{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,20]],"date-time":"2026-01-20T10:29:03Z","timestamp":1768904943546,"version":"3.49.0"},"publisher-location":"Cham","reference-count":31,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030242732","type":"print"},{"value":"9783030242749","type":"electronic"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-24274-9_26","type":"book-chapter","created":{"date-parts":[[2019,7,17]],"date-time":"2019-07-17T23:03:34Z","timestamp":1563404614000},"page":"293-303","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":21,"title":["Android Malware Identification Based on Traffic Analysis"],"prefix":"10.1007","author":[{"given":"Rong","family":"Chen","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yangyang","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Weiwei","family":"Fang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,7,11]]},"reference":[{"key":"26_CR1","doi-asserted-by":"crossref","unstructured":"Taylor, V.F., Spolaor, R., Conti, M., et al.: AppScanner: automatic fingerprinting of smartphone apps from encrypted network traffic. In: IEEE European Symposium on Security & Privacy. IEEE (2016)","DOI":"10.1109\/EuroSP.2016.40"},{"key":"26_CR2","unstructured":"https:\/\/www.statista.com\/statistics\/330695\/number-of-smartphone-users-worldwide\/"},{"key":"26_CR3","unstructured":"Shen, M., Wei, M., Zhu, L., et al.: Certificate-aware encrypted traffic classification using second-order Markov chain. In: 2016 IEEE\/ACM 24th International Symposium on Quality of Service (IWQoS). ACM (2016)"},{"issue":"1","key":"26_CR4","first-page":"017","volume":"55","author":"J Cui","year":"2018","unstructured":"Cui, J., Zhang, Y., Cai, Z., Liu, A., Li, Y.: Securing display path for security-sensitive applications on mobile devices. CMC Comput. Mater. Continua 55(1), 017\u2013035 (2018)","journal-title":"CMC Comput. Mater. Continua"},{"key":"26_CR5","unstructured":"Malicious mobile threats report 2011\/2012. \n                      http:\/\/apo.org.au\/node\/29815"},{"issue":"9","key":"26_CR6","first-page":"65","volume":"36","author":"C-X Gao","year":"2015","unstructured":"Gao, C.-X., Wu, Y.-B., Cong, W., et al.: Encrypted traffic classification based on packet length distribution of sampling sequence. J. Commun. 36(9), 65\u201375 (2015)","journal-title":"J. Commun."},{"key":"26_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-36784-7","volume-title":"Data Traffic Monitoring and Analysis","year":"2013","unstructured":"Biersack, E., Callegari, C., Matijasevic, M. (eds.): Data Traffic Monitoring and Analysis. LNCS, vol. 7754. Springer, Heidelberg (2013). \n                      https:\/\/doi.org\/10.1007\/978-3-642-36784-7"},{"issue":"1","key":"26_CR8","doi-asserted-by":"publisher","first-page":"114","DOI":"10.1109\/TIFS.2015.2478741","volume":"11","author":"M Conti","year":"2016","unstructured":"Conti, M., Mancini, L.V., Spolaor, R., et al.: Analyzing Android encrypted network traffic to identify user actions. IEEE Trans. Inf. Forensics Secur. 11(1), 114\u2013125 (2016)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"26_CR9","doi-asserted-by":"publisher","first-page":"75","DOI":"10.1016\/j.comnet.2014.11.001","volume":"76","author":"T Bujlow","year":"2015","unstructured":"Bujlow, T., Carela-Espaiol, V., Barlet-Ros, P.: Independent comparison of popular DPI tools for traffic classification. Comput. Netw. 76, 75\u201389 (2015)","journal-title":"Comput. Netw."},{"key":"26_CR10","unstructured":"Madhukar, A., Williamson, C.: A longitudinal study of P2P traffic classification. In: IEEE International Symposium on Modeling. IEEE (2006)"},{"issue":"2","key":"26_CR11","doi-asserted-by":"publisher","first-page":"1135","DOI":"10.1109\/SURV.2013.100613.00161","volume":"16","author":"M Finsterbusch","year":"2014","unstructured":"Finsterbusch, M., Richter, C., Rocha, E., et al.: A survey of payload-based traffic classification approaches. IEEE Commun. Surv. Tutor. 