{"id":"https://openalex.org/W3007685543","doi":"https://doi.org/10.1109/bigdata47090.2019.9006548","title":"An Extremely Lightweight Approach for DDoS Detection at Home Gateways","display_name":"An Extremely Lightweight Approach for DDoS Detection at Home Gateways","publication_year":2019,"publication_date":"2019-12-01","ids":{"openalex":"https://openalex.org/W3007685543","doi":"https://doi.org/10.1109/bigdata47090.2019.9006548","mag":"3007685543"},"language":"en","primary_location":{"id":"doi:10.1109/bigdata47090.2019.9006548","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata47090.2019.9006548","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103014823","display_name":"Gabriel Mendon\u00e7a","orcid":"https://orcid.org/0009-0007-1644-4107"},"institutions":[{"id":"https://openalex.org/I122140584","display_name":"Universidade Federal do Rio de Janeiro","ror":"https://ror.org/03490as77","country_code":"BR","type":"education","lineage":["https://openalex.org/I122140584"]}],"countries":["BR"],"is_corresponding":true,"raw_author_name":"Gabriel Mendonca","raw_affiliation_strings":["Federal University of Rio de Janeiro, Brazil"],"affiliations":[{"raw_affiliation_string":"Federal University of Rio de Janeiro, Brazil","institution_ids":["https://openalex.org/I122140584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084512128","display_name":"Gustavo H. A. Santos","orcid":"https://orcid.org/0000-0003-1911-1862"},"institutions":[{"id":"https://openalex.org/I122140584","display_name":"Universidade Federal do Rio de Janeiro","ror":"https://ror.org/03490as77","country_code":"BR","type":"education","lineage":["https://openalex.org/I122140584"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Gustavo H. A. Santos","raw_affiliation_strings":["Federal University of Rio de Janeiro, Brazil"],"affiliations":[{"raw_affiliation_string":"Federal University of Rio de Janeiro, Brazil","institution_ids":["https://openalex.org/I122140584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090397663","display_name":"Edmundo de Souza e Silva","orcid":"https://orcid.org/0000-0003-0912-7860"},"institutions":[{"id":"https://openalex.org/I122140584","display_name":"Universidade Federal do Rio de Janeiro","ror":"https://ror.org/03490as77","country_code":"BR","type":"education","lineage":["https://openalex.org/I122140584"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Edmundo de Souza e Silva","raw_affiliation_strings":["Federal University of Rio de Janeiro, Brazil"],"affiliations":[{"raw_affiliation_string":"Federal University of Rio de Janeiro, Brazil","institution_ids":["https://openalex.org/I122140584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014243558","display_name":"Rosa M. M. Le\u00e3o","orcid":"https://orcid.org/0000-0001-6411-9252"},"institutions":[{"id":"https://openalex.org/I122140584","display_name":"Universidade Federal do Rio de Janeiro","ror":"https://ror.org/03490as77","country_code":"BR","type":"education","lineage":["https://openalex.org/I122140584"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Rosa M. M. Leao","raw_affiliation_strings":["Federal University of Rio de Janeiro, Brazil"],"affiliations":[{"raw_affiliation_string":"Federal University of Rio de Janeiro, Brazil","institution_ids":["https://openalex.org/I122140584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034604991","display_name":"Daniel Sadoc Menasch\u00e9","orcid":"https://orcid.org/0000-0002-8953-4003"},"institutions":[{"id":"https://openalex.org/I122140584","display_name":"Universidade Federal do Rio de Janeiro","ror":"https://ror.org/03490as77","country_code":"BR","type":"education","lineage":["https://openalex.org/I122140584"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Daniel S. Menasche","raw_affiliation_strings":["Federal University of Rio de Janeiro, Brazil"],"affiliations":[{"raw_affiliation_string":"Federal University of Rio de Janeiro, Brazil","institution_ids":["https://openalex.org/I122140584"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036683370","display_name":"Don Towsley","orcid":"https://orcid.org/0000-0002-7808-7375"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Don Towsley","raw_affiliation_strings":["University of Massachusetts, Amherst"],"affiliations":[{"raw_affiliation_string":"University of Massachusetts, Amherst","institution_ids":["https://openalex.org/I24603500"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5103014823"],"corresponding_institution_ids":["https://openalex.org/I122140584"],"apc_list":null,"apc_paid":null,"fwci":1.7686,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.86885246,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"5012","last_page":"5021"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8212509751319885},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8190371990203857},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6860116720199585},{"id":"https://openalex.org/keywords/workload","display_name":"Workload","score":0.5529695153236389},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.532229483127594},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