{"id":"https://openalex.org/W3198099470","doi":"https://doi.org/10.1007/s12243-021-00874-8","title":"GAMPAL: an anomaly detection mechanism for Internet backbone traffic by flow size prediction with LSTM-RNN","display_name":"GAMPAL: an anomaly detection mechanism for Internet backbone traffic by flow size prediction with LSTM-RNN","publication_year":2021,"publication_date":"2021-08-28","ids":{"openalex":"https://openalex.org/W3198099470","doi":"https://doi.org/10.1007/s12243-021-00874-8","mag":"3198099470"},"language":"en","primary_location":{"id":"doi:10.1007/s12243-021-00874-8","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s12243-021-00874-8","pdf_url":"https://link.springer.com/content/pdf/10.1007/s12243-021-00874-8.pdf","source":{"id":"https://openalex.org/S164884734","display_name":"Annals of Telecommunications","issn_l":"0003-4347","issn":["0003-4347","1958-9395"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annals of Telecommunications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s12243-021-00874-8.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053701681","display_name":"Taku Wakui","orcid":null},"institutions":[{"id":"https://openalex.org/I203951103","display_name":"Keio University","ror":"https://ror.org/02kn6nx58","country_code":"JP","type":"education","lineage":["https://openalex.org/I203951103"]}],"countries":["JP"],"is_corresponding":true,"raw_author_name":"Taku Wakui","raw_affiliation_strings":["Graduate School of Science and Technology, Keio University, Yokohama, Japan"],"raw_orcid":"https://orcid.org/0000-0003-0750-2348","affiliations":[{"raw_affiliation_string":"Graduate School of Science and Technology, Keio University, Yokohama, Japan","institution_ids":["https://openalex.org/I203951103"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058950992","display_name":"Takao Kondo","orcid":"https://orcid.org/0000-0003-3572-9304"},"institutions":[{"id":"https://openalex.org/I203951103","display_name":"Keio University","ror":"https://ror.org/02kn6nx58","country_code":"JP","type":"education","lineage":["https://openalex.org/I203951103"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takao Kondo","raw_affiliation_strings":["Computer Security Incident Response Team, Keio University, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Security Incident Response Team, Keio University, Tokyo, Japan","institution_ids":["https://openalex.org/I203951103"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089613028","display_name":"Fumio Teraoka","orcid":"https://orcid.org/0000-0001-8839-3344"},"institutions":[{"id":"https://openalex.org/I203951103","display_name":"Keio University","ror":"https://ror.org/02kn6nx58","country_code":"JP","type":"education","lineage":["https://openalex.org/I203951103"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Fumio Teraoka","raw_affiliation_strings":["Faculty of Science and Technology, Keio University, Yokohama, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Science and Technology, Keio University, Yokohama, Japan","institution_ids":["https://openalex.org/I203951103"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5053701681"],"corresponding_institution_ids":["https://openalex.org/I203951103"],"apc_list":{"value":2790,"currency":"USD","value_usd":2790},"apc_paid":{"value":2790,"currency":"USD","value_usd":2790},"fwci":0.9094,"has_fulltext":true,"cited_by_count":11,"citation_normalized_percentile":{"value":0.75554344,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"77","issue":"5-6","first_page":"437","last_page":"454"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7734373807907104},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7553851008415222},{"id":"https://openalex.org/keywords/border-gateway-protocol","display_name":"Border Gateway Protocol","score":0.6946318745613098},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.6456731557846069},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.6435424089431763},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5890207290649414},{"id":"https://openalex.org/keywords/recurrent-neural-network","display_name":"Recurrent neural network","score":0.5788518190383911},{"id":"https://openalex.org/keywords/backbone-network","display_name":"Backbone network","score":0.5608472228050232},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5140477418899536},{"id":"https://openalex.org/keywords/prefix","display_name":"Prefix","score":0.5043724775314331},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.4479201138019562},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4458231031894684},{"id":"https://openalex.org/keywords/routing-protocol","display_name":"Routing protocol","score":0.3820396661758423},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.26182034611701965},{"id":"https://openalex.org/keywords/routing","display_name":"Routing (electronic design automation)","score":0.21924540400505066},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.16080299019813538},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.11136001348495483},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.0978994071483612}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7734373807907104},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7553851008415222},{"id":"https://openalex.org/C178086212","wikidata":"https://www.wikidata.org/wiki/Q11155","display_name":"Border Gateway Protocol","level":5,"score":0.6946318745613098},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6456731557846069},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6435424089431763},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5890207290649414},{"id":"https://openalex.org/C147168706","wikidata":"https://www.wikidata.org/wiki/Q1457734","display_name":"Recurrent