{"id":"https://openalex.org/W2758200063","doi":"https://doi.org/10.24382/1215","title":"Behavioural Monitoring via Network Communications","display_name":"Behavioural Monitoring via Network Communications","publication_year":2017,"publication_date":"2017-01-01","ids":{"openalex":"https://openalex.org/W2758200063","doi":"https://doi.org/10.24382/1215","mag":"2758200063"},"language":"en","primary_location":{"id":"pmh:oai:pearl.plymouth.ac.uk:10026.1/9964","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/10026.1/9964","pdf_url":"http://hdl.handle.net/10026.1/9964","source":{"id":"https://openalex.org/S4306402507","display_name":"PEARL (University of Plymouth)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I897542642","host_organization_name":"University of Plymouth","host_organization_lineage":["https://openalex.org/I897542642"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Thesis"},"volume":null,"type":"dissertation","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/10026.1/9964","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089374595","display_name":"Gaseb N. Alotibi","orcid":"https://orcid.org/0000-0001-8575-9654","observed_orcids":["https://orcid.org/0000-0001-8575-9654"]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Alotibi, Gaseb","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5089374595"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9717000126838684,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9717000126838684,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.01850000023841858,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.00279999990016222,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/behavioral-profiling","display_name":"behavioral profiling","score":0.625},{"id":"https://openalex.org/keywords/network-traffic-analysis","display_name":"network traffic analysis","score":0.8050000071525574},{"id":"https://openalex.org/keywords/user-identification","display_name":"user identification","score":0.6600000262260437},{"id":"https://openalex.org/keywords/dynamic-ip-addresses","display_name":"dynamic IP addresses","score":0.41499999165534973},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"feature extraction","score":0.4350000023841858},{"id":"https://openalex.org/keywords/timeline-analysis","display_name":"timeline analysis","score":0.9760000109672546},{"id":"https://openalex.org/keywords/cybercrime-countermeasures","display_name":"cybercrime countermeasures","score":0.6150000095367432},{"id":"https://openalex.org/keywords/mobile-computing","display_name":"mobile computing","score":0.3330000042915344},{"id":"https://openalex.org/keywords/network-forensics","display_name":"network forensics","score":0.4490000009536743}],"concepts":[{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.3831482529640198},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3665620684623718}],"mesh":[],"locations_count":4,"locations":[{"id":"pmh:oai:pearl.plymouth.ac.uk:10026.1/9964","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/10026.1/9964","pdf_url":"http://hdl.handle.net/10026.1/9964","source":{"id":"https://openalex.org/S4306402507","display_name":"PEARL (University of Plymouth)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I897542642","host_organization_name":"University of Plymouth","host_organization_lineage":["https://openalex.org/I897542642"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Thesis"},{"id":"pmh:oai:pearl.plymouth.ac.uk:secam-theses-1223","doi":null,"is_oa":true,"landing_page_url":"https://pearl.plymouth.ac.uk/secam-theses/223","pdf_url":"https://pearl.plymouth.ac.uk/context/secam-theses/article/1223/viewcontent/2017Alotibi10418536phd.pdf","source":{"id":"https://openalex.org/S4306402507","display_name":"PEARL (University of Plymouth)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I897542642","host_organization_name":"University of Plymouth","host_organization_lineage":["https://openalex.org/I897542642"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"School of Engineering, Computing and Mathematics Theses","raw_type":"thesis"},{"id":"doi:10.24382/1215","doi":"https://doi.org/10.24382/1215","is_oa":true,"landing_page_url":"https://doi.org/10.24382/1215","pdf_url":null,"source":{"id":"https://openalex.org/S7407050782","display_name":"Plymouth University","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null},{"id":"mag:2758200063","doi":null,"is_oa":false,"landing_page_url":"https://ethos.bl.uk/OrderDetails.do?uin=uk.bl.ethos.722623","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:pearl.plymouth.ac.uk:10026.1/9964","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/10026.1/9964","pdf_url":"http://hdl.handle.net/10026.1/9964","source":{"id":"https://openalex.org/S4306402507","display_name":"PEARL (University of Plymouth)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I897542642","host_organization_name":"University of