{"id":"https://openalex.org/W4385692127","doi":"https://doi.org/10.1145/3600160.3605094","title":"Modern NetFlow network dataset with labeled attacks and detection methods","display_name":"Modern NetFlow network dataset with labeled attacks and detection methods","publication_year":2023,"publication_date":"2023-08-09","ids":{"openalex":"https://openalex.org/W4385692127","doi":"https://doi.org/10.1145/3600160.3605094"},"language":"en","primary_location":{"id":"doi:10.1145/3600160.3605094","doi":"https://doi.org/10.1145/3600160.3605094","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3600160.3605094","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3605094","source":{"id":"https://openalex.org/S4363608926","display_name":"International Conference on Availability, Reliability and Security (ARES)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3605094","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006715549","display_name":"Miko\u0142aj Komisarek","orcid":"https://orcid.org/0000-0003-1459-2695","observed_orcids":["https://orcid.org/0000-0003-1459-2695"]},"institutions":[{"id":"https://openalex.org/I4210118437","display_name":"Instytut Technik Telekomunikacyjnych i Informatycznych (Poland)","ror":"https://ror.org/02r65gs06","country_code":"PL","type":"company","lineage":["https://openalex.org/I4210118437"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Miko\u0142aj Komisarek","raw_affiliation_strings":["ITTI Sp. z o.o., Poland"],"raw_orcid":"https://orcid.org/0000-0003-1459-2695","affiliations":[{"raw_affiliation_string":"ITTI Sp. z o.o., Poland","institution_ids":["https://openalex.org/I4210118437"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088536972","display_name":"Marek Pawlicki","orcid":"https://orcid.org/0000-0001-5881-6406","observed_orcids":["https://orcid.org/0000-0001-5881-6406"]},"institutions":[{"id":"https://openalex.org/I1300393620","display_name":"Bydgoszcz University of Science and Technology","ror":"https://ror.org/049eq0c58","country_code":"PL","type":"education","lineage":["https://openalex.org/I1300393620"]},{"id":"https://openalex.org/I4210118437","display_name":"Instytut Technik Telekomunikacyjnych i Informatycznych (Poland)","ror":"https://ror.org/02r65gs06","country_code":"PL","type":"company","lineage":["https://openalex.org/I4210118437"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Marek Pawlicki","raw_affiliation_strings":["ITTI Sp. z o.o., Poland and Institute of Telecommunications, Bydgoszcz University of Science and Technology, Poland"],"raw_orcid":"https://orcid.org/0000-0001-5881-6406","affiliations":[{"raw_affiliation_string":"ITTI Sp. z o.o., Poland and Institute of Telecommunications, Bydgoszcz University of Science and Technology, Poland","institution_ids":["https://openalex.org/I1300393620","https://openalex.org/I4210118437"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092617622","display_name":"Tomi Simic","orcid":"https://orcid.org/0009-0003-9903-8614","observed_orcids":["https://orcid.org/0009-0003-9903-8614"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Tomi Simic","raw_affiliation_strings":["Telprom, informacijske tehnologije d.o.o., Slovenia"],"raw_orcid":"https://orcid.org/0009-0003-9903-8614","affiliations":[{"raw_affiliation_string":"Telprom, informacijske tehnologije d.o.o., Slovenia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092617623","display_name":"David Kavcnik","orcid":"https://orcid.org/0009-0000-9620-2042","observed_orcids":["https://orcid.org/0009-0000-9620-2042"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"David Kavcnik","raw_affiliation_strings":["Telprom, informacijske tehnologije d.o.o., Slovenia"],"raw_orcid":"https://orcid.org/0009-0000-9620-2042","affiliations":[{"raw_affiliation_string":"Telprom, informacijske tehnologije d.o.o., Slovenia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042632349","display_name":"Rafa\u0142 Kozik","orcid":"https://orcid.org/0000-0001-7122-3306","observed_orcids":["https://orcid.org/0000-0001-7122-3306"]},"institutions":[{"id":"https://openalex.org/I1300393620","display_name":"Bydgoszcz University of Science and Technology","ror":"https://ror.org/049eq0c58","country_code":"PL","type":"education","lineage":["https://openalex.org/I1300393620"]},{"id":"https://openalex.org/I4210118437","display_name":"Instytut