{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:19:19Z","timestamp":1783437559516,"version":"3.54.6"},"reference-count":51,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2021,10,7]],"date-time":"2021-10-07T00:00:00Z","timestamp":1633564800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,10,7]],"date-time":"2021-10-07T00:00:00Z","timestamp":1633564800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"funder":[{"name":"national key research and development program of china","award":["2020YFB1006102"],"award-info":[{"award-number":["2020YFB1006102"]}]},{"name":"Key research and Development Program for Guangdong Province","award":["2019B010137003"],"award-info":[{"award-number":["2019B010137003"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["World Wide Web"],"published-print":{"date-parts":[[2021,11]]},"DOI":"10.1007\/s11280-021-00940-0","type":"journal-article","created":{"date-parts":[[2021,10,7]],"date-time":"2021-10-07T10:16:51Z","timestamp":1633601811000},"page":"2071-2097","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":9,"title":["Classifying encrypted traffic using adaptive fingerprints with multi-level attributes"],"prefix":"10.1007","volume":"24","author":[{"given":"Chang","family":"Liu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gang","family":"Xiong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3533-4874","authenticated-orcid":false,"given":"Gaopeng","family":"Gou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Siu-Ming","family":"Yiu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhen","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhihong","family":"Tian","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,10,7]]},"reference":[{"key":"940_CR1","doi-asserted-by":"publisher","first-page":"306","DOI":"10.1016\/j.neucom.2020.05.036","volume":"409","author":"G Aceto","year":"2020","unstructured":"Aceto, G., Ciuonzo, D., Montieri, A., Pescap\u00e9, A: Toward effective mobile encrypted traffic classification through deep learning. Neurocomputing 409, 306\u2013315 (2020)","journal-title":"Neurocomputing"},{"issue":"5461","key":"940_CR2","doi-asserted-by":"publisher","first-page":"2115","DOI":"10.1126\/science.287.5461.2115a","volume":"287","author":"LA Adamic","year":"2000","unstructured":"Adamic, L.A., Huberman, B.A., Barab\u00e1si, A, Albert, R., Jeong, H., Bianconi, G.: Power-law distribution of the world wide web. Science 287(5461), 2115\u20132115 (2000)","journal-title":"Science"},{"key":"940_CR3","doi-asserted-by":"crossref","unstructured":"Anderson, B., McGrew, D.: Identifying encrypted malware traffic with contextual flow data. In: Proceedings of the 2016 ACM workshop on artificial intelligence and security, pp 35\u201346 (2016)","DOI":"10.1145\/2996758.2996768"},{"key":"940_CR4","doi-asserted-by":"crossref","unstructured":"Anderson, B., McGrew, D.: Machine learning for encrypted malware traffic classification: accounting for noisy labels and non-stationarity. In: Proceedings of the 23rd ACM SIGKDD International Conference on knowledge discovery and data mining, pp 1723\u20131732 (2017)","DOI":"10.1145\/3097983.3098163"},{"issue":"3","key":"940_CR5","doi-asserted-by":"publisher","first-page":"195","DOI":"10.1007\/s11416-017-0306-6","volume":"14","author":"B Anderson","year":"2018","unstructured":"Anderson, B., Paul, S., McGrew, D.: Deciphering malware\u2019s use of tls (without decryption). Journal of Computer Virology and Hacking Techniques 14 (3), 195\u2013211 (2018)","journal-title":"Journal of Computer Virology and Hacking Techniques"},{"key":"940_CR6","doi-asserted-by":"publisher","first-page":"74361","DOI":"10.1109\/ACCESS.2019.2919982","volume":"7","author":"S Chenthara","year":"2020","unstructured":"Chenthara, S., Ahmed, K., Wang, H., Whittaker, F.: Security and privacy-preserving challenges of e-health solutions in cloud computing. IEEE access 7, 74361\u201374382 (2020)","journal-title":"IEEE access"},{"key":"940_CR7","doi-asserted-by":"crossref","unstructured":"Cong, D., Chen, Z., Zhigang, L., Baoxu, L., Bo, J.: