{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,13]],"date-time":"2026-04-13T20:07:17Z","timestamp":1776110837957,"version":"3.50.1"},"reference-count":69,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,3,18]],"date-time":"2026-03-18T00:00:00Z","timestamp":1773792000000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001823","name":"Ministerstvo \u0160kolstv\u00ed, Ml\u00e1de\u017ee a T\u011blov\u00fdchovy","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001823","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100009532","name":"Ministry of the Interior of the Czech Republic","doi-asserted-by":"publisher","award":["VJ02010024"],"award-info":[{"award-number":["VJ02010024"]}],"id":[{"id":"10.13039\/100009532","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Networks"],"published-print":{"date-parts":[[2026,5]]},"DOI":"10.1016\/j.comnet.2026.112188","type":"journal-article","created":{"date-parts":[[2026,3,18]],"date-time":"2026-03-18T10:17:29Z","timestamp":1773829049000},"page":"112188","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Advanced similarity metrics for IP flow data analytics"],"prefix":"10.1016","volume":"281","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-3367-6990","authenticated-orcid":false,"given":"Ivo","family":"Petr","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2290-8234","authenticated-orcid":false,"given":"Jitka","family":"Hrab\u00e1kov\u00e1","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3363-294X","authenticated-orcid":false,"given":"Magda","family":"Friedjungov\u00e1","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0616-4340","authenticated-orcid":false,"given":"Daniel","family":"Va\u0161ata","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8281-618X","authenticated-orcid":false,"given":"Karel","family":"Hynek","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"key":"10.1016\/j.comnet.2026.112188_bib0001","doi-asserted-by":"crossref","DOI":"10.1109\/ACCESS.2017.2747560","article-title":"Network traffic classifier with convolutional and recurrent neural networks for internet of things","volume":"5","author":"Lopez-Martin","year":"2017","journal-title":"IEEE Access"},{"issue":"4","key":"10.1016\/j.comnet.2026.112188_bib0002","doi-asserted-by":"crossref","DOI":"10.1109\/TNSM.2021.3122940","article-title":"Deep learning and zero-day traffic classification: lessons learned from a commercial-grade dataset","volume":"18","author":"Yang","year":"2021","journal-title":"IEEE Trans. Netw. Serv. Manage."},{"key":"10.1016\/j.comnet.2026.112188_bib0003","series-title":"31st USENIX Security Symposium (USENIX Security 22)","article-title":"99% False positives: a qualitative study of SOC analysts\u2019 perspectives on security alarms","author":"Alahmadi","year":"2022"},{"issue":"5","key":"10.1016\/j.comnet.2026.112188_bib0004","doi-asserted-by":"crossref","first-page":"3165","DOI":"10.1109\/COMST.2024.3504955","article-title":"A survey on explainable artificial intelligence for internet traffic classification and prediction, and intrusion detection","volume":"27","author":"Nascita","year":"2025","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"10.1016\/j.comnet.2026.112188_bib0005","series-title":"NOMS 2016 - 2016 IEEE\/IFIP Network Operations and Management Symposium","first-page":"240","article-title":"A multi-level framework to identify HTTPS services","author":"Shbair","year":"2016"},{"key":"10.1016\/j.comnet.2026.112188_bib0006","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2022.109467","article-title":"Fine-grained TLS services classification with reject option","volume":"220","author":"Luxemburk","year":"2023","journal-title":"Comput. Netw."},{"key":"10.1016\/j.comnet.2026.112188_bib0007","unstructured":"I. Petr, J. Hrab\u00e1kov\u00e1, D. Va\u0161ata, K. Hynek, Dataset: advanced similarity metrics for IP flow data analytics, 2024, https:\/\/doi.org\/10.5281\/zenodo.13808422."},{"issue":"2","key":"10.1016\/j.comnet.2026.112188_bib0008","doi-asserted-by":"crossref","first-page":"167","DOI":"10.1080\/10485252.2017.1285029","article-title":"Cram\u00e9r-von mises distance: probabilistic interpretation, confidence intervals, and neighbourhood-of-model validation","volume":"29","author":"Baringhaus","year":"2017","journal-title":"J. Nonparametr. Stat."