16(2), 1135\u20131156 (2014)","journal-title":"IEEE Commun. Surv. Tutor."},{"issue":"2","key":"26_CR12","doi-asserted-by":"publisher","first-page":"929","DOI":"10.1166\/asl.2018.10660","volume":"24","author":"A Feizollah","year":"2018","unstructured":"Feizollah, A., Anuar, N.B., Salleh, R.: Evaluation of network traffic analysis using fuzzy C-means clustering algorithm in mobile malware detection. Adv. Sci. Lett. 24(2), 929\u2013932 (2018)","journal-title":"Adv. Sci. Lett."},{"key":"26_CR13","doi-asserted-by":"crossref","unstructured":"Okada, Y., Ata, S., Nakamura, N., et al.: Application identification from encrypted traffic based on characteristic changes by encryption. In: 2011 IEEE International Workshop Technical Committee on Communications Quality and Reliability (CQR). IEEE (2011)","DOI":"10.1109\/CQR.2011.5996087"},{"issue":"8","key":"26_CR14","doi-asserted-by":"publisher","first-page":"209","DOI":"10.1109\/CC.2016.7563724","volume":"13","author":"X Gui","year":"2016","unstructured":"Gui, X., Liu, J., Chi, M., et al.: Analysis of malware application based on massive network traffic. China Commun. 13(8), 209\u2013221 (2016)","journal-title":"China Commun."},{"key":"26_CR15","doi-asserted-by":"crossref","unstructured":"Zuquete, A., Rocha, M.: Identification of source applications for enhanced traffic analysis and anomaly detection. In: IEEE International Conference on Communications (2012)","DOI":"10.1109\/ICC.2012.6364951"},{"key":"26_CR16","doi-asserted-by":"publisher","first-page":"129","DOI":"10.1016\/j.eswa.2018.02.010","volume":"101","author":"J Kohout","year":"2018","unstructured":"Kohout, J., Komrek, T., Tech, P., et al.: Learning communication patterns for malware discovery in HTTPs data. Exp. Syst. Appl. 101, 129\u2013142 (2018)","journal-title":"Exp. Syst. Appl."},{"issue":"5","key":"26_CR17","doi-asserted-by":"publisher","first-page":"355","DOI":"10.1002\/nem.1901","volume":"25","author":"P Velan","year":"2015","unstructured":"Velan, P., Permk, M., Teleda, P., et al.: A survey of methods for encrypted traffic classification and analysis. Int. J. Netw. Manag. 25(5), 355\u2013374 (2015)","journal-title":"Int. J. Netw. Manag."},{"key":"26_CR18","doi-asserted-by":"crossref","unstructured":"Alshammari, R., Zincir-Heywood, A.N.: An investigation on the identification of VoIP traffic: case study on Gtalk and Skype. In: International Conference on Network & Service Management (2010)","DOI":"10.1109\/CNSM.2010.5691210"},{"key":"26_CR19","doi-asserted-by":"crossref","unstructured":"Wang, D., Zhang, L., Yuan, Z., et al.: Characterizing application behaviors for classifying P2P traffic. In: International Conference on Computing (2014)","DOI":"10.1109\/ICCNC.2014.6785298"},{"issue":"5","key":"26_CR20","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1145\/2677046.2677048","volume":"44","author":"SE Coull","year":"2014","unstructured":"Coull, S.E., Dyer, K.P.: Traffic analysis of encrypted messaging services: Apple iMessage and beyond. ACM SIGCOMM Comput. Commun. Rev. 44(5), 5\u201311 (2014)","journal-title":"ACM SIGCOMM Comput. Commun. Rev."},{"key":"26_CR21","unstructured":"Mauro, M.D., Longo, M.: Revealing encrypted WebRTC traffic via machine learning tools. In: International Joint Conference on E-business & Telecommunications. IEEE (2016)"},{"key":"26_CR22","doi-asserted-by":"crossref","unstructured":"Korczynski, M., Duda, A.: Markov chain fingerprinting to classify encrypted traffic. In: Infocom. IEEE (2014","DOI":"10.1109\/INFOCOM.2014.6848005"},{"key":"26_CR23","doi-asserted-by":"crossref","unstructured":"Koch, R., Rodosek, G.D.: Command evaluation in encrypted remote sessions. In: International Conference on Network & System Security. IEEE Computer Society (2010)","DOI":"10.1109\/NSS.2010.62"},{"key":"26_CR24","doi-asserted-by":"crossref","unstructured":"Aghaei-Foroushani, V., Zincir-Heywood, A.: A proxy identifier based on patterns in traffic flows. In: HASE, January 2015","DOI":"10.1109\/HASE.2015.26"},{"issue":"1","key":"26_CR25","first-page":"095","volume":"55","author":"J Cheng","year":"2018","unstructured":"Cheng, J., Ruomeng, X., Tang, X., Sheng, V.S., Cai, C.: An abnormal network flow feature sequence prediction approach for DDoS attacks detection in big data environment. CMC Comput. Mater. Continua 55(1), 095\u2013119 (2018)","journal-title":"CMC Comput. Mater. Continua"},{"issue":"1","key":"26_CR26","doi-asserted-by":"publisher","first-page":"163","DOI":"10.1007\/s11235-013-9690-5","volume":"53","author":"Y Du","year":"2013","unstructured":"Du, Y., Zhang, R.: Design of a method for encrypted P2P traffic identification using K-means algorithm. Telecommun. Syst. 53(1), 163\u2013168 (2013)","journal-title":"Telecommun. Syst."},{"issue":"6","key":"26_CR27","doi-asserted-by":"publisher","first-page":"1326","DOI":"10.1016\/j.comnet.2010.12.002","volume":"55","author":"R Alshammari","year":"2011","unstructured":"Alshammari, R., Zincir-Heywood, A.N.: Can encrypted traffic be identified without port numbers, IP addresses and payload inspection? Comput. Netw. 55(6), 1326\u20131350 (2011)","journal-title":"Comput. Netw."},{"key":"26_CR28","doi-asserted-by":"crossref","unstructured":"Lashkari, A.H., Kadir, A.F.A., Taheri, L., Ghorbani, A.A.: Toward developing a systematic approach to generate benchmark android malware datasets and classification. In: Proceedings of the 52nd IEEE International Carnahan Conference on Security Technology (ICCST), Montreal, Quebec, Canada (2018)","DOI":"10.1109\/CCST.2018.8585560"},{"key":"26_CR29","doi-asserted-by":"crossref","unstructured":"Lashkari, A.H., Kadir, A.F.A., Taheri, L., Ghorbani, A.A.: Towards a network-based framework for android malware detection and characterization. In: Proceeding of the 15th International Conference on Privacy, Security and Trust, PST, Calgary, Canada (2017)","DOI":"10.1109\/PST.2017.00035"},{"issue":"3","key":"26_CR30","first-page":"365","volume":"56","author":"B Xiao","year":"2018","unstructured":"Xiao, B., Wang, Z., Liu, Q., Liu, X.: SMK-means: an improved mini batch K-means algorithm based on MapReduce with big data. CMC Comput. Mater. Continua 56(3), 365\u2013379 (2018)","journal-title":"CMC Comput. Mater. Continua"},{"key":"26_CR31","doi-asserted-by":"crossref","unstructured":"Dhote, Y., Agrawal, S.: A survey on feature selection techniques for internet traffic classification. In: Computational Intelligence and Communication Networks, Jabalpur, pp. 1375\u20131380 (2015)","DOI":"10.1109\/CICN.2015.267"}],"container-title":["Lecture Notes in Computer Science","Artificial Intelligence and Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-24274-9_26","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,7,17]],"date-time":"2019-07-17T23:24:59Z","timestamp":1563405899000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-24274-9_26"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030242732","9783030242749"],"references-count":31,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-24274-9_26","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"11 July 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICAIS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Artificial Intelligence and Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"New York, NY","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"USA","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 July 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28 July 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"incodldos2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.icaisconf.com\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}