Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Hao Fu 0030

dblp:64/3069-30 · DBLP profile ↗
← Back
1ranked-venue papers
1as first author
1since 2021 · last 2025
0009-0001-6873-2609ORCID · verified

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 1 · 1 first-author · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Network security · 100%
Computer networks
1 paper
Network measurement and analytics · 100%

Topics — the 5 heaviest of 5, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Network security › intrusion detection and prevention › intrusion detection › malicious traffic detection
encrypted malicious traffic detection
0.912025
Flow Microelement-Driven Traffic Relationship Analysis: Robust Detection of Malicious Encrypted Traffic · IEEE Trans. Inf. Forensics Secur. 2025
Network security › traffic analysis
encrypted traffic analysis
0.912025
Flow Microelement-Driven Traffic Relationship Analysis: Robust Detection of Malicious Encrypted Traffic · IEEE Trans. Inf. Forensics Secur. 2025
Network security › intrusion detection and prevention
intrusion detection
0.912025
Flow Microelement-Driven Traffic Relationship Analysis: Robust Detection of Malicious Encrypted Traffic · IEEE Trans. Inf. Forensics Secur. 2025
Network security › intrusion detection and prevention › intrusion detection › anomaly detection
unsupervised anomaly detection
0.912025
Flow Microelement-Driven Traffic Relationship Analysis: Robust Detection of Malicious Encrypted Traffic · IEEE Trans. Inf. Forensics Secur. 2025
Network measurement and analytics › traffic analysis
traffic correlation analysis
0.312025
Flow Microelement-Driven Traffic Relationship Analysis: Robust Detection of Malicious Encrypted Traffic · IEEE Trans. Inf. Forensics Secur. 2025

Methods — techniques the papers use, named apart from their topics

siamese neural network · 1.7reputation-enhanced dynamic detection · 1.7
YearPublicationVenuePosition
2025 Flow Microelement-Driven Traffic Relationship Analysis: Robust Detection of Malicious Encrypted Traffic
abstract
Encryption technologies randomize network communication to protect user privacy. However, attackers exploit encrypted traffic to conceal malicious activities. The existing detection methods rely primarily on traffic content or interactive patterns. Nevertheless, static methods can be easily obfuscated by advanced attacks. Since the set of potential attacks is open and infinite, models regularly lose effectiveness against novel attacks. Robust encrypted malicious traffic detection remains a valuable research area. In this paper, we propose BSTS-Net, a robust unsupervised encrypted malicious traffic detection model based entirely on traffic relations. The key motivations are to construct a relation-based traffic contextual representation and to establish dynamic baselines for anomaly detection. To represent local relations within flows, we innovatively introduce the concept of traffic microelements, which capture fine-grained interaction pattern relations. To integrate the global relationships between flows, we construct a traffic microelement space based on the Siamese neural network. Three optimization functions are proposed to optimize the intraservice, interservice and internode relations. For robust detection, we introduce a reputation-enhanced dynamic encrypted traffic detection algorithm that constructs dynamic baselines and continuously detects novel anomalies. We evaluate BSTS-Net through extensive experiments on three datasets and compare it with seven SOTA methods. Our results demonstrate its superiority, with an F1 score of more than 99.63% across all the datasets in multiclassification scenarios. Additionally, we simulate three adversarial scenarios for robustness analysis. Although the baseline methods experience an F1 score degradation of 32.21%, BSTS-Net achieves high performance, with only 1% degradation.
Hao Fu 0030, Degang Sun, Jinxia Wei, Chun Long
IEEE Trans. Inf. Forensics Secur.1