{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,2]],"date-time":"2026-04-02T15:45:02Z","timestamp":1775144702830,"version":"3.50.1"},"reference-count":50,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"5","license":[{"start":{"date-parts":[[2024,10,1]],"date-time":"2024-10-01T00:00:00Z","timestamp":1727740800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,10,1]],"date-time":"2024-10-01T00:00:00Z","timestamp":1727740800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,10,1]],"date-time":"2024-10-01T00:00:00Z","timestamp":1727740800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62227805"],"award-info":[{"award-number":["62227805"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62072398"],"award-info":[{"award-number":["62072398"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62172405"],"award-info":[{"award-number":["62172405"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"National Research Foundation, Singapore, and the Cyber Security Agency under its National Cybersecurity Research and Development Programme","award":["NCRP25-P04-TAICeN"],"award-info":[{"award-number":["NCRP25-P04-TAICeN"]}]},{"name":"Singapore University of Technology and Design-Zhejiang University Innovation, Design and Entrepreneurship Alliance (SUTD-ZJU IDEA) IDEA Grant for Visiting Professors","award":["SUTD-ZJUVP201901"],"award-info":[{"award-number":["SUTD-ZJUVP201901"]}]},{"DOI":"10.13039\/501100004608","name":"Natural Science Foundation of Jiangsu Province","doi-asserted-by":"publisher","award":["BK20220075"],"award-info":[{"award-number":["BK20220075"]}],"id":[{"id":"10.13039\/501100004608","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Fok Ying-Tung Education Foundation for Young Teachers in the Higher Education Institutions of China","award":["20193218210004"],"award-info":[{"award-number":["20193218210004"]}]},{"name":"State Key Laboratory of Mathematical Engineering and Advanced Computing"},{"name":"Open Foundation of Henan Key Laboratory of Cyberspace Situation Awareness","award":["HNTS2022001"],"award-info":[{"award-number":["HNTS2022001"]}]},{"DOI":"10.13039\/100022963","name":"Key Research and Development Program of Zhejiang Province","doi-asserted-by":"publisher","award":["2023C01039"],"award-info":[{"award-number":["2023C01039"]}],"id":[{"id":"10.13039\/100022963","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE\/ACM Trans. Networking"],"published-print":{"date-parts":[[2024,10]]},"DOI":"10.1109\/tnet.2024.3413789","type":"journal-article","created":{"date-parts":[[2024,8,19]],"date-time":"2024-08-19T17:40:13Z","timestamp":1724089213000},"page":"3945-3960","source":"Crossref","is-referenced-by-count":14,"title":["FOSS: Towards Fine-Grained Unknown Class Detection Against the Open-Set Attack Spectrum With Variable Legitimate Traffic"],"prefix":"10.1109","volume":"32","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1455-4330","authenticated-orcid":false,"given":"Ziming","family":"Zhao","sequence":"first","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2195-0799","authenticated-orcid":false,"given":"Zhaoxuan","family":"Li","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}]},{"given":"Xiaofei","family":"Xie","sequence":"additional","affiliation":[{"name":"School of Computing and Information Systems, Singapore Management University, Bras Basah, Singapore"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2888-4499","authenticated-orcid":false,"given":"Jiongchi","family":"Yu","sequence":"additional","affiliation":[{"name":"School of Computing and Information Systems, Singapore Management University, Bras Basah, Singapore"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6087-8243","authenticated-orcid":false,"given":"Fan","family":"Zhang","sequence":"additional","affiliation":[{"name":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0002-5593","authenticated-orcid":false,"given":"Rui","family":"Zhang","sequence":"additional","affiliation":[{"name":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9584-0082","authenticated-orcid":false,"given":"Binbin","family":"Chen","sequence":"additional","affiliation":[{"name":"Advanced Digital Sciences Center, Create Tower, Singapore"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6062-2950","authenticated-orcid":false,"given":"Xiangyang","family":"Luo","sequence":"additional","affiliation":[{"name":"Henan Province Key Laboratory of Cyberspace Situation Awareness, Zhengzhou, China"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5058-4660","authenticated-orcid":false,"given":"Ming","family":"Hu","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Nanyang Technological University, Jurong West, Singapore"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-9649-1499","authenticated-orcid":false,"given":"Wenrui","family":"Ma","sequence":"additional","affiliation":[{"name":"School of Computer Science and Technology, Zhejiang Gongshang