{"id":"https://openalex.org/W2289267194","doi":"https://doi.org/10.1109/glocom.2014.7417159","title":"A Lightweight DDoS Flooding Attack Detection Algorithm Based on Synchronous Long Flows","display_name":"A Lightweight DDoS Flooding Attack Detection Algorithm Based on Synchronous Long Flows","publication_year":2014,"publication_date":"2014-12-01","ids":{"openalex":"https://openalex.org/W2289267194","doi":"https://doi.org/10.1109/glocom.2014.7417159","mag":"2289267194"},"language":"en","primary_location":{"id":"doi:10.1109/glocom.2014.7417159","is_oa":false,"landing_page_url":"https://doi.org/10.1109/glocom.2014.7417159","pdf_url":null,"source":{"id":"https://openalex.org/S4363607712","display_name":"2015 IEEE Global Communications Conference (GLOBECOM)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE Global Communications Conference (GLOBECOM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100441352","display_name":"Chenxi Li","orcid":"https://orcid.org/0000-0002-9106-8048"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenxi Li","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Tsinghua National Laboratory for Information Science and Technology (TNList), Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua National Laboratory for Information Science and Technology (TNList), Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023416195","display_name":"Jiahai Yang","orcid":"https://orcid.org/0000-0001-6109-6737"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiahai Yang","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Tsinghua National Laboratory for Information Science and Technology (TNList), Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua National Laboratory for Information Science and Technology (TNList), Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100420910","display_name":"Ziyu Wang","orcid":"https://orcid.org/0000-0001-9534-3134"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ziyu Wang","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Tsinghua National Laboratory for Information Science and Technology (TNList), Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua National Laboratory for Information Science and Technology (TNList), Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083598234","display_name":"Fuliang Li","orcid":"https://orcid.org/0000-0001-9782-0053"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fuliang Li","raw_affiliation_strings":["College of Information Science and Engineering, Northeastern University, Shenyang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Science and Engineering, Northeastern University, Shenyang, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100397612","display_name":"Yang Yang","orcid":"https://orcid.org/0000-0002-4933-2917"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang Yang","raw_affiliation_strings":["Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","Tsinghua National Laboratory for Information Science and Technology (TNList), Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute for Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua National Laboratory for Information Science and Technology (TNList), Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.276,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.50663616,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8322631120681763},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8185633420944214},{"id":"https://openalex.org/keywords/ip-address-spoofing","display_name":"IP address spoofing","score":0.7687201499938965},{"id":"https://openalex.org/keywords/spoofing-attack","display_name":"Spoofing attack","score":0.7217679023742676},{"id":"https://openalex.org/keywords/flooding","display_name":"Flooding (psychology)","score":0.6558689475059509},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5932989120483398},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5634018778800964},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.5607396364212036},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.5535123348236084},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5527462363243103},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3510218560695648},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.34297287464141846},{"id":"https://openalex.org/keywords/internet-protocol","display_name":"Internet Protocol","score":0.18137601017951965}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8322631120681763},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8185633420944214},{"id":"https://openalex.org/C111814575","wikidata":"https://www.wikidata.org/wiki/Q550893","display_name":"IP