{"id":"https://openalex.org/W2153028064","doi":null,"title":"Detection of network scan attacks using flow data","display_name":"Detection of network scan attacks using flow data","publication_year":2008,"publication_date":"2008-01-01","ids":{"openalex":"https://openalex.org/W2153028064","mag":"2153028064"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.583.4459","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.583.4459","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.utwente.nl/ewi/dacs/assignments/completed/bachelor/reports/2008-kinable.pdf","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023477100","display_name":"Joris Kinable","orcid":"https://orcid.org/0000-0002-1996-805X","observed_orcids":["https://orcid.org/0000-0002-1996-805X"]},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Joris Kinable","raw_affiliation_strings":["University of Twente ,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Twente ,","institution_ids":["https://openalex.org/I94624287"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5023477100"],"corresponding_institution_ids":["https://openalex.org/I94624287"],"apc_list":null,"apc_paid":null,"fwci":1.5625,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.88009993,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":95},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9818999767303467,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9818999767303467,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.01720000058412552,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/netflow-data","display_name":"NetFlow data","score":0.7590000033378601},{"id":"https://openalex.org/keywords/high-speed-networks","display_name":"high-speed networks","score":0.9179999828338623},{"id":"https://openalex.org/keywords/connection-patterns","display_name":"connection patterns","score":0.7929999828338623},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.6079999804496765},{"id":"https://openalex.org/keywords/packet-aggregation","display_name":"packet aggregation","score":0.49000000953674316}],"concepts":[{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.978556752204895},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7660361528396606},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6983419060707092},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6593832969665527},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.537241518497467},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.4544218182563782},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.42644453048706055},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3680010437965393},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.32293975353240967},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.24823829531669617},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.583.4459","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.583.4459","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.utwente.nl/ewi/dacs/assignments/completed/bachelor/reports/2008-kinable.pdf","raw_type":"text"},{"id":"mag:2153028064","doi":null,"is_oa":false,"landing_page_url":"https://www.utwente.nl/ewi/dacs/assignments/completed/bachelor/reports/2008-kinable.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W1516506771","https://openalex.org/W1566768828","https://openalex.org/W1649901946","https://openalex.org/W1674877186","https://openalex.org/W1744212210","https://openalex.org/W2041453110","https://openalex.org/W2072453486","https://openalex.org/W2101357108","https://openalex.org/W2112135709","https://openalex.org/W2117002131","https://openalex.org/W2141659418","https://openalex.org/W2150718242","https://openalex.org/W3202272593"],"related_works":["https://openalex.org/W2133063338","https://openalex.org/W2159767611","https://openalex.org/W2893143447","https://openalex.org/W1597040838","https://openalex.org/W2101357108","https://openalex.org/W2326629859","https://openalex.org/W2356639651","https://openalex.org/W1591846627","https://openalex.org/W7029337419","https://openalex.org/W3102750874"],"abstract_inverted_index":{"Current":[0],"Network":[1],"Scan":[2],"Detection":[3],"Systems":[4],"(NSDS),":[5],"usually":[6],"im-plement":[7],"detection":[8,87,105,120,126,143,168],"schemes":[9],"which":[10],"depend":[11],"on":[12,85,131],"the":[13,55,65,86,102,116,137,158,164,179,182,195],"ability":[14],"to":[15,25,28,74,188],"ana-lyze":[16],"every":[17,34],"single":[18],"network":[19,76],"packet":[20,42,91],"in":[21,68,108,176,181],"detail.":[22],"In":[23,49,122],"order":[24],"scale":[26],"NSDS":[27],"high":[29,109],"speed":[30,110],"networks,":[31],"processing":[32],"gigabits":[33],"second,":[35],"a":[36,72,124,147,203],"dif-ferent":[37],"approach":[38,127],"is":[39,45,93,101,128,153,160,185],"required":[40],"since":[41,89],"level":[43],"inspection":[44],"no":[46],"longer":[47],"feasible.":[48],"this":[50,99],"paper":[51,100],"we":[52],"will":[53],"investigate":[54],"possibilities":[56],"of":[57,64,80,98,104,149,157,166,200,205],"using":[58],"netflow":[59,81,151,183],"data,":[60],"comprising":[61],"an":[62],"aggregation":[63],"information":[66,92,180],"contained":[67],"multiple":[69],"packets,":[70],"as":[71],"means":[73],"detect":[75],"scanners.":[77],"The":[78,95,112],"usage":[79],"data":[82],"imposes":[83],"restrictions":[84],"ap-proaches":[88],"detailed":[90],"lost.":[94],"main":[96],"con-tribution":[97],"identification":[103],"approaches":[106,113,144,169,196],"applicable":[107],"networks.":[111],"elaborated":[114],"generalize":[115],"ideas":[117],"behind":[118],"conventional":[119],"approaches.":[121],"addition,":[123],"new":[125],"added,":[129],"based":[130],"observed":[132],"connection":[133],"patterns.":[134],"To":[135],"analyze":[136],"results":[138,159,165],"achieved":[139],"while":[140],"putting":[141],"our":[142],"into":[145],"practice,":[146],"set":[148,204],"real-life":[150],"records":[152,184],"used.":[154],"Final":[155],"validation":[156],"performed":[161],"by":[162],"comparing":[163],"distinctive":[167],"mutu-ally.":[170],"It":[171],"turns":[172],"out":[173,202],"that,":[174],"although":[175],"many":[177],"cases":[178],"not":[186],"sufficient":[187],"identify":[189],"scan":[190],"attempts":[191],"with":[192],"absolute":[193],"certainty,":[194],"are":[197],"quite":[198],"capable":[199],"filtering":[201],"suspicious":[206],"hosts.":[207]},"counts_by_year":[{"year":2014,"cited_by_count":2}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2016-06-24T00:00:00"}