{"id":"https://openalex.org/W3045721717","doi":"https://doi.org/10.1109/icc40277.2020.9149043","title":"Machine-learning-assisted DDoS attack detection with P4 language","display_name":"Machine-learning-assisted DDoS attack detection with P4 language","publication_year":2020,"publication_date":"2020-06-01","ids":{"openalex":"https://openalex.org/W3045721717","doi":"https://doi.org/10.1109/icc40277.2020.9149043","mag":"3045721717"},"language":"en","primary_location":{"id":"doi:10.1109/icc40277.2020.9149043","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc40277.2020.9149043","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2020 - 2020 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/11311/1156520","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042021806","display_name":"Francesco Musumeci","orcid":"https://orcid.org/0000-0002-3617-5916"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Francesco Musumeci","raw_affiliation_strings":["Politecnico di Milano, Milan, Italy"],"affiliations":[{"raw_affiliation_string":"Politecnico di Milano, Milan, Italy","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043876794","display_name":"Valentina Ionata","orcid":null},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Valentina Ionata","raw_affiliation_strings":["Politecnico di Milano, Milan, Italy"],"affiliations":[{"raw_affiliation_string":"Politecnico di Milano, Milan, Italy","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056608707","display_name":"Francesco Paolucci","orcid":"https://orcid.org/0000-0003-4821-5193"},"institutions":[{"id":"https://openalex.org/I162290304","display_name":"Scuola Superiore Sant'Anna","ror":"https://ror.org/025602r80","country_code":"IT","type":"education","lineage":["https://openalex.org/I162290304"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Francesco Paolucci","raw_affiliation_strings":["Scuola Superiore Sant\u2019Anna, Pisa, Italy","Scuola Superiore Sant'Anna, Pisa, Italy"],"affiliations":[{"raw_affiliation_string":"Scuola Superiore Sant\u2019Anna, Pisa, Italy","institution_ids":["https://openalex.org/I162290304"]},{"raw_affiliation_string":"Scuola Superiore Sant'Anna, Pisa, Italy","institution_ids":["https://openalex.org/I162290304"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033393833","display_name":"Filippo Cugini","orcid":"https://orcid.org/0000-0002-9840-0365"},"institutions":[{"id":"https://openalex.org/I4210099310","display_name":"Consorzio Nazionale Interuniversitario per le Telecomunicazioni","ror":"https://ror.org/0182a5n39","country_code":"IT","type":"funder","lineage":["https://openalex.org/I4210099310"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Filippo Cugini","raw_affiliation_strings":["Consorzio Nazionale Interuniversitario per le Telecomunicazioni (CNIT), Pisa, Italy"],"affiliations":[{"raw_affiliation_string":"Consorzio Nazionale Interuniversitario per le Telecomunicazioni (CNIT), Pisa, Italy","institution_ids":["https://openalex.org/I4210099310"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038468421","display_name":"Massimo Tornatore","orcid":"https://orcid.org/0000-0003-0740-1061"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Massimo Tornatore","raw_affiliation_strings":["Politecnico di Milano, Milan, Italy"],"affiliations":[{"raw_affiliation_string":"Politecnico di Milano, Milan, Italy","institution_ids":["https://openalex.org/I93860229"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5042021806"],"corresponding_institution_ids":["https://openalex.org/I93860229"],"apc_list":null,"apc_paid":null,"fwci":8.0173,"has_fulltext":false,"cited_by_count":75,"citation_normalized_percentile":{"value":0.97749169,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8700633645057678},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.841985821723938},{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.7567611932754517},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6964800953865051},{"id":"https://openalex.org/keywords/forwarding-plane","display_name":"Forwarding plane","score":0.6640547513961792},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.5958942770957947},{"id":"https://openalex.org/keywords/header","display_name":"Header","score":0.5860412120819092},{"id":"https://openalex.org/keywords/openflow","display_name":"OpenFlow","score":0.5258952975273132},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.524412989616394},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5228258371353149},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.5187144875526428},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5077108144760132},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4621051251888275},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.4310990273952484},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2985558807849884},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2395593225955963},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.20026671886444092},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.09499508142471313}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8700633645057678},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.841985821723938},{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.7567611932754517},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6964800953865051},{"id":"https://openalex.org/C10597312","wikidata":"https://www.wikidata.org/wiki/Q5473302","display_name":"Forwarding