KIEE - The Transactions of the Korean Institute of Electrical Engineers

Mandiant, cloud.google.com/blog/ko/topics/threat-intelligence/m-trends-2025, "M-Trends 2025," Google Cloud Blog, 2025.

Cisco Talos, 11 Nov. 2025. blog.talosintelligence.com/salt-typhoon-analysis/, "Seeing Inside the Vortex: Detecting Living off the Land Techniques," Cisco Talos Blog, 2025.

3

Symantec, broadcom.com/support/security-center/protection-bulletin/symbiote-and-bpfdoor-linux-malware-variants-implement-new-ebpf-filters, 2025., "Symbiote and BPFdoor Linux Malware Variants Implement New eBPF Filters," Protection Bulletin, Broadcom, 2025.

4

Yisroel Mirsky, "Kitsune: An Ensemble of Autoencoders for Online Network Intrusion Detection," 2018.

5

Junwon Lee, Heejo Lee, "An SSH Predictive Model Using Machine Learning with Web Proxy Session Logs," International Journal of Information Security, vol. 21, no. 2, pp. 311-322, 2021.

6

Muhammad Shafiq, "An Efficient Method to Detect Periodic Behavior in Botnet Traffic by Analyzing Control Plane Traffic," Journal of Advanced Research, vol. 5, no. 4, 2014.

7

Wei Wang, "End-to-End Encrypted Traffic Classification with One-Dimensional Convolutional Neural Networks," pp. 43-48, 2017.

8

Tal Shapira, Yuval Shavitt, "FlowPic: A Generic Representation for Encrypted Traffic Classification and Applications Identification," IEEE Transactions on Network and Service Management, 2021.

9

Gerard Draper-Gil, "Characterization of encrypted and vpn traffic using time-related," 2016.

10

Aristide Tanyi-Jong Akem, Guillaume Fraysse, Marco Fiore, e2320, "Real Time Encrypted Traffic Classification in Programmable Networks with P4 and Machine Learning," International Journal of Network Management, vol. 35, no. 1, 2025.

11

Adrian Pekar, Richard Plny, Karel Hynek, arXiv:2601.04089, "Tutorial on Flow-Based Network Traffic Classification Using Machine Learning," arXiv preprint, 2026.

12

Junwon Lee, Heejo Lee, "Improving SSH Detection Model Using IPA Time and WGAN-GP," Computers & Security, vol. 116, pp. 102672, 2022.

13

Scott M. Lundberg, Su-In Lee, "A Unified Approach to Interpreting Model Predictions," vol. 30, 2017.

14

X. Zhang, "Network Traffic Grant Classification Based on 1DCNN-TCN-GRU Hybrid Model," Applied Intelligence, 2024.

15

Wai Weng Lo, "XG-BoT: An Explainable Deep Graph Neural Network for Botnet Detection and Forensics," Internet of Things, 2022.

16

Tanzeela Altaf, "GNN-Based Network Traffic Analysis for the Detection of Sequential Attacks in IoT," Electronics, MDPI, vol. 13, no. 12, pp. 2274, 2024.

17

Chuampu Fu, Qi Li, Ke Xu, "Detecting Unknown Encrypted Malicious Traffic in Real Time via Flow Interaction Graph Analysis," ISOC, San Diego, CA, 2023.

18

Sadaf Sattar, "Anomaly detection in encrypted network traffic using self-supervised learning," Scientific Reports, vol. 15, no. 1, pp. 2658, 2025.

19

Przemyslaw Berezinski, "An Entropy-Based Network Anomaly Detection Method," Entropy, vol. 17, no. 4, 2015.

20

Nikolaos Peppes, "Evaluating Synthetic Malicious Network Traffic Generated by GAN and VAE Models: A Data Quality Perspective," Future Internet, vol. 17, no. 12, pp. 561, 2025.

21

Tongcan Lin, J. Wang, "RuleLLM: LLM-Driven Rule Generation for Anomaly Network Traffic Identification," The Computer Journal, 2026.

22

Furqan Rustam, "Few-Shot Retrieval-Augmented LLMs for Anomaly Detection in Network Traffic," Springer Nature Singapore, Singapore, 2025.

23

Il Hwan Ji, "Artificial Intelligence-Based Anomaly Detection Technology over Encrypted Traffic: A Systematic Literature Review," Sensors, vol. 24, no. 3, pp. 898, 2024.

24

Dong Gong, "Memorizing Normality to Detect Anomaly: Memory-Augmented Deep Autoencoder (MemAE)," 2019.

25

A. Pinto, "Enhancing Critical Infrastructure Security: Unsupervised Learning Approaches for Anomaly Detection," International Journal of Computational Intelligence Systems, vol. 17, pp. 236, 2024.

26

K. Yang, arXiv:2104.11146, "An Efficient One-Class SVM for Anomaly Detection in the Internet of Things," arXiv, 2021.

27

P. Bountzis, "A Deep One-Class Classifier for Network Anomaly Detection Using Autoencoders and One-Class Support Vector Machines," Frontiers in Computer Science, 2025.

28

K. E. Kampourakis, arXiv:2601.05022, "Knowledge-to-Data: LLM-Driven Synthesis of Structured Network Traffic for Testbed-Free IDS Evaluation," arXiv, 2025.

29

Xinjie Lin, "ET-BERT: A Contextualized Datagram Representation with Pre-training Transformers for Encrypted Traffic Classification," 2022.

30

T. Cui, arXiv:2504.04222, "TrafficLLM: Enhancing Large Language Models for Network Traffic Analysis with Generic Traffic Representation," arXiv, 2025.

31

Y. Ginige, "TrafficLLM: LLMs for Improved Open-Set Encrypted Traffic Analysis," Computer Networks, 2025.

32

Yongjun Huang, "MET-LLM: Enhancing Large Language Models for Malicious Encrypted Traffic Detection," Expert Systems with Applications, vol. 303, pp. 130621, 2025.

33

W. Lian, "RuleMaster+: LLM-Based Automated Rule Generation Framework for Intrusion Detection Systems," Chinese Journal of Electronics, vol. 34, no. 5, pp. 1402-1415, 2025.

34

Piyumi Bhagya Sudasinghe, "Lightweight LLMs for Network Attack Detection in IoT Networks," 2025.

35

J. Lee, [Online]. Available: https://github.com/junimirang/Synthetic-Network-Traffic-using-LLM, "Synthetic-Network-Traffic-using-LLM," GitHub, 2026.

KIEEThe Transactions of
the Korean Institute of Electrical Engineers

The Transactions of the Korean Institute of Electrical Engineers

ISO Journal TitleTrans. Korean. Inst. Elect. Eng.

Journal Search

Journal XML

References

KIEEThe Transactions ofthe Korean Institute of Electrical Engineers