Technik Telekomunikacyjnych i Informatycznych (Poland)","ror":"https://ror.org/02r65gs06","country_code":"PL","type":"company","lineage":["https://openalex.org/I4210118437"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Rafa\u0142 Kozik","raw_affiliation_strings":["Institute of Telecommunications, Bydgoszcz University of Science and Technology, Poland and ITTI Sp. z o.o., Poland"],"raw_orcid":"https://orcid.org/0000-0001-7122-3306","affiliations":[{"raw_affiliation_string":"Institute of Telecommunications, Bydgoszcz University of Science and Technology, Poland and ITTI Sp. z o.o., Poland","institution_ids":["https://openalex.org/I1300393620","https://openalex.org/I4210118437"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5009283476","display_name":"Micha\u0142 Chora\u015b","orcid":"https://orcid.org/0000-0003-1405-9911","observed_orcids":["https://orcid.org/0000-0003-1405-9911"]},"institutions":[{"id":"https://openalex.org/I1300393620","display_name":"Bydgoszcz University of Science and Technology","ror":"https://ror.org/049eq0c58","country_code":"PL","type":"education","lineage":["https://openalex.org/I1300393620"]},{"id":"https://openalex.org/I4210118437","display_name":"Instytut Technik Telekomunikacyjnych i Informatycznych (Poland)","ror":"https://ror.org/02r65gs06","country_code":"PL","type":"company","lineage":["https://openalex.org/I4210118437"]}],"countries":["PL"],"is_corresponding":false,"raw_author_name":"Micha\u0142 Chora\u015b","raw_affiliation_strings":["Institute of Telecommunications, Bydgoszcz University of Science and Technology, Poland and ITTI Sp. z o.o., Poland"],"raw_orcid":"https://orcid.org/0000-0003-1405-9911","affiliations":[{"raw_affiliation_string":"Institute of Telecommunications, Bydgoszcz University of Science and Technology, Poland and ITTI Sp. z o.o., Poland","institution_ids":["https://openalex.org/I1300393620","https://openalex.org/I4210118437"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.1433,"has_fulltext":true,"cited_by_count":14,"citation_normalized_percentile":{"value":0.92994512,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-intrusion-detection","display_name":"network intrusion detection","score":0.8799999952316284},{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.9240000247955322},{"id":"https://openalex.org/keywords/network-traffic-datasets","display_name":"network traffic datasets","score":0.7210000157356262},{"id":"https://openalex.org/keywords/machine-learning","display_name":"machine learning","score":0.49300000071525574},{"id":"https://openalex.org/keywords/denial-of-service-attacks","display_name":"denial-of-service attacks","score":0.9390000104904175},{"id":"https://openalex.org/keywords/port-scanning","display_name":"port scanning","score":0.9620000123977661},{"id":"https://openalex.org/keywords/brute-force-attacks","display_name":"brute force attacks","score":0.9980000257492065},{"id":"https://openalex.org/keywords/cyberattacks","display_name":"cyberattacks","score":0.5730000138282776},{"id":"https://openalex.org/keywords/network-security","display_name":"network security","score":0.49799999594688416}],"concepts":[{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.9801708459854126},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7993655800819397},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7972831726074219},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7586899995803833},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.6629403233528137},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.64688640832901},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5047215223312378},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4940109848976135},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47740069031715393},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.4365941286087036},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3319651484489441},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.12336570024490356},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.07940492033958435}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3600160.3605094","doi":"https://doi.org/10.1145/3600160.3605094","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3600160.3605094","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3605094","source":{"id":"https://openalex.org/S4363608926","display_name":"International