{"id":"https://openalex.org/W91020774","doi":null,"title":"Nfsight: netflow-based network awareness tool","display_name":"Nfsight: netflow-based network awareness tool","publication_year":2010,"publication_date":"2010-11-07","ids":{"openalex":"https://openalex.org/W91020774","mag":"91020774"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.175.4722","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.175.4722","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.research.att.com/export/sites/att_labs/techdocs/TD_100147.pdf","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000645153","display_name":"Robin Berthier","orcid":"https://orcid.org/0009-0001-3669-7378","observed_orcids":["https://orcid.org/0009-0001-3669-7378"]},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robin Berthier","raw_affiliation_strings":["Coordinated Science Laboratory, Information Trust Institute, University of Illinois, Urbana-Champaign, IL#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Coordinated Science Laboratory, Information Trust Institute, University of Illinois, Urbana-Champaign, IL#TAB#","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050380937","display_name":"Michel Cukier","orcid":"https://orcid.org/0000-0001-6250-4632","observed_orcids":["https://orcid.org/0000-0001-6250-4632"]},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michel Cukier","raw_affiliation_strings":["The Institute for Systems Research, Clark School of Engineering, University of Maryland, College Park, MD#TAB#"],"raw_orcid":"https://orcid.org/0000-0001-6250-4632","affiliations":[{"raw_affiliation_string":"The Institute for Systems Research, Clark School of Engineering, University of Maryland, College Park, MD#TAB#","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073142752","display_name":"Matti A. Hiltunen","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1283103587","display_name":"AT&T (United States)","ror":"https://ror.org/02bbd5539","country_code":"US","type":"company","lineage":["https://openalex.org/I1283103587"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Matti Hiltunen","raw_affiliation_strings":["AT&T Labs\u2014\u2014Research, Florham Park, NJ#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AT&T Labs\u2014\u2014Research, Florham Park, NJ#TAB#","institution_ids":["https://openalex.org/I1283103587"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027566268","display_name":"Dave Kormann","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1283103587","display_name":"AT&T (United States)","ror":"https://ror.org/02bbd5539","country_code":"US","type":"company","lineage":["https://openalex.org/I1283103587"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dave Kormann","raw_affiliation_strings":["AT&T Labs\u2014\u2014Research, Florham Park, NJ#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AT&T Labs\u2014\u2014Research, Florham Park, NJ#TAB#","institution_ids":["https://openalex.org/I1283103587"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003533793","display_name":"Gregg Vesonder","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1283103587","display_name":"AT&T (United States)","ror":"https://ror.org/02bbd5539","country_code":"US","type":"company","lineage":["https://openalex.org/I1283103587"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gregg Vesonder","raw_affiliation_strings":["AT&T Labs\u2014\u2014Research, Florham Park, NJ#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AT&T Labs\u2014\u2014Research, Florham Park, NJ#TAB#","institution_ids":["https://openalex.org/I1283103587"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5020115484","display_name":"Daniel Sheleheda","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1283103587","display_name":"AT&T (United States)","ror":"https://ror.org/02bbd5539","country_code":"US","type":"company","lineage":["https://openalex.org/I1283103587"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dan Sheleheda","raw_affiliation_strings":["AT&T Labs\u2014\u2014Research, Florham Park, NJ#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AT&T Labs\u2014\u2014Research, Florham Park, NJ#TAB#","institution_ids":["https://openalex.org/I1283103587"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.0729,"has_fulltext":false,"cited_by_count":24,"citation_normalized_percentile":{"value":0.93363412,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9506999850273132,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9506999850273132,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.030300000682473183,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.01679999940097332,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.7459999918937683},{"id":"https://openalex.org/keywords/network-awareness","display_name":"network awareness","score":0.9750000238418579},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.9909999966621399},{"id":"https://openalex.org/keywords/network-traffic-visualization","display_name":"network traffic visualization","score":0.8679999709129333},{"id":"https://openalex.org/keywords/network-monitoring","display_name":"network monitoring","score":0.5600000023841858},{"id":"https://openalex.org/keywords/network-security","display_name":"network