On the public citation graph

A scalable, efficient and informative approach for anomaly‐based intrusion detection systems: theory and practice

0 signed · 104 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.
Claim with ORCID
Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.
See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1007/3-540-44706-7_2openalex-snapshot
Statistical Analysis of the Alleged RC4 Keystream Generator
inferredcites →https://doi.org/10.1007/3-540-45465-9_59openalex-snapshot
Finding Frequent Items in Data Streams
inferredcites →https://doi.org/10.1007/978-3-540-24698-5_7openalex-snapshot
An Improved Data Stream Summary: The Count-Min Sketch and Its Applications
inferredcites →https://doi.org/10.1007/978-3-540-72606-7_95openalex-snapshot
On-Line Predictive Load Shedding for Network Monitoring
inferredcites →https://doi.org/10.1016/j.comcom.2008.09.018openalex-snapshot
Traffic flooding attack detection with SNMP MIB using SVM
inferredcites →https://doi.org/10.1016/j.jalgor.2003.12.001openalex-snapshot
An improved data stream summary: the count-min sketch and its applications
inferredcites →https://doi.org/10.1016/j.stamet.2005.05.003openalex-snapshot
Detection of intrusions in information systems by sequential change-point methods
inferredcites →https://doi.org/10.1016/s0304-3975(03)00400-6openalex-snapshot
Finding frequent items in data streams
inferredcites →https://doi.org/10.1016/s1389-1286(99)00112-7openalex-snapshot
Bro: a system for detecting network intruders in real-time
inferredcites →https://doi.org/10.1049/iet-com:20070231openalex-snapshot
Improving network anomaly detection via selective flow-based sampling
inferredcites →https://doi.org/10.1109/apscc.2006.91openalex-snapshot
Reversible Sketch Based on the XOR-Based Hashing
inferredcites →https://doi.org/10.1109/dsn.2009.5270319openalex-snapshot
Blue-Watchdog: Detecting Bluetooth worm propagation in public areas
inferredcites →https://doi.org/10.1109/glocom.2004.1378372openalex-snapshot
Application of anomaly detection algorithms for detecting SYN flooding attacks
inferredcites →https://doi.org/10.1109/icc.2007.205openalex-snapshot
Combating Against Attacks on Encrypted Protocols
inferredcites →https://doi.org/10.1109/iccs.2008.4737370openalex-snapshot
Available bandwidth estimation and its application in detection of DDoS attacks
inferredcites →https://doi.org/10.1109/icdcs.2002.1022280openalex-snapshot
SYN-dog: sniffing SYN flooding sources
inferredcites →https://doi.org/10.1109/icif.2006.301812openalex-snapshot
Performance of Certain Decentralized Distributed Change Detection Procedures
inferredcites →https://doi.org/10.1109/icimp.2009.8openalex-snapshot
Effective Change Detection in Large Repositories of Unsolicited Traffic
inferredcites →https://doi.org/10.1109/icita.2005.262openalex-snapshot
Statistical-Based SYN-Flooding Detection Using Programmable Network Processor
inferredcites →https://doi.org/10.1109/icmlc.2005.1527351openalex-snapshot
A new approach for early detection of Internet worms based on connection degree
inferredcites →https://doi.org/10.1109/infcom.2002.1019404openalex-snapshot
Detecting SYN flooding attacks
inferredcites →https://doi.org/10.1109/infcom.2004.1354567openalex-snapshot
What's new: Finding significant differences in network data streams
inferredcites →https://doi.org/10.1109/infcom.2007.153openalex-snapshot
On the Detection of Signaling DoS Attacks on 3G Wireless Networks
inferredcites →https://doi.org/10.1109/infcom.2007.220openalex-snapshot
A Fast and Compact Method for Unveiling Significant Patterns in High Speed Networks
inferredcites →https://doi.org/10.1109/infcom.2007.24openalex-snapshot
Communication-Efficient Online Detection of Network-Wide Anomalies
