{"id":"https://openalex.org/W2794460302","doi":"https://doi.org/10.1109/conielecomp.2018.8327205","title":"Classification of network anomalies in flow level network traffic using Bayesian networks","display_name":"Classification of network anomalies in flow level network traffic using Bayesian networks","publication_year":2018,"publication_date":"2018-02-01","ids":{"openalex":"https://openalex.org/W2794460302","doi":"https://doi.org/10.1109/conielecomp.2018.8327205","mag":"2794460302"},"language":"en","primary_location":{"id":"doi:10.1109/conielecomp.2018.8327205","is_oa":false,"landing_page_url":"https://doi.org/10.1109/conielecomp.2018.8327205","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 International Conference on Electronics, Communications and Computers (CONIELECOMP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034810158","display_name":"M. J. Vargas-Munoz","orcid":null},"institutions":[{"id":"https://openalex.org/I4210133208","display_name":"Centro de Investigaci\u00f3n y Proyectos en Ambiente y Desarrollo","ror":"https://ror.org/03dgk3y06","country_code":"MX","type":"other","lineage":["https://openalex.org/I4210133208"]}],"countries":["MX"],"is_corresponding":true,"raw_author_name":"M. J. Vargas-Munoz","raw_affiliation_strings":["Telecommunications Specialty CINVESTAV Zapopan, M\u00e9xico"],"affiliations":[{"raw_affiliation_string":"Telecommunications Specialty CINVESTAV Zapopan, M\u00e9xico","institution_ids":["https://openalex.org/I4210133208"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076836614","display_name":"Rafael Mart\u00ednez-Pel\u00e1ez","orcid":"https://orcid.org/0000-0003-2188-9892"},"institutions":[{"id":"https://openalex.org/I4210098913","display_name":"Universidad de La Salle Baj\u00edo","ror":"https://ror.org/00vf1vw09","country_code":"MX","type":"education","lineage":["https://openalex.org/I4210098913"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"R. Martinez-Pelaez","raw_affiliation_strings":["School of Information Technology Universidad De La Salle Bajio Leon, Mexico"],"affiliations":[{"raw_affiliation_string":"School of Information Technology Universidad De La Salle Bajio Leon, Mexico","institution_ids":["https://openalex.org/I4210098913"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103077393","display_name":"Pablo Velarde-Alvarado","orcid":"https://orcid.org/0000-0002-1211-1061"},"institutions":[{"id":"https://openalex.org/I2800400464","display_name":"Universidad Aut\u00f3noma de Nayarit","ror":"https://ror.org/0576q1t15","country_code":"MX","type":"education","lineage":["https://openalex.org/I2800400464"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"P. Velarde-Alvarado","raw_affiliation_strings":["Basic sciences and engineering area UAN Tepic, Mexico"],"affiliations":[{"raw_affiliation_string":"Basic sciences and engineering area UAN Tepic, Mexico","institution_ids":["https://openalex.org/I2800400464"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071933590","display_name":"E. Moreno-Garc\u00eda","orcid":null},"institutions":[{"id":"https://openalex.org/I4210131529","display_name":"Instituto Tecnol\u00f3gico de Tepic","ror":"https://ror.org/0377f1g25","country_code":"MX","type":"education","lineage":["https://openalex.org/I4210131529"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"E. Moreno-Garcia","raw_affiliation_strings":["Postgraduate and research direction Instituto Tecnologico de Tepic Tepic, Mexico"],"affiliations":[{"raw_affiliation_string":"Postgraduate and research direction Instituto Tecnologico de Tepic Tepic, Mexico","institution_ids":["https://openalex.org/I4210131529"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086698147","display_name":"Deni Torres-Rom\u00e1n","orcid":"https://orcid.org/0000-0002-9813-7712"},"institutions":[{"id":"https://openalex.org/I4210133208","display_name":"Centro de Investigaci\u00f3n y Proyectos en Ambiente y Desarrollo","ror":"https://ror.org/03dgk3y06","country_code":"MX","type":"other","lineage":["https://openalex.org/I4210133208"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"D. L. Torres-Roman","raw_affiliation_strings":["Telecommunications Specialty CINVESTAV Zapopan, M\u00e9xico"],"affiliations":[{"raw_affiliation_string":"Telecommunications Specialty CINVESTAV Zapopan, M\u00e9xico","institution_ids":["https://openalex.org/I4210133208"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079690221","display_name":"J. J. Ceballos-Mejia","orcid":null},"institutions":[{"id":"https://openalex.org/I4210131529","display_name":"Instituto Tecnol\u00f3gico de Tepic","ror":"https://ror.org/0377f1g25","country_code":"MX","type":"education","lineage":["https://openalex.org/I4210131529"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"J. J. Ceballos-Mejia","raw_affiliation_strings":["Postgraduate and research direction Instituto Tecnologico de Tepic Tepic, Mexico"],"affiliations":[{"raw_affiliation_string":"Postgraduate and research direction Instituto Tecnologico de Tepic Tepic, Mexico","institution_ids":["https://openalex.org/I4210131529"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5034810158"],"corresponding_institution_ids":["https://openalex.org/I4210133208"],"apc_list":null,"apc_paid":null,"fwci":1.7557,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":{"value":0.86132893,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"238","last_page":"243"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7931196689605713},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.6530283689498901},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5731276273727417},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.515658974647522},{"id":"https://openalex.org/keywords/traffic-analysis","display_name":"Traffic