{"id":"https://openalex.org/W2089762495","doi":"https://doi.org/10.1109/bigdata.2014.7004288","title":"A unified approach to network anomaly detection","display_name":"A unified approach to network anomaly detection","publication_year":2014,"publication_date":"2014-10-01","ids":{"openalex":"https://openalex.org/W2089762495","doi":"https://doi.org/10.1109/bigdata.2014.7004288","mag":"2089762495"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata.2014.7004288","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2014.7004288","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076919579","display_name":"Tahereh Babaie","orcid":null},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Tahereh Babaie","raw_affiliation_strings":["The University of Sydney, Sydney, NSW, AU","School of IT University of Sydney Sydney NSW Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Sydney, Sydney, NSW, AU","institution_ids":["https://openalex.org/I129604602"]},{"raw_affiliation_string":"School of IT University of Sydney Sydney NSW Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037947876","display_name":"Sanjay Chawla","orcid":"https://orcid.org/0000-0002-8102-2572"},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sanjay Chawla","raw_affiliation_strings":["The University of Sydney, Sydney, NSW, AU","School of IT University of Sydney Sydney NSW Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Sydney, Sydney, NSW, AU","institution_ids":["https://openalex.org/I129604602"]},{"raw_affiliation_string":"School of IT University of Sydney Sydney NSW Australia","institution_ids":["https://openalex.org/I129604602"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112826326","display_name":"S\u00e9bastien Ardon","orcid":null},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sebastien Ardon","raw_affiliation_strings":["Data61, Eveleigh, NSW, AU","ATP Research Laboratory, NICTA, Alexandria, NSW, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Data61, Eveleigh, NSW, AU","institution_ids":["https://openalex.org/I42894916"]},{"raw_affiliation_string":"ATP Research Laboratory, NICTA, Alexandria, NSW, Australia","institution_ids":["https://openalex.org/I42894916"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100397991","display_name":"Yue Yu","orcid":"https://orcid.org/0000-0002-9865-2212"},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Yue Yu","raw_affiliation_strings":["The University of Sydney, Sydney, NSW, AU","School of IT University of Sydney Sydney NSW Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Sydney, Sydney, NSW, AU","institution_ids":["https://openalex.org/I129604602"]},{"raw_affiliation_string":"School of IT University of Sydney Sydney NSW Australia","institution_ids":["https://openalex.org/I129604602"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.3599,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.68642002,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"650","last_page":"655"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12205","display_name":"Time Series Analysis and Forecasting","score":0.9850999712944031,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8133434057235718},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7518219947814941},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7400308847427368},{"id":"https://openalex.org/keywords/hidden-markov-model","display_name":"Hidden Markov model","score":0.6941048502922058},{"id":"https://openalex.org/keywords/markov-process","display_name":"Markov process","score":0.5273992419242859},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5168302655220032},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.434583842754364},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.4319555163383484},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.41774672269821167},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3558315336704254},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.09417656064033508}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8133434057235718},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7518219947814941},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7400308847427368},{"id":"https://openalex.org/C23224414","wikidata":"https://www.wikidata.org/wiki/Q176769","display_name":"Hidden Markov model","level":2,"score":0.6941048502922058},{"id":"https://openalex.org/C159886148","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov process","level":2,"score":0.5273992419242859},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5168302655220032},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.434583842754364},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.4319555163383484},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.41774672269821167},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3558315336704254},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09417656064033508},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/bigdata.2014.7004288","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata.2014.7004288","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.41999998688697815,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320315885","display_name":"Australian Government","ror":"https://ror.org/0314h5y94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W588139629","https://openalex.org/W595578687","https://openalex.org/W1549386224","https://openalex.org/W1825640910","https://openalex.org/W1968439359","https://openalex.org/W1975964493","https://openalex.org/W1999935041","https://openalex.org/W2026946455","https://openalex.org/W2118931532","https://openalex.org/W2120664731","https://openalex.org/W2121511513","https://openalex.org/W2122646361","https://openalex.org/W2127589913","https://openalex.org/W2131858147","https://openalex.org/W2154249783","https://openalex.org/W2164210932","https://openalex.org/W2166361350","https://openalex.org/W2169623711","https://openalex.org/W2293322640","https://openalex.org/W2615836285","https://openalex.org/W2950265833","https://openalex.org/W3009746682","https://openalex.org/W3138598418","https://openalex.org/W4245906277","https://openalex.org/W4246524285","https://openalex.org/W4248484754","https://openalex.org/W6638541763"],"related_works":["https://openalex.org/W2053269318","https://openalex.org/W2364370872","https://openalex.org/W2097963413","https://openalex.org/W2025614924","https://openalex.org/W2294335174","https://openalex.org/W3145575561","https://openalex.org/W2995886640","https://openalex.org/W1591475660","https://openalex.org/W2001275470","https://openalex.org/W2164162849"],"abstract_inverted_index":{"This":[0],"paper":[1],"presents":[2],"a":[3,38,85,110],"unified":[4],"approach":[5,33],"for":[6,56],"the":[7,15,28,95,100],"detection":[8,89,107],"of":[9,14,25,30,102,104],"network":[10,45,82,105],"anomalies.":[11],"Current":[12],"state":[13],"art":[16],"methods":[17,65],"are":[18],"often":[19],"able":[20],"to":[21,43,51,66],"detect":[22],"one":[23],"class":[24],"anomalies":[26],"at":[27],"cost":[29],"others.":[31],"Our":[32],"is":[34,49],"based":[35],"on":[36,78],"using":[37,63],"Linear":[39],"Dynamical":[40],"System":[41],"(LDS)":[42],"model":[44],"traffic.":[46],"An":[47],"LDS":[48],"equivalent":[50],"Hidden":[52],"Markov":[53],"Model":[54],"(HMM)":[55],"continuous-valued":[57],"data":[58],"and":[59,70,80],"can":[60],"be":[61],"computed":[62],"incremental":[64],"manage":[67],"high-throughput":[68],"(volume)":[69],"velocity":[71],"that":[72],"characterizes":[73],"Big":[74],"Data.":[75],"Detailed":[76],"experiments":[77],"synthetic":[79],"real":[81],"traces":[83],"shows":[84],"significant":[86],"improvement":[87],"in":[88,109],"capability":[90],"over":[91],"competing":[92],"approaches.":[93],"In":[94],"process":[96],"we":[97],"also":[98],"address":[99],"issue":[101],"robustness":[103],"anomaly":[106],"systems":[108],"principled":[111],"fashion.":[112]},"counts_by_year":[{"year":2021,"cited_by_count":2},{"year":2016,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}