{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T16:12:37Z","timestamp":1782835957456,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":69,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,9,1]],"date-time":"2023-09-01T00:00:00Z","timestamp":1693526400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-sa\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,9,10]]},"DOI":"10.1145\/3603269.3604840","type":"proceedings-article","created":{"date-parts":[[2023,9,1]],"date-time":"2023-09-01T16:16:29Z","timestamp":1693584989000},"page":"850-866","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":31,"title":["GGFAST: Automating Generation of Flexible Network Traffic Classifiers"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-7447-0910","authenticated-orcid":false,"given":"Julien","family":"Piet","sequence":"first","affiliation":[{"name":"Corelight, San Francisco, USA"},{"name":"University of California Berkeley, Berkeley, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-7911-8348","authenticated-orcid":false,"given":"Dubem","family":"Nwoji","sequence":"additional","affiliation":[{"name":"Corelight, San Francisco, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-2673-543X","authenticated-orcid":false,"given":"Vern","family":"Paxson","sequence":"additional","affiliation":[{"name":"Corelight, San Francisco, USA"},{"name":"University of California Berkeley, Berkeley, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,9]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.23919\/TMA.2018.8506558"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2992556"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/3097983.3098163"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOMW.2019.8845127"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/3484266.3487373"},{"key":"e_1_3_2_1_6_1","volume-title":"Towards a domain-customized automated machine learning framework for networks and systems. arXiv preprint arXiv:2004.11931","author":"Arzani Behnaz","year":"2020","unstructured":"Behnaz Arzani and Bita Rouhani. 2020. Towards a domain-customized automated machine learning framework for networks and systems. arXiv preprint arXiv:2004.11931 (2020)."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNN.2006.883010"},{"key":"e_1_3_2_1_8_1","volume-title":"Traffic Classification on the Fly. ACM SIGCOMM Computer Communication Review","author":"Bernaille Laurent","year":"2006","unstructured":"Laurent Bernaille, Renata Teixeira, Ismael Akodkenou, Augustin Soule, and Kave Salamatian. 2006. Traffic Classification on the Fly. ACM SIGCOMM Computer Communication Review (2006)."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/1368436.1368445"},{"key":"e_1_3_2_1_10_1","volume-title":"Proceedings Compression and Complexity of Sequences. IEEE.","author":"Broder Andrei Z","year":"1997","unstructured":"Andrei Z Broder. 1997. On the Resemblance and Containment of Documents. In Proceedings Compression and Complexity of Sequences. IEEE."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.17487\/rfc2060"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1198255.1198257"},{"key":"e_1_3_2_1_13_1","volume-title":"Davis and Ernest Foo","author":"Jonathan","year":"2016","unstructured":"Jonathan J. Davis and Ernest Foo. 2016. Automated Feature Engineering for HTTP Tunnel Detection. Computers and Security (2016)."},{"key":"e_1_3_2_1_14_1","volume-title":"Tipping Point","author":"Dhamankar Rohit","year":"2007","unstructured":"Rohit Dhamankar and Rob King. 2007. Protocol Identification via Statistical Analysis (PISA). White Paper, Tipping Point (2007)."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"crossref","unstructured":"T. Dierks and E. Rescorla. 2008. The Transport Layer Security (TLS) Protocol Version 1.2. RFC 5246. IETF. https:\/\/tools.ietf.org\/html\/rfc5246","DOI":"10.17487\/rfc5246"},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.5220\/0005740704070414"},{"key":"e_1_3_2_1_17_1","volume-title":"Dynamic Application-Layer Protocol Analysis for Network Intrusion Detection. In 15th USENIX Security Symposium.","author":"Dreger Holger","year":"2006","unstructured":"Holger Dreger, Anja Feldmann, Michael Mai, Vern Paxson, and Robin Sommer. 