{"id":"https://openalex.org/W4388756013","doi":"https://doi.org/10.1109/access.2023.3334212","title":"Network Anomaly Detection Through IP Traffic Analysis With Variable Granularity","display_name":"Network Anomaly Detection Through IP Traffic Analysis With Variable Granularity","publication_year":2023,"publication_date":"2023-01-01","ids":{"openalex":"https://openalex.org/W4388756013","doi":"https://doi.org/10.1109/access.2023.3334212"},"language":"en","primary_location":{"id":"doi:10.1109/access.2023.3334212","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3334212","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10322718.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10322718.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049352732","display_name":"Shohei Kamamura","orcid":"https://orcid.org/0000-0001-8770-2985"},"institutions":[{"id":"https://openalex.org/I6030618","display_name":"Seikei University","ror":"https://ror.org/03ptaj492","country_code":"JP","type":"education","lineage":["https://openalex.org/I6030618"]}],"countries":["JP"],"is_corresponding":true,"raw_author_name":"Shohei Kamamura","raw_affiliation_strings":["Faculty of Science and Technology, Seikei University, Tokyo, Japan","Faculty of Science and Technology, University of Seikei, Tokyo 180-8633, Japan"],"raw_orcid":"https://orcid.org/0000-0001-8770-2985","affiliations":[{"raw_affiliation_string":"Faculty of Science and Technology, Seikei University, Tokyo, Japan","institution_ids":["https://openalex.org/I6030618"]},{"raw_affiliation_string":"Faculty of Science and Technology, University of Seikei, Tokyo 180-8633, Japan","institution_ids":["https://openalex.org/I6030618"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009778586","display_name":"Yuki Takei","orcid":"https://orcid.org/0000-0002-8215-5019"},"institutions":[{"id":"https://openalex.org/I2251713219","display_name":"NTT (Japan)","ror":"https://ror.org/00berct97","country_code":"JP","type":"company","lineage":["https://openalex.org/I2251713219"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yuki Takei","raw_affiliation_strings":["NTT Network Innovation Center, NTT Corporation, Tokyo, Japan","NTT Network Innovation Center, NTT Corporation, Tokyo 180-8585, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTT Network Innovation Center, NTT Corporation, Tokyo, Japan","institution_ids":["https://openalex.org/I2251713219"]},{"raw_affiliation_string":"NTT Network Innovation Center, NTT Corporation, Tokyo 180-8585, Japan","institution_ids":["https://openalex.org/I2251713219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049226457","display_name":"Masato Nishiguchi","orcid":null},"institutions":[{"id":"https://openalex.org/I2251713219","display_name":"NTT (Japan)","ror":"https://ror.org/00berct97","country_code":"JP","type":"company","lineage":["https://openalex.org/I2251713219"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Masato Nishiguchi","raw_affiliation_strings":["NTT Network Innovation Center, NTT Corporation, Tokyo, Japan","NTT Network Innovation Center, NTT Corporation, Tokyo 180-8585, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTT Network Innovation Center, NTT Corporation, Tokyo, Japan","institution_ids":["https://openalex.org/I2251713219"]},{"raw_affiliation_string":"NTT Network Innovation Center, NTT Corporation, Tokyo 180-8585, Japan","institution_ids":["https://openalex.org/I2251713219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101214977","display_name":"Yuhei Hayashi","orcid":null},"institutions":[{"id":"https://openalex.org/I2251713219","display_name":"NTT (Japan)","ror":"https://ror.org/00berct97","country_code":"JP","type":"company","lineage":["https://openalex.org/I2251713219"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yuhei Hayashi","raw_affiliation_strings":["NTT Network Innovation Center, NTT Corporation, Tokyo, Japan","NTT Network Innovation Center, NTT Corporation, Tokyo 180-8585, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTT Network Innovation Center, NTT Corporation, Tokyo, Japan","institution_ids":["https://openalex.org/I2251713219"]},{"raw_affiliation_string":"NTT Network Innovation Center, NTT Corporation, Tokyo 180-8585, Japan","institution_ids":["https://openalex.org/I2251713219"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048410415","display_name":"Takayuki Fujiwara","orcid":"https://orcid.org/0000-0002-8719-3997"},"institutions":[{"id":"https://openalex.org/I2251713219","display_name":"NTT (Japan)","ror":"https://ror.org/00berct97","country_code":"JP","type":"company","lineage":["https://openalex.org/I2251713219"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takayuki Fujiwara","raw_affiliation_strings":["NTT Network Innovation Center, NTT Corporation, Tokyo, Japan","NTT Network Innovation Center, NTT Corporation, Tokyo 180-8585, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTT Network Innovation Center, NTT Corporation, Tokyo, Japan","institution_ids":["https://openalex.org/I2251713219"]},{"raw_affiliation_string":"NTT Network Innovation Center, NTT Corporation, Tokyo 180-8585, Japan","institution_ids":["https://openalex.org/I2251713219"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5049352732"],"corresponding_institution_ids":["https://openalex.org/I6030618"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":1.5792,"has_fulltext":true,"cited_by_count":9,"citation_normalized_percentile":{"value":0.84525358,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"11","issue":null,"first_page":"129818","last_page":"129828"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7629714012145996},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7317811250686646},{"id":"https://openalex.org/keywords/granularity","display_name":"Granularity","score":0.7008616328239441},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.5414552688598633},{"id":"https://openalex.org/keywords/traffic-generation-model","display_name":"Traffic generation model","score":0.5266798734664917},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.481050044298172},{"id":"https://openalex.org/keywords/internet-traffic","display_name":"Internet