{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T21:07:09Z","timestamp":1778965629948,"version":"3.51.4"},"reference-count":46,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,5,10]],"date-time":"2026-05-10T00:00:00Z","timestamp":1778371200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100024250","name":"Israel Innovation Authority","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100024250","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Networks"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1016\/j.comnet.2026.112370","type":"journal-article","created":{"date-parts":[[2026,5,9]],"date-time":"2026-05-09T23:12:36Z","timestamp":1778368356000},"page":"112370","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["GraphMux: A graph-based framework for encrypted traffic classification"],"prefix":"10.1016","volume":"285","author":[{"ORCID":"https:\/\/orcid.org\/0009-0002-9597-8070","authenticated-orcid":false,"given":"Matan","family":"Klein","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Revital","family":"Marbel","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9940-5654","authenticated-orcid":false,"given":"Chen","family":"Hajaj","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2055-2211","authenticated-orcid":false,"given":"Ran","family":"Dubin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3670-0784","authenticated-orcid":false,"given":"Amit","family":"Dvir","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"key":"10.1016\/j.comnet.2026.112370_b1","series-title":"Machine learning empowered computer networks","author":"Cerquitelli","year":"2023"},{"key":"10.1016\/j.comnet.2026.112370_b2","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2025.111784","article-title":"Flow persona: A QoS flow rule scheme based on deep learning in SDN-IoT","author":"She","year":"2025","journal-title":"Comput. Netw."},{"issue":"5","key":"10.1016\/j.comnet.2026.112370_b3","doi-asserted-by":"crossref","first-page":"76","DOI":"10.1109\/MCOM.2019.1800819","article-title":"Deep learning for encrypted traffic classification: An overview","volume":"57","author":"Rezaei","year":"2019","journal-title":"IEEE Commun. Mag."},{"issue":"3","key":"10.1016\/j.comnet.2026.112370_b4","doi-asserted-by":"crossref","first-page":"1999","DOI":"10.1007\/s00500-019-04030-2","article-title":"Deep packet: A novel approach for encrypted traffic classification using deep learning","volume":"24","author":"Lotfollahi","year":"2020","journal-title":"Soft Comput."},{"key":"10.1016\/j.comnet.2026.112370_b5","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2020.114363","article-title":"Tree-RNN: Tree structural recurrent neural network for network traffic classification","author":"Ren","year":"2021","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.comnet.2026.112370_b6","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2025.111658","article-title":"BiRNN-SA: Context-aware malicious network traffic detection using self-attentive bidirectional RNNs","author":"Ahmed","year":"2025","journal-title":"Comput. Netw."},{"key":"10.1016\/j.comnet.2026.112370_b7","series-title":"SP","first-page":"1825","article-title":"SoK: Decoding the enigma of encrypted network traffic classifiers","author":"Wickramasinghe","year":"2025"},{"key":"10.1016\/j.comnet.2026.112370_b8","doi-asserted-by":"crossref","DOI":"10.1016\/j.comcom.2025.108068","article-title":"On the right choice of data from popular datasets for internet traffic classification","volume":"233","author":"Krupski","year":"2025","journal-title":"Comput. Commun."},{"key":"10.1016\/j.comnet.2026.112370_b9","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2025.111823","article-title":"GMM-cGAN: Mitigating data scarcity and label noise for robust encrypted malicious traffic classification","volume":"274","author":"Jonath","year":"2026","journal-title":"Comput. Netw."},{"key":"10.1016\/j.comnet.2026.112370_b10","doi-asserted-by":"crossref","first-page":"133","DOI":"10.1109\/TIFS.2023.3318962","article-title":"Mcre: A unified framework for handling malicious traffic with noise labels based on multidimensional constraint representation","volume":"19","author":"Yuan","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.comnet.2026.112370_b11","doi-asserted-by":"crossref","DOI":"10.1109\/TIFS.2025.3612141","article-title":"Detection of unknown attacks through encrypted traffic: A Gaussian prototype-aided variational autoencoder framework","author":"Meng","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.comnet.2026.112370_b12","article-title":"When unknown threat meets label noise: A self-correcting framework","author":"Meng","year":"2025","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"10.1016\/j.comnet.2026.112370_b13","doi-asserted-by":"crossref","first-page":"2367","DOI":"10.1109\/TIFS.2021.3050608","article-title":"Accurate