{"id":"https://openalex.org/W4292738132","doi":"https://doi.org/10.1007/s10844-022-00728-2","title":"AI infers DoS mitigation rules","display_name":"AI infers DoS mitigation rules","publication_year":2022,"publication_date":"2022-08-23","ids":{"openalex":"https://openalex.org/W4292738132","doi":"https://doi.org/10.1007/s10844-022-00728-2"},"language":"en","primary_location":{"id":"doi:10.1007/s10844-022-00728-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10844-022-00728-2","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10844-022-00728-2.pdf","source":{"id":"https://openalex.org/S36033921","display_name":"Journal of Intelligent Information Systems","issn_l":"0925-9902","issn":["0925-9902","1573-7675"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10844-022-00728-2.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005548272","display_name":"Martin \u017d\u00e1dn\u00edk","orcid":"https://orcid.org/0000-0002-2099-2348"},"institutions":[{"id":"https://openalex.org/I54634078","display_name":"CESNET, z\u00e1jmov\u00e9 sdru\u017een\u00ed pr\u00e1vnick\u00fdch osob","ror":"https://ror.org/050dkka69","country_code":"CZ","type":"other","lineage":["https://openalex.org/I54634078"]}],"countries":["CZ"],"is_corresponding":true,"raw_author_name":"Martin Zadnik","raw_affiliation_strings":["CESNET, Zikova 4, 16000, Prague, Czech Republic"],"raw_orcid":"https://orcid.org/0000-0002-2099-2348","affiliations":[{"raw_affiliation_string":"CESNET, Zikova 4, 16000, Prague, Czech Republic","institution_ids":["https://openalex.org/I54634078"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028418160","display_name":"Elena Carasec","orcid":null},"institutions":[{"id":"https://openalex.org/I54634078","display_name":"CESNET, z\u00e1jmov\u00e9 sdru\u017een\u00ed pr\u00e1vnick\u00fdch osob","ror":"https://ror.org/050dkka69","country_code":"CZ","type":"other","lineage":["https://openalex.org/I54634078"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Elena Carasec","raw_affiliation_strings":["CESNET, Zikova 4, 16000, Prague, Czech Republic"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CESNET, Zikova 4, 16000, Prague, Czech Republic","institution_ids":["https://openalex.org/I54634078"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5005548272"],"corresponding_institution_ids":["https://openalex.org/I54634078"],"apc_list":{"value":2490,"currency":"EUR","value_usd":3090},"apc_paid":{"value":2490,"currency":"EUR","value_usd":3090},"fwci":0.4003,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.60965502,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"60","issue":"2","first_page":"305","last_page":"324"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9155111312866211},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.6550123691558838},{"id":"https://openalex.org/keywords/hyperparameter","display_name":"Hyperparameter","score":0.6470094919204712},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.6164292693138123},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.432248055934906},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.42288652062416077},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.42001450061798096},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3685241937637329}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9155111312866211},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.6550123691558838},{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.6470094919204712},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6164292693138123},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.432248055934906},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42288652062416077},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.42001450061798096},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3685241937637329},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10844-022-00728-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10844-022-00728-2","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10844-022-00728-2.pdf","source":{"id":"https://openalex.org/S36033921","display_name":"Journal of Intelligent Information Systems","issn_l":"0925-9902","issn":["0925-9902","1573-7675"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent Information Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10844-022-00728-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10844-022-00728-2","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10844-022-00728-2.pdf","source":{"id":"https://openalex.org/S36033921","display_name":"Journal of Intelligent