},{"issue":"1","key":"10.1016\/j.comnet.2026.112188_bib0009","doi-asserted-by":"crossref","first-page":"420","DOI":"10.1109\/TAI.2023.3244168","article-title":"Extensible machine learning for encrypted network traffic application labeling via uncertainty quantification","volume":"5","author":"Jorgensen","year":"2024","journal-title":"IEEE Trans. Artif. Intell."},{"key":"10.1016\/j.comnet.2026.112188_bib0010","series-title":"Proceedings of the VLDB Endowment","first-page":"1964","article-title":"A comprehensive survey and experimental comparison of graph-based approximate nearest neighbor search","volume":"14","author":"Wang","year":"2021"},{"issue":"5814","key":"10.1016\/j.comnet.2026.112188_bib0011","doi-asserted-by":"crossref","first-page":"972","DOI":"10.1126\/science.1136800","article-title":"Clustering by passing messages between data points","volume":"315","author":"Frey","year":"2007","journal-title":"Science"},{"key":"10.1016\/j.comnet.2026.112188_bib0012","unstructured":"I. Petr, J. Hrab\u00e1kov\u00e1, M. Friedjungov\u00e1, D. Va\u0161ata, K. Hynek, Source code: advanced similarity metrics for IP flow data analytics, 2024, https:\/\/github.com\/vasatdan\/Advanced-Similarity-Metrics-for-IP-Flow-Data-Analytics."},{"key":"10.1016\/j.comnet.2026.112188_bib0013","article-title":"DISTILLER: encrypted traffic classification via multimodal multitask deep learning","volume":"183","author":"Aceto","year":"2021","journal-title":"J. Netw. Comput. Appl."},{"key":"10.1016\/j.comnet.2026.112188_bib0014","series-title":"2022 IEEE 19th Annual Consumer Communications & Networking Conference (CCNC)","first-page":"527","article-title":"MalDIST: from encrypted traffic classification to malware traffic detection and classification","author":"Bader","year":"2022"},{"issue":"6","key":"10.1016\/j.comnet.2026.112188_bib0015","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3457904","article-title":"A survey on encrypted network traffic analysis applications, techniques, and countermeasures","volume":"54","author":"Papadogiannaki","year":"2021","journal-title":"ACM Comput. Surv. (CSUR)"},{"issue":"1","key":"10.1016\/j.comnet.2026.112188_bib0016","doi-asserted-by":"crossref","first-page":"70","DOI":"10.1109\/COMST.2014.2336610","article-title":"A survey of distance and similarity measures used within network intrusion anomaly detection","volume":"17","author":"Weller-Fahy","year":"2015","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"10.1016\/j.comnet.2026.112188_bib0017","series-title":"2020 IFIP Networking Conference (Networking)","first-page":"199","article-title":"Scaling website fingerprinting","author":"Ghi\u00ebtte","year":"2020"},{"key":"10.1016\/j.comnet.2026.112188_bib0018","series-title":"2020 11th IEEE Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON)","first-page":"0621","article-title":"Privacy illusion: beware of unpadded DoH","author":"Hynek","year":"2020"},{"key":"10.1016\/j.comnet.2026.112188_bib0019","series-title":"25th USENIX Security Symposium (USENIX Security 16)","first-page":"1187","article-title":"K-fingerprinting: a robust scalable website fingerprinting technique","author":"Hayes","year":"2016"},{"key":"10.1016\/j.comnet.2026.112188_bib0020","series-title":"Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security","first-page":"263-274","article-title":"A critical evaluation of website fingerprinting attacks","author":"Juarez","year":"2014"},{"key":"10.1016\/j.comnet.2026.112188_bib0021","series-title":"10th USENIX Workshop on Free and Open Communications on the Internet (FOCI 20)","article-title":"Padding ain\u2019t enough: assessing the privacy guarantees of encrypted DNS","author":"Bushart","year":"2020"},{"key":"10.1016\/j.comnet.2026.112188_bib0022","series-title":"23rd USENIX Security Symposium","first-page":"143","article-title":"Effective attacks and provable defenses for website fingerprinting","author":"Wang","year":"2014"},{"issue":"4","key":"10.1016\/j.comnet.2026.112188_bib0023","doi-asserted-by":"crossref","first-page":"287","DOI":"10.1561\/2200000019","article-title":"Metric learning: a survey","volume":"5","author":"Kulis","year":"2013","journal-title":"Found. Trends\u00ae Mach. Learn."