plane","level":3,"score":0.6640547513961792},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.5958942770957947},{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.5860412120819092},{"id":"https://openalex.org/C192697461","wikidata":"https://www.wikidata.org/wiki/Q4045918","display_name":"OpenFlow","level":3,"score":0.5258952975273132},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.524412989616394},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5228258371353149},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.5187144875526428},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5077108144760132},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4621051251888275},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.4310990273952484},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2985558807849884},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2395593225955963},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.20026671886444092},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.09499508142471313},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/icc40277.2020.9149043","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc40277.2020.9149043","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2020 - 2020 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"},{"id":"pmh:oai:re.public.polimi.it:11311/1156520","is_oa":true,"landing_page_url":"http://hdl.handle.net/11311/1156520","pdf_url":null,"source":{"id":"https://openalex.org/S4306400312","display_name":"Virtual Community of Pathological Anatomy (University of Castilla La Mancha)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79189158","host_organization_name":"University of Castilla-La Mancha","host_organization_lineage":["https://openalex.org/I79189158"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:re.public.polimi.it:11311/1156520","is_oa":true,"landing_page_url":"http://hdl.handle.net/11311/1156520","pdf_url":null,"source":{"id":"https://openalex.org/S4306400312","display_name":"Virtual Community of Pathological Anatomy (University of Castilla La Mancha)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79189158","host_organization_name":"University of Castilla-La Mancha","host_organization_lineage":["https://openalex.org/I79189158"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[{"score":0.6499999761581421,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W1496514203","https://openalex.org/W1554944419","https://openalex.org/W1994926493","https://openalex.org/W2040340473","https://openalex.org/W2162830356","https://openalex.org/W2162969618","https://openalex.org/W2171033594","https://openalex.org/W2536964097","https://openalex.org/W2548015322","https://openalex.org/W2625013748","https://openalex.org/W2761635340","https://openalex.org/W2892092361","https://openalex.org/W2898182615","https://openalex.org/W2940715617","https://openalex.org/W2963320092","https://openalex.org/W6633435507","https://openalex.org/W6762132567"],"related_works":["https://openalex.org/W2809541058","https://openalex.org/W2051935741","https://openalex.org/W2055658744","https://openalex.org/W2891274976","https://openalex.org/W1989064996","https://openalex.org/W2926903444","https://openalex.org/W4243609393","https://openalex.org/W2305888825","https://openalex.org/W2949881910","https://openalex.org/W4301858902"],"abstract_inverted_index":{"While":[0],"Software":[1],"Defined":[2],"Networking":[3],"(SDN)":[4],"provides":[5],"well-known":[6],"advantages":[7],"in":[8,55,119,147,167],"terms":[9,120,148],"of":[10,28,48,74,90,121,149],"network":[11,33],"automation,":[12],"flexibility":[13],"and":[14,114,124,131,175],"resources":[15],"utilization,":[16],"it":[17],"has":[18],"been":[19],"observed":[20],"that":[21],"SDN":[22,92],"controllers":[23],"may":[24],"represent":[25],"critical":[26],"points":[27],"failure":[29],"for":[30,152],"the":[31,83,91,153,164],"entire":[32],"infrastructure,":[34],"especially":[35],"when":[36,184],"they":[37],"are":[38,158],"targeted":[39],"by":[40,65],"malicious":[41],"cyber":[42],"attacks":[43],"such":[44],"as":[45,63,100],"Distributed":[46],"Denial":[47],"Service":[49],"(DDoS).":[50],"To":[51],"address":[52],"this":[53,56],"issue,":[54],"paper":[57],"we":[58,105,128,145],"exploit":[59],"stateful":[60,133],"data":[61,84,134],"planes,":[62],"enabled":[64],"P4":[66,185],"programming":[67],"language,":[68],"where":[69,160],"switches":[70,162],"maintain":[71],"persistent":[72],"memory":[73],"handled":[75],"packets":[76,166],"to":[77,136],"perform":[78,106],"attack":[79,108,141],"detection":[80,103,109,142],"directly":[81],"at":[82],"plane,":[85],"with":[86],"only":[87],"marginal":[88],"involvement":[89],"controllers.":[93],"As":[94],"machine":[95],"learning":[96],"(ML)":[97],"is":[98,186],"recognized":[99],"primary":[101],"anomaly":[102],"methodology,":[104],"DDoS":[107,140],"using":[110],"a":[111,138],"MLbased":[112],"classification":[113,122],"compare":[115],"different":[116,168],"ML":[117,130],"algorithms":[118],"accuracy":[123],"train/test":[125],"duration.":[126],"Moreover,":[127],"combine":[129],"P4-enab1ed":[132,161],"planes":[135],"design":[137],"real-time":[139,156],"module,":[143],"which":[144],"evaluate":[146],"latency":[150,182],"required":[151],"detection.":[154],"Three":[155],"scenarios":[157],"considered,":[159],"elaborate":[163],"received":[165],"ways,":[169],"namely,":[170],"packet":[171],"mirroring,":[172,174],"header":[173],"P4-metadata":[176],"extraction.":[177],"Numerical":[178],"results":[179],"show":[180],"significant":[181],"reduction":[183],"adopted.":[187]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":19},{"year":2022,"cited_by_count":15},{"year":2021,"cited_by_count":18}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}