{"id":"https://openalex.org/W2765719629","doi":"https://doi.org/10.1109/cloudnet.2017.8071525","title":"Network security and anomaly detection with Big-DAMA, a big data analytics framework","display_name":"Network security and anomaly detection with Big-DAMA, a big data analytics framework","publication_year":2017,"publication_date":"2017-09-01","ids":{"openalex":"https://openalex.org/W2765719629","doi":"https://doi.org/10.1109/cloudnet.2017.8071525","mag":"2765719629"},"language":"en","primary_location":{"id":"doi:10.1109/cloudnet.2017.8071525","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cloudnet.2017.8071525","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE 6th International Conference on Cloud Networking (CloudNet)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5081556750","display_name":"Pedro Casas","orcid":"https://orcid.org/0000-0002-0951-2331"},"institutions":[{"id":"https://openalex.org/I132118926","display_name":"Austrian Institute of Technology","ror":"https://ror.org/04knbh022","country_code":"AT","type":"facility","lineage":["https://openalex.org/I132118926"]}],"countries":["AT"],"is_corresponding":true,"raw_author_name":"Pedro Casas","raw_affiliation_strings":["AIT Austrian Institute of Technology, Austria"],"affiliations":[{"raw_affiliation_string":"AIT Austrian Institute of Technology, Austria","institution_ids":["https://openalex.org/I132118926"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075022804","display_name":"Francesca Soro","orcid":"https://orcid.org/0000-0001-6738-8634"},"institutions":[{"id":"https://openalex.org/I132118926","display_name":"Austrian Institute of Technology","ror":"https://ror.org/04knbh022","country_code":"AT","type":"facility","lineage":["https://openalex.org/I132118926"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Francesca Soro","raw_affiliation_strings":["AIT Austrian Institute of Technology, Austria"],"affiliations":[{"raw_affiliation_string":"AIT Austrian Institute of Technology, Austria","institution_ids":["https://openalex.org/I132118926"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017530794","display_name":"Juan Vanerio","orcid":"https://orcid.org/0000-0003-3120-5028"},"institutions":[{"id":"https://openalex.org/I132118926","display_name":"Austrian Institute of Technology","ror":"https://ror.org/04knbh022","country_code":"AT","type":"facility","lineage":["https://openalex.org/I132118926"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Juan Vanerio","raw_affiliation_strings":["AIT Austrian Institute of Technology, Austria"],"affiliations":[{"raw_affiliation_string":"AIT Austrian Institute of Technology, Austria","institution_ids":["https://openalex.org/I132118926"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013015010","display_name":"Giuseppe Settanni","orcid":null},"institutions":[{"id":"https://openalex.org/I132118926","display_name":"Austrian Institute of Technology","ror":"https://ror.org/04knbh022","country_code":"AT","type":"facility","lineage":["https://openalex.org/I132118926"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Giuseppe Settanni","raw_affiliation_strings":["AIT Austrian Institute of Technology, Austria"],"affiliations":[{"raw_affiliation_string":"AIT Austrian Institute of Technology, Austria","institution_ids":["https://openalex.org/I132118926"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088798897","display_name":"Alessandro D\u2019Alconzo","orcid":null},"institutions":[{"id":"https://openalex.org/I132118926","display_name":"Austrian Institute of Technology","ror":"https://ror.org/04knbh022","country_code":"AT","type":"facility","lineage":["https://openalex.org/I132118926"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Alessandro D'Alconzo","raw_affiliation_strings":["AIT Austrian Institute of Technology, Austria"],"affiliations":[{"raw_affiliation_string":"AIT Austrian Institute of Technology, Austria","institution_ids":["https://openalex.org/I132118926"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5081556750"],"corresponding_institution_ids":["https://openalex.org/I132118926"],"apc_list":null,"apc_paid":null,"fwci":5.0559,"has_fulltext":false,"cited_by_count":41,"citation_normalized_percentile":{"value":0.95932373,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/big-data","display_name":"Big data","score":0.8278999328613281},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7847868204116821},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.735287606716156},{"id":"https://openalex.org/keywords/stream-processing","display_name":"Stream processing","score":0.6896000504493713},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6101213693618774},{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.49063363671302795},{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.4889606237411499},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.4469873607158661},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4347043037414551},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.2896263003349304},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.2801913022994995},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.10749095678329468}],"concepts":[{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.8278999328613281},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7847868204116821},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.735287606716156},{"id":"https://openalex.org/C107027933","wikidata":"https://www.wikidata.org/wiki/Q2006448","display_name":"Stream