},{"issue":"09","key":"10.1016\/j.comnet.2026.112188_bib0024","first-page":"5149","article-title":"Meta-learning in neural networks: a survey","volume":"44","author":"Hospedales","year":"2022","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.comnet.2026.112188_bib0025","doi-asserted-by":"crossref","first-page":"706","DOI":"10.1016\/j.ins.2021.05.016","article-title":"Autoencoder-based deep metric learning for network intrusion detection","volume":"569","author":"Andresini","year":"2021","journal-title":"Inf. Sci."},{"key":"10.1016\/j.comnet.2026.112188_bib0026","series-title":"2022 3rd International Conference on Information Science, Parallel and Distributed Systems (ISPDS)","article-title":"An application traffic identification method based on deep ResNet","author":"Chen","year":"2022"},{"key":"10.1016\/j.comnet.2026.112188_bib0027","series-title":"2017 International Conference on Information Networking (ICOIN)","article-title":"Malware traffic classification using convolutional neural network for representation learning","author":"Wang","year":"2017"},{"key":"10.1016\/j.comnet.2026.112188_bib0028","series-title":"Proceedings of the 22nd ACM Internet Measurement Conference","article-title":"A few shots traffic classification with mini-FlowPic augmentations","author":"Horowicz","year":"2022"},{"key":"10.1016\/j.comnet.2026.112188_bib0029","series-title":"Proceedings of the 2023 ACM on Internet Measurement Conference","article-title":"Replication: contrastive learning and data augmentation in traffic classification using a flowpic input representation","author":"Finamore","year":"2023"},{"key":"10.1016\/j.comnet.2026.112188_bib0030","series-title":"35th International Teletraffic Congress (ITC-35)","first-page":"1","article-title":"META MIMETIC: few-shot classification of mobile-app encrypted traffic via multimodal meta-learning","author":"Bovenzi","year":"2023"},{"key":"10.1016\/j.comnet.2026.112188_bib0031","doi-asserted-by":"crossref","first-page":"154892","DOI":"10.1109\/ACCESS.2021.3127560","article-title":"Efficient classification of enciphered SCADA network traffic in smart factory using decision tree algorithm","volume":"9","author":"Ahakonye","year":"2021","journal-title":"IEEE Access"},{"key":"10.1016\/j.comnet.2026.112188_bib0032","series-title":"2023 International Conference on Electrical, Computer and Energy Technologies (ICECET)","article-title":"Cryptojacking detection in cloud infrastructure using network traffic","author":"Kwedza","year":"2023"},{"issue":"4","key":"10.1016\/j.comnet.2026.112188_bib0033","doi-asserted-by":"crossref","first-page":"570","DOI":"10.1093\/comjnl\/bxr026","article-title":"A survey of outlier detection methods in network anomaly identification","volume":"54","author":"Gogoi","year":"2011","journal-title":"Comput. J."},{"key":"10.1016\/j.comnet.2026.112188_bib0034","series-title":"ICC 2023 - IEEE International Conference on Communications","first-page":"3830","article-title":"Out-of-distribution internet traffic prediction generalization using deep sequence model","author":"Saha","year":"2023"},{"key":"10.1016\/j.comnet.2026.112188_bib0035","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2023.109648","article-title":"Deep learning for encrypted traffic classification in the face of data drift: an empirical study","volume":"225","author":"Malekghaini","year":"2023","journal-title":"Comput. Netw."},{"key":"10.1016\/j.comnet.2026.112188_bib0036","series-title":"2024 IEEE International Symposium on Circuits and Systems (ISCAS)","first-page":"1","article-title":"A method for out-of-distribution detection in encrypted mobile traffic classification","author":"Tong","year":"2024"},{"key":"10.1016\/j.comnet.2026.112188_bib0037","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2020.101984","article-title":"SwiftIDS: real-time intrusion detection system based on lightGBM and parallel intrusion detection mechanism","volume":"97","author":"Jin","year":"2020","journal-title":"Comput. Secur."},{"issue":"1","key":"10.1016\/j.comnet.2026.112188_bib0038","doi-asserted-by":"crossref","first-page":"949","DOI":"10.1007\/s10586-017-1117-8","article-title":"A survey of deep learning-based network anomaly detection","volume":"22","author":"Kwon","year":"2019","journal-title":"Cluster Comput."