622152443","https://openalex.org/W6632738333","https://openalex.org/W6727740283"],"related_works":["https://openalex.org/W2387692413","https://openalex.org/W2534736331","https://openalex.org/W4238452393","https://openalex.org/W2161391695","https://openalex.org/W2489557937","https://openalex.org/W2375473997","https://openalex.org/W2373124162","https://openalex.org/W4200132475","https://openalex.org/W2035643924","https://openalex.org/W109647043"],"abstract_inverted_index":{"A":[0,100],"Security":[1],"Operations":[2],"Center":[3],"(SOC)":[4],"can":[5],"be":[6],"defined":[7],"as":[8],"an":[9,30,36,74,149,232],"organized":[10],"and":[11,24,46,54,68,83,94,115,189,211,234,249],"highly":[12],"skilled":[13],"team":[14],"that":[15,221],"uses":[16,205],"advanced":[17,225],"computer":[18,112],"forensics":[19,239],"tools":[20],"to":[21,26,41,44,55,185,241],"prevent,":[22],"detect":[23],"respond":[25],"cybersecurity":[27,64],"incidents":[28],"of":[29,35,51,60,70,85,104,120,123,134,144,153,168,208,246],"organization.":[31],"The":[32,66],"fundamental":[33],"aspects":[34],"effective":[37,121,233],"SOC":[38,219],"is":[39,73,141,157,231],"related":[40],"the":[42,48,80,86,96,105,118,124,132,142,174,180,214],"ability":[43],"examine":[45],"analyze":[47],"vast":[49],"number":[50],"data":[52],"flows":[53],"correlate":[56],"several":[57],"other":[58],"types":[59],"events":[61],"from":[62],"a":[63,195],"perception.":[65],"supervision":[67],"categorization":[69,122],"network":[71,113,128],"flow":[72],"essential":[75],"process":[76],"not":[77],"only":[78],"for":[79,91,95,111,117,213],"scheduling,":[81],"management,":[82],"regulation":[84],"network\u2019s":[87],"services,":[88],"but":[89],"also":[90],"attacks":[92],"identification":[93],"consequent":[97],"forensics\u2019":[98],"investigations.":[99],"serious":[101],"potential":[102],"disadvantage":[103],"traditional":[106,181],"software":[107,155,182],"solutions":[108],"used":[109],"today":[110],"monitoring,":[114],"specifically":[116],"instances":[119],"encrypted":[125],"or":[126],"obfuscated":[127],"flow,":[129],"which":[130,204],"enforces":[131],"rebuilding":[133],"messages":[135],"packets":[136],"in":[137,177],"sophisticated":[138],"underlying":[139],"protocols,":[140],"requirements":[143],"computational":[145],"resources.":[146],"In":[147],"addition,":[148],"additional":[150],"significant":[151],"inability":[152],"these":[154],"packages":[156],"they":[158,165],"create":[159],"high":[160],"false":[161],"positive":[162],"rates":[163],"because":[164],"are":[166],"deprived":[167],"accurate":[169,235],"predicting":[170],"mechanisms.":[171],"For":[172],"all":[173],"reasons":[175],"above,":[176],"most":[178],"cases,":[179],"fails":[183],"completely":[184],"recognize":[186],"unidentified":[187],"vulnerabilities":[188],"zero-day":[190],"exploitations.":[191],"This":[192],"paper":[193],"proposes":[194],"novel":[196],"intelligence":[197,228],"driven":[198],"Network":[199,242],"Flow":[200],"Forensics":[201],"Framework":[202],"(NF3)":[203],"low":[206],"utilization":[207],"computing":[209],"power":[210],"resources,":[212],"Next":[215],"Generation":[216],"Cognitive":[217],"Computing":[218],"(NGC2SOC)":[220],"rely":[222],"solely":[223],"on":[224],"fully":[226],"automated":[227],"methods.":[229],"It":[230],"Ensemble":[236],"Machine":[237],"Learning":[238],"tool":[240],"Traffic":[243,248,251],"Analysis,":[244],"Demystification":[245],"Malware":[247],"Encrypted":[250],"Identification.":[252]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":11},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}