{"id":"https://openalex.org/W4377091931","doi":"https://doi.org/10.3390/e25050821","title":"TSFN: A Novel Malicious Traffic Classification Method Using BERT and LSTM","display_name":"TSFN: A Novel Malicious Traffic Classification Method Using BERT and LSTM","publication_year":2023,"publication_date":"2023-05-19","ids":{"openalex":"https://openalex.org/W4377091931","doi":"https://doi.org/10.3390/e25050821","pmid":"https://pubmed.ncbi.nlm.nih.gov/37238576"},"language":"en","primary_location":{"id":"doi:10.3390/e25050821","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e25050821","pdf_url":"https://www.mdpi.com/1099-4300/25/5/821/pdf?version=1684491714","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1099-4300/25/5/821/pdf?version=1684491714","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114052683","display_name":"Zhaolei Shi","orcid":null},"institutions":[{"id":"https://openalex.org/I96908189","display_name":"Xinjiang University","ror":"https://ror.org/059gw8r13","country_code":"CN","type":"education","lineage":["https://openalex.org/I96908189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaolei Shi","raw_affiliation_strings":["College of Information Science and Engineering, Xinjiang University, Urumqi 830046, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Science and Engineering, Xinjiang University, Urumqi 830046, China","institution_ids":["https://openalex.org/I96908189"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073536083","display_name":"Nurbol Luktarhan","orcid":"https://orcid.org/0000-0002-4043-6920"},"institutions":[{"id":"https://openalex.org/I96908189","display_name":"Xinjiang University","ror":"https://ror.org/059gw8r13","country_code":"CN","type":"education","lineage":["https://openalex.org/I96908189"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Nurbol Luktarhan","raw_affiliation_strings":["College of Information Science and Engineering, Xinjiang University, Urumqi 830046, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Science and Engineering, Xinjiang University, Urumqi 830046, China","institution_ids":["https://openalex.org/I96908189"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011769510","display_name":"Yangyang Song","orcid":"https://orcid.org/0000-0003-1666-2706"},"institutions":[{"id":"https://openalex.org/I96908189","display_name":"Xinjiang University","ror":"https://ror.org/059gw8r13","country_code":"CN","type":"education","lineage":["https://openalex.org/I96908189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yangyang Song","raw_affiliation_strings":["College of Information Science and Engineering, Xinjiang University, Urumqi 830046, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Science and Engineering, Xinjiang University, Urumqi 830046, China","institution_ids":["https://openalex.org/I96908189"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101314038","display_name":"Huixin Yin","orcid":null},"institutions":[{"id":"https://openalex.org/I96908189","display_name":"Xinjiang University","ror":"https://ror.org/059gw8r13","country_code":"CN","type":"education","lineage":["https://openalex.org/I96908189"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Huixin Yin","raw_affiliation_strings":["College of Information Science and Engineering, Xinjiang University, Urumqi 830046, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Science and Engineering, Xinjiang University, Urumqi 830046, China","institution_ids":["https://openalex.org/I96908189"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5073536083"],"corresponding_institution_ids":["https://openalex.org/I96908189"],"apc_list":{"value":2000,"currency":"CHF","value_usd":2165},"apc_paid":{"value":2000,"currency":"CHF","value_usd":2165},"fwci":3.8757,"has_fulltext":true,"cited_by_count":23,"citation_normalized_percentile":{"value":0.94699415,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"25","issue":"5","first_page":"821","last_page":"821"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8315107822418213},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.7552308440208435},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.6026232838630676},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5169546008110046},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4969461262226105},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.4797424077987671},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.45421066880226135},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4457460641860962},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4291148781776428},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.37857821583747864},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1386430263519287}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8315107822418213},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.7552308440208435},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6026232838630676},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5169546008110046},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4969461262226105},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.4797424077987671},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.45421066880226135},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4457460641860962},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4291148781776428},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37857821583747864},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1386430263519287},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.3390/e25050821","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e25050821","pdf_url":"https://www.mdpi.com/1099-4300/25/5/821/pdf?version=1684491714","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},{"id":"pmid:37238576","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/37238576","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy (Basel, Switzerland)","raw_type":null},{"id":"pmh:oai:pubmedcentral.nih.gov:10216927","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/10216927","pdf_url":"https://pmc.ncbi.nlm.nih.gov/articles/PMC10216927/pdf/entropy-25-00821.pdf","source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy (Basel)","raw_type":"Text"},{"id":"pmh:oai:doaj.org/article:58ac08d5dcdd41479d391fdeb8bb9404","is_oa":true,"landing_page_url":"https://doaj.org/article/58ac08d5dcdd41479d391fdeb8bb9404","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy, Vol 25, Iss 5, p 821 (2023)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1099-4300/25/5/821/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/e25050821","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy; Volume 25; Issue 5; Pages: 821","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/e25050821","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e25050821","pdf_url":"https://www.mdpi.com/1099-4300/25/5/821/pdf?version=1684491714","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7647136078","display_name":null,"funder_award_id":"20&ZD293","funder_id":"https://openalex.org/F4320335869","funder_display_name":"National Social Science Fund of China"}],"funders":[{"id":"https://openalex.org/F4320335869","display_name":"National Social Science Fund of China","ror":null}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4377091931.pdf"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W1495633614","https://openalex.org/W2099940443","https://openalex.org/W2131757333","https://openalex.org/W2150702922","https://openalex.org/W2272516773","https://openalex.org/W2334853001","https://openalex.org/W2548532227","https://openalex.org/W2560100125","https://openalex.org/W2606697812","https://openalex.org/W2743678626","https://openalex.org/W2913746382","https://openalex.org/W2919493784","https://openalex.org/W2953356739","https://openalex.org/W2963403784","https://openalex.org/W2963516518","https://openalex.org/W2963704216","https://openalex.org/W2970390493","https://openalex.org/W3007562398","https://openalex.org/W3113693716","https://openalex.org/W3114936184","https://openalex.org/W3120227884","https://openalex.org/W3134226201","https://openalex.org/W3160455160","https://openalex.org/W4206693003","https://openalex.org/W4207030046","https://openalex.org/W4211242407","https://openalex.org/W4224315052","https://openalex.org/W4317435061","https://openalex.org/W4381492746"],"related_works":["https://openalex.org/W2105642232","https://openalex.org/W3197833032","https://openalex.org/W3207332793","https://openalex.org/W4386081464","https://openalex.org/W2499612753","https://openalex.org/W2750709484","https://openalex.org/W2012465643","https://openalex.org/W2773751105","https://openalex.org/W4293863212","https://openalex.org/W2050261031"],"abstract_inverted_index":{"Traffic":[0],"classification":[1,20,55,176],"is":[2,11,90,116],"the":[3,41,50,60,67,97,102,108,111,124,129,133,136,142,149,157,165,171,178,192,201],"first":[4,89],"step":[5],"in":[6,85,195],"network":[7,14],"anomaly":[8],"detection":[9],"and":[10,34,43,65,138],"essential":[12],"to":[13,31,40],"security.":[15],"However,":[16],"existing":[17,51],"malicious":[18,53,143,158,174,196,204],"traffic":[19,54,64,109,144,175,197,205],"methods":[21,28,37,56],"have":[22],"several":[23],"limitations;":[24],"for":[25],"example,":[26],"statistical-based":[27],"are":[29,38,145],"vulnerable":[30,39],"hand-designed":[32],"features,":[33],"deep":[35],"learning-based":[36],"balance":[42],"adequacy":[44],"of":[45,63,70,104,107,132,141,173,187,203],"data":[46],"sets.":[47],"In":[48],"addition,":[49],"BERT-based":[52,79],"only":[57],"focus":[58],"on":[59,177],"global":[61,105,137],"features":[62,69,106,131,140,194],"ignore":[66],"time-series":[68,130,139,193],"traffic.":[71,134,159],"To":[72],"address":[73],"these":[74],"problems,":[75],"we":[76],"propose":[77],"a":[78,91,117],"Time-Series":[80],"Feature":[81],"Network":[82],"(TSFN)":[83],"model":[84],"this":[86],"paper.":[87],"The":[88,114,160],"Packet":[92],"encoder":[93],"module":[94,121],"built":[95,122],"by":[96,123],"BERT":[98],"model,":[99,126],"which":[100,127,153],"completes":[101],"capture":[103],"using":[110],"attention":[112],"mechanism.":[113],"second":[115],"temporal":[118],"feature":[119,151],"extraction":[120],"LSTM":[125],"captures":[128],"Then,":[135],"incorporated":[146],"together":[147],"as":[148],"final":[150],"representation,":[152],"can":[154,168,198],"better":[155],"represent":[156],"experimental":[161],"results":[162],"show":[163],"that":[164,191],"proposed":[166],"approach":[167],"effectively":[169],"improve":[170,200],"accuracy":[172,202],"publicly":[179],"available":[180],"USTC-TFC":[181],"dataset,":[182],"reaching":[183],"an":[184],"F1":[185],"value":[186],"99.50%.":[188],"This":[189],"shows":[190],"help":[199],"classification.":[206]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":3}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2025-10-10T00:00:00"}