},{"key":"10.1016\/j.comnet.2026.112188_bib0039","series-title":"Anomaly Detection Principles and Algorithms","author":"Mehrotra","year":"2017"},{"key":"10.1016\/j.comnet.2026.112188_bib0040","series-title":"Proceedings of the 2000 ACM SIGMOD International Conference on Management of Data","first-page":"427-438","article-title":"Efficient algorithms for mining outliers from large data sets","author":"Ramaswamy","year":"2000"},{"key":"10.1016\/j.comnet.2026.112188_bib0041","series-title":"Proceedings of the 2000 ACM SIGMOD International Conference on Management of Data","first-page":"93-104","article-title":"LOF: Identifying density-based local outliers","author":"Breunig","year":"2000"},{"issue":"18","key":"10.1016\/j.comnet.2026.112188_bib0042","doi-asserted-by":"crossref","first-page":"4203","DOI":"10.1002\/sec.1335","article-title":"Local outlier factor use for the network flow anomaly detection","volume":"8","author":"Paulauskas","year":"2015","journal-title":"Sec. Commun. Netw."},{"issue":"3","key":"10.1016\/j.comnet.2026.112188_bib0043","article-title":"Rank-based outlier detection","volume":"83","author":"Huaming Huang","year":"2011","journal-title":"J. Stat. Comput. Simul."},{"issue":"1","key":"10.1016\/j.comnet.2026.112188_bib0044","doi-asserted-by":"crossref","first-page":"17","DOI":"10.15625\/1813-9663\/16629","article-title":"Safe: efficient DDOS attack defense with elastic traffic flow inspection in SDN-based data centers","volume":"39","author":"Nguyen","year":"2023","journal-title":"J. Comput. Sci. Cybern."},{"key":"10.1016\/j.comnet.2026.112188_bib0045","series-title":"Internet-Draft","article-title":"TLS Encrypted Client Hello","author":"Rescorla","year":"2025"},{"issue":"1","key":"10.1016\/j.comnet.2026.112188_bib0046","doi-asserted-by":"crossref","first-page":"1156","DOI":"10.1038\/s41597-024-03927-4","article-title":"CESNET-TLS-Year22: a year-spanning TLS network traffic dataset from backbone lines","volume":"11","author":"Hynek","year":"2024","journal-title":"Sci. Data"},{"key":"10.1016\/j.comnet.2026.112188_bib0047","series-title":"31st USENIX Security Symposium (USENIX Security 22)","first-page":"3971","article-title":"DOS and don\u2019ts of machine learning in computer security","author":"Arp","year":"2022"},{"key":"10.1016\/j.comnet.2026.112188_bib0048","series-title":"2023 19th International Conference on Network and Service Management (CNSM)","first-page":"1","article-title":"Look at my network: an insight into the ISP backbone traffic","author":"Benes","year":"2023"},{"issue":"10","key":"10.1016\/j.comnet.2026.112188_bib0049","doi-asserted-by":"crossref","first-page":"8416","DOI":"10.1109\/JIOT.2022.3228816","article-title":"BOTA: explainable IoT malware detection in large networks","volume":"10","author":"Uh\u0159\u00ed\u010dek","year":"2023","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.comnet.2026.112188_bib0050","series-title":"Proceedings of the 3rd International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,","first-page":"253","article-title":"Characterization of tor traffic using time based features","author":"Lashkari","year":"2017"},{"issue":"1","key":"10.1016\/j.comnet.2026.112188_bib0051","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1002\/qre.441","article-title":"Robustness of Chi-square and Canberra distance metrics for computer intrusion detection","volume":"18","author":"Emran","year":"2002","journal-title":"Qual. Reliab. Eng. Int."},{"key":"10.1016\/j.comnet.2026.112188_bib0052","series-title":"Metric Spaces","author":"Searc\u00f3id","year":"2007"},{"issue":"4","key":"10.1016\/j.comnet.2026.112188_bib0053","doi-asserted-by":"crossref","first-page":"366","DOI":"10.1287\/mnsc.6.4.366","article-title":"Mathematical methods of organizing and planning production","volume":"6","author":"Kantorovich","year":"1960","journal-title":"Manage. Sci."},{"issue":"1","key":"10.1016\/j.comnet.2026.112188_bib0054","doi-asserted-by":"crossref","first-page":"145","DOI":"10.1109\/18.61115","article-title":"Divergence measures based on the Shannon entropy","volume":"37","author":"Lin","year":"1991","journal-title":"IEEE Trans. Inf. Theory"},{"key":"10.1016\/j.comnet.2026.112188_bib0055","series-title":"International Symposium on Information Theory, 2004. ISIT 2004. Proceedings.","first-page":"31","article-title":"Jensen-Shannon divergence and Hilbert space embedding","author":"Fuglede","year":"2004"},{"issue":"1","key":"10.1016\/j.comnet.2026.112188_bib0056","doi-asserted-by":"crossref","first-page":"79","DOI":"10.1214\/aoms\/1177729694","article-title":"On information and sufficiency","volume":"22","author":"Kullback","year":"1951","journal-title":"Ann. Math. Stat."