{"id":"https://openalex.org/W2106210100","doi":"https://doi.org/10.1109/icc.2011.5963249","title":"Progressive Differential Thresholding for Network Anomaly Detection","display_name":"Progressive Differential Thresholding for Network Anomaly Detection","publication_year":2011,"publication_date":"2011-06-01","ids":{"openalex":"https://openalex.org/W2106210100","doi":"https://doi.org/10.1109/icc.2011.5963249","mag":"2106210100"},"language":"en","primary_location":{"id":"doi:10.1109/icc.2011.5963249","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2011.5963249","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5111155841","display_name":"Sardar Ali","orcid":null},"institutions":[{"id":"https://openalex.org/I312958679","display_name":"National University of Science and Technology","ror":"https://ror.org/02kesvt12","country_code":"ZW","type":"education","lineage":["https://openalex.org/I312958679"]},{"id":"https://openalex.org/I929597975","display_name":"National University of Sciences and Technology","ror":"https://ror.org/03w2j5y17","country_code":"PK","type":"education","lineage":["https://openalex.org/I929597975"]}],"countries":["PK","ZW"],"is_corresponding":false,"raw_author_name":"Sardar Ali","raw_affiliation_strings":["School of Electrical Engineering and Computer Science (SEECS), National University of Science and Technology, Islamabad, Pakistan","Sch. of Electr. Eng. & Comput. Sci. (SEECS), Nat. Univ. of Sci. & Technol. (NUST), Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science (SEECS), National University of Science and Technology, Islamabad, Pakistan","institution_ids":["https://openalex.org/I929597975"]},{"raw_affiliation_string":"Sch. of Electr. Eng. & Comput. Sci. (SEECS), Nat. Univ. of Sci. & Technol. (NUST), Islamabad, Pakistan","institution_ids":["https://openalex.org/I312958679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051330490","display_name":"Hassan Aqeel Khan","orcid":"https://orcid.org/0000-0002-5501-160X"},"institutions":[{"id":"https://openalex.org/I312958679","display_name":"National University of Science and Technology","ror":"https://ror.org/02kesvt12","country_code":"ZW","type":"education","lineage":["https://openalex.org/I312958679"]},{"id":"https://openalex.org/I929597975","display_name":"National University of Sciences and Technology","ror":"https://ror.org/03w2j5y17","country_code":"PK","type":"education","lineage":["https://openalex.org/I929597975"]}],"countries":["PK","ZW"],"is_corresponding":false,"raw_author_name":"Hassan Khan","raw_affiliation_strings":["School of Electrical Engineering and Computer Science (SEECS), National University of Science and Technology, Islamabad, Pakistan","Sch. of Electr. Eng. & Comput. Sci. (SEECS), Nat. Univ. of Sci. & Technol. (NUST), Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science (SEECS), National University of Science and Technology, Islamabad, Pakistan","institution_ids":["https://openalex.org/I929597975"]},{"raw_affiliation_string":"Sch. of Electr. Eng. & Comput. Sci. (SEECS), Nat. Univ. of Sci. & Technol. (NUST), Islamabad, Pakistan","institution_ids":["https://openalex.org/I312958679"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051550533","display_name":"Muhammad Ahmad","orcid":"https://orcid.org/0000-0002-7670-0543"},"institutions":[{"id":"https://openalex.org/I312958679","display_name":"National University of Science and Technology","ror":"https://ror.org/02kesvt12","country_code":"ZW","type":"education","lineage":["https://openalex.org/I312958679"]},{"id":"https://openalex.org/I929597975","display_name":"National University of Sciences and Technology","ror":"https://ror.org/03w2j5y17","country_code":"PK","type":"education","lineage":["https://openalex.org/I929597975"]}],"countries":["PK","ZW"],"is_corresponding":false,"raw_author_name":"Muhammad Ahmad","raw_affiliation_strings":["School of Electrical Engineering and Computer Science (SEECS), National University of Science and Technology, Islamabad, Pakistan","Sch. of Electr. Eng. & Comput. Sci. (SEECS), Nat. Univ. of Sci. & Technol. (NUST), Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science (SEECS), National University of Science and Technology, Islamabad, Pakistan","institution_ids":["https://openalex.org/I929597975"]},{"raw_affiliation_string":"Sch. of Electr. Eng. & Comput. Sci. (SEECS), Nat. Univ. of Sci. & Technol. (NUST), Islamabad, Pakistan","institution_ids":["https://openalex.org/I312958679"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110173633","display_name":"Syed Ali Khayam","orcid":null},"institutions":[{"id":"https://openalex.org/I312958679","display_name":"National University of Science and Technology","ror":"https://ror.org/02kesvt12","country_code":"ZW","type":"education","lineage":["https://openalex.org/I312958679"]},{"id":"https://openalex.org/I929597975","display_name":"National University of Sciences and Technology","ror":"https://ror.org/03w2j5y17","country_code":"PK","type":"education","lineage":["https://openalex.org/I929597975"]}],"countries":["PK","ZW"],"is_corresponding":false,"raw_author_name":"Syed Ali Khayam","raw_affiliation_strings":["School of Electrical Engineering and Computer Science (SEECS), National University of Science and Technology, Islamabad, Pakistan","Sch. of Electr. Eng. & Comput. Sci. (SEECS), Nat. Univ. of Sci. & Technol. (NUST), Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science (SEECS), National University of Science and Technology, Islamabad, Pakistan","institution_ids":["https://openalex.org/I929597975"]},{"raw_affiliation_string":"Sch. of