{"id":"https://openalex.org/W2611362084","doi":"https://doi.org/10.4018/ijbdcn.2017070101","title":"Dynamic Combined with Static Analysis for Mining Network Protocol's Hidden Behavior","display_name":"Dynamic Combined with Static Analysis for Mining Network Protocol's Hidden Behavior","publication_year":2017,"publication_date":"2017-05-03","ids":{"openalex":"https://openalex.org/W2611362084","doi":"https://doi.org/10.4018/ijbdcn.2017070101","mag":"2611362084"},"language":"en","primary_location":{"id":"doi:10.4018/ijbdcn.2017070101","is_oa":false,"landing_page_url":"https://doi.org/10.4018/ijbdcn.2017070101","pdf_url":null,"source":{"id":"https://openalex.org/S108454011","display_name":"International Journal of Business Data Communications and Networking","issn_l":"1548-0631","issn":["1548-0631","1548-064X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Business Data Communications and Networking","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055007481","display_name":"Yan-Jing Hu","orcid":null},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]},{"id":"https://openalex.org/I4210134428","display_name":"Chinese People's Armed Police Force Engineering University","ror":"https://ror.org/031jzbb03","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210134428"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanjing Hu","raw_affiliation_strings":["National Key Laboratory of Integrated Services Networks, Xidian University, Xi'an, China & Key Laboratory of Network and Information Security, Engineering University of the Armed Police Force, Xi'an, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Key Laboratory of Integrated Services Networks, Xidian University, Xi'an, China & Key Laboratory of Network and Information Security, Engineering University of the Armed Police Force, Xi'an, China","institution_ids":["https://openalex.org/I4210134428","https://openalex.org/I149594827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065373445","display_name":"Qingqi Pei","orcid":"https://orcid.org/0000-0001-7601-5434"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qingqi Pei","raw_affiliation_strings":["National Key Laboratory of Integrated Services Networks, Xidian University, Xi'an, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Key Laboratory of Integrated Services Networks, Xidian University, Xi'an, China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.03596288,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":"2","first_page":"1","last_page":"14"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8772988319396973},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.8281064033508301},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.8021430969238281},{"id":"https://openalex.org/keywords/protocol-analysis","display_name":"Protocol analysis","score":0.49842238426208496},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.49265509843826294},{"id":"https://openalex.org/keywords/otway\u2013rees-protocol","display_name":"Otway\u2013Rees protocol","score":0.42180949449539185},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3990964889526367},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3643302023410797},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2807686924934387},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.14961856603622437},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.1359877586364746},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.13545921444892883},{"id":"https://openalex.org/keywords/authentication-protocol","display_name":"Authentication protocol","score":0.11978346109390259}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8772988319396973},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.8281064033508301},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.8021430969238281},{"id":"https://openalex.org/C133112747","wikidata":"https://www.wikidata.org/wiki/Q7251931","display_name":"Protocol analysis","level":2,"score":0.49842238426208496},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.49265509843826294},{"id":"https://openalex.org/C35788789","wikidata":"https://www.wikidata.org/wiki/Q1320237","display_name":"Otway\u2013Rees protocol","level":5,"score":0.42180949449539185},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3990964889526367},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3643302023410797},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2807686924934387},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.14961856603622437},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.1359877586364746},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.13545921444892883},{"id":"https://openalex.org/C21564112","wikidata":"https://www.wikidata.org/wiki/Q4825885","display_name":"Authentication protocol","level":3,"score":0.11978346109390259},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C207828512","wikidata":"https://www.wikidata.org/wiki/Q1060131","display_name":"Challenge-Handshake Authentication Protocol","level":4,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.4018/ijbdcn.2017070101","is_oa":false,"landing_page_url":"https://doi.org/10.4018/ijbdcn.2017070101","pdf_url":null,"source":{"id":"https://openalex.org/S108454011","display_name":"International Journal of Business Data Communications and Networking","issn_l":"1548-0631","issn":["1548-0631","1548-064X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Business Data Communications and Networking","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7300000190734863,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W16708063","https://openalex.org/W36073889","https://openalex.org/W378118343","https://openalex.org/W1693290180","https://openalex.org/W1940252083","https://openalex.org/W2001056218","https://openalex.org/W2018506753","https://openalex.org/W2068157008","https://openalex.org/W2068224601","https://openalex.org/W2073325935","https://openalex.org/W2077575368","https://openalex.org/W2084071694","https://openalex.org/W2085350124","https://openalex.org/W2091614396","https://openalex.org/W2094116506","https://openalex.org/W2097393105","https://openalex.org/W2100006503","https://openalex.org/W2129208788","https://openalex.org/W2141203273","https://openalex.org/W2152078842","https://openalex.org/W2160637255","https://openalex.org/W2162554233","https://openalex.org/W2172163424","https://openalex.org/W2178969673","https://openalex.org/W2328171637","https://openalex.org/W3105656675"],"related_works":["https://openalex.org/W2108120676","https://openalex.org/W2331831281","https://openalex.org/W2021615118","https://openalex.org/W2377894939","https://openalex.org/W2044612640","https://openalex.org/W2625717412","https://openalex.org/W26296735","https://openalex.org/W1983480470","https://openalex.org/W1487625070","https://openalex.org/W1598832894"],"abstract_inverted_index":{"Unknown":[0],"protocol's":[1,68,86,130,161,168],"hidden":[2,87,92,99,114,131,162],"behavior":[3,88,93,100],"is":[4,38],"becoming":[5],"a":[6],"new":[7,103],"challenge":[8],"in":[9,55],"network":[10],"security.":[11,170],"This":[12],"paper":[13],"takes":[14],"the":[15,19,24,28,47,53,56,64,67,74,85,98,107,113,129,135,139,142,154,160],"captured":[16],"messages":[17,105],"and":[18,45,80,91,112,127,164],"binary":[20],"code":[21],"that":[22,153],"implement":[23],"protocol":[25,41,50,104],"both":[26],"as":[27],"studied":[29],"object.":[30],"Dynamic":[31],"Taint":[32],"Analysis":[33,37],"combined":[34],"with":[35,106],"Static":[36],"used":[39],"for":[40],"analyzing.":[42],"Firstly,":[43],"monitor":[44],"analyze":[46,84,128],"process":[48],"of":[49,145],"program":[51],"parses":[52],"message":[54],"virtual":[57],"platform":[58],"HiddenDisc":[59,121],"prototype":[60,122],"system":[61,123],"developed":[62],"by":[63,118],"authors,":[65],"record":[66],"public":[69],"behavior,":[70],"then":[71],"based":[72],"on":[73],"authors'":[75],"proposed":[76],"Hidden":[77],"Behavior":[78],"Perception":[79],"Mining":[81],"algorithm,":[82],"static":[83],"trigger":[89,101,126],"conditions":[90],"instruction":[94],"sequences.":[95],"According":[96,133],"to":[97,134],"conditions,":[102],"sensitive":[108],"information":[109],"are":[110,116],"generated,":[111],"behaviors":[115],"executed":[117],"dynamic":[119],"triggering.":[120],"can":[124,157,165],"sense,":[125],"behaviors.":[132],"statistical":[136],"analysis":[137],"results,":[138],"authors":[140],"propose":[141],"evaluation":[143],"method":[144,156],"Protocol":[146],"Execution":[147],"Security.":[148],"The":[149],"experimental":[150],"results":[151],"show":[152],"present":[155],"accurately":[158],"mining":[159],"behaviors,":[163],"evaluate":[166],"unknown":[167],"execution":[169]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}