Conference on Availability, Reliability and Security (ARES)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3600160.3605094","doi":"https://doi.org/10.1145/3600160.3605094","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3600160.3605094","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3600160.3605094","source":{"id":"https://openalex.org/S4363608926","display_name":"International Conference on Availability, Reliability and Security (ARES)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 18th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G2537437982","display_name":"fAcilitating Public & Private secuRity operAtors to mitigate terrorIsm Scenarios against soft targEts","funder_award_id":"101021981","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G441393752","display_name":null,"funder_award_id":"101021981","funder_id":"https://openalex.org/F4320337662","funder_display_name":"H2020 Excellent Science"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320337662","display_name":"H2020 Excellent Science","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4385692127.pdf","grobid_xml":"https://content.openalex.org/works/W4385692127.grobid-xml"},"referenced_works_count":24,"referenced_works":["https://openalex.org/W1574648570","https://openalex.org/W2048635557","https://openalex.org/W2076758681","https://openalex.org/W2099940443","https://openalex.org/W2294934636","https://openalex.org/W2564489206","https://openalex.org/W2770942607","https://openalex.org/W2799758613","https://openalex.org/W2805873640","https://openalex.org/W2892556724","https://openalex.org/W2908453820","https://openalex.org/W2997258927","https://openalex.org/W3024012711","https://openalex.org/W3082704935","https://openalex.org/W3110894687","https://openalex.org/W3114468998","https://openalex.org/W3176609646","https://openalex.org/W3202886566","https://openalex.org/W4281693361","https://openalex.org/W4286521379","https://openalex.org/W4293065833","https://openalex.org/W4362577811","https://openalex.org/W4393875072","https://openalex.org/W6907339666"],"related_works":["https://openalex.org/W4300786339","https://openalex.org/W3102359135","https://openalex.org/W3176609646","https://openalex.org/W7154830857","https://openalex.org/W4283162953","https://openalex.org/W4388937600","https://openalex.org/W7125390271","https://openalex.org/W6893071004","https://openalex.org/W7117310643","https://openalex.org/W4409805523"],"abstract_inverted_index":{"Network":[0,13,122],"Intrusion":[1,14,123],"Detection":[2,15,124],"Systems":[3,16],"are":[4,17],"an":[5,21,83],"important":[6],"part":[7],"of":[8,36,62,70,119],"cyber-defensive":[9],"inventory.":[10],"Currently,":[11],"Machine-Learning-Based":[12],"being":[18],"researched":[19],"as":[20,46],"effective":[22],"security":[23],"measure.":[24],"This":[25],"paper":[26],"introduces":[27],"a":[28,101],"novel":[29],"NetFlow-based":[30],"dataset":[31,41,64,81,111],"geared":[32],"for":[33,89],"the":[34,63,68,76,87,105,117],"training":[35],"machine-learning-based":[37],"detection":[38,77],"systems.":[39],"The":[40,60,80,96,110],"incorporates":[42],"common":[43],"cyberattacks":[44],"such":[45],"Denial-of-Service,":[47],"Port":[48],"Scanning,":[49],"and":[50],"brute-force":[51],"attacks,":[52],"which":[53],"represent":[54],"significant":[55],"threats":[56],"to":[57,85,115],"network":[58,103],"security.":[59],"efficacy":[61],"is":[65,82],"evaluated":[66],"with":[67,75],"use":[69],"four":[71],"machine":[72,120],"learning":[73],"algorithms,":[74],"metrics":[78],"reported.":[79],"attempt":[84],"fill":[86],"vacuum":[88],"current,":[90],"realistic":[91],"datasets":[92],"in":[93,100,104,108],"cybersecurity":[94],"research.":[95],"traffic":[97],"was":[98],"collected":[99],"real":[102],"BTC":[106],"complex":[107],"Ljubljana.":[109],"can":[112],"significantly":[113],"contribute":[114],"enhancing":[116],"effectiveness":[118],"learning-based":[121],"Systems.":[125]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2023-08-10T00:00:00"}