analysis","score":0.4830256402492523},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4800247251987457},{"id":"https://openalex.org/keywords/flow-network","display_name":"Flow network","score":0.4732670783996582},{"id":"https://openalex.org/keywords/bayesian-network","display_name":"Bayesian network","score":0.46468496322631836},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4627876579761505},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.43127867579460144},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.25103700160980225},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.08266547322273254}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7931196689605713},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.6530283689498901},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5731276273727417},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.515658974647522},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.4830256402492523},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4800247251987457},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.4732670783996582},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.46468496322631836},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4627876579761505},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.43127867579460144},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25103700160980225},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.08266547322273254},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/conielecomp.2018.8327205","is_oa":false,"landing_page_url":"https://doi.org/10.1109/conielecomp.2018.8327205","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 International Conference on Electronics, Communications and Computers (CONIELECOMP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321739","display_name":"Consejo Nacional de Ciencia y Tecnolog\u00eda","ror":"https://ror.org/059ex5q34"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W7191366","https://openalex.org/W1512797207","https://openalex.org/W1913855765","https://openalex.org/W1977482721","https://openalex.org/W2031163547","https://openalex.org/W2055452710","https://openalex.org/W2137837243","https://openalex.org/W2142889610","https://openalex.org/W2150620623","https://openalex.org/W2150735799","https://openalex.org/W2255206882","https://openalex.org/W2278186031","https://openalex.org/W2620580412","https://openalex.org/W2626468835","https://openalex.org/W2747144285","https://openalex.org/W2979006918","https://openalex.org/W4253269957","https://openalex.org/W6681859431"],"related_works":["https://openalex.org/W2376886931","https://openalex.org/W2061466315","https://openalex.org/W2010561419","https://openalex.org/W2374845301","https://openalex.org/W2351448539","https://openalex.org/W1977863481","https://openalex.org/W2384741105","https://openalex.org/W1495178644","https://openalex.org/W2185594426","https://openalex.org/W2377372927"],"abstract_inverted_index":{"Network":[0],"security":[1,39,48],"is":[2,114],"a":[3,29,97,145,150,193],"topical":[4],"issue":[5],"today":[6],"for":[7,79,196],"everyone":[8],"connected":[9],"to":[10,16,20,43,116,128,136],"Internet.":[11],"However,":[12],"malicious":[13],"users":[14],"try":[15],"obtain":[17],"unauthorized":[18],"access":[19],"network":[21,34,64,72,76,99,111,157],"resources,":[22],"affecting":[23],"integrity,":[24],"confidentiality,":[25],"and":[26,33,62,135,159,171,181,201],"availability.":[27],"As":[28],"consequence,":[30],"researchers,":[31],"developers":[32],"administrators":[35],"have":[36],"created":[37],"many":[38],"mechanisms":[40],"in":[41,54,176],"order":[42],"enhance":[44],"security.":[45],"Among":[46],"the":[47,55,83,118,124,129,133,137,141,164,187,190,202],"solutions":[49],"that":[50,121,186],"we":[51,95,143],"can":[52,102],"find":[53],"market,":[56],"Intrusion":[57],"Detection":[58],"Systems":[59],"monitor":[60],"inbound":[61],"outbound":[63],"activity,":[65,77],"identifying":[66],"suspicious":[67],"traffic.":[68,81,107],"IDS":[69,84,169],"compare":[70],"typical":[71],"activity":[73],"with":[74],"daily":[75],"searching":[78],"anomalous":[80,86,106],"If":[82],"detects":[85],"traffic,":[87],"it":[88,113],"sends":[89],"an":[90],"alert.":[91],"In":[92],"this":[93],"work,":[94],"propose":[96],"Bayesian":[98,110],"classifier,":[100],"which":[101,148],"detect":[103],"normal":[104,199],"or":[105],"Through":[108],"our":[109],"model,":[112],"possible":[115],"describe":[117],"cause-effect":[119],"relationships":[120],"exist":[122],"between":[123],"traffic":[125,200],"features.":[126],"Due":[127],"high":[130,194],"dimensionality":[131],"of":[132,140,166,178,189,198,204],"data,":[134],"widespread":[138],"use":[139],"networks,":[142],"used":[144],"flow-level":[146],"analysis,":[147],"saved":[149],"considerable":[151],"computational":[152],"load.":[153],"We":[154],"focus":[155],"on":[156],"worms":[158],"brute":[160],"force":[161],"attacks,":[162],"using":[163],"datasets":[165],"UNB":[167],"ISCX":[168],"2012":[170],"UAN":[172],"W32.Worms":[173],"2008.":[174],"Results":[175],"terms":[177],"false":[179],"positive":[180,183],"true":[182],"rates":[184],"show":[185],"performance":[188],"model":[191],"has":[192],"efficiency":[195],"classification":[197],"set":[203],"selected":[205],"attacks.":[206]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":1}],"updated_date":"2026-03-25T13:04:00.132906","created_date":"2025-10-10T00:00:00"}
