{"id":"https://openalex.org/W4416381384","doi":"https://doi.org/10.1109/access.2025.3631738","title":"A Collaborative Data-Plane and Control-Plane Architecture for Real-Time Anomaly Detection","display_name":"A Collaborative Data-Plane and Control-Plane Architecture for Real-Time Anomaly Detection","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4416381384","doi":"https://doi.org/10.1109/access.2025.3631738"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3631738","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3631738","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3631738","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102609531","display_name":"Tian Xiao","orcid":"https://orcid.org/0009-0002-9603-0812"},"institutions":[{"id":"https://openalex.org/I4210110718","display_name":"Nanyang Normal University","ror":"https://ror.org/01f7yer47","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210110718"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiao Tian","raw_affiliation_strings":["School of Artificial Intelligence and Software Engineering, Nanyang Normal University, Nanyang, China"],"raw_orcid":"https://orcid.org/0009-0002-9603-0812","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence and Software Engineering, Nanyang Normal University, Nanyang, China","institution_ids":["https://openalex.org/I4210110718"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103103648","display_name":"Jinjiang Liu","orcid":"https://orcid.org/0009-0004-7292-009X"},"institutions":[{"id":"https://openalex.org/I4210110718","display_name":"Nanyang Normal University","ror":"https://ror.org/01f7yer47","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210110718"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinjiang Liu","raw_affiliation_strings":["School of Artificial Intelligence and Software Engineering, Nanyang Normal University, Nanyang, China"],"raw_orcid":"https://orcid.org/0009-0004-7292-009X","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence and Software Engineering, Nanyang Normal University, Nanyang, China","institution_ids":["https://openalex.org/I4210110718"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074752546","display_name":"Qinglei Qi","orcid":"https://orcid.org/0000-0002-0823-5846"},"institutions":[{"id":"https://openalex.org/I4210110718","display_name":"Nanyang Normal University","ror":"https://ror.org/01f7yer47","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210110718"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qinglei Qi","raw_affiliation_strings":["School of Artificial Intelligence and Software Engineering, Nanyang Normal University, Nanyang, China"],"raw_orcid":"https://orcid.org/0000-0002-0823-5846","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence and Software Engineering, Nanyang Normal University, Nanyang, China","institution_ids":["https://openalex.org/I4210110718"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100317822","display_name":"He Li","orcid":"https://orcid.org/0000-0001-7454-0796"},"institutions":[{"id":"https://openalex.org/I4210110718","display_name":"Nanyang Normal University","ror":"https://ror.org/01f7yer47","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210110718"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"He Li","raw_affiliation_strings":["School of Artificial Intelligence and Software Engineering, Nanyang Normal University, Nanyang, China"],"raw_orcid":"https://orcid.org/0000-0001-7454-0796","affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence and Software Engineering, Nanyang Normal University, Nanyang, China","institution_ids":["https://openalex.org/I4210110718"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068563520","display_name":"Xiaopu Ma","orcid":"https://orcid.org/0000-0003-3017-993X"},"institutions":[{"id":"https://openalex.org/I4210110718","display_name":"Nanyang Normal University","ror":"https://ror.org/01f7yer47","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210110718"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaopu Ma","raw_affiliation_strings":["School of Artificial Intelligence and Software Engineering, Nanyang Normal University, Nanyang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence and Software Engineering, Nanyang Normal University, Nanyang, China","institution_ids":["https://openalex.org/I4210110718"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037412714","display_name":"Cong Zhao","orcid":"https://orcid.org/0000-0002-9002-4350"},"institutions":[{"id":"https://openalex.org/I4210110718","display_name":"Nanyang Normal University","ror":"https://ror.org/01f7yer47","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210110718"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cong Zhao","raw_affiliation_strings":["School of Artificial Intelligence and Software Engineering, Nanyang Normal University, Nanyang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence and Software Engineering, Nanyang Normal University, Nanyang, China","institution_ids":["https://openalex.org/I4210110718"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210110718"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.17906463,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":null,"first_page":"192856","last_page":"192870"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.38429999351501465,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.38429999351501465,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.33329999446868896,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.12939999997615814,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.7116000056266785},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.6535000205039978},{"id":"https://openalex.org/keywords/forwarding-plane","display_name":"Forwarding plane","score":0.6190000176429749},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5803999900817871},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5175999999046326},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.43220001459121704},{"id":"https://openalex.org/keywords/low-latency","display_name":"Low latency (capital