Cetanalytics: Comprehensive effective traffic information analytics for encrypted traffic classification. Comput. Netw., p 176 (2020)","DOI":"10.1016\/j.comnet.2020.107258"},{"key":"940_CR8","unstructured":"Constantinou, F., Mavrommatis, P.: Identifying known and unknown peer-to-peer traffic. In: Fifth IEEE International Symposium on Network Computing and Applications (NCA\u201906), IEEE, pp 93\u2013102 (2006)"},{"issue":"1","key":"940_CR9","doi-asserted-by":"publisher","first-page":"114","DOI":"10.1109\/TIFS.2015.2478741","volume":"11","author":"M Conti","year":"2015","unstructured":"Conti, M., Mancini, L.V., Spolaor, R., Verde, N.V.: Analyzing android encrypted network traffic to identify user actions. IEEE Transactions on Information Forensics and Security 11(1), 114\u2013125 (2015)","journal-title":"IEEE Transactions on Information Forensics and Security"},{"issue":"1","key":"940_CR10","doi-asserted-by":"publisher","first-page":"35","DOI":"10.1109\/MNET.2012.6135854","volume":"26","author":"A Dainotti","year":"2012","unstructured":"Dainotti, A., Pescape, A., Claffy, K.C.: Issues and future directions in traffic classification. IEEE network 26(1), 35\u201340 (2012)","journal-title":"IEEE network"},{"key":"940_CR11","doi-asserted-by":"crossref","unstructured":"Dierks, T., Rescorla, E.: The transport layer security (tls) protocol version, 1.2 (2008)","DOI":"10.17487\/rfc5246"},{"key":"940_CR12","first-page":"176","volume":"107258","author":"C Dong","year":"2020","unstructured":"Dong, C., Zhang, C., Lu, Z., Liu, B., Jiang, B.: Cetanalytics: Comprehensive effective traffic information analytics for encrypted traffic classification. Comput. Netw. 107258, 176 (2020)","journal-title":"Comput. Netw."},{"key":"940_CR13","doi-asserted-by":"crossref","unstructured":"van Ede, T., Bortolameotti, R., Continella, A., Ren, J., Dubois, D.J., Lindorfer, M., Choffnes, D., van Steen, M., Peter, A.: Flowprint: Semi-supervised Mobile-App Fingerprinting on Encrypted Network Traffic. In: Network and Distributed System Security Symposium, NDSS 2020, Internet Society (2020)","DOI":"10.14722\/ndss.2020.24412"},{"key":"940_CR14","doi-asserted-by":"crossref","unstructured":"Endo, P.T., Sadok, D.F.H.: Whois based geolocation: A strategy to geolocate internet hosts. In: 2010 24th IEEE International Conference on Advanced Information Networking and Applications, IEEE, pp 408\u2013413 (2010)","DOI":"10.1109\/AINA.2010.39"},{"key":"940_CR15","first-page":"1","volume":"3","author":"A Freier","year":"2011","unstructured":"Freier, A., Karlton, P., Kocher, P.: The secure sockets layer (ssl) protocol version 3.0. IETF 3, 1\u201367 (2011)","journal-title":"IETF"},{"issue":"11","key":"940_CR16","doi-asserted-by":"publisher","first-page":"2851","DOI":"10.1109\/TMC.2016.2516020","volume":"15","author":"Y Fu","year":"2016","unstructured":"Fu, Y., Xiong, H., Lu, X., Yang, J., Chen, C.: Service usage classification with encrypted internet traffic in mobile messaging apps. IEEE Trans. Mob. Comput. 15(11), 2851\u20132864 (2016)","journal-title":"IEEE Trans. Mob. Comput."},{"key":"940_CR17","doi-asserted-by":"crossref","unstructured":"Goo, Y.H., Shim, K.S., Lee, S.K., Kim, M.S.: Payload Signature Structure for Accurate Application Traffic Classification. In: 2016 18Th Asia-Pacific Network Operations and Management Symposium, (APNOMS). IEEE, pp 1-4 (2016)","DOI":"10.1109\/APNOMS.2016.7737287"},{"key":"940_CR18","doi-asserted-by":"crossref","unstructured":"Hao, S., Hu, J., Liu, S., Song, T., Guo, J., Liu, S.: Improved Svm Method for Internet Traffic Classification Based on Feature Weight Learning. In: 2015 International Conference on Control, Automation and Information Sciences, ICCAIS. IEEE, pp 102\u2013106 (2015)","DOI":"10.1109\/ICCAIS.2015.7338641"},{"issue":"1","key":"940_CR19","doi-asserted-by":"publisher","first-page":"6","DOI":"10.1186\/s13635-016-0030-7","volume":"2016","author":"M Hus\u00e1k","year":"2016","unstructured":"Hus\u00e1k, M., \u010cerm\u00e1k, M., Jirs\u00edk, T., \u010celeda, P.: Https traffic analysis and client identification using passive ssl\/tls fingerprinting. EURASIP J. Inf. Secur. 