inferredcites →https://doi.org/10.1109/infocom.2006.100openalex-snapshot
Design and Evaluation of a Fast and Robust Worm Detection Algorithm
inferredcites →https://doi.org/10.1109/infocom.2006.203openalex-snapshot
Reverse Hashing for High-Speed Network Monitoring: Algorithms, Evaluation, and Applications
inferredcites →https://doi.org/10.1109/isecs.2009.61openalex-snapshot
Application Entropy Theory to Detect New Peer-to-Peer Botnet with Multi-chart CUSUM
inferredcites →https://doi.org/10.1109/mnet.2009.4804318openalex-snapshot
Network anomaly detection and classification via opportunistic sampling
inferredcites →https://doi.org/10.1109/npc.2008.81openalex-snapshot
A Novel Sliding Window Based Change Detection Algorithm for Asymmetric Traffic
inferredcites →https://doi.org/10.1109/saint-w.2007.17openalex-snapshot
A Study on Detecting Network Anomalies Using Sampled Flow Statistics
inferredcites →https://doi.org/10.1109/tdsc.2004.34openalex-snapshot
Change-point monitoring for the detection of DoS attacks
inferredcites →https://doi.org/10.1109/tnet.2005.863456openalex-snapshot
Inverting sampled traffic
inferredcites →https://doi.org/10.1109/tnet.2007.896150openalex-snapshot
Reversible Sketches: Enabling Monitoring and Analysis Over High-Speed Data Streams
inferredcites →https://doi.org/10.1109/tr.2002.805796openalex-snapshot
Computer intrusion detection through EWMA for autocorrelated and uncorrelated data
inferredcites →https://doi.org/10.1109/wicom.2008.1112openalex-snapshot
Anomaly Network Traffic Detection Based on Auto-Adapted Parameters Method
inferredcites →https://doi.org/10.1145/1007568.1007588openalex-snapshot
Diamond in the rough
inferredcites →https://doi.org/10.1145/1015467.1015492openalex-snapshot
Diagnosing network-wide traffic anomalies
inferredcites →https://doi.org/10.1145/1028788.1028802openalex-snapshot
Online identification of hierarchical heavy hitters
inferredcites →https://doi.org/10.1145/1080091.1080118openalex-snapshot
Mining anomalies using traffic feature distributions
inferredcites →https://doi.org/10.1145/1090191.1080118openalex-snapshot
Mining anomalies using traffic feature distributions
inferredcites →https://doi.org/10.1145/1177080.1177099openalex-snapshot
Detection and identification of network anomalies using sketch subspaces
inferredcites →https://doi.org/10.1145/1177080.1177101openalex-snapshot
Impact of packet sampling on anomaly detection metrics
inferredcites →https://doi.org/10.1145/1177080.1177102openalex-snapshot
Is sampled data sufficient for anomaly detection?
inferredcites →https://doi.org/10.1145/1254882.1254895openalex-snapshot
Sensitivity of PCA for traffic anomaly detection
inferredcites →https://doi.org/10.1145/1269899.1254895openalex-snapshot
Sensitivity of PCA for traffic anomaly detection
inferredcites →https://doi.org/10.1145/1352664.1352675openalex-snapshot
Extracting hidden anomalies using sketch and non Gaussian multiresolution statistical detection procedures
inferredcites →https://doi.org/10.1145/1452520.1452539openalex-snapshot
An empirical evaluation of entropy-based traffic anomaly detection
inferredcites →https://doi.org/10.1145/1815396.1815473openalex-snapshot
On the use of sketches and wavelet analysis for network anomaly detection
inferredcites →https://doi.org/10.1145/948205.948236openalex-snapshot
Sketch-based change detection
inferredcites →https://doi.org/10.1155/2009/837601openalex-snapshot
Network Anomaly Detection Based on Wavelet Analysis
inferredcites →https://doi.org/10.1214/08-aoas232openalex-snapshot
Detection and localization of change-points in high-dimensional network traffic data
inferredcites →https://doi.org/10.17487/rfc3954openalex-snapshot
Cisco Systems NetFlow Services Export Version 9
inferredcites →https://doi.org/10.17487/rfc5101openalex-snapshot