markets)","score":0.3765999972820282},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.33980000019073486},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.33340001106262207}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8436999917030334},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.7116000056266785},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.6535000205039978},{"id":"https://openalex.org/C10597312","wikidata":"https://www.wikidata.org/wiki/Q5473302","display_name":"Forwarding plane","level":3,"score":0.6190000176429749},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5803999900817871},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.5217000246047974},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5175999999046326},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.43220001459121704},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.41600000858306885},{"id":"https://openalex.org/C46637626","wikidata":"https://www.wikidata.org/wiki/Q6693015","display_name":"Low latency (capital markets)","level":2,"score":0.3765999972820282},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.33980000019073486},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.33340001106262207},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.33309999108314514},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3264000117778778},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.29910001158714294},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2969000041484833},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2955999970436096},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2921999990940094},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.29010000824928284},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.28700000047683716},{"id":"https://openalex.org/C489000","wikidata":"https://www.wikidata.org/wiki/Q747385","display_name":"Data flow diagram","level":2,"score":0.2856999933719635},{"id":"https://openalex.org/C186766456","wikidata":"https://www.wikidata.org/wiki/Q612457","display_name":"Flow control (data)","level":2,"score":0.2856000065803528},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.28290000557899475},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.2802000045776367},{"id":"https://openalex.org/C145595949","wikidata":"https://www.wikidata.org/wiki/Q7371619","display_name":"Routing control plane","level":2,"score":0.27630001306533813},{"id":"https://openalex.org/C113508815","wikidata":"https://www.wikidata.org/wiki/Q193446","display_name":"Packet switching","level":3,"score":0.275299996137619},{"id":"https://openalex.org/C98025372","wikidata":"https://www.wikidata.org/wiki/Q477538","display_name":"Systems architecture","level":3,"score":0.27390000224113464},{"id":"https://openalex.org/C17500928","wikidata":"https://www.wikidata.org/wiki/Q959968","display_name":"Control system","level":2,"score":0.2535000145435333}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3631738","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3631738","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:3fe6139b499646c28d6ed06f58076915","is_oa":true,"landing_page_url":"https://doaj.org/article/3fe6139b499646c28d6ed06f58076915","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 192856-192870 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3631738","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3631738","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3370368464","display_name":null,"funder_award_id":"252102210234","funder_id":"https://openalex.org/F4320338470","funder_display_name":"Science Research Foundation of Zhejiang Province"},{"id":"https://openalex.org/G5471265538","display_name":null,"funder_award_id":"62002180","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5621581004","display_name":null,"funder_award_id":"252102210247","funder_id":"https://openalex.org/F4320338470","funder_display_name":"Science Research Foundation of Zhejiang Province"},{"id":"https://openalex.org/G5644856410","display_name":null,"funder_award_id":"252102320047","funder_id":"https://openalex.org/F4320338470","funder_display_name":"Science Research Foundation of Zhejiang Province"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320338470","display_name":"Science Research Foundation of Zhejiang Province","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Programmable":[0],"data":[1,36],"planes":[2],"enable":[3],"real-time":[4,159],"traffic":[5,160],"monitoring":[6],"and":[7,55,77,109,141,162],"line-rate":[8],"response.":[9],"However,":[10],"their":[11],"limited":[12],"computational":[13],"capabilities":[14],"restrict":[15],"deep":[16],"packet":[17,31],"inspection.":[18],"To":[19],"address":[20],"this":[21,103],"limitation,":[22],"we":[23],"propose":[24],"a":[25,60,64,71,114,129,136],"hybrid":[26],"framework":[27,104,127,157],"that":[28,124],"offloads":[29],"feature-rich":[30],"sequence":[32],"representations":[33,58],"from":[34],"the":[35,39,90,95,106,125,153,156],"plane":[37,41],"to":[38,59,89,92],"control":[40],"for":[42,74,158],"intelligent":[43],"decision-making.":[44],"The":[45,68],"system":[46],"extracts":[47],"multi-packet":[48],"flow":[49,76,130],"features":[50],"directly":[51],"within":[52],"programmable":[53],"switches":[54,91],"transmits":[56],"structured":[57],"controller":[61,69],"equipped":[62],"with":[63],"Transformer-LSTM":[65],"prediction":[66],"model.":[67],"estimates":[70],"confidence":[72],"score":[73],"each":[75],"translates":[78],"it":[79],"into":[80],"dynamic":[81],"forwarding":[82],"rules,":[83],"which":[84],"are":[85],"then":[86],"deployed":[87],"back":[88],"determine":[93],"whether":[94],"corresponding":[96],"packets":[97],"should":[98],"be":[99],"forwarded.":[100],"We":[101],"implement":[102],"on":[105],"BMv2":[107],"switch":[108],"evaluate":[110],"its":[111],"performance":[112],"using":[113],"recent":[115],"distributed":[116],"denial-of-service":[117],"(DDoS)":[118],"attack":[119],"dataset.":[120],"Experimental":[121],"results":[122],"demonstrate":[123],"proposed":[126],"achieves":[128],"feature":[131],"collection":[132],"rate":[133],"of":[134,139,146,155],"97.56%,":[135],"detection":[137],"accuracy":[138],"99.99%,":[140],"an":[142],"online":[143],"inference":[144],"latency":[145],"just":[147],"896":[148],"ns.":[149],"These":[150],"findings":[151],"indicate":[152],"potential":[154],"classification":[161],"rapid":[163],"response":[164],"under":[165],"high-throughput":[166],"network":[167],"conditions.":[168]},"counts_by_year":[],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-11-11T00:00:00"}