{"id":"https://openalex.org/W2292245306","doi":null,"title":"Stochastic modeling applied to detection problems in network protocols and traffic","display_name":"Stochastic modeling applied to detection problems in network protocols and traffic","publication_year":2009,"publication_date":"2009-01-01","ids":{"openalex":"https://openalex.org/W2292245306","mag":"2292245306"},"language":"en","primary_location":{"id":"mag:2292245306","doi":null,"is_oa":false,"landing_page_url":"https://dl.acm.org/citation.cfm?id=1626694","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064525211","display_name":"Mark E. Crovella","orcid":"https://orcid.org/0000-0002-5005-7019","observed_orcids":["https://orcid.org/0000-0002-5005-7019"]},"institutions":[{"id":"https://openalex.org/I111088046","display_name":"Boston University","ror":"https://ror.org/05qwgg493","country_code":"US","type":"education","lineage":["https://openalex.org/I111088046"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mark Crovella","raw_affiliation_strings":["Boston Univ"],"raw_orcid":"https://orcid.org/0000-0002-5005-7019","affiliations":[{"raw_affiliation_string":"Boston Univ","institution_ids":["https://openalex.org/I111088046"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083515020","display_name":"N. L. S. da Fonseca","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I111088046","display_name":"Boston University","ror":"https://ror.org/05qwgg493","country_code":"US","type":"education","lineage":["https://openalex.org/I111088046"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"N. L. S. da Fonseca","raw_affiliation_strings":["Boston Univ"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Boston Univ","institution_ids":["https://openalex.org/I111088046"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I111088046"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.26414734,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.7080000042915344,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.7080000042915344,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.15780000388622284,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.10639999806880951,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/packet-loss-detection","display_name":"packet loss detection","score":0.972000002861023},{"id":"https://openalex.org/keywords/transmission-control-protocol","display_name":"TCP","score":0.8709999918937683},{"id":"https://openalex.org/keywords/network-anomaly-detection","display_name":"network anomaly detection","score":0.8769999742507935},{"id":"https://openalex.org/keywords/network-traffic-modeling","display_name":"network traffic modeling","score":0.8989999890327454},{"id":"https://openalex.org/keywords/symbolic-sequences","display_name":"symbolic sequences","score":0.8889999985694885},{"id":"https://openalex.org/keywords/markov-model","display_name":"Markov model","score":0.6779999732971191},{"id":"https://openalex.org/keywords/neyman-pearson-detection","display_name":"Neyman-Pearson detection","score":0.8299999833106995},{"id":"https://openalex.org/keywords/tcp-throughput","display_name":"TCP throughput","score":0.8479999899864197},{"id":"https://openalex.org/keywords/flow-size-distribution","display_name":"flow size distribution","score":0.7229999899864197}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7233272194862366},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6263848543167114},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.5639045238494873},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.5168876647949219},{"id":"https://openalex.org/C159886148","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov process","level":2,"score":0.4358816146850586},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.42796653509140015},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4209882318973541},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3838578164577484},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.38277167081832886},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.10790190100669861},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.09610190987586975},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"mag:2292245306","doi":null,"is_oa":false,"landing_page_url":"https://dl.acm.org/citation.cfm?id=1626694","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2166804592","https://openalex.org/W7017654127","https://openalex.org/W7100494147","https://openalex.org/W2057331964","https://openalex.org/W2047883932","https://openalex.org/W7095237472","https://openalex.org/W2018158664","https://openalex.org/W2167810008","https://openalex.org/W2370735970","https://openalex.org/W4415915409"],"abstract_inverted_index":{"This":[0,295,305],"dissertation":[1],"presents":[2,219,285],"and":[3,14,62,87,112,258,273],"evaluates":[4],"two":[5,50,185],"detection":[6,326],"methods:":[7],"a":[8,15,21,35,56,66,80,113,152,168,204,220,233,313,319],"packet":[9,42,57,102,265],"loss":[10,43,89],"detector":[11,18,38,44,107,297],"for":[12,40,247,316],"TCP,":[13],"network":[16,110,156,222],"anomaly":[17,293,296,325],"based":[19,299],"on":[20,131,300],"new":[22,153,169,221,271],"model":[23,114,207,211,224,231,291,315],"of":[24,75,94,101,115,147,155,171,184,227,236,244,251,260,282,288],"traffic":[25,212,223,245,261,290],"as":[26,159,213],"symbol":[27,160,214,228],"sequences.":[28,161,215,229],"\r\nFor":[29],"the":[30,41,72,92,98,132,148,182,198,217,249,279,283,308],"first":[31],"problem,":[32],"we":[33,69,119,125],"use":[34,93],"binary":[36],"Bayes":[37],"framework":[39,68],"because":[45],"(a)":[46],"there":[47,191],"are":[48,187,192],"only":[49],"hypotheses":[51],"to":[52,84,142,210,264,270,292,328],"test":[53],"(i.e.":[54],"either":[55],"is":[58,208,298],"lost":[59],"or":[60],"not),":[61],"(b)":[63],"by":[64,140],"using":[65],"Bayesian":[67],"can":[70,136,267],"overcome":[71],"limited":[73],"amount":[74],"training":[76],"data":[77],"available":[78],"within":[79],"TCP":[81,116,138],"connection":[82],"(due":[83],"short-lived":[85],"connections":[86],"small":[88,234],"rates)":[90],"through":[91],"prior":[95],"knowledge":[96],"about":[97],"stochastic":[99],"process":[100],"losses.":[103],"We":[104,162,254],"evaluate":[105],"our":[106,134,289],"with":[108,262],"real":[109],"data,":[111],"throughput":[117,139],"that":[118,127,164,181,203,256,310],"have":[120,239],"adapted.":[121],"Using":[122],"this":[123],"model,":[124],"show":[126,163],"under":[128],"realistic":[129],"scenarios":[130],"Internet":[133],"method":[135],"improve":[137],"up":[141],"20%.":[143],"\r\nThe":[144],"second":[145],"half":[146],"thesis":[149,218,284],"puts":[150],"forward":[151],"perspective":[154],"traffic,":[157,318],"namely,":[158],"such":[165],"sequences":[166],"contain":[167],"kind":[170],"memory":[172],"called":[173],"Long":[174],"Range":[175],"Mutual":[176],"Information":[177],"(LRMI).":[178],"LRMI":[179,201],"implies":[180,202],"content":[183,266],"packets":[186,194],"dependent":[188],"even":[189],"if":[190],"many":[193],"between":[195],"them":[196],"in":[197,225,242,275,323],"sequence;":[199],"furthermore,":[200],"low-order":[205],"Markov":[206],"insufficient":[209],"Hence,":[216],"terms":[226,243],"The":[230],"has":[232,307],"set":[235],"parameters":[237],"which":[238],"simple":[240],"interpretations":[241],"properties,":[246],"example,":[248],"distribution":[250],"flow":[252],"sizes.":[253],"argue":[255],"characterization":[257],"modeling":[259],"consideration":[263],"open":[268],"doors":[269],"methods":[272,327],"applications":[274],"networks.":[276],"In":[277],"particular,":[278],"last":[280],"part":[281],"one":[286],"application":[287],"detection.":[294],"an":[301],"optimal":[302],"Neyman-Pearson":[303],"approach.":[304],"approach":[306],"benefit":[309],"it":[311],"provides":[312],"reasonable":[314],"anomaly-free":[317],"key":[320],"element":[321],"missing":[322],"most":[324],"date.":[329]},"counts_by_year":[],"updated_date":"2026-09-22T06:50:58.402377","created_date":"2016-06-24T00:00:00"}