{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,23]],"date-time":"2026-07-23T15:40:28Z","timestamp":1784821228807,"version":"3.55.0"},"reference-count":82,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"U.S. Cyber Command under Air Force","award":["FA8702-15-D-0001"],"award-info":[{"award-number":["FA8702-15-D-0001"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Artif. Intell."],"published-print":{"date-parts":[[2024,1]]},"DOI":"10.1109\/tai.2023.3244168","type":"journal-article","created":{"date-parts":[[2023,2,16]],"date-time":"2023-02-16T15:36:10Z","timestamp":1676561770000},"page":"420-433","source":"Crossref","is-referenced-by-count":62,"title":["Extensible Machine Learning for Encrypted Network Traffic Application Labeling via Uncertainty Quantification"],"prefix":"10.1109","volume":"5","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7782-0969","authenticated-orcid":false,"given":"Steven","family":"Jorgensen","sequence":"first","affiliation":[{"name":"MIT Lincoln Laboratory, Lexington, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6603-3046","authenticated-orcid":false,"given":"John","family":"Holodnak","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory, Lexington, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5422-4825","authenticated-orcid":false,"given":"Jensen","family":"Dempsey","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory, Lexington, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6747-939X","authenticated-orcid":false,"given":"Karla","family":"de Souza","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory, Lexington, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ananditha","family":"Raghunath","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory, Lexington, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3943-2399","authenticated-orcid":false,"given":"Vernon","family":"Rivet","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory, Lexington, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Noah","family":"DeMoes","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory, Lexington, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andr\u00e9s","family":"Alejos","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory, Lexington, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5997-9610","authenticated-orcid":false,"given":"Allan","family":"Wollaber","sequence":"additional","affiliation":[{"name":"MIT Lincoln Laboratory, Lexington, MA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","article-title":"HTTPS Encryption on the Web","year":"2021"},{"key":"ref2","article-title":"Predicts 2017: Network and gateway security","volume-title":"Gartner Res., Stamford, CT, USA","author":"Ahlm","year":"2016"},{"key":"ref3","article-title":"WatchGuard threat lab reports 91.5 of malware arrived over encrypted connections in Q2 2021","author":"Warfield","year":"2021"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23105"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2021-0078"},{"key":"ref7","article-title":"The noise protocol framework","author":"Perrin","year":"2018"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/CISDA.2009.5356534"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.5220\/0005740704070414"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-30619-9_16"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2021.01.021"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2017.8004872"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ICOIN.2017.7899588"},{"key":"ref14","first-page":"28","article-title":"How to achieve high classification accuracy with just a few labels: A semisupervised approach using sampled packets","volume-title":"Proc. 19th Ind. Conf. Adv. Data MiningAppl. Theor. Aspects","author":"Rezaei","year":"2019"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/s00500\u2013019-04030-2"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3447382"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737507"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2019.106944"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2022.3149933"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2021.102985"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CCCS.2019.8888137"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/LNET.2021.3098455"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2020.107617"},{"key":"ref24","first-page":"8","article-title":"BETH dataset: Real cybersecurity data for anomaly detection research","volume-title":"Proc. Workshop Uncertainty Robustness Deep Learn.","author":"Highnam","year":"2021"},{"key":"ref25","first-page":"422","article-title":"Uncertainty quantification in multimodal ensembles of deep learners","volume-title":"Proc. 33rd Int. Flairs Conf.","author":"Brown","year":"2020"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.2172\/1440713"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.2172\/1527311"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2021.3098157"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3457904"},{"key":"ref30","first-page":"4077","article-title":"Prototypical networks for few-shot learning","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Snell","year":"2017"},{"key":"ref31","first-page":"1","article-title":"A simple fix to Mahalanobis distance for improving near-OOD detection","volume-title":"Proc. Uncertainty Deep Learn. Workshop\/Int. Conf. Mach. Learn.","author":"Ren","year":"2021"},{"key":"ref32","doi-asserted-by":"crossref","DOI":"10.17487\/rfc4303","article-title":"IP encapsulating security payload (ESP)","volume-title":"Internet Requests