{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:29:04Z","timestamp":1783438144092,"version":"3.54.6"},"reference-count":39,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/100009532","name":"Ministry of Interior of the Czech Republic","doi-asserted-by":"publisher","award":["VJ02010024"],"award-info":[{"award-number":["VJ02010024"]}],"id":[{"id":"10.13039\/100009532","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Grant Agency of the Czech Technical University in Prague","award":["SGS23\/207\/OHK3\/3T\/18"],"award-info":[{"award-number":["SGS23\/207\/OHK3\/3T\/18"]}]},{"DOI":"10.13039\/100014809","name":"Technology Agency of the Czech Republic","doi-asserted-by":"publisher","award":["FW03010099"],"award-info":[{"award-number":["FW03010099"]}],"id":[{"id":"10.13039\/100014809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/access.2023.3275744","type":"journal-article","created":{"date-parts":[[2023,5,12]],"date-time":"2023-05-12T17:45:26Z","timestamp":1683913526000},"page":"50000-50012","source":"Crossref","is-referenced-by-count":21,"title":["DNS Over HTTPS Detection Using Standard Flow Telemetry"],"prefix":"10.1109","volume":"11","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5317-9222","authenticated-orcid":false,"given":"Kamil","family":"Jerabek","sequence":"first","affiliation":[{"name":"Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8281-618X","authenticated-orcid":false,"given":"Karel","family":"Hynek","sequence":"additional","affiliation":[{"name":"CESNET z.s.p.o, Prague, Czech Republic"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9652-6418","authenticated-orcid":false,"given":"Ondrej","family":"Rysavy","sequence":"additional","affiliation":[{"name":"Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9947-9837","authenticated-orcid":false,"given":"Ivana","family":"Burgetova","sequence":"additional","affiliation":[{"name":"Faculty of Information Technology, Brno University of Technology, Brno, Czech Republic"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"crossref","first-page":"694","DOI":"10.1016\/j.cose.2018.01.018","article-title":"Toward secure name resolution on the Internet","volume":"77","author":"Grothoff","year":"2018","journal-title":"Comput. Secur."},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.17487\/RFC8484"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3175497"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ICICT50521.2020.00085"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-17143-7_8"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3409192"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/DASC-PICom-CBDCom-CyberSciTech49142.2020.00026"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.12691\/jcsa-8-2-2"},{"key":"ref9","article-title":"Measurement and characterization of DNS over HTTPS traffic","author":"Jerabek","year":"2022","journal-title":"arXiv:2204.03975"},{"key":"ref10","article-title":"99% false positives: A qualitative study of {SOC} analysts\u2019 perspectives on security alarms","volume-title":"Proc. 31st USENIX Secur. Symp. (USENIX Secur.)","author":"Alahmadi"},{"key":"ref11","volume-title":"CIRA-CIC-DoHBrw-2020","author":"MontazeriShatoori","year":"2022"},{"key":"ref12","article-title":"DNS Over HTTPS network traffic","author":"Je\u0159\u00e1bek","year":"2021"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.dib.2022.108310"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/ICSC53193.2021.9673380"},{"key":"ref15","first-page":"1903","article-title":"Generalized classification of DNS over HTTPS traffic with deep learning","volume-title":"Proc. Asia\u2013Pacific Signal Inf. Process. Assoc. Annu. Summit Conf. (APSIPA ASC)","author":"Casanova"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3113294"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/CCNC51644.2023.10059835"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.3390\/app12052416"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.34190\/ews.20.001"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3183390"},{"key":"ref21","first-page":"1","article-title":"Padding ain\u2019t enough: Assessing the privacy guarantees of encrypted DNS","volume-title":"Proc. 10th USENIX Workshop Free Open Commun. Internet (FOCI)","author":"Bushart"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom53373.2021.00113"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38998-6_7"},{"key":"ref24","author":"Belshe","year":"7540","journal-title":"Hypertext Transfer Protocol Version 2 (HTTP\/2)"},{"key":"ref25","volume-title":"Domain Names\u2014Implementation and Specification","author":"Mockapetris","year":"1035"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23822-2_36"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2321898"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2022.109467"},{"key":"ref29","volume-title":"NetFlow Export Datagram Format","year":"2007"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3954"},{"key":"ref31","volume-title":"Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of Flow Information","author":"Aitken","year":"2013"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.22266\/ijies2019.1231.08"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1186\/s13174-018-0087-2"},{"key":"ref34","volume-title":"Data Mining: Concepts and Techniques","author":"Han","year":"2022"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CNSM.2013.6727841"},{"key":"ref36","volume-title":"Professional Website Performance: Optimizing the Front-End and Back-End","author":"Smith","year":"2012"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3473343"},{"key":"ref38","doi-asserted-by":"crossref","DOI":"10.1016\/j.diin.2019.08.002","article-title":"How to detect cryptocurrency miners? By traffic forensics!","volume":"31","author":"Vesel\u00fd","year":"2019","journal-title":"Digit. Invest."},{"key":"ref39","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2023.109648","article-title":"Deep learning for encrypted traffic classification in the face of data drift: An empirical study","volume":"225","author":"Malekghaini","year":"2023","journal-title":"Comput. Netw."}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10005208\/10123708.pdf?arnumber=10123708","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,14]],"date-time":"2024-03-14T01:49:43Z","timestamp":1710380983000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10123708\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":39,"URL":"https:\/\/doi.org\/10.1109\/access.2023.3275744","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}