2016(1), 6 (2016)","journal-title":"EURASIP J. Inf. Secur."},{"key":"940_CR20","doi-asserted-by":"crossref","unstructured":"Korczy\u0144ski, M., Duda, A.: Markov chain fingerprinting to classify encrypted traffic. In: IEEE INFOCOM 2014-IEEE Conference on Computer Communications, IEEE, pp 781\u2013789 (2014)","DOI":"10.1109\/INFOCOM.2014.6848005"},{"key":"940_CR21","doi-asserted-by":"crossref","unstructured":"Liu, C., Cao, Z., Xiong, G., Gou, G., Yiu, S.M., He, L.: Mampf: Encrypted Traffic Classification Based on Multi-Attribute Markov Probability Fingerprints. In: 2018 IEEE\/ACM 26Th International Symposium on Quality of Service, (IWQoS). IEEE, pp 1-10 (2018)","DOI":"10.1109\/IWQoS.2018.8624124"},{"key":"940_CR22","doi-asserted-by":"crossref","unstructured":"Liu, C., He, L., Xiong, G., Cao, Z., Li, Z.: Fs-net: A flow sequence network for encrypted traffic classification. In: IEEE INFOCOM 2019 - IEEE Conference on Computer Communications, pp 1171\u20131179 (2019)","DOI":"10.1109\/INFOCOM.2019.8737507"},{"key":"940_CR23","doi-asserted-by":"crossref","unstructured":"Liu, J., Fu, Y., Ming, J., Ren, Y., Sun, L., Xiong, H.: Effective and real-time in-app activity analysis in encrypted internet traffic streams. In: Proceedings of the 23rd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp 335\u2013344 (2017)","DOI":"10.1145\/3097983.3098049"},{"issue":"3","key":"940_CR24","doi-asserted-by":"publisher","first-page":"1999","DOI":"10.1007\/s00500-019-04030-2","volume":"24","author":"M Lotfollahi","year":"2020","unstructured":"Lotfollahi, M., Siavoshani, M.J., Zade, R.S.H., Saberian, M.: Deep packet: a novel approach for encrypted traffic classification using deep learning. Soft. Comput. 24(3), 1999\u20132012 (2020)","journal-title":"Soft. Comput."},{"key":"940_CR25","doi-asserted-by":"crossref","unstructured":"Miller, S., Curran, K., Lunney, T.: Multilayer Perceptron Neural Network for Detection of Encrypted Vpn Network Traffic. In: 2018 International Conference on Cyber Situational Awareness, Data Analytics and Assessment, Cyber SA. IEEE, pp 1-8 (2018)","DOI":"10.1109\/CyberSA.2018.8551395"},{"key":"940_CR26","doi-asserted-by":"crossref","unstructured":"Moore, A.W., Papagiannaki, K.: Toward the accurate identification of network applications. In: International Workshop on Passive and Active Network Measurement, Springer, pp 41\u201354 (2005)","DOI":"10.1007\/978-3-540-31966-5_4"},{"key":"940_CR27","doi-asserted-by":"crossref","unstructured":"Pan, W., Cheng, G., Tang, Y.: Wenc: Https encrypted traffic classification using weighted ensemble learning and markov chain. In: 2017 IEEE Trustcom\/BigDataSE\/ICESS, IEEE, pp 50\u201357 (2017)","DOI":"10.1109\/Trustcom\/BigDataSE\/ICESS.2017.219"},{"key":"940_CR28","unstructured":"Park, J.S., Yoon, S.H., Kim, M.S.: Performance Improvement of Payload Signature-Based Traffic Classification System Using Application Traffic Temporal Locality. In: 2013 15Th Asia-Pacific Network Operations and Management Symposium, APNOMS. IEEE, pp 1-6 (2013)"},{"key":"940_CR29","doi-asserted-by":"crossref","unstructured":"Prasse, P., Machlica, L., Pevny\u0300, T, Havelka, J., Scheffer, T.: Malware detection by analysing encrypted network traffic with neural networks. In: Joint European Conference on Machine Learning and Knowledge Discovery in Databases, Springer, pp 73\u201388 (2017)","DOI":"10.1007\/978-3-319-71246-8_5"},{"key":"940_CR30","doi-asserted-by":"crossref","unstructured":"Rasool, R.U., Ahmed, K., Anwar, Z., Wang, H., Ashraf, U., Rafique, W.: Cyberpulse++: A machine learning-based security framework for detecting link flooding attacks in software defined networks. International Journal of Intelligent Systems (2021)","DOI":"10.1002\/int.22442"},{"key":"940_CR31","unstructured":"Rezaei, S., Liu, X.: How to achieve high classification accuracy