{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,26]],"date-time":"2026-06-26T07:46:01Z","timestamp":1782459961051,"version":"3.54.5"},"publisher-location":"Singapore","reference-count":29,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819687244","type":"print"},{"value":"9789819687251","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-981-96-8725-1_10","type":"book-chapter","created":{"date-parts":[[2025,6,22]],"date-time":"2025-06-22T14:23:06Z","timestamp":1750602186000},"page":"119-130","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["EHFC: Enhanced Format Clustering via\u00a0Pre-Trained Traffic Model"],"prefix":"10.1007","author":[{"given":"Zhen","family":"Wang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sen","family":"Zhao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Laile","family":"Xi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haiqiang","family":"Fei","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Feng","family":"Cheng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hong","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongsong","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,6,21]]},"reference":[{"key":"10_CR1","unstructured":"ITI (2018). https:\/\/github.com\/ITI\/ICS-Security-Tools\/tree\/master\/pcaps\/"},{"key":"10_CR2","unstructured":"Addison, P.S.: The Illustrated Wavelet Transform Handbook: Introductory Theory and Applications in Science, Engineering, Medicine and Finance. CRC Press (2017)"},{"key":"10_CR3","doi-asserted-by":"crossref","unstructured":"Ankerst, M., Breunig, M.M., Kriegel, H.P., Sander, J.: Optics: ordering points to identify the clustering structure. In: ACM SIGMOD Conference (1999). https:\/\/api.semanticscholar.org\/CorpusID:9378040","DOI":"10.1145\/304182.304187"},{"key":"10_CR4","unstructured":"Beddoe, M.A.: Network protocol analysis using bioinformatics algorithms (2004)"},{"key":"10_CR5","doi-asserted-by":"crossref","unstructured":"Bossert, G., Guih\u00e9ry, F., Hiet, G.: Towards automated protocol reverse engineering using semantic information. In: Proceedings of the 9th ACM Symposium on Information, Computer and Communications Security, pp. 51\u201362 (2014)","DOI":"10.1145\/2590296.2590346"},{"key":"10_CR6","doi-asserted-by":"crossref","unstructured":"Caballero, J., Yin, H., Liang, Z., Song, D.X.: Polyglot: automatic extraction of protocol message format using dynamic binary analysis. In: Conference on Computer and Communications Security (2007). https:\/\/api.semanticscholar.org\/CorpusID:431701","DOI":"10.1145\/1315245.1315286"},{"key":"10_CR7","unstructured":"Cho, C.Y., Babic, D., Poosankam, P., Chen, K.Z., Wu, E.X., Song, D.X.: MACE: model-inference-assisted concolic exploration for protocol and vulnerability discovery. In: USENIX Security Symposium (2011). https:\/\/api.semanticscholar.org\/CorpusID:811610"},{"key":"10_CR8","doi-asserted-by":"crossref","unstructured":"Comparetti, P.M., Wondracek, G., Kruegel, C., Kirda, E.: Prospex: protocol specification extraction. In: 2009 30th IEEE Symposium on Security and Privacy, pp. 110\u2013125. IEEE (2009)","DOI":"10.1109\/SP.2009.14"},{"key":"10_CR9","doi-asserted-by":"crossref","unstructured":"Comparetti, P.M., Wondracek, G., Kr\u00fcgel, C., Kirda, E.: Prospex: protocol specification extraction. In: 2009 30th IEEE Symposium on Security and Privacy, pp. 110\u2013125 (2009). https:\/\/api.semanticscholar.org\/CorpusID:1170665","DOI":"10.1109\/SP.2009.14"},{"key":"10_CR10","unstructured":"Cui, W., Kannan, J., Wang, H.J.: Discoverer: automatic protocol reverse engineering from network traces. In: USENIX Security Symposium (2007). https:\/\/api.semanticscholar.org\/CorpusID:3143940"},{"key":"10_CR11","doi-asserted-by":"crossref","unstructured":"Esoul, O., Walkinshaw, N.: Using segment-based alignment to extract packet structures from network traces. In: 2017 IEEE International Conference on Software Quality, Reliability and Security (QRS), pp. 398\u2013409 (2017). https:\/\/api.semanticscholar.org\/CorpusID:20855019","DOI":"10.1109\/QRS.2017.49"},{"key":"10_CR12","doi-asserted-by":"crossref","unstructured":"Garshasbi, J., Teimouri, M.: CNNPRE: a CNN-based protocol reverse engineering method. IEEE Access 11, 116255\u2013116268 (2023). https:\/\/api.semanticscholar.org\/CorpusID:264317524","DOI":"10.1109\/ACCESS.2023.3325391"},{"key":"10_CR13","unstructured":"jtpereyda: Boofuzz: Network protocol fuzzing for humans (2023). https:\/\/github.com\/jtpereyda\/boofuzz"},{"key":"10_CR14","doi-asserted-by":"crossref","unstructured":"Kihara, M., Iriyama, S.: Security and performance of single sign-on based on one-time pad algorithm. Cryptogr. 