2006. Dynamic Application-Layer Protocol Analysis for Network Intrusion Detection. In 15th USENIX Security Symposium."},{"key":"e_1_3_2_1_18_1","volume-title":"AutoGluon-Tabular: Robust and Accurate AutoML for Structured Data. arXiv preprint arXiv:2003.06505","author":"Erickson Nick","year":"2020","unstructured":"Nick Erickson, Jonas Mueller, Alexander Shirkov, Hang Zhang, Pedro Larroy, Mu Li, and Alexander Smola. 2020. AutoGluon-Tabular: Robust and Accurate AutoML for Structured Data. arXiv preprint arXiv:2003.06505 (2020)."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.measurement.2016.10.001"},{"key":"e_1_3_2_1_20_1","volume-title":"Support Vector Machines for TCP Traffic Classification. Computer Networks 53","author":"Este Alice","year":"2009","unstructured":"Alice Este, Francesco Gringoli, and Luca Salgarelli. 2009. Support Vector Machines for TCP Traffic Classification. Computer Networks 53 (2009)."},{"key":"e_1_3_2_1_21_1","volume-title":"Proceedings of the 13th International Joint Conference on Artificial Intelligence.","author":"Fayyad Usama","year":"1993","unstructured":"Usama Fayyad and Keki Irani. 1993. Multi-Interval Discretization of Continuous-Valued Attributes for Classification Learning. In Proceedings of the 13th International Joint Conference on Artificial Intelligence."},{"key":"e_1_3_2_1_22_1","volume-title":"Statistical Clustering of Internet Communication Patterns. Computing Science and Statistics 35","author":"Hern\u00e1ndez-Campos F\u00e9lix","year":"2003","unstructured":"F\u00e9lix Hern\u00e1ndez-Campos, AB Nobel, FD Smith, and K Jeffay. 2003. Statistical Clustering of Internet Communication Patterns. Computing Science and Statistics 35 (2003)."},{"key":"e_1_3_2_1_23_1","unstructured":"Jordan Holland Paul Schmitt Nick Feamster and Prateek Mittal. [n. d.]. nPrint. https:\/\/nprint.github.io\/nprint\/. Accessed: 2021-05-19."},{"key":"e_1_3_2_1_24_1","volume-title":"nPrint: A Standard Data Representation for Network Traffic Analysis. arXiv preprint arXiv:2008.02695","author":"Holland Jordan","year":"2020","unstructured":"Jordan Holland, Paul Schmitt, Nick Feamster, and Prateek Mittal. 2020. nPrint: A Standard Data Representation for Network Traffic Analysis. arXiv preprint arXiv:2008.02695 (2020)."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1298306.1298349"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSAA.2015.7344858"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080119"},{"key":"e_1_3_2_1_28_1","volume-title":"Complexity of Computer Computations","author":"Karp Richard M","unstructured":"Richard M Karp. 1972. Reducibility Among Combinatorial Problems. In Complexity of Computer Computations. Springer."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/1544012.1544023"},{"key":"e_1_3_2_1_30_1","volume-title":"Sujni Paul, and Hossam Faris.","author":"Kiwanuka Fred N","year":"2019","unstructured":"Fred N Kiwanuka, Ja'far Alqatawna, Anang Hudaya Muhamad Amin, Sujni Paul, and Hossam Faris. 2019. Towards Automated Comprehensive Feature Engineering for Spam Detection.. In ICISSP. 429--437."},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"crossref","unstructured":"John Klensin et al. 2001. Simple Mail Transfer Protocol. RFC 2821. IETF. https:\/\/tools.ietf.org\/html\/rfc2821","DOI":"10.17487\/rfc2821"},{"key":"e_1_3_2_1_32_1","unstructured":"Sung kyung Park Azqa Nadeem and Sicco Verwer. 2021. MalPaCA Feature Engineering-A comparative analysis between automated feature engineering and manual feature engineering on network traffic. (2021)."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/1921168.1921180"},{"key":"e_1_3_2_1_34_1","volume-title":"Application Classification using Packet Size Distribution and Port Association. Journal of Network and Computer Applications 32","author":"Lin Ying-Dar","year":"2009","unstructured":"Ying-Dar Lin, Chun-Nan Lu, Yuan-Cheng Lai, Wei-Hao Peng, and Po-Ching Lin. 2009. Application Classification using Packet Size Distribution and Port Association. Journal of Network and Computer Applications 32 (2009)."},{"key":"e_1_3_2_1_35_1","volume-title":"FS-Net: A Flow Sequence Network For Encrypted Traffic Classification. In IEEE INFOCOM - IEEE Conference on Computer Communications.","author":"Liu Chang","year":"2019","unstructured":"Chang Liu, Longtao He, Gang Xiong, Zigang Cao, and Zhen Li. 2019. FS-Net: A Flow Sequence Network For Encrypted Traffic Classification. In IEEE INFOCOM - IEEE Conference on Computer Communications."