{"id":"https://openalex.org/W3153939733","doi":"https://doi.org/10.1145/3422337.3450326","title":"Towards Efficient Labeling of Network Incident Datasets Using Tcpreplay and Snort","display_name":"Towards Efficient Labeling of Network Incident Datasets Using Tcpreplay and Snort","publication_year":2021,"publication_date":"2021-04-10","ids":{"openalex":"https://openalex.org/W3153939733","doi":"https://doi.org/10.1145/3422337.3450326","mag":"3153939733"},"language":"en","primary_location":{"id":"doi:10.1145/3422337.3450326","doi":"https://doi.org/10.1145/3422337.3450326","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3422337.3450326","pdf_url":null,"source":{"id":"https://openalex.org/S7407088843","display_name":"ACM Conference on Data and Application Security and Privacy (CODASPY)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Eleventh ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080521403","display_name":"Kohei Masumi","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kohei Masumi","raw_affiliation_strings":["National Institute of Information and Communications Technology, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology, Tokyo, Japan","institution_ids":["https://openalex.org/I90023481"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068829903","display_name":"Chansu Han","orcid":"https://orcid.org/0000-0002-1728-5300","observed_orcids":["https://orcid.org/0000-0002-1728-5300","https://orcid.org/0000-0001-9568-8458"]},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Chansu Han","raw_affiliation_strings":["National Institute of Information and Communications Technology, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology, Tokyo, Japan","institution_ids":["https://openalex.org/I90023481"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014860606","display_name":"Tao Ban","orcid":"https://orcid.org/0000-0002-9616-3212","observed_orcids":["https://orcid.org/0000-0002-9616-3212"]},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Tao Ban","raw_affiliation_strings":["National Institute of Information and Communications Technology, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology, Tokyo, Japan","institution_ids":["https://openalex.org/I90023481"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029032117","display_name":"Takeshi Takahashi","orcid":"https://orcid.org/0000-0002-6477-7770","observed_orcids":["https://orcid.org/0000-0002-6477-7770","https://orcid.org/0009-0009-1421-7458"]},"institutions":[{"id":"https://openalex.org/I90023481","display_name":"National Institute of Information and Communications Technology","ror":"https://ror.org/016bgq349","country_code":"JP","type":"facility","lineage":["https://openalex.org/I90023481"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takeshi Takahashi","raw_affiliation_strings":["National Institute of Information and Communications Technology, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Institute of Information and Communications Technology, Tokyo, Japan","institution_ids":["https://openalex.org/I90023481"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I90023481"],"apc_list":null,"apc_paid":null,"fwci":2.3106,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.88561477,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"329","last_page":"331"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.007199999876320362,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12391","display_name":"Artificial Immune Systems Applications","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/2204","display_name":"Biomedical Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-intrusion-detection","display_name":"network intrusion detection","score":0.9679999947547913},{"id":"https://openalex.org/keywords/snort","display_name":"Snort","score":0.9959999918937683}],"concepts":[{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.8828049898147583},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8525473475456238},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7075404524803162},{"id":"https://openalex.org/C95362637","wikidata":"https://www.wikidata.org/wiki/Q54366","display_name":"Packet analyzer","level":3,"score":0.6512444019317627},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5228714942932129},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.49374422430992126},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4289941191673279},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35300225019454956}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3422337.3450326","doi":"https://doi.org/10.1145/3422337.3450326","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3422337.3450326","pdf_url":null,"source":{"id":"https://openalex.org/S7407088843","display_name":"ACM Conference on Data and Application Security and Privacy (CODASPY)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Eleventh ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":1,"referenced_works":["https://openalex.org/W2031163547"],"related_works":["https://openalex.org/W4285112571","https://openalex.org/W4283162953","https://openalex.org/W3203434031","https://openalex.org/W1969200933","https://openalex.org/W2952956474","https://openalex.org/W4294091533","https://openalex.org/W4408400231","https://openalex.org/W2952371541","https://openalex.org/W2073173294","https://openalex.org/W3206325220"],"abstract_inverted_index":{"Research":[0],"on":[1],"network":[2,23,72,77],"intrusion":[3,78],"detection":[4,79,104],"(NID)":[5],"requires":[6],"a":[7,30,49,70,76,119],"large":[8],"amount":[9],"of":[10,32,51,106],"traffic":[11],"data":[12,68],"with":[13,21,75,133],"reliable":[14],"labels":[15,57,85],"indicating":[16],"which":[17],"packets":[18,88,109,131],"are":[19],"associated":[20,132],"particular":[22],"attacks.":[24],"In":[25,44,93],"this":[26,45,138],"paper,":[27,46],"we":[28,47,97,123],"implement":[29,48],"prototype":[31,50,116],"an":[33,52,112,125],"automated":[34,53],"system":[35,54,82],"to":[36,55,58,86,117,128],"create":[37],"labeled":[38],"packet":[39,59,67,91,120],"datasets":[40,60],"for":[41,61],"NID":[42,62,135],"research.":[43,63],"assign":[56],"By":[64],"re-transmitting":[65],"pre-captured":[66],"in":[69],"controlled":[71],"environment":[73],"pre-installed":[74],"system,":[80],"the":[81,90,94,103,107,115,130],"automatically":[83],"assigns":[84],"attack":[87],"within":[89],"data.":[92],"feasibility":[95],"study,":[96],"investigate":[98],"factors":[99],"that":[100],"may":[101],"influence":[102],"accuracy":[105],"attacking":[108],"and":[110],"show":[111,124],"example":[113],"using":[114,137],"label":[118],"file.":[121],"Finally,":[122],"efficient":[126],"way":[127],"locate":[129],"issued":[134],"alerts":[136],"prototype.":[139]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2}],"updated_date":"2026-10-11T09:32:39.932853","created_date":"2021-04-26T00:00:00"}