{"id":"https://openalex.org/W2146838111","doi":"https://doi.org/10.1109/hpsr.2010.5580287","title":"SPADE: Statistical Packet Acceptance Defense Engine","display_name":"SPADE: Statistical Packet Acceptance Defense Engine","publication_year":2010,"publication_date":"2010-06-01","ids":{"openalex":"https://openalex.org/W2146838111","doi":"https://doi.org/10.1109/hpsr.2010.5580287","mag":"2146838111"},"language":"en","primary_location":{"id":"doi:10.1109/hpsr.2010.5580287","is_oa":false,"landing_page_url":"https://doi.org/10.1109/hpsr.2010.5580287","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2010 International Conference on High Performance Switching and Routing","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078232941","display_name":"Shimrit Tzur-David","orcid":null},"institutions":[{"id":"https://openalex.org/I197251160","display_name":"Hebrew University of Jerusalem","ror":"https://ror.org/03qxff017","country_code":"IL","type":"education","lineage":["https://openalex.org/I197251160"]}],"countries":["IL"],"is_corresponding":true,"raw_author_name":"Shimrit Tzur-David","raw_affiliation_strings":["Hebrew University of Jerusalem, Israel","The Hebrew University of Jerusalem, , Israel"],"affiliations":[{"raw_affiliation_string":"Hebrew University of Jerusalem, Israel","institution_ids":["https://openalex.org/I197251160"]},{"raw_affiliation_string":"The Hebrew University of Jerusalem, , Israel","institution_ids":["https://openalex.org/I197251160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067204040","display_name":"Harel Avissar","orcid":null},"institutions":[{"id":"https://openalex.org/I197251160","display_name":"Hebrew University of Jerusalem","ror":"https://ror.org/03qxff017","country_code":"IL","type":"education","lineage":["https://openalex.org/I197251160"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Harel Avissar","raw_affiliation_strings":["Hebrew University of Jerusalem, Israel","The Hebrew University of Jerusalem, , Israel"],"affiliations":[{"raw_affiliation_string":"Hebrew University of Jerusalem, Israel","institution_ids":["https://openalex.org/I197251160"]},{"raw_affiliation_string":"The Hebrew University of Jerusalem, , Israel","institution_ids":["https://openalex.org/I197251160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013225896","display_name":"Danny Dolev","orcid":"https://orcid.org/0000-0001-8853-0644"},"institutions":[{"id":"https://openalex.org/I197251160","display_name":"Hebrew University of Jerusalem","ror":"https://ror.org/03qxff017","country_code":"IL","type":"education","lineage":["https://openalex.org/I197251160"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Danny Dolev","raw_affiliation_strings":["Hebrew University of Jerusalem, Israel","The Hebrew University of Jerusalem, , Israel"],"affiliations":[{"raw_affiliation_string":"Hebrew University of Jerusalem, Israel","institution_ids":["https://openalex.org/I197251160"]},{"raw_affiliation_string":"The Hebrew University of Jerusalem, , Israel","institution_ids":["https://openalex.org/I197251160"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5023221874","display_name":"Tal Anker","orcid":null},"institutions":[{"id":"https://openalex.org/I197251160","display_name":"Hebrew University of Jerusalem","ror":"https://ror.org/03qxff017","country_code":"IL","type":"education","lineage":["https://openalex.org/I197251160"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Tal Anker","raw_affiliation_strings":["Hebrew University of Jerusalem, Israel","The Hebrew University of Jerusalem, , Israel"],"affiliations":[{"raw_affiliation_string":"Hebrew University of Jerusalem, Israel","institution_ids":["https://openalex.org/I197251160"]},{"raw_affiliation_string":"The Hebrew University of Jerusalem, , Israel","institution_ids":["https://openalex.org/I197251160"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5078232941"],"corresponding_institution_ids":["https://openalex.org/I197251160"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.21246617,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"119","last_page":"126"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.832276463508606},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7841825485229492},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.600158154964447},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.5901415348052979},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.48938101530075073},{"id":"https://openalex.org/keywords/principal","display_name":"Principal (computer security)","score":0.47570452094078064},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4457364082336426},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4105921983718872},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.23939639329910278}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.832276463508606},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7841825485229492},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.600158154964447},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.5901415348052979},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.48938101530075073},{"id":"https://openalex.org/C144559511","wikidata":"https://www.wikidata.org/wiki/Q2986279","display_name":"Principal (computer security)","level":2,"score":0.47570452094078064},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4457364082336426},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4105921983718872},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.23939639329910278},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/hpsr.2010.5580287","is_oa":false,"landing_page_url":"https://doi.org/10.1109/hpsr.2010.5580287","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2010 International Conference on High Performance Switching and Routing","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.308.5574","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.308.5574","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.huji.ac.il/~dolev/pubs/dosInfo.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W59037818","https://openalex.org/W1509288909","https://openalex.org/W1524600321","https://openalex.org/W1563061804","https://openalex.org/W1601133782","https://openalex.org/W1817166299","https://openalex.org/W1977141583","https://openalex.org/W1988888087","https://openalex.org/W2036642572","https://openalex.org/W2078732484","https://openalex.org/W2081357650","https://openalex.org/W2098366185","https://openalex.org/W2103662262","https://openalex.org/W2108250074","https://openalex.org/W2112135709","https://openalex.org/W2123583026","https://openalex.org/W2150213544","https://openalex.org/W2157578436","https://openalex.org/W2169927847","https://openalex.org/W4206137901","https://openalex.org/W6602452583","https://openalex.org/W6631403701","https://openalex.org/W6633671634","https://openalex.org/W6638669139","https://openalex.org/W6647614135","https://openalex.org/W6675791751","https://openalex.org/W6682380750"],"related_works":["https://openalex.org/W4386482731","https://openalex.org/W2765763546","https://openalex.org/W4385302085","https://openalex.org/W2039821316","https://openalex.org/W2388081684","https://openalex.org/W4226031521","https://openalex.org/W3160314615","https://openalex.org/W2381288267","https://openalex.org/W2155469080","https://openalex.org/W2299887038"],"abstract_inverted_index":{"A":[0],"security":[1],"engine":[2,93],"should":[3],"detect":[4,101],"network":[5,36],"traffic":[6,37,103,132],"attacks":[7,55],"at":[8],"line-speed.":[9],"\"Learning\"":[10],"capabilities":[11],"can":[12,111],"help":[13],"detecting":[14,63],"new":[15],"and":[16,39,56,64,76],"unknown":[17],"threats":[18],"even":[19],"before":[20],"a":[21,81,105,127,143],"vulnerability":[22],"is":[23,32,62,87,90,118,134],"exploited.":[24],"The":[25,68],"principal":[26],"way":[27],"for":[28,44],"achieving":[29],"this":[30,42],"goal":[31,61],"to":[33,40,100,137,146],"model":[34,43],"anticipated":[35],"behavior,":[38],"use":[41],"identifying":[45],"anomalies.":[46],"This":[47],"paper":[48],"focuses":[49],"on":[50,115,120],"denial":[51],"of":[52,66,130],"service":[53],"(DoS)":[54],"distributed":[57],"DoS":[58],"(DDoS).":[59],"Our":[60],"preventing":[65],"attacks.":[67],"main":[69],"challenges":[70],"include":[71],"minimizing":[72],"the":[73,77,121,131,138,149],"false-positive":[74],"rate":[75],"memory":[78,108],"consumption.":[79],"SPADE:":[80],"Statistical":[82],"Packet":[83],"Acceptance":[84],"Defense":[85],"Engine":[86],"presented.":[88],"SPADE":[89,117,141],"an":[91,96],"accurate":[92],"that":[94,123,133],"uses":[95],"hierarchical":[97],"adaptive":[98],"structure":[99],"suspicious":[102],"using":[104],"relatively":[106],"small":[107],"footprint,":[109],"therefore":[110],"be":[112],"easily":[113],"applied":[114],"hardware.":[116],"based":[119],"assumption":[122],"during":[124],"DoS/DDoS":[125],"attacks,":[126],"significant":[128],"portion":[129],"seen":[135],"belongs":[136],"attack,":[139],"therefore,":[140],"applies":[142],"statistical":[144],"mechanism":[145],"primarily":[147],"filter":[148],"attack's":[150],"traffic.":[151]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-04-05T17:49:38.594831","created_date":"2025-10-10T00:00:00"}