traffic","score":0.44519102573394775},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.44055598974227905},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.4241305887699127},{"id":"https://openalex.org/keywords/internet-protocol","display_name":"Internet Protocol","score":0.41910991072654724},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.39310216903686523},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.34925395250320435}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7629714012145996},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7317811250686646},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.7008616328239441},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.5414552688598633},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.5266798734664917},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.481050044298172},{"id":"https://openalex.org/C63969886","wikidata":"https://www.wikidata.org/wiki/Q3536440","display_name":"Internet traffic","level":3,"score":0.44519102573394775},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.44055598974227905},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.4241305887699127},{"id":"https://openalex.org/C35341882","wikidata":"https://www.wikidata.org/wiki/Q8795","display_name":"Internet Protocol","level":3,"score":0.41910991072654724},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.39310216903686523},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.34925395250320435},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2023.3334212","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3334212","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10322718.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:8e43d31452ad457088ecad9faa27b7d1","is_oa":true,"landing_page_url":"https://doaj.org/article/8e43d31452ad457088ecad9faa27b7d1","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 11, Pp 129818-129828 (2023)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2023.3334212","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2023.3334212","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/10322718.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4388756013.pdf","grobid_xml":"https://content.openalex.org/works/W4388756013.grobid-xml"},"referenced_works_count":39,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W1526831325","https://openalex.org/W1547560574","https://openalex.org/W1669517233","https://openalex.org/W1979866793","https://openalex.org/W2098477437","https://openalex.org/W2134878402","https://openalex.org/W2148913232","https://openalex.org/W2514718641","https://openalex.org/W2608459225","https://openalex.org/W2743617586","https://openalex.org/W2903757699","https://openalex.org/W2906498146","https://openalex.org/W2948517885","https://openalex.org/W2963516518","https://openalex.org/W2982700543","https://openalex.org/W2999047827","https://openalex.org/W3007967430","https://openalex.org/W3008005225","https://openalex.org/W3048313681","https://openalex.org/W3105931142","https://openalex.org/W3135644052","https://openalex.org/W3176476506","https://openalex.org/W3207999419","https://openalex.org/W3214327612","https://openalex.org/W4206517246","https://openalex.org/W4210878699","https://openalex.org/W4226192238","https://openalex.org/W4253269957","https://openalex.org/W4285813782","https://openalex.org/W4288057688","https://openalex.org/W4288064454","https://openalex.org/W4315629646","https://openalex.org/W4382468081","https://openalex.org/W6698379459","https://openalex.org/W6736549786","https://openalex.org/W6752418877","https://openalex.org/W6756753118","https://openalex.org/W6757253479"],"related_works":["https://openalex.org/W2159656221","https://openalex.org/W2096319108","https://openalex.org/W1538599242","https://openalex.org/W1985609408","https://openalex.org/W2943019377","https://openalex.org/W1933691230","https://openalex.org/W1480832057","https://openalex.org/W3103749384","https://openalex.org/W2013428012","https://openalex.org/W2121217657"],"abstract_inverted_index":{"A":[0],"network":[1,15],"anomaly":[2,22],"detection":[3,23,198],"method":[4,106,140,173,186],"is":[5,17,69],"proposed":[6],"for":[7],"large-scale,":[8],"wide-range":[9],"Internet":[10],"Protocol":[11],"(IP)":[12],"networks.":[13],"Because":[14],"behavior":[16],"projected":[18],"onto":[19],"communication":[20,31,39,48,67,94],"traffic,":[21],"can":[24,131,174,187],"be":[25],"achieved":[26],"by":[27,44,47,77,178],"properly":[28],"analyzing":[29],"the":[30,61,72,89,126,144,168],"traffic":[32,40,110,116,133,203],"flows.":[33,111],"However,":[34],"in":[35,65,143,195],"wide-area":[36],"IP":[37,83],"networks,":[38],"flows":[41,68,95,117,120,134,146,166],"are":[42,52,88],"encapsulated":[43],"headers":[45],"assigned":[46],"carriers":[49],"and":[50,153],"thus":[51],"observed":[53],"as":[54,82,201],"more":[55,196],"macroscopic":[56],"information.":[57],"Therefore,":[58],"accurately":[59],"detecting":[60],"occurrence":[62],"of":[63,91,191],"anomalies":[64,142,176],"individual":[66,119,165],"difficult":[70,197],"because":[71],"flow":[73,78],"observation":[74],"results":[75],"obtained":[76],"measurement":[79],"protocols":[80],"such":[81,200],"Flow":[84],"Information":[85],"Export":[86],"(IPFIX)":[87],"result":[90],"superimposing":[92],"various":[93],"with":[96,181],"different":[97],"characteristics.":[98],"In":[99],"this":[100],"study,":[101],"we":[102,113,163],"propose":[103],"an":[104,189],"anomaly-detection":[105],"based":[107,147],"on":[108,148],"time-series":[109],"First,":[112],"decompose":[114,132],"superimposed":[115],"into":[118],"using":[121,167],"our":[122,172],"implemented":[123],"system":[124],"called":[125],"Fast":[127,169],"xFlow":[128,170],"Proxy,":[129,171],"which":[130],"to":[135],"a":[136,149],"fine":[137],"granularity.":[138],"Our":[139,157,185],"detects":[141],"decomposed":[145],"simple":[150],"correlation":[151],"analysis":[152],"dynamic":[154],"threshold":[155],"configuration.":[156],"extensive":[158],"simulation":[159],"shows":[160],"that,":[161],"if":[162],"observe":[164],"detect":[175],"caused":[177],"service":[179],"failures":[180],"almost":[182],"100%":[183],"accuracy.":[184],"achieve":[188],"accuracy":[190],"approximately":[192],"80%-90%":[193],"even":[194],"cases,":[199],"small":[202],"fluctuations":[204],"or":[205],"noisy":[206],"situations.":[207]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}