arXiv.itsnick.co

an independent field guide to 23 million papers from arXiv & OpenAlex — not affiliated with arXiv.org

Author

Linna Fan

20 papers · 2011–2025

2011: 12012: 12013: 12014: 02015: 12016: 02017: 02018: 22019: 02020: 22021: 02022: 12023: 22024: 62025: 3
2011peak 6 in 20242025

Frequent co-authors

Papers

showing 1–20 of 20 RSS

An IoT Device Identification Method based on Semi-supervised Learning

Linna Fan, Shize Zhang, Yichao Wu +4 more

Computer Networks and Communications · · cited 43× · DOI ↗ · more like this ·

With the rapid proliferation of IoT devices, device management and network security are becoming significant challenges. Knowing how many IoT devices are in the network and whether they are behaving normally is significant. IoT device identification is the first step to achieve these goals. Previous IoT identification works mainly use supervised learning and need lots of labeled data. Considering collecting labeled data is time-consuming and cannot be scaled, in this paper, we propose an IoT identification model based on semi-supervised learning. The model can differentiate IoT and non-IoT and classify specific IoT devices based on time interval features, traffic volume features, protocol features and TLS related features. The evaluation in a public dataset shows that our model only needs 5% labeled data and gets accuracy over 99%.

<i>AutoIoT</i>: Automatically Updated IoT Device Identification With Semi-Supervised Learning

Linna Fan, Lin He, Yichao Wu +6 more

Signal Processing · IEEE Transactions on Mobile Computing · · cited 32× · DOI ↗ · more like this ·

IoT devices bring great convenience to a person's life and industrial production. However, their rapid proliferation also troubles device management and network security. Network administrators usually need to know how many IoT devices are in the network and whether they behave normally. IoT device identification is the first step to achieving these goals. Previous IoT device identification methods reach high accuracy in a closed environment. But they are not applicable in the continuously changing environment. When new types of devices are plugged in, they cannot update themselves automatically. Besides, they usually rely on supervised learning and need lots of labeled data, which is costly. To solve these problems, we propose a novel IoT device identification model named <i>AutoIoT</i> , updating itself automatically when new types of devices are plugged in. Besides, it only needs a…

A Quantum-Resistant Identity Authentication and Key Agreement Scheme for UAV Networks Based on Kyber Algorithm

Tao Xia, Menglin Wang, Jun He +3 more

Computer Networks and Communications · Drones · · cited 13× · DOI ↗ · more like this ·

Unmanned aerial vehicles (UAVs) play a critical role in various fields, including logistics, agriculture, and rescue operations. Effective identity authentication and key agreement schemes are vital for UAV networks to combat threats. Current schemes often employ algorithms like elliptic curve cryptography (ECC) and Rivest–Shamir–Adleman (RSA), which are vulnerable to quantum attacks. To address this issue, we propose LIGKYX, a novel scheme combining the quantum-resistant Kyber algorithm with the hash-based message authentication code (HMAC) for enhanced security and efficiency. This scheme enables the mutual authentication between UAVs and ground stations and supports secure session key establishment protocols. Additionally, it facilitates robust authentication and key agreement among UAVs through control stations, addressing the critical challenge of quantum-resistant security in UAV…

Which Doors Are Open: Reinforcement Learning-based Internet-wide Port Scanning

Guanglei Song, Lin He, Tianyun Zhao +6 more

Computer Networks and Communications · · cited 11× · DOI ↗ · more like this ·

Internet-wide scanning is a commonly used research technique in various network surveys, such as measuring service deployment and security vulnerabilities. However, these network surveys are limited to the given port set, not comprehensively obtaining the real network landscape, and even misleading survey conclusions. In this work, we introduce PMap, a port scanning tool that efficiently discovers the majority of open ports from all 65K ports in the whole network. PMap uses the correlation of ports to build an open port correlation graph of each network, using a reinforcement learning framework to update the correlation graph based on feedback results and dynamically adjust the order of port scanning. Compared to current port scanning methods, PMap achieves better performance on hit rate, coverage, and intrusiveness. Our experiments over real-world networks show that PMap can find 90%…

ProbeGeo: A Comprehensive Landmark Mining Framework Based on Web Content

Jinlei Lin, Chenglong Li, Wenwen Gong +4 more

Signal Processing · IEEE/ACM Transactions on Networking · · cited 9× · DOI ↗ · more like this ·

