• Advanced passive operating system fingerprinting using machine learning and deep learning 

      Hagos, Desta Haileselassie; Løland, Martin V.; Yazidi, Anis; Kure, Øivind; Engelstad, Paal E. (International Conference on Computer Communications and Networks (ICCCN); 2020 29th International Conference on Computer Communications and Networks (ICCCN), Journal article; Peer reviewed, 2020-09-30)
      Securing and managing large, complex enterprise network infrastructure requires capturing and analyzing network traffic traces in real-time. An accurate passive Operating System (OS) fingerprinting plays a critical role ...
    • A General Formalism for Defining and Detecting OpenFlow Rule Anomalies 

      Aryan, Ramtin; Yazidi, Anis; Engelstad, Paal E.; Kure, Øivind (Chapter; Peer reviewed, 2017)
      SDN network's policies are updated dynamically at a high pace. As a result, conflicts between policies are prone to occur. Due to the large number of switches and heterogeneous policies within a typical SDN network, detecting ...
    • General TCP state inference model from passive measurements using machine learning techniques 

      Hagos, Desta Haileselassie; Engelstad, Paal E.; Yazidi, Anis; Kure, Øivind (IEEE Access;VOLUME 6, 2018, Journal article; Peer reviewed, 2018-05-04)
      Many applications in the Internet use the reliable end-to-end Transmission Control Protocol (TCP) as a transport protocol due to practical considerations. There are many different TCP variants widely in use, and each ...
    • A Machine Learning-based Tool for Passive OS Fingerprinting with TCP Variant as a Novel Feature 

      Hagos, Desta Haileselassie; Yazidi, Anis; Kure, Øivind; Engelstad, Paal (IEEE Internet of Things Journal;Volume: 8, Issue: 5, Peer reviewed; Journal article, 2020-09-15)
      With the emergence of Internet of Things (IoT), securing and managing large, complex enterprise network infrastructure requires capturing and analyzing network traffic traces in real-time. An accurate passive Operating ...
    • A parallel approach for detecting OpenFlow rule anomalies based on a general formalism 

      Aryan, Ramtin; Yazidi, Anis; Kure, Øivind; Engelstad, Paal E. (Concurrency and Computation;, Journal article; Peer reviewed, 2020-06-28)
      As the policies of a software-defined networking (SDN) network can be updated dynamically and often at a high pace, conflicts between policies can easily occur. Due to the large number of switches and heterogeneous policies ...
    • Recurrent Neural Network-Based Prediction of TCP Transmission States from Passive Measurements 

      Hagos, Desta Haileselassie; Engelstad, Paal E.; Yazidi, Anis; Kure, Øivind (2018 IEEE 17th International Symposium on Network Computing and Applications (NCA);, Chapter; Chapter; Peer reviewed, 2018-11-29)
      Long Short-Term Memory (LSTM) neural networks are a state-of-the-art techniques when it comes to sequence learning and time series prediction models. In this paper, we have used LSTM-based Recurrent Neural Networks (RNN) ...