Information Systems","issn_l":"0925-9902","issn":["0925-9902","1573-7675"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent Information Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G353066319","display_name":null,"funder_award_id":"833418","funder_id":"https://openalex.org/F4320338339","funder_display_name":"H2020 Leadership in Enabling and Industrial Technologies"},{"id":"https://openalex.org/G8817917237","display_name":"Sharing and Automation for Privacy Preserving Attack Neutralization","funder_award_id":"833418","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320311333","display_name":"Ministerstvo Vnitra \u010cesk\u00e9 Republiky","ror":"https://ror.org/05w1nn565"},{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320338339","display_name":"H2020 Leadership in Enabling and Industrial Technologies","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4292738132.pdf","grobid_xml":"https://content.openalex.org/works/W4292738132.grobid-xml"},"referenced_works_count":39,"referenced_works":["https://openalex.org/W1486402922","https://openalex.org/W1520622255","https://openalex.org/W1524600321","https://openalex.org/W1537732843","https://openalex.org/W1542356933","https://openalex.org/W1577538250","https://openalex.org/W1660551007","https://openalex.org/W1672587039","https://openalex.org/W1817859880","https://openalex.org/W1867219652","https://openalex.org/W1961994720","https://openalex.org/W1967949770","https://openalex.org/W1984438447","https://openalex.org/W1985382559","https://openalex.org/W1985705514","https://openalex.org/W2001968297","https://openalex.org/W2031779012","https://openalex.org/W2033960944","https://openalex.org/W2046745919","https://openalex.org/W2061920890","https://openalex.org/W2064649084","https://openalex.org/W2068803497","https://openalex.org/W2087853663","https://openalex.org/W2101453614","https://openalex.org/W2120617515","https://openalex.org/W2124288765","https://openalex.org/W2135262552","https://openalex.org/W2146189323","https://openalex.org/W2148859062","https://openalex.org/W2150228605","https://openalex.org/W2152418999","https://openalex.org/W2160156638","https://openalex.org/W2163809997","https://openalex.org/W2514510339","https://openalex.org/W2594418606","https://openalex.org/W2982682021","https://openalex.org/W3022034716","https://openalex.org/W3182557477","https://openalex.org/W6888440683"],"related_works":["https://openalex.org/W2140186469","https://openalex.org/W4390421286","https://openalex.org/W2602382373","https://openalex.org/W3198113463","https://openalex.org/W4285827128","https://openalex.org/W2787698406","https://openalex.org/W2963844355","https://openalex.org/W4361251046","https://openalex.org/W3095116576","https://openalex.org/W98577079"],"abstract_inverted_index":{"Abstract":[0],"DDoS":[1],"attacks":[2],"still":[3],"represent":[4],"a":[5,26,71,77,155],"severe":[6],"threat":[7],"to":[8,19,50,58,63,67,75],"network":[9,86],"services.":[10],"While":[11],"there":[12,24],"are":[13,56],"more":[14],"or":[15],"less":[16],"workable":[17],"solutions":[18],"defend":[20],"against":[21],"these":[22],"attacks,":[23],"is":[25,96,137],"significant":[27],"space":[28],"for":[29],"further":[30],"research":[31],"regarding":[32],"automation":[33],"of":[34,44,79,115,123,129,141,144],"reactions.":[35],"In":[36],"this":[37],"article,":[38],"we":[39],"focus":[40],"on":[41,84,107],"one":[42],"piece":[43],"the":[45,59,65,80,89,100,120,124,134,142],"whole":[46],"puzzle.":[47],"We":[48,69,103,110],"strive":[49],"automatically":[51],"infer":[52],"filtering":[53,101,147],"rules":[54,148],"which":[55],"specific":[57],"current":[60],"DoS":[61],"attack":[62,90,125],"decrease":[64],"time":[66],"mitigation.":[68],"employ":[70],"machine":[72],"learning":[73],"technique":[74],"create":[76],"model":[78,95],"traffic":[81,87],"mix":[82],"based":[83],"observing":[85],"during":[88],"and":[91],"normal":[92],"period.":[93],"The":[94,127],"subsequently":[97],"converted":[98],"into":[99],"rules.":[102],"evaluate":[104],"our":[105,130],"approach":[106,136],"several":[108],"datasets.":[109],"experiment":[111],"with":[112],"various":[113,121],"setups":[114],"hyperparameters":[116],"as":[117,119,149,151],"well":[118,150],"intensity":[122],"traffic.":[126],"results":[128],"experiments":[131],"show":[132],"that":[133],"proposed":[135],"feasible":[138],"in":[139,154],"terms":[140],"capability":[143],"inferring":[145,152],"successful":[146],"them":[153],"reasonable":[156],"time.":[157]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-03T08:13:44.112507","created_date":"2025-10-10T00:00:00"}