Comments","author":"Kent","year":"2005"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.59"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICDIM.2015.7381869"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2009.090304"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028805"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-31966-5_4"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/IWCMC.2014.6906427"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/988672.988742"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2004.1317737"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2996758.2996768"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24668-8_21"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/LCN.2005.35"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2008.11.016"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/s10796-008-9131-2"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1016\/j.peva.2010.01.001"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2012.04.012"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2013.09.015"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2017.7876241"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.5220\/0006105602530262"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2017.03.011"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/18.761336"},{"key":"ref53","article-title":"Source characterization in broadband networks","author":"Molnr","year":"1999"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/18.761337"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1002\/047120644X.ch20"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-84858-7"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2022.02.003"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2021.3071441"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2019-0070"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.2478\/popets-2020-0043"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660368"},{"key":"ref62","first-page":"7167","article-title":"A simple unified framework for detecting out-of-distribution samples and adversarial attacks","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","volume":"31","author":"Lee","year":"2018"},{"key":"ref63","article-title":"Out-of-distribution detection in few-shot classification","author":"Wang","year":"2020"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-08751-6_19"},{"key":"ref65","article-title":"CIDER: Exploiting hyperspherical embeddings for out-of-distribution detection","author":"Ming","year":"2022"},{"key":"ref66","first-page":"2021","article-title":"Feature space singularity for out-of-distribution detection","volume-title":"Proc. Workshop Artif. Intell. Saf.","author":"Huang"},{"key":"ref67","first-page":"20827","article-title":"Out-of-distribution detection with deep nearest neighbors","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Sun","year":"2022"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-69538-5_4"},{"key":"ref69","first-page":"1321","article-title":"On calibration of modern neural networks","volume-title":"Proc. 34th Int. Conf. Mach. Learn.","author":"Guo","year":"2017"},{"key":"ref70","first-page":"6405","article-title":"Simple and scalable predictive uncertainty estimation using deep ensembles","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Lakshminarayanan","year":"2017"},{"key":"ref71","first-page":"4697","article-title":"Bayesian deep learning and a probabilistic perspective of generalization","volume-title":"Proc. 34th Int. Conf. Neural Inf. Process. Syst.","author":"Wilson","year":"2020"},{"key":"ref72","article-title":"Generalized out-of-distribution detection: A survey","author":"Yang","year":"2021"},{"key":"ref73","first-page":"1","article-title":"A baseline for detecting misclassified and out-of-distribution examples in neural networks","volume-title":"Proc. 5th Int. Conf. Learn. Represent.","author":"Hendrycks","year":"2017"},{"key":"ref74","first-page":"1","article-title":"Enhancing the reliability of out-of-distribution image detection in neural networks","volume-title":"Proc. 6th Int. Conf. Learn. Represent.","author":"Liang","year":"2018"},{"key":"ref75","first-page":"7047","article-title":"Predictive uncertainty estimation via prior networks","volume-title":"Proc. 32nd Int. Conf. Neural Inf. Process. Syst.","author":"Malinin","year":"2018"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1016\/j.neunet.2020.12.011"},{"key":"ref77","article-title":"freeCodeCamp\/gitter-history","year":"2016"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.21105\/joss.01237"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/3433210.3453080"},{"key":"ref80","first-page":"2021","article-title":"Defeating DNN-based traffic analysis systems in real-time with blind adversarial perturbations","volume-title":"Proc. 30th USENIX Secur. Symp.","author":"Nasr"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363189"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-75988-8_28"},{"key":"ref83","doi-asserted-by":"crossref","DOI":"10.1017\/CBO9780511841040","volume-title":"Wavelet Methods for Time Series Analysis","author":"Percival","year":"2000"}],"container-title":["IEEE Transactions on Artificial Intelligence"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9078688\/10384607\/10044382.pdf?arnumber=10044382","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,23]],"date-time":"2025-08-23T01:08:41Z","timestamp":1755911321000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10044382\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,1]]},"references-count":82,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tai.2023.3244168","relation":{},"ISSN":["2691-4581"],"issn-type":[{"value":"2691-4581","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,1]]}}}