{"id":"https://openalex.org/W2019353163","doi":"https://doi.org/10.1109/ciss.2014.6814181","title":"Detecting anomalous latent classes in a batch of network traffic flows","display_name":"Detecting anomalous latent classes in a batch of network traffic flows","publication_year":2014,"publication_date":"2014-03-01","ids":{"openalex":"https://openalex.org/W2019353163","doi":"https://doi.org/10.1109/ciss.2014.6814181","mag":"2019353163"},"language":"en","primary_location":{"id":"doi:10.1109/ciss.2014.6814181","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ciss.2014.6814181","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 48th Annual Conference on Information Sciences and Systems (CISS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102096232","display_name":"Fatih Ko\u00e7ak","orcid":null},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Fatih Kocak","raw_affiliation_strings":["EE and CSE Depts, Penn State University, Univ. Park, PA","EE and CSE Depts, Penn State University, Univ. Park, 16802, USA"],"affiliations":[{"raw_affiliation_string":"EE and CSE Depts, Penn State University, Univ. Park, PA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"EE and CSE Depts, Penn State University, Univ. Park, 16802, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101739086","display_name":"David J. Miller","orcid":"https://orcid.org/0000-0001-8848-1643"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David J. Miller","raw_affiliation_strings":["EE and CSE Depts, Penn State University, Univ. Park, PA","EE and CSE Depts, Penn State University, Univ. Park, 16802, USA"],"affiliations":[{"raw_affiliation_string":"EE and CSE Depts, Penn State University, Univ. Park, PA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"EE and CSE Depts, Penn State University, Univ. Park, 16802, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063903486","display_name":"George Kesidis","orcid":"https://orcid.org/0000-0001-7947-8127"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"George Kesidis","raw_affiliation_strings":["EE and CSE Depts, Penn State University, Univ. Park, PA","EE and CSE Depts, Penn State University, Univ. Park, 16802, USA"],"affiliations":[{"raw_affiliation_string":"EE and CSE Depts, Penn State University, Univ. Park, PA","institution_ids":["https://openalex.org/I130769515"]},{"raw_affiliation_string":"EE and CSE Depts, Penn State University, Univ. Park, 16802, USA","institution_ids":["https://openalex.org/I130769515"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5102096232"],"corresponding_institution_ids":["https://openalex.org/I130769515"],"apc_list":null,"apc_paid":null,"fwci":2.045,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.89019184,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9887999892234802,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.6056949496269226},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.5747416019439697},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5600618720054626},{"id":"https://openalex.org/keywords/pairwise-comparison","display_name":"Pairwise comparison","score":0.5560288429260254},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5252606272697449},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5239615440368652},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5199312567710876},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.5048828721046448},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.41209203004837036},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.41168612241744995},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3907148838043213}],"concepts":[{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.6056949496269226},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.5747416019439697},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5600618720054626},{"id":"https://openalex.org/C184898388","wikidata":"https://www.wikidata.org/wiki/Q1435712","display_name":"Pairwise comparison","level":2,"score":0.5560288429260254},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5252606272697449},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5239615440368652},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5199312567710876},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.5048828721046448},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.41209203004837036},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.41168612241744995},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3907148838043213},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ciss.2014.6814181","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ciss.2014.6814181","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 48th Annual Conference on Information Sciences and Systems (CISS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1535668279","https://openalex.org/W1978907961","https://openalex.org/W2038819732","https://openalex.org/W2122192957","https://openalex.org/W2122301654","https://openalex.org/W2122646361","https://openalex.org/W2142301198","https://openalex.org/W2168175751","https://openalex.org/W2296942648","https://openalex.org/W2406037958","https://openalex.org/W6632180709","https://openalex.org/W6713761039"],"related_works":["https://openalex.org/W2487162673","https://openalex.org/W2942366970","https://openalex.org/W2793211469","https://openalex.org/W2949152769","https://openalex.org/W4372354731","https://openalex.org/W2562400057","https://openalex.org/W1692008701","https://openalex.org/W2597588799","https://openalex.org/W4386564352","https://openalex.org/W2952668426"],"abstract_inverted_index":{"We":[0,31,79,154],"focus":[1],"on":[2,85,114],"detecting":[3,209],"samples":[4,106,118,149],"from":[5],"anomalous":[6,67,131,186,189],"latent":[7],"classes,":[8],"\u201cburied\u201d":[9],"within":[10,42],"a":[11,72,151],"collected":[12],"batch":[13,117],"of":[14,24,97,148],"known":[15,104],"(\u201cnormal\u201d)":[16],"class":[17,105,190],"samples.":[18],"In":[19],"our":[20,156],"setting,":[21],"the":[22,51,115,120,144,170,174,210],"number":[23],"features":[25,59],"for":[26,74,94,129,208],"each":[27],"sample":[28],"is":[29],"high.":[30],"posit":[32],"and":[33,168,213],"observe":[34],"to":[35,49,70],"be":[36,47],"true":[37],"that":[38],"careful":[39],"\u201cfeature":[40],"selection\u201d":[41],"unsupervised":[43],"anomaly":[44],"detection":[45],"may":[46],"needed":[48],"achieve":[50],"most":[52,145],"accurate":[53],"results.":[54],"Our":[55,140,201],"approach":[56,141,204],"effectively":[57],"selects":[58],"(tests),":[60],"even":[61],"though":[62],"there":[63],"are":[64,101],"no":[65],"labeled":[66],"examples":[68],"available":[69],"form":[71,80],"basis":[73],"standard":[75],"(supervised)":[76],"feature":[77,82],"selection.":[78],"pairwise":[81],"tests":[83],"based":[84,166],"bivariate":[86],"Gaussian":[87],"mixture":[88],"null":[89,121],"models,":[90],"with":[91,163,169],"one":[92],"test":[93,116,137],"every":[95],"pair":[96],"features.":[98],"The":[99,188],"mixtures":[100],"estimated":[102],"using":[103,160],"(null":[107],"\u201ctraining":[108],"set\u201d).":[109],"Then,":[110],"we":[111,124],"obtain":[112],"p-values":[113,128],"under":[119],"hypothesis.":[122],"Subsequently,":[123],"calculate":[125],"approximate":[126],"joint":[127],"candidate":[130],"clusters,":[132],"defined":[133],"by":[134],"(sample":[135],"subset,":[136],"subset)":[138],"pairs.":[139],"sequentially":[142],"detects":[143],"significant":[146],"clusters":[147],"in":[150],"networking":[152],"context.":[153],"compare":[155],"\u201cp-value":[157],"clustering":[158,203],"algorithm\u201d,":[159],"ROC":[161],"curves,":[162],"alternative":[164],"p-value":[165,202],"methods":[167,176],"one-class":[171],"SVM.":[172],"All":[173],"competing":[175],"make":[177],"sample-wise":[178],"detections,":[179],"i.e.":[180],"they":[181],"do":[182],"not":[183],"jointly":[184],"detect":[185],"clusters.":[187],"was":[191],"either":[192],"an":[193],"HTTP":[194],"bot":[195,212],"(Zeus)":[196],"or":[197],"peer-to-peer":[198],"(P2P)":[199],"traffic.":[200],"gives":[205],"promising":[206],"results":[207],"Zeus":[211],"P2P":[214],"traffic":[215],"amongst":[216],"Web.":[217]},"counts_by_year":[{"year":2019,"cited_by_count":2},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}