with just a few labels: A semi-supervised approach using sampled packets. arXiv preprint arXiv:181209761 (2018)"},{"key":"940_CR32","doi-asserted-by":"publisher","first-page":"348","DOI":"10.1109\/ACCESS.2019.2962018","volume":"8","author":"S Rezaei","year":"2020","unstructured":"Rezaei, S., Kroencke, B., Liu, X.: Large-scale mobile app identification using deep learning. IEEE Access 8, 348\u2013362 (2020)","journal-title":"IEEE Access"},{"key":"940_CR33","doi-asserted-by":"crossref","unstructured":"Roughan, M., Sen, S., Spatscheck, O., Duffield, N.: Class-of-service mapping for qos: a statistical signature-based approach to ip traffic classification. In: Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, pp 135\u2013148 (2004)","DOI":"10.1145\/1028788.1028805"},{"key":"940_CR34","doi-asserted-by":"crossref","unstructured":"Sen, S., Spatscheck, O., Wang, D.: Accurate, scalable in-network identification of p2p traffic using application signatures. In: Proceedings of the 13th international conference on World Wide Web, pp 512\u2013521 (2004)","DOI":"10.1145\/988672.988742"},{"key":"940_CR35","doi-asserted-by":"crossref","unstructured":"Shafiq, M., Tian, Z., Bashir, A.K., Du, X., Guizani, M.: Corrauc: a malicious bot-iot traffic detection method in iot network using machine learning techniques. IEEE Internet of Things Journal (2020)","DOI":"10.1109\/JIOT.2020.3002255"},{"key":"940_CR36","doi-asserted-by":"publisher","first-page":"101863","DOI":"10.1016\/j.cose.2020.101863","volume":"94","author":"M Shafiq","year":"2020","unstructured":"Shafiq, M., Tian, Z., Bashir, A.K., Du, X., Guizani, M.: Iot malicious traffic identification using wrapper-based feature selection mechanisms. Computers & Security 94, 101863 (2020)","journal-title":"Computers & Security"},{"key":"940_CR37","doi-asserted-by":"crossref","unstructured":"Shapira, T., Shavitt, Y.: Flowpic: Encrypted Internet Traffic Classification is as Easy as Image Recognition. In: IEEE INFOCOM 2019-IEEE Conference on Computer Communications Workshops, INFOCOM WKSHPS. IEEE, pp 680\u2013687 (2019)","DOI":"10.1109\/INFCOMW.2019.8845315"},{"key":"940_CR38","doi-asserted-by":"crossref","unstructured":"Shbair, W.M., Cholez, T., Goichot, A., Chrisment, I.: Efficiently Bypassing Sni-Based Https Filtering. In: 2015 IFIP\/IEEE International Symposium on Integrated Network Management (IM). IEEE, pp 990-995 (2015)","DOI":"10.1109\/INM.2015.7140423"},{"key":"940_CR39","doi-asserted-by":"crossref","unstructured":"Shbair, W.M., Cholez, T., Fran\u00e7ois, J., Chrisment, I.: Improving Sni-Based Https Security Monitoring. In: 2016 IEEE 36Th International Conference on Distributed Computing Systems Workshops, ICDCSW. IEEE, pp 72-77 (2016)","DOI":"10.1109\/ICDCSW.2016.21"},{"key":"940_CR40","unstructured":"Shen, M., Wei, M., Zhu, L., Wang, M., Li, F.: Certificate-aware Encrypted Traffic Classification Using Second-Order Markov Chain. In: 2016 IEEE\/ACM 24Th International Symposium on Quality of Service, IWQoS. IEEE, pp 1-10 (2016)"},{"issue":"8","key":"940_CR41","doi-asserted-by":"publisher","first-page":"1830","DOI":"10.1109\/TIFS.2017.2692682","volume":"12","author":"M Shen","year":"2017","unstructured":"Shen, M., Wei, M., Zhu, L., Wang, M.: Classification of encrypted traffic with second-order markov chains and application attribute bigrams. IEEE Transactions on Information Forensics and Security 12(8), 1830\u20131843 (2017)","journal-title":"IEEE Transactions on Information Forensics and Security"},{"key":"940_CR42","doi-asserted-by":"crossref","unstructured":"Tong, V., Tran, H.A., Souihi, S., Mellouk, A.: A Novel Quic Traffic Classifier Based on Convolutional Neural Networks. In: 2018 IEEE Global Communications Conference (GLOBECOM) (2019)","DOI":"10.1109\/GLOCOM.2018.8647128"},{"key":"940_CR43","doi-asserted-by":"crossref","unstructured":"Wang, C., Xu, T., Qin, X.: Network Traffic Classification with Improved Random Forest. In: 2015 11Th International Conference on Computational Intelligence and