},{"key":"10.1016\/j.comnet.2026.112188_bib0057","first-page":"1157","article-title":"An introduction to variable and feature selection","volume":"3","author":"Guyon","year":"2003","journal-title":"J. Mach. Learn. Res."},{"key":"10.1016\/j.comnet.2026.112188_bib0058","doi-asserted-by":"crossref","unstructured":"K. Pearson, LIII. On lines and planes of closest fit to systems of points in space, The London, Edinburgh, and Dublin Philosophical Magazine and Journal of Science 2 (11) (1901) 559\u2013572. 10.1080\/14786440109462720.","DOI":"10.1080\/14786440109462720"},{"issue":"2","key":"10.1016\/j.comnet.2026.112188_bib0059","doi-asserted-by":"crossref","first-page":"179","DOI":"10.1111\/j.1469-1809.1936.tb02137.x","article-title":"The use of multiple measurements in taxonomic problems","volume":"7","author":"Fisher","year":"1936","journal-title":"Ann. Eugen."},{"key":"10.1016\/j.comnet.2026.112188_bib0060","series-title":"Advances in Neural Information Processing Systems","article-title":"Neighbourhood components analysis","volume":"17","author":"Goldberger","year":"2004"},{"key":"10.1016\/j.comnet.2026.112188_bib0061","series-title":"Advances in Neural Information Processing Systems","article-title":"LightGBM: a highly efficient gradient boosting decision tree","volume":"30","author":"Ke","year":"2017"},{"key":"10.1016\/j.comnet.2026.112188_bib0062","article-title":"IP Packet-level encrypted traffic classification using machine learning with a light weight feature engineering method","volume":"75","author":"Luo","year":"2023","journal-title":"J. Inf. Secur. Appl."},{"key":"10.1016\/j.comnet.2026.112188_bib0063","series-title":"GLOBECOM 2022 - 2022 IEEE Global Communications Conference","first-page":"3362","article-title":"Early detection of campus network DDoS attacks using predictive models","author":"Araki","year":"2022"},{"key":"10.1016\/j.comnet.2026.112188_bib0064","series-title":"2023 IEEE International Conference on Systems, Man, and Cybernetics","article-title":"Enhancing cyber defense: using machine learning algorithms for detection of network anomalies","author":"Li","year":"2023"},{"key":"10.1016\/j.comnet.2026.112188_bib0065","series-title":"2023 19th International Conference on Network and Service Management (CNSM)","first-page":"1","article-title":"Network traffic classification based on single flow time series analysis","author":"Koumar","year":"2023"},{"key":"10.1016\/j.comnet.2026.112188_bib0066","series-title":"Proceedings of the 34th International Conference on Neural Information Processing Systems","article-title":"Energy-based out-of-distribution detection","author":"Liu","year":"2020"},{"issue":"4","key":"10.1016\/j.comnet.2026.112188_bib0067","doi-asserted-by":"crossref","first-page":"824","DOI":"10.1109\/TPAMI.2018.2889473","article-title":"Efficient and robust approximate nearest neighbor search using hierarchical navigable small world graphs","volume":"42","author":"Malkov","year":"2020","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.comnet.2026.112188_bib0068","unstructured":"L. Boytsov, B. Naidan, NMSLIB: a similarity search library for metric and non-metric spaces, 2013, (https:\/\/github.com\/nmslib\/nmslib)."},{"key":"10.1016\/j.comnet.2026.112188_bib0069","series-title":"Partitioning Around Medoids (Program PAM)","first-page":"68","author":"Kaufman","year":"1990"}],"container-title":["Computer Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626002008?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626002008?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,4,13]],"date-time":"2026-04-13T18:38:40Z","timestamp":1776105520000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1389128626002008"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5]]},"references-count":69,"alternative-id":["S1389128626002008"],"URL":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112188","relation":{},"ISSN":["1389-1286"],"issn-type":[{"value":"1389-1286","type":"print"}],"subject":[],"published":{"date-parts":[[2026,5]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Advanced similarity metrics for IP flow data analytics","name":"articletitle","label":"Article Title"},{"value":"Computer Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112188","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Authors. Published by Elsevier B.V.","name":"copyright","label":"Copyright"}],"article-number":"112188"}}