{"id":"https://openalex.org/W2956570372","doi":"https://doi.org/10.1109/icc.2019.8761747","title":"A Flow-Based Entropy Characterization of a NATed Network and Its Application on Intrusion Detection","display_name":"A Flow-Based Entropy Characterization of a NATed Network and Its Application on Intrusion Detection","publication_year":2019,"publication_date":"2019-05-01","ids":{"openalex":"https://openalex.org/W2956570372","doi":"https://doi.org/10.1109/icc.2019.8761747","mag":"2956570372"},"language":"en","primary_location":{"id":"doi:10.1109/icc.2019.8761747","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2019.8761747","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2019 - 2019 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058298121","display_name":"Jorge Crichigno","orcid":"https://orcid.org/0000-0002-6705-5300"},"institutions":[{"id":"https://openalex.org/I155781252","display_name":"University of South Carolina","ror":"https://ror.org/02b6qw903","country_code":"US","type":"education","lineage":["https://openalex.org/I155781252"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"J. Crichigno","raw_affiliation_strings":["Integrated Information Technology Department, University of South Carolina, Columbia, SC, USA"],"affiliations":[{"raw_affiliation_string":"Integrated Information Technology Department, University of South Carolina, Columbia, SC, USA","institution_ids":["https://openalex.org/I155781252"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002648936","display_name":"Elie Kfoury","orcid":"https://orcid.org/0000-0003-1236-6168"},"institutions":[{"id":"https://openalex.org/I155781252","display_name":"University of South Carolina","ror":"https://ror.org/02b6qw903","country_code":"US","type":"education","lineage":["https://openalex.org/I155781252"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"E. Kfoury","raw_affiliation_strings":["Integrated Information Technology Department, University of South Carolina, Columbia, SC, USA"],"affiliations":[{"raw_affiliation_string":"Integrated Information Technology Department, University of South Carolina, Columbia, SC, USA","institution_ids":["https://openalex.org/I155781252"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039079298","display_name":"Elias Bou\u2010Harb","orcid":"https://orcid.org/0000-0001-8040-4635"},"institutions":[{"id":"https://openalex.org/I63772739","display_name":"Florida Atlantic University","ror":"https://ror.org/05p8w6387","country_code":"US","type":"education","lineage":["https://openalex.org/I63772739"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"E. Bou-Harb","raw_affiliation_strings":["Cyber Threat Intelligence Laboratory, Florida Atlantic University, Boca Raton, FL, USA"],"affiliations":[{"raw_affiliation_string":"Cyber Threat Intelligence Laboratory, Florida Atlantic University, Boca Raton, FL, USA","institution_ids":["https://openalex.org/I63772739"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022742519","display_name":"Nasir Ghani","orcid":"https://orcid.org/0000-0002-9475-7439"},"institutions":[{"id":"https://openalex.org/I2613432","display_name":"University of South Florida","ror":"https://ror.org/032db5x82","country_code":"US","type":"education","lineage":["https://openalex.org/I2613432"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"N. Ghani","raw_affiliation_strings":["Electrical Engineering Department, University of South Florida, Tampa, FL, USA"],"affiliations":[{"raw_affiliation_string":"Electrical Engineering Department, University of South Florida, Tampa, FL, USA","institution_ids":["https://openalex.org/I2613432"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010008514","display_name":"Yasmany Prieto","orcid":"https://orcid.org/0000-0002-6827-2657"},"institutions":[{"id":"https://openalex.org/I172787465","display_name":"University of Concepci\u00f3n","ror":"https://ror.org/0460jpj73","country_code":"CL","type":"education","lineage":["https://openalex.org/I172787465"]}],"countries":["CL"],"is_corresponding":false,"raw_author_name":"Y. Prieto","raw_affiliation_strings":["Electrical Engineering Department, Universidad de Concepcion, Concepcion, Chile"],"affiliations":[{"raw_affiliation_string":"Electrical Engineering Department, Universidad de Concepcion, Concepcion, Chile","institution_ids":["https://openalex.org/I172787465"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014336237","display_name":"Christian Vega Caicedo","orcid":"https://orcid.org/0000-0003-1730-8071"},"institutions":[{"id":"https://openalex.org/I172787465","display_name":"University of Concepci\u00f3n","ror":"https://ror.org/0460jpj73","country_code":"CL","type":"education","lineage":["https://openalex.org/I172787465"]}],"countries":["CL"],"is_corresponding":false,"raw_author_name":"C. Vega","raw_affiliation_strings":["Electrical Engineering Department, Universidad de Concepcion, Concepcion, Chile"],"affiliations":[{"raw_affiliation_string":"Electrical Engineering Department, Universidad de Concepcion, Concepcion, Chile","institution_ids":["https://openalex.org/I172787465"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034094232","display_name":"Jorge E. Pezoa","orcid":"https://orcid.org/0000-0002-5225-5334"},"institutions":[{"id":"https://openalex.org/I172787465","display_name":"University of Concepci\u00f3n","ror":"https://ror.org/0460jpj73","country_code":"CL","type":"education","lineage":["https://openalex.org/I172787465"]}],"countries":["CL"],"is_corresponding":false,"raw_author_name":"J. Pezoa","raw_affiliation_strings":["Electrical Engineering Department, Universidad de Concepcion, Concepcion, Chile"],"affiliations":[{"raw_affiliation_string":"Electrical Engineering Department, Universidad de Concepcion, Concepcion, Chile","institution_ids":["https://openalex.org/I172787465"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111360572","display_name":"C. Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I155781252","display_name":"University of South Carolina","ror":"https://ror.org/02b6qw903","country_code":"US","type":"education","lineage":["https://openalex.org/I155781252"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"C. Huang","raw_affiliation_strings":["Integrated Information Technology Department, University of South Carolina, Columbia, SC, USA"],"affiliations":[{"raw_affiliation_string":"Integrated Information Technology Department, University of South Carolina, Columbia, SC, USA","institution_ids":["https://openalex.org/I155781252"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086698147","display_name":"Deni Torres-Rom\u00e1n","orcid":"https://orcid.org/0000-0002-9813-7712"},"institutions":[{"id":"https://openalex.org/I19882861","display_name":"Northern New Mexico College","ror":"https://ror.org/01e94xy17","country_code":"US","type":"education","lineage":["https://openalex.org/I19882861"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"D. Torres","raw_affiliation_strings":["Department of Mathematics, Northern New Mexico College, Espanola, NM, USA"],"affiliations":[{"raw_affiliation_string":"Department of Mathematics, Northern New Mexico College, Espanola, NM, USA","institution_ids":["https://openalex.org/I19882861"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":9,"corresponding_author_ids":["https://openalex.org/A5058298121"],"corresponding_institution_ids":["https://openalex.org/I155781252"],"apc_list":null,"apc_paid":null,"fwci":0.5306,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.68393629,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9858999848365784,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.6294049620628357},{"id":"https://openalex.org/keywords/campus-network","display_name":"Campus network","score":0.5358513593673706},{"id":"https://openalex.org/keywords/ip-address","display_name":"Ip address","score":0.4888433814048767},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4814743101596832},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.48002901673316956},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.33691203594207764},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.26784372329711914},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.196272611618042},{"id":"https://openalex.org/keywords/thermodynamics","display_name":"Thermodynamics","score":0.1454591453075409}],"concepts":[{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.6294049620628357},{"id":"https://openalex.org/C2780944068","wikidata":"https://www.wikidata.org/wiki/Q1093877","display_name":"Campus network","level":2,"score":0.5358513593673706},{"id":"https://openalex.org/C2985371682","wikidata":"https://www.wikidata.org/wiki/Q11135","display_name":"Ip address","level":2,"score":0.4888433814048767},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4814743101596832},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.48002901673316956},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33691203594207764},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.26784372329711914},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.196272611618042},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.1454591453075409}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icc.2019.8761747","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2019.8761747","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2019 - 2019 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W623738445","https://openalex.org/W1976087243","https://openalex.org/W2037456702","https://openalex.org/W2053550965","https://openalex.org/W2099111195","https://openalex.org/W2113061123","https://openalex.org/W2141910941","https://openalex.org/W2143950972","https://openalex.org/W2155915275","https://openalex.org/W2464380181","https://openalex.org/W2478708596","https://openalex.org/W2603295249","https://openalex.org/W2755348785","https://openalex.org/W2766134102","https://openalex.org/W2786490145","https://openalex.org/W2792118822","https://openalex.org/W4295186723","https://openalex.org/W6743929116"],"related_works":["https://openalex.org/W2393607318","https://openalex.org/W2376596742","https://openalex.org/W2348743152","https://openalex.org/W2370665560","https://openalex.org/W2354652689","https://openalex.org/W2353508452","https://openalex.org/W2392061593","https://openalex.org/W2379819751","https://openalex.org/W2347989272","https://openalex.org/W2351412771"],"abstract_inverted_index":{"This":[0],"paper":[1],"presents":[2],"a":[3,8,34,70,75,95,114,162],"flow-based":[4],"entropy":[5,25,97,106,116,142,160,185],"characterization":[6,26,117],"of":[7,41,69,80,107,118,143,161,187],"small/medium-sized":[9],"campus":[10,49,52,82,109,148,150],"network":[11,14,36],"that":[12,38,129,134],"uses":[13],"address":[15],"translation":[16],"(NAT).":[17],"Although":[18],"most":[19],"networks":[20],"follow":[21],"this":[22,169],"configuration,":[23],"their":[24],"has":[27],"not":[28],"been":[29],"previously":[30],"studied.":[31],"Measurements":[32],"from":[33,88,136,168],"production":[35],"show":[37],"the":[39,67,78,81,105,108,119,137,141,144,159],"entropies":[40,62,79,133],"flow":[42,121,188],"elements":[43,122],"(external":[44],"IP":[45,50,110],"address,":[46,51],"external":[47,84],"port,":[48],"port)":[53],"and":[54,83,154,179],"tuples":[55],"have":[56],"particular":[57],"characteristics.":[58],"Findings":[59],"include:":[60],"i)":[61],"may":[63,86],"widely":[64],"vary":[65,87],"in":[66,74],"course":[68],"day.":[71],"For":[72],"example,":[73],"typical":[76],"weekday,":[77],"ports":[85],"below":[89],"0.2":[90],"to":[91,104],"above":[92],"0.8":[93],"(in":[94],"normalized":[96],"scale":[98],"0-1).":[99],"A":[100,166],"similar":[101],"observation":[102],"applies":[103],"address;":[111],"ii)":[112],"building":[113],"granular":[115],"individual":[120],"can":[123],"help":[124],"detect":[125],"anomalies.":[126],"Data":[127],"shows":[128],"certain":[130],"attacks":[131],"produce":[132],"deviate":[135],"expected":[138],"patterns;":[139],"iii)":[140],"3-tuple":[145],"{external":[146],"IP,":[147,149],"port}":[151],"is":[152,171],"high":[153],"consistent":[155],"over":[156],"time,":[157],"resembling":[158],"uniform":[163],"distribution's":[164],"variable.":[165],"deviation":[167],"pattern":[170],"an":[172],"encouraging":[173],"anomaly":[174],"indicator;":[175],"iv)":[176],"strong":[177],"negative":[178],"positive":[180],"correlations":[181],"exist":[182],"between":[183],"some":[184],"time-series":[186],"elements.":[189]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}