The paper proposes a human-centered framework for validating the semantic soundness of machine learning models used in network traffic classification. It extends existing knowledge-generation methods by integrating data, models, explainability tools, visualizations, and expert reasoning to iteratively explore, verify, and refine model behavior and preprocessing steps. The framework is built on literature findings, benchmark analyses, XAI experience, and expert feedback, offering practical guidance for ensuring models learn trustworthy, semantically meaningful patterns rather than spurious correlations.
By Igor Cherepanov, David Sessler, Alex Ulmer, Thorsten May, J\"orn Kohlhammer
The paper introduces a spatio‑temporal traffic forecasting framework that fuses Graph Neural Networks with semantic knowledge from general-purpose knowledge graphs such as Wikidata. By generating embeddings that capture relationships like nearby points of interest, administrative hierarchies, and functional roles of locations, the framework creates additional adjacency matrices that enrich the sensor graph beyond physical connectivity. Experiments with established forecasting methods demonstrate that this external knowledge improves prediction accuracy and offers a path toward better interpretability.
By Mattis thor Straten, Yannick Wolker, Steffen Strohm, Prathvish Mithare, Ralf Krestel, Matthias Renz
arXiv:2606. 04517v1 Announce Type: cross Abstract: Graph-based deep learning methods have been widely employed in encrypted traffic analysis to exploit latent correlations across different granularities.
By Yuantu Luo, Jun Tao, Linxiao Yu, Guang Cheng
The paper introduces a spatio‑temporal traffic forecasting framework that fuses Graph Neural Networks with embeddings derived from a general‑purpose knowledge graph such as Wikidata. By creating semantic subgraphs around traffic sensors, the approach captures relationships like nearby points of interest, administrative hierarchies, and functional roles of locations, which are then integrated as additional adjacency matrices for the GNN. Experiments demonstrate that this external knowledge improves prediction accuracy beyond what street‑network data alone can achieve, while also offering a path toward better interpretability.
arXiv:2603.25507v2 Announce Type: replace-cross
Abstract: Network Traffic Classification (NTC) increasingly relies on data-driven models, yet its practical deployment is often constrained by limited...
By Giampaolo Bovenzi, Domenico Ciuonzo, Jonatan Krolikowski, Antonio Montieri, Alfredo Nascita, Antonio Pescap\`e, Dario Rossi
arXiv:2603. 11475v2 Announce Type: replace Abstract: Accurate prediction of multivariate time series is essential for emerging network intelligent control, observability, and management functions.
By Yufeng Xin, Ethan Fan
arXiv:2608.30745v1 Announce Type: new
Abstract: The widespread adoption of encrypted traffic poses severe challenges to current security situational awareness systems based on network traffic monitor...
By Ze Chen, Qiming Yu, Zijia Song, Guozheng Yang, Wei Yan
arXiv:2607. 15379v1 Announce Type: cross Abstract: Network anomaly detection is increasingly challenging due to the growing diversity and variability of traffic patterns, which are not always well captured by traditional statistical features.
By Iuri Mundstock, Abreu Quevedo, J\'eferson Campos Nobre, Roben C. Lunardi, Thiago L. T. da Silveira, Bruno L. Dalmazo
arXiv:2604. 16084v2 Announce Type: replace-cross Abstract: Traffic forecasting is a challenging spatio-temporal modeling task and a critical component of urban transportation management.
By Weijiang Xiong, Robert Fonod, Nikolas Geroliminis
Intent2Tc is a closed‑loop, language‑model‑driven framework that translates high‑level business traffic‑shaping intents into executable Linux traffic‑control (tc) configurations. It uses an AQM‑based digital twin semantic model, automated metadata extraction, critique‑driven refinement, and Retrieval‑Augmented Generation to improve semantic consistency and configuration reliability. Evaluation on 100 RFC 9315‑compliant intents shows high semantic fidelity and deployment readiness, with Claude Sonnet‑4.6 achieving 0.98 semantic similarity and 0.045 normalized edit distance, while RAG reduces token consumption and latency for compact models.
By Andrea Masini, Sudipta Acharya, Paolo Bellavista, Luca Foschini, Burak Kantarci
arXiv:2606. 28439v1 Announce Type: cross Abstract: Deep neural networks (DNNs) are widely applied in Network-based Intrusion Detection System (NIDS) due to their high accuracy.
By Jinhao You, Zan Zhou, Shujie Yang, Yi Sun, Lei Zhang, Changqiao Xu
arXiv:2608. 13575v1 Announce Type: cross Abstract: Recent machine learning (ML) advances have demonstrated that deep learning (DL) achieves impressive results in different application domains, including the classification of computer network traffic to corresponding applications.
By Igor Cherepanov, David Sessler, Alex Ulmer, Felix Wagner, Throsten May, J\"orn Kohlhammer