decentralized application identification via encrypted traffic analysis using graph neural networks","volume":"16","author":"Shen","year":"2021","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.comnet.2026.112370_b14","series-title":"2021 IFIP\/IEEE International Symposium on Integrated Network Management","first-page":"376","article-title":"Encrypted network traffic classification using a geometric learning model","author":"Huoh","year":"2021"},{"key":"10.1016\/j.comnet.2026.112370_b15","series-title":"Graph-mux repository","author":"ArielCyber","year":"2025"},{"key":"10.1016\/j.comnet.2026.112370_b16","series-title":"Australasian Conference on Information Security and Privacy","first-page":"383","article-title":"An encrypted traffic classification framework based on higher-interaction-graph neural network","author":"Hu","year":"2024"},{"key":"10.1016\/j.comnet.2026.112370_b17","doi-asserted-by":"crossref","first-page":"389","DOI":"10.1109\/TMLCN.2023.3323915","article-title":"WFF-EGNN: Encrypted traffic classification based on weaved flow fragment via ensemble graph neural networks","volume":"1","author":"Chen","year":"2023","journal-title":"IEEE Trans. Mach. Learn. Commun. Netw."},{"key":"10.1016\/j.comnet.2026.112370_b18","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2024.110372","article-title":"DE-GNN: Dual embedding with graph neural network for fine-grained encrypted traffic classification","volume":"245","author":"Han","year":"2024","journal-title":"Comput. Netw."},{"key":"10.1016\/j.comnet.2026.112370_b19","doi-asserted-by":"crossref","DOI":"10.1016\/j.engappai.2023.106531","article-title":"TCGNN: Packet-grained network traffic classification via graph neural networks","volume":"123","author":"Hu","year":"2023","journal-title":"Eng. Appl. Artif. Intell."},{"key":"10.1016\/j.comnet.2026.112370_b20","series-title":"Proceedings of the ACM Web Conference 2023","first-page":"2066","article-title":"Tfe-gnn: A temporal fusion encoder using graph neural networks for fine-grained encrypted traffic classification","author":"Zhang","year":"2023"},{"key":"10.1016\/j.comnet.2026.112370_b21","series-title":"CGNN: traffic classification with graph neural network","author":"Pang","year":"2021"},{"issue":"2","key":"10.1016\/j.comnet.2026.112370_b22","doi-asserted-by":"crossref","first-page":"1224","DOI":"10.1109\/TNSM.2022.3227500","article-title":"Flow-based encrypted network traffic classification with graph neural networks","volume":"20","author":"Huoh","year":"2022","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"10.1016\/j.comnet.2026.112370_b23","series-title":"HPCC","first-page":"478","article-title":"Memg: Mobile encrypted traffic classification with markov chains and graph neural network","author":"Cai","year":"2021"},{"key":"10.1016\/j.comnet.2026.112370_b24","series-title":"ACISP","first-page":"630","article-title":"Encrypted network traffic classification with higher order graph neural network","author":"Okonkwo","year":"2023"},{"issue":"2","key":"10.1016\/j.comnet.2026.112370_b25","article-title":"TMC-GCN: Encrypted traffic mapping classification method based on graph convolutional networks.","volume":"82","author":"Liu","year":"2025","journal-title":"Comput. Mater. Contin."},{"issue":"4","key":"10.1016\/j.comnet.2026.112370_b26","doi-asserted-by":"crossref","first-page":"1813","DOI":"10.1109\/TBDATA.2024.3489420","article-title":"Dgnn: Decoupled graph neural networks with structural consistency between attribute and graph embedding representations","volume":"11","author":"Wang","year":"2024","journal-title":"IEEE Trans. Big Data"},{"key":"10.1016\/j.comnet.2026.112370_b27","series-title":"2022 International Joint Conference on Neural Networks","first-page":"1","article-title":"Robust graph convolutional clustering with adaptive graph learning","author":"Zhao","year":"2022"},{"key":"10.1016\/j.comnet.2026.112370_b28","article-title":"Ultimate encrypted traffic feature engineering: HTTPS encrypted traffic classification using restored application data unit length","author":"Chen","year":"2025","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"10.1016\/j.comnet.2026.112370_b29","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2019.106944","article-title":"MIMETIC: Mobile encrypted traffic classification using multimodal deep learning","volume":"165","author":"Aceto","year":"2019","journal-title":"Comput. Netw."},{"key":"10.1016\/j.comnet.2026.112370_b30","article-title":"DISTILLER: Encrypted traffic classification via multimodal multitask deep learning","volume":"183","author":"Aceto","year":"2021","journal-title":"J. Netw. Comput. Appl."},{"issue":"1","key":"10.1016\/j.comnet.2026.112370_b31","article-title":"FusionTC: Encrypted app traffic classification using decision-level multimodal fusion learning of flow sequence","volume":"2023","author":"Li","year":"2023","journal-title":"Wirel. Commun. Mob. Comput."