{"id":"https://openalex.org/W3142920913","doi":"https://doi.org/10.1109/access.2021.3066630","title":"Flow-Based Approach to Detect Abnormal Behavior in Neighbor Discovery Protocol (NDP)","display_name":"Flow-Based Approach to Detect Abnormal Behavior in Neighbor Discovery Protocol (NDP)","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3142920913","doi":"https://doi.org/10.1109/access.2021.3066630","mag":"3142920913"},"language":"en","primary_location":{"id":"doi:10.1109/access.2021.3066630","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3066630","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09380280.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09380280.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064302669","display_name":"Abdullah Ahmed Bahashwan","orcid":"https://orcid.org/0000-0002-2307-6302"},"institutions":[{"id":"https://openalex.org/I139322472","display_name":"Universiti Sains Malaysia","ror":"https://ror.org/02rgb2k63","country_code":"MY","type":"education","lineage":["https://openalex.org/I139322472"]}],"countries":["MY"],"is_corresponding":true,"raw_author_name":"Abdullah Ahmed Bahashwan","raw_affiliation_strings":["National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, Penang, Malaysia"],"raw_orcid":"https://orcid.org/0000-0002-2307-6302","affiliations":[{"raw_affiliation_string":"National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, Penang, Malaysia","institution_ids":["https://openalex.org/I139322472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015229013","display_name":"Mohammed Anbar","orcid":"https://orcid.org/0000-0002-7026-6408"},"institutions":[{"id":"https://openalex.org/I139322472","display_name":"Universiti Sains Malaysia","ror":"https://ror.org/02rgb2k63","country_code":"MY","type":"education","lineage":["https://openalex.org/I139322472"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Mohammed Anbar","raw_affiliation_strings":["National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, Penang, Malaysia"],"raw_orcid":"https://orcid.org/0000-0002-7026-6408","affiliations":[{"raw_affiliation_string":"National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, Penang, Malaysia","institution_ids":["https://openalex.org/I139322472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090453451","display_name":"Iznan H. Hasbullah","orcid":"https://orcid.org/0000-0002-2275-3201"},"institutions":[{"id":"https://openalex.org/I139322472","display_name":"Universiti Sains Malaysia","ror":"https://ror.org/02rgb2k63","country_code":"MY","type":"education","lineage":["https://openalex.org/I139322472"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Iznan Husainy Hasbullah","raw_affiliation_strings":["National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, Penang, Malaysia"],"raw_orcid":"https://orcid.org/0000-0002-2275-3201","affiliations":[{"raw_affiliation_string":"National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, Penang, Malaysia","institution_ids":["https://openalex.org/I139322472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046783630","display_name":"Ziyad R. Alashhab","orcid":"https://orcid.org/0000-0002-4748-8037"},"institutions":[{"id":"https://openalex.org/I139322472","display_name":"Universiti Sains Malaysia","ror":"https://ror.org/02rgb2k63","country_code":"MY","type":"education","lineage":["https://openalex.org/I139322472"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Ziyad R. Alashhab","raw_affiliation_strings":["National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, Penang, Malaysia"],"raw_orcid":"https://orcid.org/0000-0002-4748-8037","affiliations":[{"raw_affiliation_string":"National Advanced IPv6 Centre (NAv6), Universiti Sains Malaysia, Penang, Malaysia","institution_ids":["https://openalex.org/I139322472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089120548","display_name":"Ali Abdulqader Bin-Salem","orcid":"https://orcid.org/0000-0001-8042-5938"},"institutions":[{"id":"https://openalex.org/I4210117337","display_name":"Neijiang Normal University","ror":"https://ror.org/02bc8tz70","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210117337"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ali Bin-Salem","raw_affiliation_strings":["School of Computer Science, Neijiang Normal