IP geolocation is essential for various location-aware Internet applications. High-quality IP geolocation landmarks play a decisive role in IP geolocation accuracy. However, the previous research works focusing on mining landmarks from the Internet are hampered by limited quantity, poor coverage, and insufficient landmark quality. In this paper, we present a new framework called ProbeGeo to mine high-quality landmarks automatically. We divide landmarks into common landmarks and probe landmarks, providing systematic mining methods based on online retrieval and web content. ProbeGeo expands traditional common landmarks by taking advantage of the exposure of multiple IoT (Internet of Things) devices on the Internet, mining them based on search engines and webpage contents. Common landmarks, consisting of multi-type devices, significantly improve landmark quantity and coverage. Furthermore…

GraphIoT: Accurate IoT Identification based on Heterogeneous Graph

Linna Fan, Lin He, Xiaoqing Sun +5 more

Artificial Intelligence · · cited 6× · DOI ↗ · more like this ·

IoT devices deployed on campus and enterprise networks facilitate people's lives and work. However, these devices also bring serious network asset management and security management problems. IoT device identification is the premise to solve these problems. Although current IoT identification methods can identify devices with relatively high accuracy in ideal environments, it is difficult to accurately identify devices in real-world complex environments (e.g., campus networks, enterprise networks). Therefore, we propose to use exact features. To solve the problem of different dimensions of exact features, we creatively model the IoT identification problem as a heterogeneous graph representation learning problem and design a new representation learning algorithm. We are the first to propose an approach to accurately identify IoT devices in real-world complex environments and solve this…

Binary Software Randomization Method Based on LLVM

Bo Wu, Yufeng Ma, Linna Fan +1 more

Artificial Intelligence · 2018 IEEE International Conference of Safety Produce Informatization (IICSPI) · · cited 6× · DOI ↗ · more like this ·

In order to build software security defense system that is easy to keep and hard to compromise, based on the idea of moving target defense, a binary software randomization method was designed and implemented to resist the attacks of software vulnerabilities. Firstly, the binary software was represented by function equivalence LLVM IR, then the converted LLVM IR was processed by procedures such as instruction replacement, redundant inserting, and CFG reconstruction, finally, the processed LLVM IR was compiled to binary software, so the generated binary software has characteristics of randomization to effectively resist the attacks based on software vulnerabilities. By carrying out random transformation on the binary software, the transformed software shows uncertainty from static analysis and dynamic aspects, which makes it difficult to analyze and attack, effectively resist the…

The Development and New Direction of Digital Image Stenography

He Huang, Yinghui Xue, Linna Fan +1 more

Computer Vision and Pattern Recognition · · cited 3× · DOI ↗ · more like this ·

In order to promote the development of digital image steganography, the status and new direction of digital image stenography is analyzed. This paper summarized the development of traditional digital image steganography and illustrated that steganography based on adversarial example and steganography based on Generative Adversarial Networks are new directions in the field. Besides, the importance of digital image steganography and steganography analysis in the field of information security is also analyzed, and the method of steganography analysis for detecting and judging the secret information contained in the image is discussed. The paper also analyzed the current problem and proposed the future improvement direction.

<i>HGExplainer</i>: Heterogeneous Graph Explainer for IoT Device Identification

Linna Fan, Bo Wu, Xuan Shen +6 more

Signal Processing · IEEE Transactions on Mobile Computing · · cited 2× · DOI ↗ · more like this ·

IoT device identification is vital for network asset and security management. However, existing methods use statistical features that can not identify IoT devices accurately in complex network environments. <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">GraphIoT</i> proposes using non-statistical features and building a heterogeneous graph neural network to identify IoT devices accurately. However, heterogeneous graph neural networks lack interpretability, which reduces trust in the model. Besides, it is difficult to deploy on resource-constrained devices, limiting the broad application of IoT device identification. To make IoT device identification interpretable, easy to deploy, and with high accuracy, we get the interpretation results of <italic xmlns:mml="http://www.w3.org/1998/Math/MathML"…

MEDA: MoE-based Concept Drift Adaptation for In-vehicle Network Intrusion Detection

