{"id":"https://openalex.org/W2596292691","doi":"https://doi.org/10.1109/atnac.2016.7878792","title":"Distilling command and control network intrusions from network flow metadata using temporal PageRank","display_name":"Distilling command and control network intrusions from network flow metadata using temporal PageRank","publication_year":2016,"publication_date":"2016-12-01","ids":{"openalex":"https://openalex.org/W2596292691","doi":"https://doi.org/10.1109/atnac.2016.7878792","mag":"2596292691"},"language":"en","primary_location":{"id":"doi:10.1109/atnac.2016.7878792","is_oa":false,"landing_page_url":"https://doi.org/10.1109/atnac.2016.7878792","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 26th International Telecommunication Networks and Applications Conference (ITNAC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057403621","display_name":"Singh Latchman","orcid":null},"institutions":[{"id":"https://openalex.org/I1303474014","display_name":"Defence Science and Technology Group","ror":"https://ror.org/05ddrvt52","country_code":"AU","type":"government","lineage":["https://openalex.org/I1303474014","https://openalex.org/I2801453606","https://openalex.org/I3139952251"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Latchman Singh","raw_affiliation_strings":["Communication Networks Research Defence Science and Technology Group, Department of Defence, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Communication Networks Research Defence Science and Technology Group, Department of Defence, Australia","institution_ids":["https://openalex.org/I1303474014"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110551586","display_name":"Adriel Cheng","orcid":null},"institutions":[{"id":"https://openalex.org/I1303474014","display_name":"Defence Science and Technology Group","ror":"https://ror.org/05ddrvt52","country_code":"AU","type":"government","lineage":["https://openalex.org/I1303474014","https://openalex.org/I2801453606","https://openalex.org/I3139952251"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Adriel Cheng","raw_affiliation_strings":["Communication Networks Research Defence Science and Technology Group, Department of Defence, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Communication Networks Research Defence Science and Technology Group, Department of Defence, Australia","institution_ids":["https://openalex.org/I1303474014"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I1303474014"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"107","last_page":"114"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8098780512809753},{"id":"https://openalex.org/keywords/pagerank","display_name":"PageRank","score":0.792263388633728},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.656253457069397},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5692704916000366},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5259984731674194},{"id":"https://openalex.org/keywords/network-forensics","display_name":"Network forensics","score":0.4708663523197174},{"id":"https://openalex.org/keywords/default-gateway","display_name":"Default gateway","score":0.45554015040397644},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.42827123403549194},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3723667860031128},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.2469159960746765},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.22799929976463318},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2143089771270752}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8098780512809753},{"id":"https://openalex.org/C2779172887","wikidata":"https://www.wikidata.org/wiki/Q184316","display_name":"PageRank","level":2,"score":0.792263388633728},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.656253457069397},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5692704916000366},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5259984731674194},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.4708663523197174},{"id":"https://openalex.org/C187713609","wikidata":"https://www.wikidata.org/wiki/Q2465461","display_name":"Default gateway","level":2,"score":0.45554015040397644},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.42827123403549194},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3723667860031128},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.2469159960746765},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.22799929976463318},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2143089771270752},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/atnac.2016.7878792","is_oa":false,"landing_page_url":"https://doi.org/10.1109/atnac.2016.7878792","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 26th International Telecommunication Networks and Applications Conference (ITNAC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W1504269120","https://openalex.org/W1583098994","https://openalex.org/W1775772884","https://openalex.org/W1854214752","https://openalex.org/W1909494783","https://openalex.org/W2061455058","https://openalex.org/W2110385611","https://openalex.org/W2110675786","https://openalex.org/W2114996745","https://openalex.org/W2140274455","https://openalex.org/W2145594168","https://openalex.org/W2165538816","https://openalex.org/W2533050350","https://openalex.org/W2545374358","https://openalex.org/W3124529293","https://openalex.org/W6634779276","https://openalex.org/W6638021444","https://openalex.org/W6676505837"],"related_works":["https://openalex.org/W2154222238","https://openalex.org/W2035643924","https://openalex.org/W1685415006","https://openalex.org/W109647043","https://openalex.org/W2347635077","https://openalex.org/W4207048601","https://openalex.org/W2537496145","https://openalex.org/W2359074538","https://openalex.org/W2258115363","https://openalex.org/W2359116500"],"abstract_inverted_index":{"Malicious":[0],"network":[1,19,33,50,57,115],"intrusions":[2,20],"which":[3],"exfiltrate":[4],"data":[5,58,62,107],"from":[6],"computer":[7,32],"networks":[8],"are":[9,121],"extremely":[10],"damaging":[11],"for":[12,98],"organisations":[13],"and":[14,21,26,40,67,73,91,116],"governments":[15],"worldwide.":[16],"Combating":[17],"these":[18],"large-scale":[22],"cyber-attacks":[23],"requires":[24],"mining":[25],"analysis":[27,90],"of":[28,31,48,83,95,112],"large":[29],"volumes":[30],"data.":[34],"We":[35,77],"present":[36],"a":[37,80,93],"statistical":[38],"filtering":[39],"temporal":[41,89],"PageRank":[42,85],"technique":[43,53],"that":[44,60],"improves":[45],"the":[46,61,110,118],"probability":[47],"discovering":[49],"intrusions.":[51],"The":[52],"filters":[54],"out":[55],"benign":[56],"such":[59],"remaining":[63],"is":[64],"more":[65],"pertinent":[66],"likely":[68],"to":[69,123],"contain":[70],"malicious":[71],"command":[72],"control":[74],"(C2)":[75],"traffic.":[76,102],"then":[78],"propose":[79],"novel":[81],"application":[82],"Google's":[84],"algorithm":[86],"by":[87],"incorporating":[88],"evaluating":[92],"time-series":[94],"page":[96],"rankings":[97],"identifying":[99],"C2":[100],"like":[101],"Two":[103],"case":[104],"studies":[105],"using":[106],"collected":[108],"at":[109,117],"gateway":[111],"an":[113],"enterprise":[114],"Internet":[119],"backbone":[120],"presented":[122],"support":[124],"our":[125],"technique.":[126]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}