4, 16 (2020). https:\/\/api.semanticscholar.org\/CorpusID:220387507","DOI":"10.3390\/cryptography4020016"},{"key":"10_CR15","doi-asserted-by":"crossref","unstructured":"Krueger, T., Gascon, H., Kr\u00e4mer, N., Rieck, K.: Learning stateful models for network honeypots. In: Proceedings of the 5th ACM Workshop on Security and Artificial Intelligence, pp. 37\u201348 (2012)","DOI":"10.1145\/2381896.2381904"},{"key":"10_CR16","doi-asserted-by":"crossref","unstructured":"Krueger, T., Kr\u00e4mer, N., Rieck, K.: ASAP: automatic semantics-aware analysis of network payloads. In: International Workshop on Privacy and Security Issues in Data Mining and Machine Learning, pp. 50\u201363. Springer (2010)","DOI":"10.1007\/978-3-642-19896-0_5"},{"key":"10_CR17","doi-asserted-by":"crossref","unstructured":"Lin, X., Xiong, G., Gou, G., Li, Z., Shi, J., Yu, J.: ET-BERT: a contextualized datagram representation with pre-training transformers for encrypted traffic classification. Proceedings of the ACM Web Conference 2022 (2022). https:\/\/api.semanticscholar.org\/CorpusID:246822885","DOI":"10.1145\/3485447.3512217"},{"key":"10_CR18","doi-asserted-by":"crossref","unstructured":"McInnes, L., Healy, J., Astels, S.: hdbscan: hierarchical density based clustering. J. Open Source Softw. 2, 205 (2017). https:\/\/api.semanticscholar.org\/CorpusID:53231359","DOI":"10.21105\/joss.00205"},{"key":"10_CR19","doi-asserted-by":"crossref","unstructured":"Needleman, S.B., Wunsch, C.D.: A general method applicable to the search for similarities in the amino acid sequence of two proteins. J. Mol. Biol. 48 3, 443\u201353 (1970). https:\/\/api.semanticscholar.org\/CorpusID:17406543","DOI":"10.1016\/0022-2836(70)90057-4"},{"key":"10_CR20","unstructured":"Rosenberg, A., Hirschberg, J.: V-measure: a conditional entropy-based external cluster evaluation measure. In: Conference on Empirical Methods in Natural Language Processing (2007). https:\/\/api.semanticscholar.org\/CorpusID:14153811"},{"key":"10_CR21","doi-asserted-by":"crossref","unstructured":"Sadeghi, A.R., Wachsmann, C., Waidner, M.: Security and privacy challenges in industrial internet of things. In: 2015 52nd ACM\/EDAC\/IEEE Design Automation Conference (DAC), pp.\u00a01\u20136 (2015). https:\/\/api.semanticscholar.org\/CorpusID:11996801","DOI":"10.1145\/2744769.2747942"},{"key":"10_CR22","doi-asserted-by":"crossref","unstructured":"Sivanathan, A., et al.: Classifying IoT devices in smart environments using network traffic characteristics. IEEE Trans. Mob. Comput. 18, 1745\u20131759 (2019), https:\/\/api.semanticscholar.org\/CorpusID:70082542","DOI":"10.1109\/TMC.2018.2866249"},{"key":"10_CR23","doi-asserted-by":"crossref","unstructured":"Smith, T.F., Waterman, M.S.: Identification of common molecular subsequences. J. Mol. Biol. 147(1), 195\u2013197 (1981). https:\/\/api.semanticscholar.org\/CorpusID:20031248","DOI":"10.1016\/0022-2836(81)90087-5"},{"key":"10_CR24","doi-asserted-by":"crossref","unstructured":"Sun, F., Wang, S., Zhang, C., Zhang, H.: Clustering of unknown protocol messages based on format comparison. Comput. Netw. 179, 107296 (2020). https:\/\/api.semanticscholar.org\/CorpusID:221911694","DOI":"10.1016\/j.comnet.2020.107296"},{"key":"10_CR25","unstructured":"Vaswani, A., et al.: Attention is all you need. In: Advances in Neural Information Processing Systems, vol. 30 (2017)"},{"key":"10_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/978-3-642-21554-4_1","volume-title":"Applied Cryptography and Network Security","author":"Y Wang","year":"2011","unstructured":"Wang, Y., Zhang, Z., Yao, D.D., Qu, B., Guo, L.: Inferring protocol state machine from network traces: a probabilistic approach. In: Lopez, J., Tsudik, G. (eds.) ACNS 2011. LNCS, vol. 6715, pp. 1\u201318. Springer, Heidelberg (2011). https:\/\/doi.org\/10.1007\/978-3-642-21554-4_1"},{"key":"10_CR27","doi-asserted-by":"crossref","unstructured":"Ye, Y., Zhang, Z., Wang, F., Zhang, X., Xu, D.: NetPlier: probabilistic network protocol reverse engineering from message traces. In: Proceedings 2021 Network and Distributed System Security Symposium (2021). https:\/\/api.semanticscholar.org\/CorpusID:231877711","DOI":"10.14722\/ndss.2021.24531"},{"key":"10_CR28","unstructured":"\u0158ezankov\u00e1, H.: Different approaches to the silhouette coefficient calculation in cluster evaluation (2018). https:\/\/api.semanticscholar.org\/CorpusID:220323354"},{"key":"10_CR29","unstructured":"Caida. https:\/\/www.caida.org"}],"container-title":["Lecture Notes in Computer Science","Wireless Artificial Intelligent Computing Systems and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-96-8725-1_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,22]],"date-time":"2025-06-22T14:23:13Z","timestamp":1750602193000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-96-8725-1_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9789819687244","9789819687251"],"references-count":29,"URL":"https:\/\/doi.org\/10.1007\/978-981-96-8725-1_10","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"21 June 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"The authors have no competing interests relevant to the content of this paper.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Disclosure of Interests"}},{"value":"WASA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Wireless Artificial Intelligent Computing Systems and Applications","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Tokyo","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Japan","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 June 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26 June 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"wasa2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/wasa-conference.org\/WASA2025\/index.html#","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}