{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:29:50Z","timestamp":1785544190605,"version":"3.56.0"},"reference-count":63,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"12","license":[{"start":{"date-parts":[[2017,12,1]],"date-time":"2017-12-01T00:00:00Z","timestamp":1512086400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2017,12]]},"DOI":"10.1109\/tifs.2017.2730819","type":"journal-article","created":{"date-parts":[[2017,7,21]],"date-time":"2017-07-21T18:25:53Z","timestamp":1500661553000},"page":"3039-3049","source":"Crossref","is-referenced-by-count":89,"title":["I Know What You Saw Last Minute\u2014Encrypted HTTP Adaptive Video Streaming Title Classification"],"prefix":"10.1109","volume":"12","author":[{"given":"Ran","family":"Dubin","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Amit","family":"Dvir","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2353-3785","authenticated-orcid":false,"given":"Ofir","family":"Pele","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ofer","family":"Hadar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2008.2008927"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOMW.2012.6193518"},{"key":"ref33","first-page":"1","article-title":"Language identification of encrypted VoIP traffic: Alejandra y roberto or alice and bob?","author":"wright","year":"2007","journal-title":"Proc 16th USENIX Security Symp"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.34"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-18178-8_11"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2008.ECP.338"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ICIW.2010.36"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-31966-5_26"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/CEC.2010.5586288"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/90.330413"},{"key":"ref60","year":"2016","journal-title":"Selenium"},{"key":"ref62","year":"2016","journal-title":"Adblock Plus"},{"key":"ref61","year":"2016","journal-title":"Chromedriver—Webdriver for Chrome"},{"key":"ref63","year":"2016","journal-title":"Clumsy"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45146-4_34"},{"key":"ref27","first-page":"1","article-title":"Timing analysis of keystrokes and timing attacks on SSH","author":"song","year":"2001","journal-title":"Proc 10th Usenix Security Symp"},{"key":"ref29","first-page":"5-1","article-title":"Devices that tell on you: Privacy trends in consumer ubiquitous computing","author":"saponas","year":"2007","journal-title":"Proc 16th USENIX Security Symp"},{"key":"ref2","year":"2015","journal-title":"The Zettabyte Era-Trends and Analysis"},{"key":"ref1","year":"2012","journal-title":"Cisco Visual Networking Index Global Mobile Data Traffic Forecast Update"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2478741"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2012.6135854"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1186\/s13635-016-0030-7"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-45670-5_8"},{"key":"ref23","doi-asserted-by":"crossref","first-page":"123","DOI":"10.1007\/978-3-642-36784-7_6","article-title":"Reviewing traffic classification","author":"valenti","year":"2013","journal-title":"Data Traffic Monitoring and Analysis"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/VOIPMS.2006.1638120"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2006.254723"},{"key":"ref50","first-page":"1","article-title":"Progressive download video rate traffic shaping using tcp window and deep packet inspection","author":"dubin","year":"2012","journal-title":"Proc World Congr Comput Sci Comput Eng Appl Comput (WORLDCOMP)"},{"key":"ref51","volume":"1","author":"friedman","year":"2001","journal-title":"The Elements of Statistical Learning"},{"key":"ref59","year":"2016","journal-title":"YouTube Statistics"},{"key":"ref58","first-page":"101","article-title":"In defense of one-vs-all classification","volume":"5","author":"rifkin","year":"2004","journal-title":"J Mach Learn Res"},{"key":"ref57","first-page":"747","article-title":"Similarity-based classification: Concepts and algorithms","volume":"10","author":"chen","year":"2009","journal-title":"J Mach Learn Res"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1007\/BF00994018"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2008.4587598"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1967.1053964"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1002\/ett.2546"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1145\/2079296.2079321"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2011.43"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/2068816.2068849"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/1151659.1159959"},{"key":"ref12","first-page":"1318","article-title":"Implementation and user-centric comparison of a novel adaptation logic for DASH with SVC","author":"sieber","year":"2013","journal-title":"Proc IFIP\/IEEE Int Symp Integr Netw Manage"},{"key":"ref13","first-page":"61","article-title":"YouTube’s DASH implementation analysis","author":"a\u00f1orga","year":"2015","journal-title":"Proc 19th Int Conf Circuits Syst Commun Comput (CSCC)"},{"key":"ref14","article-title":"YouTube traffic monitoring and analysis","author":"dimopoulos","year":"2012"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2008.09.022"},{"key":"ref16","first-page":"1","article-title":"I tube, You Tube, everybody tubes: Analyzing the world’s largest user generated content video system","author":"meeyoung","year":"2007","journal-title":"Proc ACM SIGCOMM Conf Internet Measurement (IMC)"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/MMUL.2015.34"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1971162.1971166"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.40"},{"key":"ref4","year":"2014","journal-title":"Information Technology—Dynamic Adaptive Streaming Over HTTP (DASH)"},{"key":"ref3","year":"2014","journal-title":"Sandvine Global Internet Phenomena Report H1"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/s005300050122"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2360940"},{"key":"ref8","year":"2014","journal-title":"Google Webmaster Central Blog HTTPS as a Ranking Signal"},{"key":"ref7","author":"hackett","year":"2015","journal-title":"Most Internet Traffic will be Encrypted by Year End Here's Why"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2010.5683649"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/1879141.1879197"},{"key":"ref46","author":"dubin","year":"2017","journal-title":"The Video Streams PCAP Files Dataset"},{"key":"ref45","author":"dubin","year":"2016","journal-title":"I know what you saw last minute—Encrypted HTTP adaptive video streaming title classification"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35795-4_51"},{"key":"ref47","author":"dubin","year":"2017","journal-title":"The Research Chrome YouTube Encrypted Network Traffic Crawler"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-13193-6_32"},{"key":"ref41","first-page":"1","article-title":"Statistical protocol identification with SPID: Preliminary results","author":"hjelmvik","year":"2009","journal-title":"swedish National computer networking Workshop"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.17487\/RFC7540"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/DMIAF.2016.7574935"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/8017695\/07987775.pdf?arnumber=7987775","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T16:22:19Z","timestamp":1642004539000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/7987775\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,12]]},"references-count":63,"journal-issue":{"issue":"12"},"URL":"https:\/\/doi.org\/10.1109\/tifs.2017.2730819","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,12]]}}}