Specification of the IP Flow Information Export (IPFIX) Protocol for the Exchange of IP Traffic Flow Information
inferredcites →https://doi.org/10.21236/ada400003openalex-snapshot
Inferring Internet Denial-of-Service Activity
inferredcites →https://doi.org/10.5555/982792.982884openalex-snapshot
Tabulation based 4-universal hashing with applications to second moment estimation

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.1002/dac.3908openalex-snapshot
Network level perspective in web sessions troubleshooting
inferred← citeshttps://doi.org/10.1002/dac.4061openalex-snapshot
SYN‐Guard: An effective counter for SYN flooding attack in software‐defined networking
inferred← citeshttps://doi.org/10.1002/nem.1805openalex-snapshot
Network reachability‐based IP prefix hijacking detection
inferred← citeshttps://doi.org/10.1002/nem.1867openalex-snapshot
Similarity as a central approach to flow‐based anomaly detection
inferred← citeshttps://doi.org/10.1002/nem.2050openalex-snapshot
A deep learning method to detect network intrusion through flow‐based features
inferred← citeshttps://doi.org/10.1002/sec.1391openalex-snapshot
The value of flow size distribution in entropy-based detection of DoS attacks
inferred← citeshttps://doi.org/10.1002/spy2.70192openalex-snapshot
Impact of Various Entropy Measures on Federated Hoeffding Tree‐Based Learning for Intrusion Detection in IoT
inferred← citeshttps://doi.org/10.1007/978-3-031-18067-5_17openalex-snapshot
Anomalous Network Traffic Detection Based on CK Sketch and Machine Learning
inferred← citeshttps://doi.org/10.1007/978-3-319-48021-3_2openalex-snapshot
Statistical Network Anomaly Detection: An Experimental Study
inferred← citeshttps://doi.org/10.1007/978-3-662-46578-3_59openalex-snapshot
Multi-Agent based Framework for Time-correlated Alert Detection of Volume Attacks
inferred← citeshttps://doi.org/10.1007/978-981-10-5421-1_13openalex-snapshot
UnitecDEAMP: Flow Feature Profiling for Malicious Events Identification in Darknet Space
inferred← citeshttps://doi.org/10.1016/j.cose.2012.05.001openalex-snapshot
WAVE-CUSUM: Improving CUSUM performance in network anomaly detection by means of wavelet analysis
inferred← citeshttps://doi.org/10.1016/j.cose.2017.07.004openalex-snapshot
An information-theoretic method for the detection of anomalies in network traffic
inferred← citeshttps://doi.org/10.1016/j.inffus.2018.10.013openalex-snapshot
Network traffic fusion and analysis against DDoS flooding attacks with a novel reversible sketch
inferred← citeshttps://doi.org/10.1016/j.ress.2020.107007openalex-snapshot
Considering the human operator cognitive process for the interpretation of diagnostic outcomes related to component failures and cyber security attacks
inferred← citeshttps://doi.org/10.1109/cns.2013.6682725openalex-snapshot
Sketch-based multidimensional IDS: A new approach for network anomaly detection
inferred← citeshttps://doi.org/10.1109/cns.2017.8228685openalex-snapshot
Open-source flexible packet parser for high data rate agile network probe
inferred← citeshttps://doi.org/10.1109/coconet.2015.7411181openalex-snapshot
On the combined use of sketches and CUSUM for Anomaly Detection
inferred← citeshttps://doi.org/10.1109/globecom46510.2021.9685794openalex-snapshot
Accurate and Fast Detection of DDoS Attacks in High-Speed Network with Asymmetric Routing
inferred← citeshttps://doi.org/10.1109/glocom.2012.6503534openalex-snapshot
An open hardware implementation of CUSUM based network anomaly detection
inferred← citeshttps://doi.org/10.1109/hoti.2013.17openalex-snapshot
Efficient Implementation of Security Applications in OpenFlow Controller with FleXam
inferred← citeshttps://doi.org/10.1109/hpcc.2014.132openalex-snapshot
Bivariate Non-parametric Anomaly Detection
inferred← citeshttps://doi.org/10.1109/icc.2012.6363799openalex-snapshot