Plymouth","host_organization_lineage":["https://openalex.org/I897542642"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Thesis"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2758200063.pdf","grobid_xml":"https://content.openalex.org/works/W2758200063.grobid-xml"},"referenced_works_count":87,"referenced_works":["https://openalex.org/W33933511","https://openalex.org/W57091741","https://openalex.org/W59191864","https://openalex.org/W81578296","https://openalex.org/W197134493","https://openalex.org/W246087451","https://openalex.org/W256069385","https://openalex.org/W1186556233","https://openalex.org/W1481480818","https://openalex.org/W1492832934","https://openalex.org/W1496553157","https://openalex.org/W1497249636","https://openalex.org/W1507074829","https://openalex.org/W1517113043","https://openalex.org/W1518518824","https://openalex.org/W1551618785","https://openalex.org/W1562004855","https://openalex.org/W1578409540","https://openalex.org/W1599473351","https://openalex.org/W1669286230","https://openalex.org/W1680400516","https://openalex.org/W1724737952","https://openalex.org/W1840004984","https://openalex.org/W1898491644","https://openalex.org/W1922827592","https://openalex.org/W1967840670","https://openalex.org/W1968746911","https://openalex.org/W1969109761","https://openalex.org/W1970121110","https://openalex.org/W1982418125","https://openalex.org/W1987442832","https://openalex.org/W1990867522","https://openalex.org/W1996292751","https://openalex.org/W2000832852","https://openalex.org/W2007087405","https://openalex.org/W2008225944","https://openalex.org/W2009229022","https://openalex.org/W2009585495","https://openalex.org/W2010367872","https://openalex.org/W2014007129","https://openalex.org/W2020929017","https://openalex.org/W2034266609","https://openalex.org/W2038254631","https://openalex.org/W2041942569","https://openalex.org/W2056982990","https://openalex.org/W2061210554","https://openalex.org/W2063883961","https://openalex.org/W2070191343","https://openalex.org/W2078676080","https://openalex.org/W2082621278","https://openalex.org/W2085766370","https://openalex.org/W2086946002","https://openalex.org/W2099750418","https://openalex.org/W2104248525","https://openalex.org/W2105378351","https://openalex.org/W2105907431","https://openalex.org/W2112302400","https://openalex.org/W2112965356","https://openalex.org/W2116065364","https://openalex.org/W2117085409","https://openalex.org/W2130672682","https://openalex.org/W2130799864","https://openalex.org/W2133884015","https://openalex.org/W2136928336","https://openalex.org/W2140959843","https://openalex.org/W2143625384","https://openalex.org/W2144610998","https://openalex.org/W2146232384","https://openalex.org/W2149600645","https://openalex.org/W2152395371","https://openalex.org/W2160315465","https://openalex.org/W2165313956","https://openalex.org/W2167287136","https://openalex.org/W2171331105","https://openalex.org/W2182220060","https://openalex.org/W2184360455","https://openalex.org/W2241534552","https://openalex.org/W2306714002","https://openalex.org/W2309314985","https://openalex.org/W2313355796","https://openalex.org/W2316482457","https://openalex.org/W2361317469","https://openalex.org/W2400544897","https://openalex.org/W2406867978","https://openalex.org/W2593911197","https://openalex.org/W2796585648","https://openalex.org/W6903588011"],"related_works":["https://openalex.org/W2982405785","https://openalex.org/W2588937729","https://openalex.org/W2912953040","https://openalex.org/W3090454888","https://openalex.org/W2736089194","https://openalex.org/W4402154719","https://openalex.org/W2957354869","https://openalex.org/W4320883109","https://openalex.org/W2310211158","https://openalex.org/W2330003156"],"abstract_inverted_index":{"It":[0],"is":[1,8,33,84,162,396,493,512,568],"commonly":[2],"acknowledged":[3],"that":[4,91,291,321,393,488],"using":[5,24,365],"Internet":[6,25,42,155],"applications":[7,261,413,530,554],"an":[9,13,45,77,82,101,110,136,212,402,580,586],"integral":[10],"part":[11],"of":[12,81,88,105,109,117,127,139,179,195,207,215,228,256,305,312,350,355,398,414,457,468,475,499,560,576,613],"individual\u2019s":[14],"everyday":[15],"life,":[16],"with":[17,38,143,401,585,598],"more":[18,64,323],"than":[19,328],"three":[20,412,529],"billion":[21],"users":[22,193,357],"now":[23],"services":[26],"across":[27,254,383,526,552],"the":[28,79,86,98,115,125,128,140,167,177,196,205,218,226,231,248,257,284,303,306,325,331,351,366,384,394,410,421,428,438,455,458,466,469,476,486,490,519,527,541,564,583,611],"world;":[29],"and":[30,96,131,146,204,270,363,377,417,445,464,471,516,534,603],"this":[31,39,134,336,574],"number":[32],"growing":[34],"every":[35],"year.":[36],"Unfortunately,":[37],"rise":[40,47],"in":[41,48,120,154,183,186,409,540,558,563],"use":[43,335,572],"comes":[44],"increasing":[46,213],"cyber-related":[49],"crime.":[50],"Whilst":[51,420,557],"significant":[52],"effort":[53],"has":[54],"been":[55],"expended":[56],"on":[57,211,485,550],"protecting":[58],"systems":[59],"from":[60,225,247,283,389],"outside":[61],"attack,":[62],