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2747560"},{"key":"e_1_3_2_1_37_1","volume-title":"Ramin Shirali Hossein Zade, and Mohammdsadegh Saberian.","author":"Lotfollahi Mohammad","year":"2020","unstructured":"Mohammad Lotfollahi, Mahdi Jafari Siavoshani, Ramin Shirali Hossein Zade, and Mohammdsadegh Saberian. 2020. Deep Packet: A Novel Approach for Encrypted Traffic Classification using Deep Learning. Soft Computing 24 (2020)."},{"key":"e_1_3_2_1_38_1","volume-title":"High Performance Traffic Classification based on Message Size Sequence and Distribution. Journal of Network and Computer Applications 76","author":"Lu Chun-Nan","year":"2016","unstructured":"Chun-Nan Lu, Chun-Ying Huang, Ying-Dar Lin, and Yuan-Cheng Lai. 2016. High Performance Traffic Classification based on Message Size Sequence and Distribution. Journal of Network and Computer Applications 76 (2016)."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24668-8_21"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"crossref","unstructured":"David McGrew. 2008. An Interface and Algorithms for Authenticated Encryption. RFC 5116. IETF. https:\/\/tools.ietf.org\/html\/rfc5116","DOI":"10.17487\/rfc5116"},{"key":"e_1_3_2_1_41_1","unstructured":"Leonel Aguilar Melgar David Dao Shaoduo Gan Nezihe Merve G\u00fcrel Nora Hollenstein Jiawei Jiang Bojan Karlas Thomas Lemmin Tian Li Yang Li Xi Rao Johannes Rausch C\u00e9dric Renggli Luka Rimanic Maurice Weber Shuai Zhang Zhikuan Zhao Kevin Schawinski Wentao Wu and Ce Zhang. 2021. Ease.ML: A Lifecycle Management System for Machine Learning. In CIDR."},{"key":"e_1_3_2_1_42_1","volume-title":"Toward the Accurate Identification of Network Applications. In International Workshop on Passive and Active Network Measurement. Springer.","author":"Moore Andrew W","year":"2005","unstructured":"Andrew W Moore and Konstantina Papagiannaki. 2005. Toward the Accurate Identification of Network Applications. In International Workshop on Passive and Active Network Measurement. Springer."},{"key":"e_1_3_2_1_43_1","volume-title":"Proceedings of the ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems.","author":"Moore Andrew W","year":"2005","unstructured":"Andrew W Moore and Denis Zuev. 2005. Internet Traffic Classification using Bayesian Analysis Techniques. In Proceedings of the ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems."},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.17487\/rfc1939"},{"key":"e_1_3_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2008.080406"},{"key":"e_1_3_2_1_46_1","volume-title":"Identification over encrypted Channels. BlackHat USA","author":"Niemczyk Brandon","year":"2014","unstructured":"Brandon Niemczyk and Prasad Rao. 2014. Identification over encrypted Channels. BlackHat USA (2014)."},{"key":"e_1_3_2_1_47_1","volume-title":"Bro: a System for Detecting Network Intruders in Real-Time. Computer Networks 31","author":"Paxson Vern","year":"1999","unstructured":"Vern Paxson. 1999. Bro: a System for Detecting Network Intruders in Real-Time. Computer Networks 31 (1999). http:\/\/www.icir.org\/vern\/papers\/bro-CN99.pdf"},{"key":"e_1_3_2_1_48_1","volume-title":"Effective Packet Number for Early Stage Internet Traffic Identification. Neurocomputing 156","author":"Peng Lizhi","year":"2015","unstructured":"Lizhi Peng, Bo Yang, and Yuehui Chen. 2015. Effective Packet Number for Early Stage Internet Traffic Identification. Neurocomputing 156 (2015)."},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2015.32"},{"key":"e_1_3_2_1_50_1","volume-title":"Proceedings of the Workshop on Network Meets AI & ML.","author":"Qin Meng","year":"2019","unstructured":"Meng Qin, Kai Lei, Bo Bai, and Gong Zhang. 2019. Towards a Profiling View for Unsupervised Traffic Classification by Exploring the Statistic Features and Link Patterns. In Proceedings of the Workshop on Network Meets AI & ML."},{"key":"e_1_3_2_1_51_1","unstructured":"Eric Rescorla. 2015. 0-RTT and Anti-Replay (IETF TLS working group mailing list)."},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"crossref","unstructured":"E. Rescorla. 