neural network","level":3,"score":0.5788518190383911},{"id":"https://openalex.org/C88796919","wikidata":"https://www.wikidata.org/wiki/Q1142907","display_name":"Backbone network","level":2,"score":0.5608472228050232},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5140477418899536},{"id":"https://openalex.org/C141603448","wikidata":"https://www.wikidata.org/wiki/Q134830","display_name":"Prefix","level":2,"score":0.5043724775314331},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.4479201138019562},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4458231031894684},{"id":"https://openalex.org/C104954878","wikidata":"https://www.wikidata.org/wiki/Q1648707","display_name":"Routing protocol","level":3,"score":0.3820396661758423},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.26182034611701965},{"id":"https://openalex.org/C74172769","wikidata":"https://www.wikidata.org/wiki/Q1446839","display_name":"Routing (electronic design automation)","level":2,"score":0.21924540400505066},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.16080299019813538},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.11136001348495483},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0978994071483612},{"id":"https://openalex.org/C47318570","wikidata":"https://www.wikidata.org/wiki/Q8026863","display_name":"Wireless Routing Protocol","level":4,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s12243-021-00874-8","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s12243-021-00874-8","pdf_url":"https://link.springer.com/content/pdf/10.1007/s12243-021-00874-8.pdf","source":{"id":"https://openalex.org/S164884734","display_name":"Annals of Telecommunications","issn_l":"0003-4347","issn":["0003-4347","1958-9395"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annals of Telecommunications","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s12243-021-00874-8","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s12243-021-00874-8","pdf_url":"https://link.springer.com/content/pdf/10.1007/s12243-021-00874-8.pdf","source":{"id":"https://openalex.org/S164884734","display_name":"Annals of Telecommunications","issn_l":"0003-4347","issn":["0003-4347","1958-9395"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annals of Telecommunications","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3198099470.pdf","grobid_xml":"https://content.openalex.org/works/W3198099470.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W433644524","https://openalex.org/W1593937499","https://openalex.org/W2094287084","https://openalex.org/W2096998282","https://openalex.org/W2098291789","https://openalex.org/W2107327457","https://openalex.org/W2239778906","https://openalex.org/W2507617957","https://openalex.org/W2756396702","https://openalex.org/W2770942607","https://openalex.org/W2783384500","https://openalex.org/W2889109290","https://openalex.org/W2891639424","https://openalex.org/W2899374119","https://openalex.org/W2919424475","https://openalex.org/W2947165201"],"related_works":["https://openalex.org/W2360429410","https://openalex.org/W2921433547","https://openalex.org/W2204131204","https://openalex.org/W2383770723","https://openalex.org/W2898696280","https://openalex.org/W2958385475","https://openalex.org/W4286539397","https://openalex.org/W2370216173","https://openalex.org/W3091388705","https://openalex.org/W2754163055"],"abstract_inverted_index":{"Abstract":[0],"This":[1],"paper":[2],"proposes":[3],"a":[4,85,98,118,140,163,185,188],"general-purpose":[5,33],"anomaly":[6,34,198],"detection":[7,17],"mechanism":[8],"for":[9,88,144],"Internet":[10,114],"backbone":[11,137,142],"traffic":[12,89,94,115,129,172],"named":[13],"GAMPAL":[14,25,53,83,124,165],"(General-purpose":[15],"Anomaly":[16],"Mechanism":[18],"using":[19,127],"Prefix":[20],"Aggregate":[21],"without":[22],"Labeled":[23],"data).":[24],"does":[26],"not":[27],"require":[28],"labeled":[29],"data":[30],"to":[31,38,174],"achieve":[32],"detection.":[35],"For":[36],"scalability":[37],"the":[39,44,72,80,110,113,135,152],"number":[40],"of":[41,67,112,123,154,180],"entries":[42,60],"in":[43,79,149,160],"BGP":[45,58,131],"RIB":[46,59],"(Border":[47],"Gateway":[48],"Protocol":[49],"Routing":[50],"Information":[51],"Base),":[52],"introduces":[54],"prefix":[55,64],"aggregate.":[56],"The":[57,121],"are":[61],"classified":[62],"into":[63],"aggregates,":[65],"each":[66],"which":[68],"is":[69,125],"identified":[70],"with":[71],"first":[73],"three":[74],"AS":[75],"(Autonomous":[76],"System)":[77],"numbers":[78],"AS_PATH":[81],"attribute.":[82],"establishes":[84],"prediction":[86],"model":[87,106],"sizes":[90],"based":[91],"on":[92,109],"past":[93],"sizes.":[95],"It":[96],"adopts":[97],"LSTM-RNN":[99],"(Long":[100],"Short-Term":[101],"Memory":[102],"Recurrent":[103],"Neural":[104],"Network)":[105],"that":[107],"focuses":[108],"periodicity":[111],"patterns":[116],"at":[117,184],"weekly":[119],"scale.":[120],"validity":[122],"evaluated":[126],"real":[128],"information,":[130],"RIBs":[132],"exported":[133],"from":[134],"WIDE":[136],"network":[138,143],"(AS2500),":[139],"nationwide":[141],"research":[145],"and":[146,151,197],"educational":[147],"organizations":[148],"Japan,":[150],"dataset":[153],"an":[155,175,191],"ISP":[156],"(Internet":[157],"Service":[158],"Provider)":[159],"Spain.":[161],"As":[162],"result,":[164],"successfully":[166],"detects":[167],"anomalies":[168],"such":[169],"as":[170],"increased":[171],"due":[173],"event,":[176],"DDoS":[177],"(Distributed":[178],"Denial":[179],"Service)":[181],"attacks":[182],"targeted":[183],"stub":[186],"organization,":[187],"connection":[189],"failure,":[190],"SSH":[192],"(Secure":[193],"Shell)":[194],"scan":[195],"attack,":[196],"spam.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}