security","score":0.414000004529953},{"id":"https://openalex.org/keywords/university-networks","display_name":"university networks","score":0.5720000267028809}],"concepts":[{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.980012059211731},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8022124767303467},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6076779365539551},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.594577431678772},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5692718625068665},{"id":"https://openalex.org/C2779173999","wikidata":"https://www.wikidata.org/wiki/Q680296","display_name":"Network administrator","level":2,"score":0.5574634671211243},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.511569082736969},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.46643662452697754},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.4370790719985962},{"id":"https://openalex.org/C129763632","wikidata":"https://www.wikidata.org/wiki/Q1454667","display_name":"Network management","level":2,"score":0.4343019723892212},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.43008214235305786},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4113900363445282},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32090526819229126},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3165006637573242},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10146030783653259},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.175.4722","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.175.4722","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.research.att.com/export/sites/att_labs/techdocs/TD_100147.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.368.4003","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.368.4003","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://www.usenix.org/legacy/events/lisa10/tech/full_papers/Berthier.pdf","raw_type":"text"},{"id":"mag:91020774","doi":null,"is_oa":false,"landing_page_url":"https://www.usenix.org/event/lisa10/tech/full_papers/Berthier.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W14572547","https://openalex.org/W61646295","https://openalex.org/W121661638","https://openalex.org/W1481798173","https://openalex.org/W1493911800","https://openalex.org/W1498348584","https://openalex.org/W1519489167","https://openalex.org/W1698314624","https://openalex.org/W2011628134","https://openalex.org/W2108261841","https://openalex.org/W2111726016","https://openalex.org/W2120955848","https://openalex.org/W2121063876","https://openalex.org/W2122226347","https://openalex.org/W2131463233","https://openalex.org/W2134511994","https://openalex.org/W2143670853","https://openalex.org/W2149194102","https://openalex.org/W2149205570","https://openalex.org/W2255206882","https://openalex.org/W2542318691"],"related_works":["https://openalex.org/W7095462796","https://openalex.org/W7099966283","https://openalex.org/W7095420386","https://openalex.org/W7100889710","https://openalex.org/W2133433867","https://openalex.org/W2600120492","https://openalex.org/W7099129149","https://openalex.org/W7097728289","https://openalex.org/W3094286795","https://openalex.org/W2111726016"],"abstract_inverted_index":{"Network":[0],"awareness":[1,93],"is":[2,51],"highly":[3],"critical":[4],"for":[5,57],"network":[6,17,42,59,72,92],"and":[7,14,23,40,54,64,84,105,114,133],"security":[8,149],"administrators.":[9],"It":[10,30],"enables":[11],"informed":[12],"planning":[13],"management":[15],"of":[16,27,34,71,100,126,130,141],"resources,":[18],"as":[19,21],"well":[20],"detection":[22,116,135],"a":[24,32,81,90,152],"comprehensive":[25,91],"understanding":[26],"malicious":[28],"activity.":[29],"requires":[31],"set":[33],"tools":[35,47],"to":[36,88,110],"efficiently":[37],"collect,":[38],"process,":[39],"represent":[41],"data.":[43],"While":[44],"many":[45],"such":[46],"already":[48],"exist,":[49],"there":[50],"no":[52],"flexible":[53],"practical":[55],"solution":[56],"visualizing":[58],"activity":[60],"at":[61],"various":[62],"granularities,":[63],"quickly":[65],"gaining":[66],"insights":[67],"about":[68],"the":[69,101,123,128,131,139],"status":[70],"assets.":[73],"To":[74],"address":[75],"this":[76,121],"issue,":[77],"we":[78],"developed":[79],"Nfsight,":[80,127],"Net-Flow":[82],"processing":[83],"visualization":[85],"application":[86],"designed":[87],"offer":[89],"solution.":[94],"Nfsight":[95,142],"constructs":[96],"bidirectional":[97,108],"flows":[98,104,109],"out":[99],"unidirectional":[102],"NetFlow":[103],"leverages":[106],"these":[107],"provide":[111],"client/server":[112],"identification":[113],"intrusion":[115,134],"capabilities.":[117],"We":[118,137],"present":[119],"in":[120],"paper":[122],"internal":[124],"architecture":[125],"evaluation":[129],"service,":[132],"algorithms.":[136],"illustrate":[138],"contributions":[140],"through":[143],"several":[144],"case":[145],"studies":[146],"conducted":[147],"by":[148],"administrators":[150],"on":[151],"large":[153],"university":[154],"network.":[155],"1":[156]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2018,"cited_by_count":3},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":6},{"year":2012,"cited_by_count":2}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2016-06-24T00:00:00"}