2018. The Transport Layer Security (TLS) Protocol Version 1.3. RFC 8446. IETF. https:\/\/tools.ietf.org\/html\/rfc8446","DOI":"10.17487\/RFC8446"},{"key":"e_1_3_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2019.1800819"},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028805"},{"key":"e_1_3_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1002\/nem.1981"},{"key":"e_1_3_2_1_56_1","volume-title":"Use of the 'Perceptron' Algorithm to Distinguish Translational Initiation Sites in E. Coli. Nucleic Acids Research 10","author":"Stormo Gary D","year":"1982","unstructured":"Gary D Stormo, Thomas D Schneider, Larry Gold, and Andrzej Ehrenfeucht. 1982. Use of the 'Perceptron' Algorithm to Distinguish Translational Initiation Sites in E. Coli. Nucleic Acids Research 10 (1982)."},{"key":"e_1_3_2_1_57_1","unstructured":"WAND. [n. d.]. Network research group. https:\/\/wand.net.nz\/. Accessed: 2020-09-28."},{"key":"e_1_3_2_1_58_1","volume-title":"End-to-End Encrypted Traffic Classification with One-Dimensional Convolution Neural Networks. In IEEE International Conference on Intelligence and Security Informatics (ISI).","author":"Wang Wei","year":"2017","unstructured":"Wei Wang, Ming Zhu, Jinlin Wang, Xuewen Zeng, and Zhongzhen Yang. 2017. End-to-End Encrypted Traffic Classification with One-Dimensional Convolution Neural Networks. In IEEE International Conference on Intelligence and Security Informatics (ISI)."},{"key":"e_1_3_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICOIN.2017.7899588"},{"key":"e_1_3_2_1_60_1","volume-title":"Unknown Pattern Extraction for Statistical Network Protocol Identification. In IEEE 40th Conference on Local Computer Networks.","author":"Wang Yu","year":"2015","unstructured":"Yu Wang, Chao Chen, and Yang Xiang. 2015. Unknown Pattern Extraction for Statistical Network Protocol Identification. In IEEE 40th Conference on Local Computer Networks."},{"key":"e_1_3_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-21554-4_1"},{"key":"e_1_3_2_1_62_1","volume-title":"The Applications of Deep Learning on Traffic Identification. BlackHat USA","author":"Wang Zhanyi","year":"2015","unstructured":"Zhanyi Wang. 2015. The Applications of Deep Learning on Traffic Identification. BlackHat USA (2015)."},{"key":"e_1_3_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/1179576.1179584"},{"key":"e_1_3_2_1_64_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2012.6195649"},{"key":"e_1_3_2_1_65_1","doi-asserted-by":"crossref","unstructured":"Tatu Ylonen and Chris Lonvick. 2006. The Secure Shell (SSH) Connection Protocol. RFC 4254. IETF. https:\/\/tools.ietf.org\/html\/rfc4254","DOI":"10.17487\/rfc4254"},{"key":"e_1_3_2_1_66_1","doi-asserted-by":"crossref","unstructured":"Tatu Ylonen and Chris Lonvick. 2006. The Secure Shell (SSH) Transport Layer Protocol. RFC 4253. IETF. https:\/\/tools.ietf.org\/html\/rfc4253","DOI":"10.17487\/rfc4253"},{"key":"e_1_3_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10796-008-9131-2"},{"key":"e_1_3_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.1109\/LCN.2005.35"},{"key":"e_1_3_2_1_69_1","volume-title":"Robust Network Traffic Classification","author":"Zhang Jun","year":"2014","unstructured":"Jun Zhang, Xiao Chen, Yang Xiang, Wanlei Zhou, and Jie Wu. 2014. Robust Network Traffic Classification. IEEE\/ACM Transactions on Networking 23 (2014)."}],"event":{"name":"ACM SIGCOMM '23: ACM SIGCOMM 2023 Conference","location":"New York NY USA","acronym":"ACM SIGCOMM '23","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication"]},"container-title":["Proceedings of the ACM SIGCOMM 2023 Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3603269.3604840","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3603269.3604840","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:46:42Z","timestamp":1750178802000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3603269.3604840"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,9]]},"references-count":69,"alternative-id":["10.1145\/3603269.3604840","10.1145\/3603269"],"URL":"https:\/\/doi.org\/10.1145\/3603269.3604840","relation":{},"subject":[],"published":{"date-parts":[[2023,9]]},"assertion":[{"value":"2023-09-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}