{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,2]],"date-time":"2025-08-02T14:28:31Z","timestamp":1754144911001,"version":"3.41.2"},"reference-count":22,"publisher":"IEEE","license":[{"start":{"date-parts":[[2025,6,4]],"date-time":"2025-06-04T00:00:00Z","timestamp":1748995200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,6,4]],"date-time":"2025-06-04T00:00:00Z","timestamp":1748995200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025,6,4]]},"DOI":"10.1109\/eurocon64445.2025.11073273","type":"proceedings-article","created":{"date-parts":[[2025,7,15]],"date-time":"2025-07-15T17:40:21Z","timestamp":1752601221000},"page":"1-8","source":"Crossref","is-referenced-by-count":0,"title":["TLS-Driven Reverse Shell Detection via Anomaly-Based Methods in Enterprise Network Traffic"],"prefix":"10.1109","author":[{"given":"Vsevolod","family":"Kapustin","sequence":"first","affiliation":[{"name":"Vilnius Gediminas Technical University,Faculty of Electronics,Vilnius,Lithuania"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nerijus","family":"Paulauskas","sequence":"additional","affiliation":[{"name":"Vilnius Gediminas Technical University,Faculty of Electronics,Vilnius,Lithuania"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"\u0160ar\u016bnas","family":"Paulikas","sequence":"additional","affiliation":[{"name":"Vilnius Gediminas Technical University,Faculty of Electronics,Vilnius,Lithuania"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","article-title":"Cyber security breaches survey 2024","author":"Ell","year":"2024","journal-title":"Department for Science, Innovation & Technology, United Kingdom Goverment"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3244544"},{"issue":"3","key":"ref3","first-page":"4187","article-title":"MFFLR-DDoS: An encrypted LR-DDoS attack detection method based on multi-granularity feature fusions in SDN","volume-title":"Mathematical Biosciences and Engineering","volume":"21","author":"Wang"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/tnsm.2021.3052888"},{"key":"ref5","first-page":"352","article-title":"Encrypt DNS Traffic: Automated Feature Learning Method for Detecting DNS Tunnels","volume-title":"2021 IEEE Intl Conf on Parallel & Distributed Processing with Applications, Big Data & Cloud Computing, Sustainable Computing & Communications, Social Computing & Networking","author":"Ding"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.32604\/cmc.2024.050474"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/3628797.3628874"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1515\/nleng-2022-0297"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3678890.3678921"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3638837.3638861"},{"key":"ref11","first-page":"88","article-title":"Network Monitoring Approaches: An Overview","author":"Svoboda","year":"2015","journal-title":"International Journal of Advances in Computer Networks and Its Security-IJCNS. 5"},{"key":"ref12","doi-asserted-by":"crossref","first-page":"111","DOI":"10.52866\/ijcsm.2022.02.01.012","year":"2022","journal-title":"Iraqi Journal for Computer Science and Mathematics"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-09903-3_22"},{"key":"ref14","doi-asserted-by":"crossref","first-page":"e87357","DOI":"10.1371\/journal.pone.0087357","article-title":"Mutual Information between Discrete and Continuous Data Sets","volume":"9","author":"Ross","year":"2014","journal-title":"PLoS ONE"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1002\/0470011815.b2a15150"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.47738\/ijiis.v4i1.73"},{"key":"ref17","article-title":"Adam: A Method for Stochastic Optimization","author":"Kingma","year":"2014","journal-title":"Version 9). arXiv"},{"volume-title":"Machine Learning in LiDAR 3D point clouds (Version 1)","year":"2021","author":"Medina","key":"ref18"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1029\/2021ms002681"},{"key":"ref20","first-page":"12784","article-title":"Implementation of the SoftMax Activation for Reconfigurable Neural Network Hardware Accelerators","volume-title":"Applied Sciences","volume":"13","author":"Shatravin"},{"volume-title":"A Comparative Analysis of XGBoost. arXiv","year":"2019","author":"Bentjac","key":"ref21"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.3390\/info15040235"}],"event":{"name":"IEEE EUROCON 2025 - 21st International Conference on Smart Technologies","start":{"date-parts":[[2025,6,4]]},"location":"Gdynia, Poland","end":{"date-parts":[[2025,6,6]]}},"container-title":["IEEE EUROCON 2025 - 21st International Conference on Smart Technologies"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11073124\/11073193\/11073273.pdf?arnumber=11073273","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,7,16]],"date-time":"2025-07-16T05:34:01Z","timestamp":1752644041000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11073273\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,4]]},"references-count":22,"URL":"https:\/\/doi.org\/10.1109\/eurocon64445.2025.11073273","relation":{},"subject":[],"published":{"date-parts":[[2025,6,4]]}}}