{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,28]],"date-time":"2025-09-28T20:44:30Z","timestamp":1759092270977,"version":"3.37.3"},"reference-count":18,"publisher":"Wiley","license":[{"start":{"date-parts":[[2018,12,16]],"date-time":"2018-12-16T00:00:00Z","timestamp":1544918400000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"National Key R&D Program of China","award":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"],"award-info":[{"award-number":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"]}]},{"name":"National Key R&D Program of China","award":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"],"award-info":[{"award-number":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"]}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"],"award-info":[{"award-number":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"],"award-info":[{"award-number":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"],"award-info":[{"award-number":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"],"award-info":[{"award-number":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Jiangsu Provincial Scientific and Technological Achievements Transfer Fund","award":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"],"award-info":[{"award-number":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"]}]},{"name":"Jiangsu Provincial Key Laboratory of Network and Information Security","award":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"],"award-info":[{"award-number":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"]}]},{"DOI":"10.13039\/501100002338","name":"Ministry of Education of the People's Republic of China","doi-asserted-by":"publisher","award":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"],"award-info":[{"award-number":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"]}],"id":[{"id":"10.13039\/501100002338","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Collaborative Innovation Center of Novel Software Technology and Industrialization","award":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"],"award-info":[{"award-number":["2018YFB0803400","2017YFB1003000","61572130","61502100","61532013","61632008","BA2016052","BM2003201","93K-9"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Security and Communication Networks"],"published-print":{"date-parts":[[2018,12,16]]},"abstract":"<jats:p>For intrusion detection, it is increasingly important to detect the suspicious entities and potential threats. In this paper, we introduce the identification technologies of network entities to detect the potential intruders. However, traditional entities identification technologies based on the MAC address, IP address, or other explicit identifiers can be deactivated if the identifier is hidden or tampered. Meanwhile, the existing fingerprinting technology is also restricted by its limited performance and excessive time lapse. In order to realize entities identification in high-speed network environment, PFQ kernel module and Storm are used for high-speed packet capture and online traffic analysis, respectively. On this basis, a novel device fingerprinting technology based on runtime environment analysis is proposed, which employs logistic regression to implement online identification with a sliding window mechanism, reaching a recognition accuracy of 77.03% over a 60-minute period. In order to realize cross-device user identification, Web access records, domain names in DNS responses, and HTTP User-Agent information are extracted to constitute user behavioral fingerprints for online identification with Multinomial Naive Bayes model. When the minimum effective feature dimension is set to 9, it takes only 5 minutes to reach an accuracy of 79.51%. Performance test results show that the proposed methods can support over 10Gbps traffic capture and online analysis, and the system architecture is justified in practice because of its practicability and extensibility.<\/jats:p>","DOI":"10.1155\/2018\/6124160","type":"journal-article","created":{"date-parts":[[2018,12,16]],"date-time":"2018-12-16T18:30:40Z","timestamp":1544985040000},"page":"1-15","source":"Crossref","is-referenced-by-count":2,"title":["Fingerprinting Network Entities Based on Traffic Analysis in High-Speed Network Environment"],"prefix":"10.1155","volume":"2018","author":[{"given":"Xiaodan","family":"Gu","sequence":"first","affiliation":[{"name":"School of Computer Science and Engineering, Southeast University, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8209-1000","authenticated-orcid":true,"given":"Ming","family":"Yang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Southeast University, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yiting","family":"Zhang","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Southeast University, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Peilong","family":"Pan","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Southeast University, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9691-8702","authenticated-orcid":true,"given":"Zhen","family":"Ling","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Southeast University, Nanjing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"311","reference":[{"first-page":"18","volume-title":"Anomaly-based network intrusion detection: Techniques, systems and challenges","year":"2009","key":"1"},{"key":"2","doi-asserted-by":"publisher","DOI":"10.1109\/surv.2013.052213.00046"},{"year":"2018","key":"4"},{"key":"5","doi-asserted-by":"publisher","DOI":"10.1145\/2379776.2379782"},{"key":"11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-14527-8_1"},{"issue":"3","key":"16","doi-asserted-by":"crossref","first-page":"28","DOI":"10.1109\/MSP.2013.160","volume":"12","year":"2014","journal-title":"IEEE Security & Privacy"},{"key":"18","doi-asserted-by":"publisher","DOI":"10.1515\/popets-2015-0027"},{"key":"19","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2016.2626395"},{"key":"21","doi-asserted-by":"publisher","DOI":"10.1504\/IJBM.2008.018665"},{"key":"23","doi-asserted-by":"publisher","DOI":"10.1111\/j.1467-9574.2009.00434.x"},{"year":"2006","key":"25"},{"key":"26","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2010.03.001"},{"key":"27","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-03748-1_1"},{"key":"28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-27937-9_10"},{"key":"29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-30436-1_20"},{"key":"30","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.03.012"},{"key":"31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28865-9_19"},{"key":"32","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.3891"}],"container-title":["Security and Communication Networks"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2018\/6124160.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2018\/6124160.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/scn\/2018\/6124160.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2018,12,16]],"date-time":"2018-12-16T18:30:53Z","timestamp":1544985053000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.hindawi.com\/journals\/scn\/2018\/6124160\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,12,16]]},"references-count":18,"alternative-id":["6124160","6124160"],"URL":"https:\/\/doi.org\/10.1155\/2018\/6124160","relation":{},"ISSN":["1939-0114","1939-0122"],"issn-type":[{"type":"print","value":"1939-0114"},{"type":"electronic","value":"1939-0122"}],"subject":[],"published":{"date-parts":[[2018,12,16]]}}}