processing","level":2,"score":0.6896000504493713},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6101213693618774},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.49063363671302795},{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.4889606237411499},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.4469873607158661},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4347043037414551},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2896263003349304},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2801913022994995},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10749095678329468},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cloudnet.2017.8071525","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cloudnet.2017.8071525","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE 6th International Conference on Cloud Networking (CloudNet)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.49000000953674316}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W1598064945","https://openalex.org/W1966764836","https://openalex.org/W1975415766","https://openalex.org/W1990396441","https://openalex.org/W2024621423","https://openalex.org/W2040333627","https://openalex.org/W2060161902","https://openalex.org/W2074935284","https://openalex.org/W2078799390","https://openalex.org/W2088134864","https://openalex.org/W2096118443","https://openalex.org/W2107427360","https://openalex.org/W2122646361","https://openalex.org/W2131164945","https://openalex.org/W2131166445","https://openalex.org/W2134113644","https://openalex.org/W2144261930","https://openalex.org/W2149576945","https://openalex.org/W2173213060","https://openalex.org/W2189465200","https://openalex.org/W2247317079","https://openalex.org/W2461897637","https://openalex.org/W2463836193","https://openalex.org/W2538727084","https://openalex.org/W3150719513","https://openalex.org/W6679434643","https://openalex.org/W6687322159"],"related_works":["https://openalex.org/W4238897586","https://openalex.org/W435179959","https://openalex.org/W2619091065","https://openalex.org/W2059640416","https://openalex.org/W1490753184","https://openalex.org/W2284465472","https://openalex.org/W2893963003","https://openalex.org/W4230978433","https://openalex.org/W2920657135","https://openalex.org/W2953080867"],"abstract_inverted_index":{"The":[0,69],"complexity":[1],"of":[2,8,40,51,53,65,71,87,97,140,217,220,235,261],"the":[3,6,15,38,81,84,93,215,241,246],"Internet":[4],"and":[5,29,43,95,100,136,143,151,161,170,180,196,201,223,271],"volume":[7],"network":[9,41,72,77,98,197,221,237],"traffic":[10],"have":[11],"dramatically":[12],"increased":[13],"in":[14,276],"last":[16],"few":[17],"years,":[18],"making":[19],"it":[20],"more":[21],"challenging":[22],"to":[23,83,91,134,164,214,265],"design":[24],"scalable":[25],"Network":[26],"Traffic":[27],"Monitoring":[28],"Analysis":[30],"(NTMA)":[31],"systems.":[32],"Critical":[33],"NTMA":[34,126],"applications":[35],"such":[36],"as":[37,57,59],"detection":[39,94,195,216],"attacks":[42,99,222,251],"anomalies":[44],"require":[45],"fast":[46],"mechanisms":[47],"for":[48,62,125,177,193,250],"on-line":[49],"analysis":[50,64],"thousands":[52],"events":[54],"per":[55],"second,":[56],"well":[58],"efficient":[60],"techniques":[61],"off-line":[63],"massive":[66,85],"historical":[67],"data.":[68],"high-dimensionality":[70],"data":[73,110,121,146,159,168],"provided":[74],"by":[75,258],"current":[76],"monitoring":[78],"systems":[79],"opens":[80],"door":[82],"application":[86],"machine":[88,203],"learning":[89,204],"approaches":[90],"improve":[92],"classification":[96],"anomalies,":[101,224],"but":[102],"this":[103,114],"higher":[104],"dimensionality":[105],"comes":[106],"with":[107,148],"an":[108],"extra":[109],"processing":[111,153,162,169,172],"overhead.":[112],"In":[113],"paper":[115],"we":[116],"present":[117],"Big-DAMA,":[118],"a":[119,130,183,259,266],"big":[120,138,158],"analytics":[122],"framework":[123],"(BDAF)":[124],"applications.":[127],"Big-DAMA":[128,155,189,213,253],"is":[129],"flexible":[131],"BDAF,":[132],"capable":[133],"analyze":[135],"store":[137],"amounts":[139],"both":[141,149,166],"structured":[142],"unstructured":[144],"heterogeneous":[145],"sources,":[147],"stream":[150,167],"batch":[152,171,179],"capabilities.":[154],"uses":[156],"off-the-shelf":[157,208],"storage":[160],"engines":[163,176],"offer":[165],"capabilities,":[173],"decomposing":[174],"separate":[175],"stream,":[178],"query,":[181],"following":[182],"Data":[184],"Stream":[185],"Warehouse":[186],"(DSW)":[187],"paradigm.":[188],"implements":[190],"several":[191],"algorithms":[192],"anomaly":[194],"security":[198],"using":[199,207,245,279],"supervised":[200,227],"unsupervised":[202],"(ML)":[205],"models,":[206],"ML":[209,228],"libraries.":[210],"We":[211],"apply":[212],"different":[218],"types":[219],"benchmarking":[225],"multiple":[226],"models.":[229],"Evaluations":[230],"are":[231],"conducted":[232],"on":[233],"top":[234],"real":[236],"measurements":[238],"collected":[239],"at":[240],"WIDE":[242],"backbone":[243],"network,":[244],"well-known":[247],"MAWILab":[248],"dataset":[249],"labeling.":[252],"can":[254,272],"speed":[255],"up":[256],"computations":[257],"factor":[260],"10":[262],"when":[263],"compared":[264],"standard":[267],"Apache":[268],"Spark":[269],"cluster,":[270],"be":[273],"easily":[274],"deployed":[275],"cloud":[277],"environments,":[278],"hardware":[280],"virtualization":[281],"technology.":[282]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":11},{"year":2019,"cited_by_count":7},{"year":2018,"cited_by_count":5}],"updated_date":"2026-04-02T15:55:50.835912","created_date":"2025-10-10T00:00:00"}