.5305954217910767},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.5217136740684509},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5123811960220337},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5027585029602051},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.44160646200180054},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.15731781721115112}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8212509751319885},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8190371990203857},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6860116720199585},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.5529695153236389},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.532229483127594},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.5305954217910767},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.5217136740684509},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5123811960220337},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5027585029602051},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.44160646200180054},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.15731781721115112}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/bigdata47090.2019.9006548","is_oa":false,"landing_page_url":"https://doi.org/10.1109/bigdata47090.2019.9006548","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE International Conference on Big Data (Big Data)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6499999761581421}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W565955800","https://openalex.org/W1573745704","https://openalex.org/W2091614396","https://openalex.org/W2120664731","https://openalex.org/W2164210932","https://openalex.org/W2328654303","https://openalex.org/W2505895234","https://openalex.org/W2534270843","https://openalex.org/W2611569060","https://openalex.org/W2623359660","https://openalex.org/W2733765803","https://openalex.org/W2743785144","https://openalex.org/W2748868501","https://openalex.org/W2749651311","https://openalex.org/W2754674906","https://openalex.org/W2755021152","https://openalex.org/W2762032850","https://openalex.org/W2768883253","https://openalex.org/W2775542991","https://openalex.org/W2797742547","https://openalex.org/W2799758613","https://openalex.org/W2801118360","https://openalex.org/W2803861302","https://openalex.org/W2885770268","https://openalex.org/W2886540402","https://openalex.org/W2901508923","https://openalex.org/W2924689635","https://openalex.org/W3105750153","https://openalex.org/W3122864121","https://openalex.org/W3138598418","https://openalex.org/W4237110571","https://openalex.org/W4251335428","https://openalex.org/W4255052368","https://openalex.org/W6743493502","https://openalex.org/W6751596586"],"related_works":["https://openalex.org/W2360429410","https://openalex.org/W2204131204","https://openalex.org/W2383770723","https://openalex.org/W2898696280","https://openalex.org/W2958385475","https://openalex.org/W2921433547","https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W2370216173","https://openalex.org/W4256682929"],"abstract_inverted_index":{"A":[0],"major":[1],"threat":[2],"to":[3,10,27,89],"the":[4,28,139,150,154],"Internet":[5],"infrastructure":[6],"and,":[7],"more":[8],"broadly,":[9],"its":[11],"culture":[12],"is":[13],"posed":[14],"by":[15],"DDoS":[16,61,143],"attacks.":[17],"To":[18,72,136],"mitigate":[19],"their":[20],"impact,":[21],"detection":[22,62,125,151],"should":[23],"preferably":[24],"occur":[25],"close":[26],"attack":[29,112,159],"origin,":[30],"e.g.,":[31],"at":[32],"home-routers.":[33],"However,":[34],"these":[35],"devices":[36],"typically":[37,132],"have":[38],"limited":[39,78],"resources":[40],"and":[41,69,117,165],"an":[42],"approach":[43,59],"that":[44,63],"relies":[45],"on":[46],"packet":[47,70],"inspection":[48],"does":[49],"not":[50],"bode":[51],"well":[52],"with":[53,75,99,138],"such":[54,76],"devices.We":[55],"propose":[56],"a":[57,77,103,123],"lightweight":[58],"for":[60,163],"solely":[64],"employs":[65],"network":[66],"interface":[67],"byte":[68],"counts.":[71],"detect":[73],"attacks":[74,100,127],"amount":[79],"of":[80,92,126,142,153],"information,":[81],"our":[82,107],"key":[83],"insight":[84],"consists":[85],"in":[86,102],"training":[87,164],"classifiers":[88],"make":[90],"use":[91],"workload":[93],"data":[94],"from":[95],"1,823":[96],"home-users":[97],"augmented":[98],"generated":[101,114],"controlled":[104],"environment.":[105],"In":[106],"experiments,":[108],"we":[109,145],"selected":[110],"seven":[111],"vectors":[113,160],"using":[115],"Mirai":[116],"BASHLITE":[118],"malwares.":[119],"We":[120],"then":[121],"conduct":[122],"device-agnostic":[124],"vectors,":[128],"obtaining":[129],"F1":[130],"scores":[131],"higher":[133],"than":[134],"0.99.":[135],"cope":[137],"evolving":[140],"nature":[141],"attacks,":[144],"also":[146],"report":[147],"results":[148],"indicating":[149],"power":[152],"proposed":[155],"methodology":[156],"when":[157],"different":[158],"are":[161],"used":[162],"testing.":[166]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}