"only":[63,224],"recently":[65],"have":[66],"researchers":[67],"sought":[68,333,452,482],"to":[69,94,100,122,135,165,170,188,191,201,274,299,302,334,338,347,431,453,461,483,502,514,518,579,608,615],"develop":[70,432],"countermeasures":[71],"against":[72],"insider":[73],"attack.":[74],"However,":[75,142],"for":[76,524],"organisation,":[78],"detection":[80],"attack":[83,99,111],"merely":[85],"start":[87],"a":[89,171,184,236,310,317,341,497,508,545,599],"process":[90,320],"requires":[92],"them":[93,313,607],"investigate":[95],"attribute":[97],"individual":[102,581],"(or":[103],"group":[104],"individuals).":[106],"The":[107,174,233,288,387,449,479,522,536],"investigation":[108,253],"typically":[112],"revolves":[113],"around":[114],"analysis":[116,447,543],"network":[118,181,216,250,286],"traffic,":[119,330],"order":[121,187,200],"better":[123,462],"understand":[124],"nature":[126],"traffic":[129,168,182,354,602,614],"flows":[130],"importantly":[132],"resolves":[133],"IP":[137,197,491],"address":[138,492],"insider.":[141],"mobile":[144],"computing":[145],"Dynamic":[147],"Host":[148],"Control":[149],"Protocol":[150,156],"(DHCP),":[151],"which":[152,435],"results":[153,289,388,523],"(IP)":[157],"addresses":[158],"changing":[159],"frequently,":[160],"it":[161,511,594],"particularly":[163],"challenging":[164],"resolve":[166],"back":[169],"specific":[172,601],"individual.":[173],"thesis":[175],"explores":[176],"feasibility":[178],"profiling":[180,391],"biometric-manner":[185],"be":[189,281,345,616],"able":[190],"identify":[192],"independently":[194],"address.":[198],"In":[199],"maintain":[202],"privacy":[203],"issue":[206],"encryption":[208],"(which":[209],"exists":[210],"volume":[214,612],"traffic),":[217],"proposed":[219,235],"approach":[220,240,451,481],"utilises":[221],"data":[222],"derived":[223,282],"metadata":[227],"packets,":[229],"not":[230,297,494,569],"payload.":[232],"research":[234,332,429],"novel":[237],"feature":[238,318,368],"extraction":[239,319,369],"focussed":[241,322],"upon":[242,324],"extracting":[243],"user-oriented":[244],"application-level":[245],"features":[246,279],"wider":[249],"traffic.":[251],"An":[252],"nine":[255,385],"most":[258],"common":[259],"web":[260,308],"(Facebook,":[262],"Twitter,":[263],"YouTube,":[264],"Dropbox,":[265],"Google,":[266],"Outlook,":[267],"Skype,":[268],"BBC":[269],"Wikipedia)":[271],"was":[272,361,555],"undertaken":[273],"determine":[275,339],"whether":[276,340],"such":[277],"high-level":[278],"could":[280,344,436],"low-level":[285],"signals.":[287],"showed":[290,392],"whilst":[292,489],"some":[293,425],"user":[294],"interactions":[295,382],"were":[296,375,442,531],"possible":[298],"extract":[300],"due":[301,501],"complexities":[304],"resulting":[307,472],"application,":[309],"majority":[311],"were.":[314],"Having":[315],"developed":[316,346],"user,":[326],"rather":[327],"machine-to-machine":[329],"information":[337],"behavioural":[342,390],"profile":[343],"enable":[348],"identification":[349,562],"users.":[352],"Network":[353],"27":[356],"over":[358,496,504,589],"2":[359],"months":[360],"collected":[362,376],"processed":[364,378],"aforementioned":[367],"process.":[370],"Over":[371],"140":[372],"million":[373],"packets":[374],"into":[379],"45":[380],"user-level":[381],"applications.":[386],"system":[395],"capable":[397],"identifying":[399],"users,":[400],"average":[403,551],"True":[404],"Positive":[405],"Identification":[406],"Rate":[407],"(TPIR)":[408],"top":[411,528],"87.4%,":[415],"75%":[416],"61.9%":[418],"respectively.":[419],"initial":[422],"study":[423],"provided":[424],"encouraging":[426],"results,":[427],"continued":[430],"further":[433],"refinements":[434],"improve":[437],"performance.":[439],"Two":[440],"techniques":[441],"applied,":[443],"fusion":[444,525],"timeline":[446,542],"techniques.":[448],"former":[450],"fuse":[454],"output":[456],"classification":[459,470],"stage":[460],"incorporate":[463],"manage":[465],"variability":[467],"decision":[473],"phases":[474],"biometric":[477,561],"system.":[478],"latter":[480],"capitalise":[484],"fact":[487],"reliable":[495,515],"period":[498],"time":[500,548],"reallocation,":[503],"shorter":[505],"timeframes":[506],"(e.g.":[507],"few":[509],"minutes)":[510],"likely":[513],"map":[517],"same":[520],"user.":[521],"93.3%,":[532],"82.5%":[533],"68.9%.":[535],"overall":[537],"performance":[538],"adding":[539],"(with":[544],"240":[546],"second":[547],"window)":[549],"all":[553],"72.1%.":[556],"terms":[559],"normal":[565],"sense,":[566],"72.1%":[567],"outstanding,":[570],"its":[571],"within":[573],"problem":[575],"attributing":[577],"misuse":[578],"provides":[582],"investigator":[584],"enormous":[587],"advantage":[588],"existing":[590],"approaches.":[591],"At":[592],"best,":[593],"will":[595],"provide":[596],"him":[597],"user\u2019s":[600],"at":[604],"worst":[605],"allow":[606],"significantly":[609],"reduce":[610],"analysed.":[617]},"counts_by_year":[],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2017-10-06T00:00:00"}