University, Hangzhou, China"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484585"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243862"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737622"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2016.2623950"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2016.2594295"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOMW.2019.8845315"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23204"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3050605"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3083422"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24403"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.25"},{"key":"ref12","volume-title":"M-Trends Reports: Insights Into Today\u2019s Breaches and Cyber Attacks","year":"2020"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3589334.3645407"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24007"},{"key":"ref15","first-page":"3829","article-title":"Jaqen: A high-performance switch-native approach for detecting and mitigating volumetric DDoS attacks with programmable switches","volume-title":"Proc. USENIX Secur. Symp.","author":"Liu"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23233"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363226"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484589"},{"issue":"1","key":"ref19","first-page":"100","article-title":"A K-means clustering algorithm","volume":"28","author":"Hartigan","year":"1979","journal-title":"J. Roy. Stat. Soc. C, Appl. Statist."},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2023.3242134"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2023.3245411"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2023.3311012"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/tdsc.2023.3349180"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-06605-9_42"},{"key":"ref25","first-page":"226","article-title":"A density-based algorithm for discovering clusters in large spatial databases with noise","volume-title":"Proc. KDD","author":"Ester"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/11430919_70"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2008.17"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2017.2691702"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.35"},{"key":"ref30","volume-title":"Intrusion Detection Evaluation Dataset (CICIDS2017)","year":"2018"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.5220\/0005740704070414"},{"key":"ref32","first-page":"2579","article-title":"Visualizing data using t-SNE","volume":"9","author":"van der Maaten","year":"2008","journal-title":"J. Mach. Learn. Res."},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24083"},{"key":"ref34","first-page":"3505","article-title":"The circle of life: A large-scale study of the IoT malware lifecycle","volume-title":"Proc. USENIX Secur. Symp.","author":"Alrawi"},{"key":"ref35","volume-title":"Virustotal","year":"2020"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103663"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-54773-7_12"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484758"},{"key":"ref39","volume-title":"CCDC Dataset","author":"Hassanabad","year":"2018"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3117348"},{"key":"ref41","first-page":"625","article-title":"Transcend: Detecting concept drift in malware classification models","volume-title":"Proc. 26th USENIX Secur. Symp.","author":"Jordaney"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833659"},{"key":"ref43","first-page":"2327","article-title":"CADE: Detecting and explaining concept drift samples for security applications","volume-title":"Proc. USENIX Secur. Symp.","author":"Yang"},{"key":"ref44","first-page":"729","article-title":"TESSERACT: Eliminating experimental bias in malware classification across space and time","volume-title":"Proc. USENIX Secur. Symp.","author":"Pendlebury"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24830"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2014.6848005"},{"key":"ref47","first-page":"565","article-title":"A Grassmannian approach to zero-shot learning for network intrusion detection","volume-title":"Proc. ICONIP","volume":"10634","author":"P\u00e9rez"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2024.110563"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/RTSS59052.2023.00045"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2021.24067"}],"container-title":["IEEE\/ACM Transactions on Networking"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/90\/10720541\/10638516.pdf?arnumber=10638516","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,10,18]],"date-time":"2024-10-18T04:37:19Z","timestamp":1729226239000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10638516\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10]]},"references-count":50,"journal-issue":{"issue":"5"},"URL":"https:\/\/doi.org\/10.1109\/tnet.2024.3413789","relation":{},"ISSN":["1063-6692","1558-2566"],"issn-type":[{"value":"1063-6692","type":"print"},{"value":"1558-2566","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,10]]}}}