Security, CIS. IEEE, pp 78-81 (2015)","DOI":"10.1109\/CIS.2015.27"},{"issue":"2","key":"940_CR44","doi-asserted-by":"publisher","first-page":"951","DOI":"10.1007\/s11280-019-00704-x","volume":"23","author":"H Wang","year":"2020","unstructured":"Wang, H., Wang, Y., Taleb, T., Jiang, X.: Special issue on security and privacy in network computing. World Wide Web 23(2), 951\u2013957 (2020)","journal-title":"World Wide Web"},{"key":"940_CR45","doi-asserted-by":"publisher","first-page":"55380","DOI":"10.1109\/ACCESS.2018.2872430","volume":"6","author":"P Wang","year":"2018","unstructured":"Wang, P., Ye, F., Chen, X., Qian, Y.: Datanet: Deep learning based encrypted network traffic classification in sdn home gateway. IEEE Access 6, 55380\u201355391 (2018)","journal-title":"IEEE Access"},{"key":"940_CR46","doi-asserted-by":"crossref","unstructured":"Wang, W., Zhu, M., Wang, J., Zeng, X., Yang, Z.: End-To-End Encrypted Traffic Classification with One-Dimensional Convolution Neural Networks. In: 2017 IEEE International Conference on Intelligence and Security Informatics (ISI). IEEE, pp 43-48 (2017)","DOI":"10.1109\/ISI.2017.8004872"},{"key":"940_CR47","doi-asserted-by":"crossref","unstructured":"Yao, H., Ranjan, G., Tongaonkar, A., Liao, Y., Mao, Z.M.: Samples: Self adaptive mining of persistent lexical snippets for classifying mobile application traffic. In: Proceedings of the 21st Annual International Conference on Mobile Computing and Networking, pp 439\u2013451 (2015)","DOI":"10.1145\/2789168.2790097"},{"key":"940_CR48","first-page":"210","volume":"106529","author":"J Yin","year":"2020","unstructured":"Yin, J., Tang, M., Cao, J., Wang, H.: Apply transfer learning to cybersecurity: Predicting exploitability of vulnerabilities by description. Knowl.-Based Syst. 106529, 210 (2020)","journal-title":"Knowl.-Based Syst."},{"issue":"1","key":"940_CR49","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1109\/TIFS.2012.2223675","volume":"8","author":"J Zhang","year":"2012","unstructured":"Zhang, J., Chen, C., Xiang, Y., Zhou, W., Xiang, Y.: Internet traffic classification by aggregating correlated naive bayes predictions. IEEE transactions on information forensics and security 8(1), 5\u201315 (2012)","journal-title":"IEEE transactions on information forensics and security"},{"key":"940_CR50","doi-asserted-by":"crossref","unstructured":"Zhang, Q., Ma, Y., Wang, J., Li, X.: Udp traffic classification using most distinguished port. In: The 16th Asia-Pacific Network Operations and Management Symposium, IEEE, pp 1\u20134 (2014)","DOI":"10.1109\/APNOMS.2014.6996569"},{"key":"940_CR51","doi-asserted-by":"crossref","unstructured":"Zheng, W., Gou, C., Yan, L., Mo, S.: Learning to classify: a flow-based relation network for encrypted traffic classification. In: Proceedings of The Web Conference, 2020, pp 13-22 (2020)","DOI":"10.1145\/3366423.3380090"}],"container-title":["World Wide Web"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11280-021-00940-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11280-021-00940-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11280-021-00940-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,9]],"date-time":"2024-09-09T13:21:57Z","timestamp":1725888117000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11280-021-00940-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,10,7]]},"references-count":51,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2021,11]]}},"alternative-id":["940"],"URL":"https:\/\/doi.org\/10.1007\/s11280-021-00940-0","relation":{},"ISSN":["1386-145X","1573-1413"],"issn-type":[{"value":"1386-145X","type":"print"},{"value":"1573-1413","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,10,7]]},"assertion":[{"value":"8 April 2021","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"17 August 2021","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"23 August 2021","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"7 October 2021","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}