University, Neijiang, China"],"raw_orcid":"https://orcid.org/0000-0001-8042-5938","affiliations":[{"raw_affiliation_string":"School of Computer Science, Neijiang Normal University, Neijiang, China","institution_ids":["https://openalex.org/I4210117337"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5064302669"],"corresponding_institution_ids":["https://openalex.org/I139322472"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":2.0821,"has_fulltext":true,"cited_by_count":15,"citation_normalized_percentile":{"value":0.871546,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"9","issue":null,"first_page":"45512","last_page":"45526"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7302558422088623},{"id":"https://openalex.org/keywords/flooding","display_name":"Flooding (psychology)","score":0.6377599239349365},{"id":"https://openalex.org/keywords/stateless-protocol","display_name":"Stateless protocol","score":0.6275832653045654},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.6001208424568176},{"id":"https://openalex.org/keywords/ipv6","display_name":"IPv6","score":0.5119396448135376},{"id":"https://openalex.org/keywords/neighbor-discovery-protocol","display_name":"Neighbor Discovery Protocol","score":0.41263508796691895},{"id":"https://openalex.org/keywords/internet-protocol","display_name":"Internet Protocol","score":0.3275834321975708},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.28878217935562134},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.2574203610420227}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7302558422088623},{"id":"https://openalex.org/C186594467","wikidata":"https://www.wikidata.org/wiki/Q1429176","display_name":"Flooding (psychology)","level":2,"score":0.6377599239349365},{"id":"https://openalex.org/C103613024","wikidata":"https://www.wikidata.org/wiki/Q230924","display_name":"Stateless protocol","level":3,"score":0.6275832653045654},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6001208424568176},{"id":"https://openalex.org/C84555802","wikidata":"https://www.wikidata.org/wiki/Q2551624","display_name":"IPv6","level":3,"score":0.5119396448135376},{"id":"https://openalex.org/C165932591","wikidata":"https://www.wikidata.org/wiki/Q1547947","display_name":"Neighbor Discovery Protocol","level":4,"score":0.41263508796691895},{"id":"https://openalex.org/C35341882","wikidata":"https://www.wikidata.org/wiki/Q8795","display_name":"Internet Protocol","level":3,"score":0.3275834321975708},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.28878217935562134},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.2574203610420227},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2021.3066630","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3066630","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09380280.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:2c79bb2db4954a678c02086ce453ea48","is_oa":true,"landing_page_url":"https://doaj.org/article/2c79bb2db4954a678c02086ce453ea48","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 9, Pp 45512-45526 (2021)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2021.3066630","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3066630","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9312710/09380280.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8271542249","display_name":null,"funder_award_id":"1001. PNAV.8011107","funder_id":"https://openalex.org/F4320322757","funder_display_name":"Universiti Sains Malaysia"}],"funders":[{"id":"https://openalex.org/F4320322757","display_name":"Universiti Sains Malaysia","ror":"https://ror.org/02rgb2k63"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3142920913.pdf","grobid_xml":"https://content.openalex.org/works/W3142920913.grobid-xml"},"referenced_works_count":57,"referenced_works":["https://openalex.org/W112237849","https://openalex.org/W148834500","https://openalex.org/W233671965","https://openalex.org/W1516812305","https://openalex.org/W1577498723","https://openalex.org/W1653622375","https://openalex.org/W1738203895","https://openalex.org/W1822310471","https://openalex.org/W1905021885","https://openalex.org/W2084793163","https://openalex.org/W2105406372","https://openalex.org/W2110385611","https://openalex.org/W2130984148","https://openalex.org/W2141910941","https://openalex.org/W2163009139","https://openalex.org/W2260798440","https://openalex.org/W2338598777","https://openalex.org/W2428710022","https://openalex.org/W2485307462","https://openalex.org/W2497847216","https://openalex.org/W2505630732","https://openalex.org/W2607023508","https://openalex.org/W2608658459","https://openalex.org/W2612582824","https://openalex.org/W2620580412","https://openalex.org/W2759043405","https://openalex.org/W2766139680","https://openalex.org/W2782255728","https://openalex.org/W2785033548","https://openalex.org/W2792345202","https://openalex.org/W2794216652","https://openalex.org/W2854580450","https://openalex.org/W2889301065","https://openalex.org/W2897682032","https://openalex.org/W2898113880","https://openalex.org/W2904998198","https://openalex.org/W2905202327","https://openalex.org/W2916602429","https://openalex.org/W2926112089","https://openalex.org/W2954053961","https://openalex.org/W2966380110","https://openalex.org/W2986887798","https://openalex.org/W2999565977","https://openalex.org/W3003275137","https://openalex.org/W3030215276","https://openalex.org/W3041089020","https://openalex.org/W3042433202","https://openalex.org/W3047284900","https://openalex.org/W3085529854","https://openalex.org/W3104154872","https://openalex.org/W4206577390","https://openalex.org/W4255088152","https://openalex.org/W4298653275","https://openalex.org/W4301505611","https://openalex.org/W6723533827","https://openalex.org/W6747710567","https://openalex.org/W6756817266"],"related_works":["https://openalex.org/W3125459524","https://openalex.org/W2373507537","https://openalex.org/W2350154037","https://openalex.org/W2946372475","https://openalex.org/W2981655278","https://openalex.org/W4231406403","https://openalex.org/W2069820568","https://openalex.org/W4360996556","https://openalex.org/W4384068965","https://openalex.org/W2361480601"],"abstract_inverted_index":{"Internet":[0],"Protocol":[1,15],"version":[2],"six":[3],"(IPv6)":[4],"is":[5,18,72,95,140],"equipped":[6],"with":[7],"new":[8],"protocols,":[9],"such":[10,33,105],"as":[11,34,106],"the":[12,73,100,114,126,131,134,160,185,191,210,217,223],"Neighbor":[13],"Discovery":[14],"(NDP).":[16],"NDP":[17,57,76,91,180,212],"a":[19,85,152],"stateless":[20],"protocol":[21],"without":[22],"authentication":[23],"that":[24,62,159],"makes":[25],"it":[26],"vulnerable":[27],"to":[28,83,88,129,230],"many":[29],"types":[30,47],"of":[31,48,55,75,99,102,125,144],"attacks,":[32,49,104],"Router":[35],"Advertisement":[36],"(RA)":[37],"and":[38,108,123,149,167,174,198,205],"Neighbour":[39],"Solicitation":[40],"(NS)":[41],"DoS":[42,110,187,219],"flooding":[43,111,188,220],"attacks.":[44,112],"In":[45],"these":[46,70],"attackers":[50],"send":[51],"an":[52,97],"enormous":[53],"volume":[54],"abnormal":[56,90,179,211],"traffic,":[58],"which":[59,94],"causes":[60],"congestion":[61],"degrades":[63],"network":[64,120,135],"performance.":[65],"The":[66,137,155],"expected":[67],"behavior":[68,182,214],"among":[69],"attacks":[71],"existence":[74],"traffic":[77,92,121,181,213],"abnormalities.":[78],"Thus,":[79],"this":[80],"research":[81],"aims":[82],"propose":[84],"flow-based":[86,119],"approach":[87,116,139,162,193,225],"detect":[89,130],"behavior,":[93],"considered":[96],"indicator":[98],"presence":[101],"NDP-based":[103],"RA":[107,186],"NS":[109,218],"Also,":[113,222],"proposed":[115,138,161,192,224],"relies":[117],"on":[118],"representation":[122],"adoption":[124],"Entropy":[127],"algorithm":[128],"randomness":[132],"in":[133,142,177,208],"traffic.":[136],"evaluated":[141],"terms":[143],"detection":[145],"accuracy,":[146,171,202],"precision,":[147,172,203],"recall,":[148,173,204],"F1-Score":[150],"using":[151],"simulated":[153],"dataset.":[154],"experimental":[156],"result":[157],"shows":[158,226],"obtained":[163,194],"98.1%,":[164],"55%,":[165],"100%,":[166,197],"70.96%":[168],"for":[169,200],"average":[170,201],"F1-Score,":[175,206],"respectively,":[176,207],"detecting":[178,209],"caused":[183,215],"by":[184,216],"attack.":[189,221],"Meanwhile,":[190],"99%,":[195],"91.3%,":[196],"95.45%":[199],"better":[227],"results":[228],"compared":[229],"other":[231],"existing":[232],"approaches.":[233]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":2}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2021-04-13T00:00:00"}