{"id":"https://openalex.org/W2145324872","doi":"https://doi.org/10.1109/glocom.2009.5426127","title":"Anomaly-Based Identification of Large-Scale Attacks","display_name":"Anomaly-Based Identification of Large-Scale Attacks","publication_year":2009,"publication_date":"2009-11-01","ids":{"openalex":"https://openalex.org/W2145324872","doi":"https://doi.org/10.1109/glocom.2009.5426127","mag":"2145324872"},"language":"en","primary_location":{"id":"doi:10.1109/glocom.2009.5426127","is_oa":false,"landing_page_url":"https://doi.org/10.1109/glocom.2009.5426127","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2009 - 2009 IEEE Global Telecommunications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066237237","display_name":"Thomas Gamer","orcid":"https://orcid.org/0000-0002-1874-1988"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Thomas Gamer","raw_affiliation_strings":["Institute of Telematics, University of Karlsruhe, Germany","Institute of Telematics, University of Karlsruhe, Germany#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Telematics, University of Karlsruhe, Germany","institution_ids":[]},{"raw_affiliation_string":"Institute of Telematics, University of Karlsruhe, Germany#TAB#","institution_ids":["https://openalex.org/I102335020"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5066237237"],"corresponding_institution_ids":["https://openalex.org/I102335020"],"apc_list":null,"apc_paid":null,"fwci":0.8109,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.70317922,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8446699380874634},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8421765565872192},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.772278904914856},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.6802865266799927},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.542110800743103},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5358594059944153},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.5190937519073486},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5008924007415771},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.4795258045196533},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.46459078788757324},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.420853853225708},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3451356589794159},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.09339883923530579}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8446699380874634},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8421765565872192},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.772278904914856},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.6802865266799927},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.542110800743103},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5358594059944153},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.5190937519073486},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5008924007415771},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.4795258045196533},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.46459078788757324},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.420853853225708},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3451356589794159},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.09339883923530579},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/glocom.2009.5426127","is_oa":false,"landing_page_url":"https://doi.org/10.1109/glocom.2009.5426127","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2009 - 2009 IEEE Global Telecommunications Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.154.7928","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.154.7928","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://doc.tm.uka.de/Gamer_Globecom09_Identification.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.6200000047683716,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W1561147972","https://openalex.org/W1964793108","https://openalex.org/W2032548652","https://openalex.org/W2091523578","https://openalex.org/W2112525087","https://openalex.org/W2117610718","https://openalex.org/W2118192520","https://openalex.org/W2127273221","https://openalex.org/W2127589913","https://openalex.org/W2146467316","https://openalex.org/W2147067398","https://openalex.org/W2155883880","https://openalex.org/W2157578436","https://openalex.org/W2159160833","https://openalex.org/W6676474364","https://openalex.org/W6677658529","https://openalex.org/W6678935822"],"related_works":["https://openalex.org/W2360429410","https://openalex.org/W2898696280","https://openalex.org/W2204131204","https://openalex.org/W2383770723","https://openalex.org/W2921433547","https://openalex.org/W2958385475","https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W2370216173","https://openalex.org/W4256682929"],"abstract_inverted_index":{"Large-scale":[0],"attacks":[1,6,132],"like":[2,65],"distributed":[3,81],"denial-of-service":[4],"(DDoS)":[5],"still":[7],"pose":[8],"unpredictable":[9],"threats":[10],"to":[11],"the":[12,31,46,53,70,91,128],"Internet":[13],"infrastructure":[14],"and":[15,68,113,124],"Internet-based":[16],"business.":[17],"Thus,":[18],"many":[19],"attack":[20,54,108],"detection":[21,26,34,83,115],"systems":[22,35],"using":[23],"various":[24],"anomaly":[25,114],"methods":[27],"were":[28],"developed":[29,134],"in":[30,37],"past.":[32],"These":[33],"result":[36],"a":[38,78,94,100],"set":[39],"of":[40,45,52,80,102,130],"anomalies":[41,61],"detected":[42],"by":[43,59,98],"analysis":[44],"traffic":[47],"behavior.":[48],"A":[49],"realtime":[50],"identification":[51,76,96,129],"type":[55],"that":[56,105,135],"is":[57,133],"represented":[58],"those":[60,103],"simplifies":[62],"important":[63],"tasks":[64],"taking":[66],"countermeasures":[67],"visualizing":[69],"network":[71],"state.":[72],"In":[73,85],"addition,":[74],"an":[75,122,138],"facilitates":[77],"collaboration":[79],"heterogeneous":[82],"systems.":[84],"this":[86,119],"paper,":[87],"we":[88],"first":[89],"lay":[90],"foundations":[92],"for":[93,127],"generalized":[95],"system":[97,126],"establishing":[99],"model":[101],"entities":[104],"form":[106],"anomaly-based":[107],"detection:":[109],"large-scale":[110,131],"attacks,":[111],"anomalies,":[112],"methods.":[116],"Based":[117],"on":[118],"flexible":[120],"model,":[121],"adaptable":[123],"resource-aware":[125],"additionally":[136],"offers":[137],"autonomous":[139],"processing":[140],"control.":[141]},"counts_by_year":[{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":2},{"year":2013,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}