Combining wavelet analysis and CUSUM algorithm for network anomaly detection
inferred← citeshttps://doi.org/10.1109/icc.2012.6364602openalex-snapshot
Anomaly detection in network traffic using Jensen-Shannon divergence
inferred← citeshttps://doi.org/10.1109/icccn.2011.6006023openalex-snapshot
Fine-Grained DDoS Detection Scheme Based on Bidirectional Count Sketch
inferred← citeshttps://doi.org/10.1109/iccnc.2015.7069350openalex-snapshot
A formal analysis of conservative update based approximate counting
inferred← citeshttps://doi.org/10.1109/iccw.2013.6649444openalex-snapshot
Empowering Software Defined Network controller with packet-level information
inferred← citeshttps://doi.org/10.1109/iwcmc.2015.7289114openalex-snapshot
Troubleshooting web sessions with CUSUM
inferred← citeshttps://doi.org/10.1109/sibircon.2017.8109836openalex-snapshot
Anomaly detection: An overview of selected methods
inferred← citeshttps://doi.org/10.1109/spects.2015.7285294openalex-snapshot
Histogram cloning and CuSum: An experimental comparison between different approaches to Anomaly Detection
inferred← citeshttps://doi.org/10.1109/tifs.2017.2758754openalex-snapshot
SkyShield: A Sketch-Based Defense System Against Application Layer DDoS Attacks
inferred← citeshttps://doi.org/10.1109/tkde.2024.3523857openalex-snapshot
A Survey of Change Point Detection in Dynamic Graphs
inferred← citeshttps://doi.org/10.1109/trustcom.2012.295openalex-snapshot
VicSifter: A Collaborative DDoS Detection System with Lightweight Victim Identification
inferred← citeshttps://doi.org/10.1145/2491185.2491215openalex-snapshot
FleXam
inferred← citeshttps://doi.org/10.1145/2517312.2517323openalex-snapshot
ACTIDS
inferred← citeshttps://doi.org/10.1145/3388142.3388162openalex-snapshot
Attack-tolerant Unequal Probability Sampling Methods over Sliding Window for Distributed Streams
inferred← citeshttps://doi.org/10.1504/ijahuc.2016.079269openalex-snapshot
Collaborative 'many to many' DDoS detection in cloud
inferred← citeshttps://doi.org/10.4018/978-1-4666-2050-6.ch016openalex-snapshot
Wild-Inspired Intrusion Detection System Framework for High Speed Networks (f|p) IDS Framework
inferred← citeshttps://doi.org/10.4018/jisp.2011100104openalex-snapshot
Wild-Inspired Intrusion Detection System Framework for High Speed Networks (f|p) IDS Framework
inferred← citeshttps://doi.org/10.4304/jcm.6.9.660-670openalex-snapshot
A Scalable DDoSDetection Framework with Victim Pinpoint Capability
inferred← citeshttps://doi.org/10.48550/arxiv.1306.4845openalex-snapshot
ACTIDS: An Active Strategy For Detecting And Localizing Network Attacks
inferred← citeshttps://doi.org/10.48550/arxiv.1412.8412openalex-snapshot
Sanitization of Call Detail Records via Differentially-private Summaries
inferred← citeshttps://doi.org/10.5121/csit.2022.1218openalex-snapshot
Artificial Intelligence and Applications
inferred← citeshttps://doi.org/10.5121/csit.2022.121821openalex-snapshot
F-low: A Promising Countermeasure Against DDoS Attacks based on Split Sketch and PCA
inferred← citeshttps://doi.org/10.5121/ijnsa.2022.14602openalex-snapshot
A Resource-Efficient Collaborative System for DDOS Attack Detection and Victim Identification
inferred← citeshttps://doi.org/10.5555/2874988.2874990openalex-snapshot
Histogram cloning and CuSum: an experimental comparison between different approaches to anomaly detection
inferred← citeshttps://doi.org/10.5772/intechopen.110828openalex-snapshot
An Ensemble Method for Supervised Learning for Intrusion Detection and Network Forensics
inferred← citeshttps://doi.org/10.70675/d1345aa0z505ez4001za9f2z4c70777312aeopenalex-snapshot
Hardware and software co-design toward flexible terabits per second traffic processing
Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.