},{"key":"10.1016\/j.comnet.2026.112370_b32","doi-asserted-by":"crossref","first-page":"182065","DOI":"10.1109\/ACCESS.2020.3029190","article-title":"Automatic mobile app identification from encrypted traffic with hybrid neural networks","volume":"8","author":"Wang","year":"2020","journal-title":"IEEE Access"},{"issue":"3","key":"10.1016\/j.comnet.2026.112370_b33","doi-asserted-by":"crossref","first-page":"156","DOI":"10.1109\/LNET.2021.3098455","article-title":"UtMobileNetTraffic2021: A labeled public network traffic dataset","volume":"3","author":"Heng","year":"2021","journal-title":"IEEE Netw. Lett."},{"key":"10.1016\/j.comnet.2026.112370_b34","series-title":"2018 IEEE Global Communications Conference","first-page":"1","article-title":"A novel QUIC traffic classifier based on convolutional neural networks","author":"Tong","year":"2018"},{"key":"10.1016\/j.comnet.2026.112370_b35","unstructured":"Flash-networks. https:\/\/www.flashnetworks.com."},{"key":"10.1016\/j.comnet.2026.112370_b36","series-title":"NOMS","first-page":"1","article-title":"Encrypted traffic classification at line rate in programmable switches with machine learning","author":"Akem","year":"2024"},{"key":"10.1016\/j.comnet.2026.112370_b37","series-title":"When simple model just works: Is network traffic classification in crisis?","author":"Jerabek","year":"2025"},{"key":"10.1016\/j.comnet.2026.112370_b38","series-title":"Graph2vec: Learning distributed representations of graphs","author":"Narayanan","year":"2017"},{"issue":"1","key":"10.1016\/j.comnet.2026.112370_b39","doi-asserted-by":"crossref","first-page":"155","DOI":"10.1017\/S1351324916000334","article-title":"Word2Vec","volume":"23","author":"Church","year":"2017","journal-title":"Nat. Lang. Eng."},{"key":"10.1016\/j.comnet.2026.112370_b40","series-title":"Semi-supervised classification with graph convolutional networks","author":"Kipf","year":"2016"},{"issue":"20","key":"10.1016\/j.comnet.2026.112370_b41","first-page":"10","article-title":"Graph attention networks","volume":"1050","author":"Velickovic","year":"2017","journal-title":"Stat"},{"key":"10.1016\/j.comnet.2026.112370_b42","article-title":"Inductive representation learning on large graphs","volume":"30","author":"Hamilton","year":"2017","journal-title":"Adv. Neural Inf. Process. Syst."},{"issue":"1","key":"10.1016\/j.comnet.2026.112370_b43","doi-asserted-by":"crossref","first-page":"420","DOI":"10.1109\/TAI.2023.3244168","article-title":"Extensible machine learning for encrypted network traffic application labeling via uncertainty quantification","volume":"5","author":"Jorgensen","year":"2023","journal-title":"IEEE Trans. Artif. Intell."},{"issue":"4","key":"10.1016\/j.comnet.2026.112370_b44","doi-asserted-by":"crossref","first-page":"4103","DOI":"10.1109\/TNSM.2021.3122940","article-title":"Deep learning and zero-day traffic classification: Lessons learned from a commercial-grade dataset","volume":"18","author":"Yang","year":"2021","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"10.1016\/j.comnet.2026.112370_b45","doi-asserted-by":"crossref","unstructured":"J. Piet, D. Nwoji, V. Paxson, Ggfast: Automating generation of flexible network traffic classifiers, in: Proceedings of the ACM SIGCOMM 2023 Conference, 2023, pp. 850\u2013866.","DOI":"10.1145\/3603269.3604840"},{"issue":"2","key":"10.1016\/j.comnet.2026.112370_b46","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3727115","article-title":"Fastflow: Early yet robust network flow classification using the minimal number of time-series packets","volume":"9","author":"Babaria","year":"2025","journal-title":"Proc. ACM Meas. Anal. Comput. Syst."}],"container-title":["Computer Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626003828?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626003828?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,16]],"date-time":"2026-05-16T20:15:45Z","timestamp":1778962545000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1389128626003828"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":46,"alternative-id":["S1389128626003828"],"URL":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112370","relation":{},"ISSN":["1389-1286"],"issn-type":[{"value":"1389-1286","type":"print"}],"subject":[],"published":{"date-parts":[[2026,7]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"GraphMux: A graph-based framework for encrypted traffic classification","name":"articletitle","label":"Article Title"},{"value":"Computer Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112370","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Authors. Published by Elsevier B.V.","name":"copyright","label":"Copyright"}],"article-number":"112370"}}