address spoofing","level":5,"score":0.7687201499938965},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.7217679023742676},{"id":"https://openalex.org/C186594467","wikidata":"https://www.wikidata.org/wiki/Q1429176","display_name":"Flooding (psychology)","level":2,"score":0.6558689475059509},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5932989120483398},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5634018778800964},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.5607396364212036},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.5535123348236084},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5527462363243103},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3510218560695648},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.34297287464141846},{"id":"https://openalex.org/C35341882","wikidata":"https://www.wikidata.org/wiki/Q8795","display_name":"Internet Protocol","level":3,"score":0.18137601017951965},{"id":"https://openalex.org/C147873670","wikidata":"https://www.wikidata.org/wiki/Q11182","display_name":"Network address translation","level":4,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/glocom.2014.7417159","is_oa":false,"landing_page_url":"https://doi.org/10.1109/glocom.2014.7417159","pdf_url":null,"source":{"id":"https://openalex.org/S4363607712","display_name":"2015 IEEE Global Communications Conference (GLOBECOM)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE Global Communications Conference (GLOBECOM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1486402922","https://openalex.org/W1526572178","https://openalex.org/W1650881334","https://openalex.org/W1790126211","https://openalex.org/W1996623555","https://openalex.org/W2001968297","https://openalex.org/W2017502937","https://openalex.org/W2101453614","https://openalex.org/W2104692292","https://openalex.org/W2155915275","https://openalex.org/W2162969618","https://openalex.org/W2295569936","https://openalex.org/W2542765808","https://openalex.org/W4251593012","https://openalex.org/W6636713437","https://openalex.org/W6638200353"],"related_works":["https://openalex.org/W2360429410","https://openalex.org/W2898696280","https://openalex.org/W2204131204","https://openalex.org/W2791075267","https://openalex.org/W2185727740","https://openalex.org/W2137087002","https://openalex.org/W2546772914","https://openalex.org/W4233532379","https://openalex.org/W2529801866","https://openalex.org/W3189446050"],"abstract_inverted_index":{"DDoS":[0,54],"flooding":[1,55],"attack":[2,56,110,121,172],"is":[3,94],"one":[4],"of":[5,18,31,53,65,108,120],"the":[6,10,15,19,29,45,84,90,99,105,109,118,140,151,187],"top":[7],"threats":[8],"to":[9,14,27,74,98,112,135,138],"Internet.":[11],"However,":[12,102],"due":[13],"fast":[16],"development":[17],"Internet,":[20],"current":[21],"detection":[22,80,129,147,161],"algorithms":[23],"are":[24,58,68],"already":[25],"inadequate":[26],"meet":[28],"growth":[30],"network":[32],"traffic.":[33],"In":[34,183],"this":[35,75],"paper,":[36],"we":[37,77,124,144,185,189],"propose":[38,78],"a":[39,126,164],"lightweight":[40,95],"algorithm.":[41,81],"We":[42,82],"first":[43],"observe":[44],"real":[46,152],"Internet":[47,153],"traffic,":[48],"and":[49,60,70,87,96,174],"find":[50],"that":[51,159],"flows":[52,64],"traffic":[57,67,154],"persistent":[59],"synchronous":[61],"while":[62],"most":[63],"normal":[66],"short-lived":[69],"non-":[71],"synchronous.":[72],"According":[73],"difference,":[76],"our":[79,136,146,160],"label":[83],"alarms":[85],"firstly":[86],"then":[88],"confirm":[89],"attack.":[91,101,197],"Our":[92],"algorithm":[93,130,137,148,162],"sensitive":[97],"ongoing":[100],"randomly":[103],"spoofing":[104,127],"IP":[106,114,128],"address":[107],"source":[111],"different":[113],"addresses":[115],"can":[116],"hide":[117],"synchronization":[119],"flows.":[122],"Thus,":[123],"add":[125],"called":[131],"hop-count":[132],"filter":[133],"(HCF)":[134],"strengthen":[139],"robustness.":[141],"At":[142],"last,":[143],"evaluate":[145],"based":[149],"on":[150],"from":[155],"CAIDA.":[156],"Results":[157],"show":[158],"has":[163],"high":[165],"accuracy":[166],"(93.3%),":[167],"no":[168],"false":[169,177],"positive":[170,178],"in":[171,180],"confirmation":[173],"just":[175],"1.1%":[176],"rate":[179],"labeling":[181],"alarms.":[182],"addition,":[184],"analyze":[186],"challenges":[188],"may":[190],"face":[191],"when":[192],"dealing":[193],"with":[194],"distributed":[195],"LDoS":[196]},"counts_by_year":[{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}