Electr. Eng. & Comput. Sci. (SEECS), Nat. Univ. of Sci. & Technol. (NUST), Islamabad, Pakistan","institution_ids":["https://openalex.org/I312958679"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.1800606,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8076789379119873},{"id":"https://openalex.org/keywords/thresholding","display_name":"Thresholding","score":0.8018559217453003},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.747646152973175},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.6490105390548706},{"id":"https://openalex.org/keywords/false-alarm","display_name":"False alarm","score":0.6073172688484192},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5962862372398376},{"id":"https://openalex.org/keywords/path","display_name":"Path (computing)","score":0.5956808924674988},{"id":"https://openalex.org/keywords/constant-false-alarm-rate","display_name":"Constant false alarm rate","score":0.549021303653717},{"id":"https://openalex.org/keywords/encode","display_name":"ENCODE","score":0.47375020384788513},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4524967074394226},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.41266560554504395},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.37096303701400757},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.24489644169807434}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8076789379119873},{"id":"https://openalex.org/C191178318","wikidata":"https://www.wikidata.org/wiki/Q2256906","display_name":"Thresholding","level":3,"score":0.8018559217453003},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.747646152973175},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.6490105390548706},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.6073172688484192},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5962862372398376},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.5956808924674988},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.549021303653717},{"id":"https://openalex.org/C66746571","wikidata":"https://www.wikidata.org/wiki/Q1134833","display_name":"ENCODE","level":3,"score":0.47375020384788513},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4524967074394226},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41266560554504395},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.37096303701400757},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.24489644169807434},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/icc.2011.5963249","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2011.5963249","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.469.119","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.469.119","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://wisnet.seecs.nust.edu.pk/projects/nes/Deliverables/Deliverable 3 - Packet Sampling Papers and Code/IEEE ICC - Progressive Differential Thresholding.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5899999737739563,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W129962873","https://openalex.org/W1527422375","https://openalex.org/W1604044955","https://openalex.org/W1994894547","https://openalex.org/W2050969957","https://openalex.org/W2085533912","https://openalex.org/W2123583026","https://openalex.org/W2133524609","https://openalex.org/W2150213544","https://openalex.org/W2159919478","https://openalex.org/W2162240407","https://openalex.org/W2171604933","https://openalex.org/W4239856175","https://openalex.org/W4244733066","https://openalex.org/W6605207663","https://openalex.org/W6631540760","https://openalex.org/W6635988597","https://openalex.org/W6682380750","https://openalex.org/W6685488477"],"related_works":["https://openalex.org/W2468279273","https://openalex.org/W2953058328","https://openalex.org/W2354198838","https://openalex.org/W1989130879","https://openalex.org/W1983393909","https://openalex.org/W2165968459","https://openalex.org/W2040150569","https://openalex.org/W2132174924","https://openalex.org/W1911540634","https://openalex.org/W2013909972"],"abstract_inverted_index":{"In":[0],"this":[1],"paper,":[2],"we":[3],"propose":[4],"a":[5,23,34,75],"Progressive":[6],"Differential":[7],"Thresholding":[8],"(PDT)":[9],"framework":[10,96],"for":[11],"coordinated":[12],"network":[13],"anomaly":[14,50,72,103],"detection.":[15],"Under":[16],"the":[17,39,42,93,121],"proposed":[18,94],"framework,":[19],"nodes":[20,37],"present":[21],"on":[22,38,74],"packet's":[24],"path":[25,40],"progressively":[26],"encode":[27],"their":[28,49,57],"opinion":[29,44],"(malicious":[30],"or":[31],"benign)":[32],"inside":[33],"packet.":[35],"Subsequent":[36],"use":[41],"encoded":[43],"as":[45],"side-information":[46],"to":[47],"adapt":[48],"detection":[51,104,113],"thresholds":[52],"and":[53,86,90,99],"in":[54,102,111,120],"turn":[55],"improve":[56],"classification":[58],"accuracies.":[59],"Accuracy":[60],"benefits":[61],"of":[62,69],"PDT":[63,95],"are":[64],"evaluated":[65],"through":[66],"experimental":[67],"evaluations":[68,80],"multiple":[70],"non-proprietary":[71],"detectors":[73],"publicly-available":[76],"attack":[77],"dataset.":[78],"These":[79],"indicate":[81],"that,":[82],"while":[83,115],"being":[84],"distributed":[85],"having":[87],"negligible":[88],"complexity":[89],"communication":[91],"overheads,":[92],"provides":[97],"considerable":[98],"consistent":[100],"improvements":[101,110],"accuracy.":[105],"We":[106],"observe":[107],"upto":[108,116],"54%":[109],"ADS":[112],"accuracy":[114],"4":[117],"times":[118],"reduction":[119],"false":[122],"alarm":[123],"rates.":[124]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}