Gang Yang, Weifeng Mou, Tao Xia +1 more

Computer Networks and Communications · · cited 2× · DOI ↗ · more like this ·

Recent years have witnessed the increasing popularity of Internet of Vehicles (IoV), meanwhile the number of cyber threats have surged significantly. Various approaches have been previously proposed to mitigate the potential cyber threats within in-vehicle network. However, the concept drifts derived from ever-evolving offensive tactics bring challenges to the pre-builit detection system, resulting in the degradation of detection performance under real-world setting. In this paper, we propose a concept drift adaptation framework MEDA based on Mixture of Experts (MoE) method for constructing a real-time self-updating intrusion detection system on in-vehicle network data. We use the combinations of several drift detection and adaption methods as individual experts, and leverage a gating function to determine the probability and weights of adopting each expert module. Experiments conducted…

AdvOcl: Naturalistic Clothing Pattern Adversarial to Person Detectors in Occlusion

Zhitong Lu, Duohe Ma, Linna Fan +2 more

Computer Vision and Pattern Recognition · · cited 2× · DOI ↗ · more like this ·

Automated surveillance cameras equipped with intelligent person detection systems are believed to have reached the maturity required for deployment in Intelligent Transport Systems, Intelligent Plants, and so on. However, recent studies have revealed that Deep Learning Neural Networks (DNN), on which mainstream person detection models are built, are vulnerable to adversarial attacks. Several methods have been proposed to generate adversarial patches that can evade person detectors. Nevertheless, these methods have limitations, as these adversarial patches are either restricted to being presented without any occlusion and placed in the center of the person, or they are too large in size and standing-out in pattern to be easily ignored by human eyes. Therefore, the adversarial patches in previous works did not consider both robustness and stealthiness when human posture changes and the…

Enhance CVE Severity Prediction From Vulnerability Description with Auxiliary Sentence

Gang Yang, Jun He, Bo Wu +3 more

Computer Networks and Communications · · cited 1× · DOI ↗ · more like this ·

Vulnerability severity assessment is of paramount importance for the cybersecurity defense strategy, as it enables the timely identification of threats and their underlying capabilities, thereby maximizing the efficacy of defense actions. And natural language processing (NLP)-based methods are widely adopted to construct an end-to-end CVE severity predictor based on existing vulnerability description. However, the long-tail distribution in the sentence length and word frequency of vulnerability description significantly hampers the performance of current methodologies. Coping with this challenge, we introduce CVSS-Predictor-AS, which mitigates the long-tail distribution by incorporating auxiliary sentences pertinent to the context of the text. The incorporation of auxiliary sentences rebalances the length distribution of descriptive sentences and addresses the information gaps…

Steganalysis of Content-Adaptive JPEG Steganography Based on CNN and 2D Gabor Filters

Xiaoyan Xu, Linna Fan, Rongcai Zhao

Computer Vision and Pattern Recognition · Proceedings of the 2018 2nd International Conference on Computer Science and Artificial Intelligence · · cited 1× · DOI ↗ · more like this ·

Aiming at the problem of choosing high-pass filters in image processing layer of deep CNN (Convolution Neural Network) for steganalysis, this paper studies the effect of different filter banks on detection performance for content-adaptive JPEG steganography, and proposes a steganalysis method based on multi-scale 2D Gabor filtering and ensemble of multiple deep CNNs. Firstly, the effect of high-pass filters of image processing layer on detection performance is studied and the detection errors corresponding to the different combinations of high-pass filters are shown, then the relevant experimental results are analyzed. Lastly, two typical content-adaptive JPEG steganography algorithms such as UED and J-UNIWARD are taken as examples, the proposed steganalysis method is compared with other methods to verify the effectiveness of the proposed method.

Mail Security Gateway Mechanism for Email Security

Linna Fan, Yufeng Ma, Wanli Kou +2 more

Artificial Intelligence · Advances in computer science research · · cited 1× · DOI ↗ · more like this ·

In order to solve the problem that email is not safe when transmitted in external link, the paper designed the Mail Security Gateway. It can encrypt and sign the email for its users and change the user as least as possible. The analysis shows that the Mail Security Gateway can provide security enhancement such as confidentiality, integrity, non repudiation and is very convenient to deploy in trans regional company.

