{"id":"https://openalex.org/W1562404730","doi":"https://doi.org/10.1007/0-387-33406-8_24","title":"VisFlowCluster-IP: Connectivity-Based Visual Clustering of Network Hosts","display_name":"VisFlowCluster-IP: Connectivity-Based Visual Clustering of Network Hosts","publication_year":2006,"publication_date":"2006-07-24","ids":{"openalex":"https://openalex.org/W1562404730","doi":"https://doi.org/10.1007/0-387-33406-8_24","mag":"1562404730"},"language":"en","primary_location":{"id":"doi:10.1007/0-387-33406-8_24","is_oa":true,"landing_page_url":"https://doi.org/10.1007/0-387-33406-8_24","pdf_url":"https://link.springer.com/content/pdf/10.1007%2F0-387-33406-8_24.pdf","source":{"id":"https://openalex.org/S4306463519","display_name":"Kluwer Academic Publishers eBooks","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"ebook platform"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IFIP International Federation for Information Processing","raw_type":"book-chapter"},"type":"book-chapter","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://link.springer.com/content/pdf/10.1007%2F0-387-33406-8_24.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111954563","display_name":"Xiaoxin Yin","orcid":null},"institutions":[{"id":"https://openalex.org/I4210135837","display_name":"National Center for Supercomputing Applications","ror":"https://ror.org/03r10zj06","country_code":"US","type":"facility","lineage":["https://openalex.org/I157725225","https://openalex.org/I4210135837"]},{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Xiaoxin Yin","raw_affiliation_strings":["National Center for Supercomputing Applications (NCSA), University of Illinois at Urbana-Champaign, USA"],"affiliations":[{"raw_affiliation_string":"National Center for Supercomputing Applications (NCSA), University of Illinois at Urbana-Champaign, USA","institution_ids":["https://openalex.org/I4210135837","https://openalex.org/I157725225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058426115","display_name":"William Yurcik","orcid":null},"institutions":[{"id":"https://openalex.org/I4210135837","display_name":"National Center for Supercomputing Applications","ror":"https://ror.org/03r10zj06","country_code":"US","type":"facility","lineage":["https://openalex.org/I157725225","https://openalex.org/I4210135837"]},{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"William Yurcik","raw_affiliation_strings":["National Center for Supercomputing Applications (NCSA), University of Illinois at Urbana-Champaign, USA"],"affiliations":[{"raw_affiliation_string":"National Center for Supercomputing Applications (NCSA), University of Illinois at Urbana-Champaign, USA","institution_ids":["https://openalex.org/I4210135837","https://openalex.org/I157725225"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076711842","display_name":"Adam Slagell","orcid":null},"institutions":[{"id":"https://openalex.org/I4210135837","display_name":"National Center for Supercomputing Applications","ror":"https://ror.org/03r10zj06","country_code":"US","type":"facility","lineage":["https://openalex.org/I157725225","https://openalex.org/I4210135837"]},{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Adam Slagell","raw_affiliation_strings":["National Center for Supercomputing Applications (NCSA), University of Illinois at Urbana-Champaign, USA"],"affiliations":[{"raw_affiliation_string":"National Center for Supercomputing Applications (NCSA), University of Illinois at Urbana-Champaign, USA","institution_ids":["https://openalex.org/I4210135837","https://openalex.org/I157725225"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5111954563"],"corresponding_institution_ids":["https://openalex.org/I157725225","https://openalex.org/I4210135837"],"apc_list":null,"apc_paid":null,"fwci":0.6326,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.67791762,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"284","last_page":"295"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9664000272750854,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7561919689178467},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.6384047269821167},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.6283162832260132},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5506026148796082},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.5483102798461914},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.4824672043323517},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.4722140431404114},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.43740761280059814},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3817562758922577},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3619436025619507},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.25227177143096924},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.23658046126365662}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7561919689178467},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.6384047269821167},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.6283162832260132},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5506026148796082},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5483102798