Exploring Transferability Optimization Methods for Physical Adversarial Attacks in Object Detection in Real-World Scenarios

Zhitong Lu, Linna Fan, Duohe Ma +1 more

Artificial Intelligence · · cited 0× · DOI ↗ · more like this ·

The advent of deep neural networks (DNNs) and convolutional neural networks (CNNs) has revolutionized object detection by eliminating reliance on hand-crafted feature engineering and achieving near-human-level accuracy in specific domains. These advancements have enabled safety-critical applications such as autonomous driving, robotics, and video surveillance. Contemporary object detection methods predominantly employ DNNs as backbone architectures for hierarchical feature extraction, object classification, and spatial localization. However, their well-documented vulnerability to adversarial attacks raises significant concerns regarding security and reliability, particularly in physical-world deployments where environmental variables such as spatial deformations and illumination variations introduce additional constraints. Notably, adversarial examples demonstrate transferability across…

MalImgDA: Diffusion-based Data Augmentation for Long-tailed Malware Family Classification

Gang Yang, Jun He, Bo Wu +3 more

Computer Networks and Communications · · cited 0× · DOI ↗ · more like this ·

With the rapid improvement of machine learning technology, leveraging machine learning methods for malware classification has emerged as a viable approach. However, under real-world circumstance, the imbalanced or long-tailed distribution among various malware families, poses a critical challenge to classify such few-shot malware families, eliminating the effectiveness of trained classifier. In this paper, we propose MalImgDA, a novel data augmentation framework that leverages diffusion model-based approach to tackle the long-tailed malware family classification problem. By fine-tuning the pre-trained diffusion model on few-shot data, we synthesize analogous malware images from existing samples with high resemblance to target family. And then we can mingle synthetic samples with existing data to build a re-balanced dataset for classifier training. Particularly, by utilizing MalImgDA, we…

KI-Mix: Enhancing Cyber Threat Detection in Incomplete Supervision Setting Through Knowledge-informed Pseudo-anomaly Generation

Gang Yang, Bo Wu, Linna Fan +2 more

Information Systems · · cited 0× · DOI ↗ · more like this ·

Data-driven methodologies have exhibited remarkable performance in identifying various cyber threats. However, obtaining well-labeled training samples is enormously expensive and often challenging when tackling practical cyber-security problems, due to the cost and difficulties in data annotation. To address this issue, we propose KI-Mix, a novel pseudo-anomaly generation algorithm for cyber threat detection on the basis of the limited labeled anomalies and a large volume of unlabeled data. In a nutshell, KI-Mix incorporates security domain knowledge into data interpolation to capture more labeled data to facilitate semi-supervised detection on cyber anomalies. We compare the performance of KI-Mix with several commonly applied augmentation techniques, such as Mixup and CutMix to evaluate its effectiveness in limited annotated data settings. Through extensive experiments on five security…

Design and Implementation of LAN-Sensitive Information Interception and Analysis System

Shao Feng Lin, Wei Sun, Linna Fan +1 more

Computer Networks and Communications · Applied Mechanics and Materials · · cited 0× · DOI ↗ · more like this ·

The LAN usually hides internal network structure by NAT to share a public IP address in the internal network, and thus it is hard to locate the source host precisely distributing sensitive information for a large-scale information monitoring system by analyzing the intercepted packets. So it is hard to fulfill monitoring work efficiently. This paper puts forward a scheme to intercept and analyze the sensitive information in the LAN environment. It studies the ARP spoofing principle and the sniffer technology based on WINPCAP. The scheme includes 7 modules named NIC capture module, packet filtering module and so on. And it achieves sensitive information filtering and matching by the configured rules, such as "keywords", "URL", "QQ number" and so on. The scheme provides a solution for tracking the source host leaking sensitive information within the LAN.

Analysis and Detection of Features of Botnet Flows Based on TCP Sessions

Linna Fan

Computer Networks and Communications · · cited 0× · OpenAlex ↗ · more like this ·

Botnet is one of the severe threats to the Internet and the precondition to destroy it is to successfully uncover the flows of the bots.The TCP sessions between the controller and the bots were analyzed,and the features of TCP sessions extracted and the bots' sessions and normal sessions effectively distinguished.The definition of the TCP session was presented and the flows of the Botnet was detected based on the features of the TCP sessions.

A New Mechanism of Database Encryption

Linna Fan, Jun Liu

Artificial Intelligence · Applied Mechanics and Materials · · cited 0× · DOI ↗ · more like this ·

In order to improve the security of database system and resist threat from all aspects, especially the threat from database administrators, the paper designed a new database encryption system. In this system sensitive information is encrypted and establishes ciphertext address index table for it. Encryptions for character fields and numeric fields have different processing methods. Decryption key should be synthesized by both client and server. System can execute SQL query like equality queries, range queries and so on which are difficult to deal with after encryption. The analysis shows that the system has better security.