461914},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.4824672043323517},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.4722140431404114},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.43740761280059814},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3817562758922577},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3619436025619507},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25227177143096924},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.23658046126365662}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/0-387-33406-8_24","is_oa":true,"landing_page_url":"https://doi.org/10.1007/0-387-33406-8_24","pdf_url":"https://link.springer.com/content/pdf/10.1007%2F0-387-33406-8_24.pdf","source":{"id":"https://openalex.org/S4306463519","display_name":"Kluwer Academic Publishers eBooks","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"ebook platform"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IFIP International Federation for Information Processing","raw_type":"book-chapter"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.60.5842","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.60.5842","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.projects.ncassr.org/sift/papers/sec06.pdf","raw_type":"text"}],"best_oa_location":{"id":"doi:10.1007/0-387-33406-8_24","is_oa":true,"landing_page_url":"https://doi.org/10.1007/0-387-33406-8_24","pdf_url":"https://link.springer.com/content/pdf/10.1007%2F0-387-33406-8_24.pdf","source":{"id":"https://openalex.org/S4306463519","display_name":"Kluwer Academic Publishers eBooks","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"ebook platform"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IFIP International Federation for Information Processing","raw_type":"book-chapter"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320312143","display_name":"National Centre for Supercomputing Applications","ror":"https://ror.org/03r10zj06"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W1562404730.pdf","grobid_xml":"https://content.openalex.org/works/W1562404730.grobid-xml"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W127312605","https://openalex.org/W1495304983","https://openalex.org/W1513215130","https://openalex.org/W1526644211","https://openalex.org/W1536779234","https://openalex.org/W1673310716","https://openalex.org/W1884606608","https://openalex.org/W1993426957","https://openalex.org/W1999058284","https://openalex.org/W2005811057","https://openalex.org/W2011779421","https://openalex.org/W2059942088","https://openalex.org/W2096847629","https://openalex.org/W2114989451","https://openalex.org/W2120683899","https://openalex.org/W2123736108","https://openalex.org/W2134511994","https://openalex.org/W2148169471","https://openalex.org/W2149725068","https://openalex.org/W2155542779","https://openalex.org/W2163277533","https://openalex.org/W2167482691","https://openalex.org/W3022981850","https://openalex.org/W4246709591","https://openalex.org/W6605185239","https://openalex.org/W6674805939","https://openalex.org/W6777060225"],"related_works":["https://openalex.org/W2376886931","https://openalex.org/W2061466315","https://openalex.org/W2010561419","https://openalex.org/W2374845301","https://openalex.org/W2351448539","https://openalex.org/W1977863481","https://openalex.org/W2384741105","https://openalex.org/W1495178644","https://openalex.org/W2185594426","https://openalex.org/W2377372927"],"abstract_inverted_index":{"With":[0],"the":[1,75,88,130,140],"increasing":[2],"number":[3],"of":[4,102,125,142],"hostile":[5],"network":[6,11,36,46,50,67,71,76],"attacks,":[7,35],"anomaly":[8],"detection":[9],"for":[10,26,31,44,65,122],"security":[12],"has":[13,39],"become":[14,40],"an":[15,119],"urgent":[16],"task.":[17],"As":[18],"there":[19],"have":[20],"not":[21],"been":[22],"highly":[23],"effective":[24],"solutions":[25],"automatic":[27],"intrusion":[28],"detection,":[29],"especially":[30],"detecting":[32],"newly":[33],"emerging":[34],"traffic":[37,51,68],"visualization":[38,131],"a":[41,62,78,96,110],"promising":[42],"technique":[43],"assisting":[45],"administrators":[47],"to":[48,91,113],"monitor":[49],"and":[52],"detect":[53],"abnormal":[54,146],"behaviors.":[55,147],"In":[56],"this":[57],"paper":[58],"we":[59],"present":[60,134],"VisFlowCluster-IP,":[61],"powerful":[63],"tool":[64],"visualizing":[66],"flows":[69],"using":[70],"logs.":[72],"It":[73,86],"models":[74],"as":[77,83],"graph":[79,84,93],"by":[80],"modeling":[81],"hosts":[82,128],"nodes.":[85],"utilizes":[87],"force":[89],"model":[90],"arrange":[92],"nodes":[94,104],"on":[95],"two-dimensional":[97],"space,":[98],"so":[99],"that":[100,138],"groups":[101],"related":[103],"can":[105],"be":[106],"visually":[107],"clustered":[108],"in":[109,129,144],"manner":[111],"apparent":[112],"human":[114],"eyes.":[115],"We":[116,133],"also":[117],"propose":[118],"automated":[120],"method":[121],"finding":[123],"clusters":[124],"closely":[126],"connected":[127],"space.":[132],"three":[135],"real":[136],"cases":[137],"validate":[139],"effectiveness":[141],"VisFlowCluster-IP":[143],"identifying":[145]},"counts_by_year":[],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}