{"id":"https://openalex.org/W2520656861","doi":"https://doi.org/10.1109/icccn.2016.7568527","title":"Heavy Hitter Detection and Identification in Software Defined Networking","display_name":"Heavy Hitter Detection and Identification in Software Defined Networking","publication_year":2016,"publication_date":"2016-08-01","ids":{"openalex":"https://openalex.org/W2520656861","doi":"https://doi.org/10.1109/icccn.2016.7568527","mag":"2520656861"},"language":"en","primary_location":{"id":"doi:10.1109/icccn.2016.7568527","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icccn.2016.7568527","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 25th International Conference on Computer Communication and Networks (ICCCN)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064075736","display_name":"Liang Yang","orcid":"https://orcid.org/0000-0002-5051-8815"},"institutions":[{"id":"https://openalex.org/I41156924","display_name":"Victoria University of Wellington","ror":"https://ror.org/0040r6f76","country_code":"NZ","type":"education","lineage":["https://openalex.org/I41156924"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Liang Yang","raw_affiliation_strings":["School of Engineering and Computer Science, Victoria University of Wellington, Wellington, New Zealand"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Engineering and Computer Science, Victoria University of Wellington, Wellington, New Zealand","institution_ids":["https://openalex.org/I41156924"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090048437","display_name":"Bryan Ng","orcid":"https://orcid.org/0000-0001-5180-8331"},"institutions":[{"id":"https://openalex.org/I41156924","display_name":"Victoria University of Wellington","ror":"https://ror.org/0040r6f76","country_code":"NZ","type":"education","lineage":["https://openalex.org/I41156924"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Bryan Ng","raw_affiliation_strings":["School of Engineering and Computer Science, Victoria University of Wellington, Wellington, New Zealand"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Engineering and Computer Science, Victoria University of Wellington, Wellington, New Zealand","institution_ids":["https://openalex.org/I41156924"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036767777","display_name":"Winston K.G. Seah","orcid":"https://orcid.org/0000-0001-7147-5167"},"institutions":[{"id":"https://openalex.org/I41156924","display_name":"Victoria University of Wellington","ror":"https://ror.org/0040r6f76","country_code":"NZ","type":"education","lineage":["https://openalex.org/I41156924"]}],"countries":["NZ"],"is_corresponding":false,"raw_author_name":"Winston K. G. Seah","raw_affiliation_strings":["School of Engineering and Computer Science, Victoria University of Wellington, Wellington, New Zealand"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Engineering and Computer Science, Victoria University of Wellington, Wellington, New Zealand","institution_ids":["https://openalex.org/I41156924"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I41156924"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":26,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8144873380661011},{"id":"https://openalex.org/keywords/openflow","display_name":"OpenFlow","score":0.7918208837509155},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.7113831043243408},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6471523642539978},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.6425148248672485},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.5812627077102661},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5091270804405212},{"id":"https://openalex.org/keywords/volume","display_name":"Volume (thermodynamics)","score":0.5063499212265015},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5060097575187683},{"id":"https://openalex.org/keywords/network-monitoring","display_name":"Network monitoring","score":0.4933680593967438},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.47350651025772095},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.4534660577774048},{"id":"https://openalex.org/keywords/table","display_name":"Table (database)","score":0.4376864433288574},{"id":"https://openalex.org/keywords/network-traffic-control","display_name":"Network traffic control","score":0.4343835115432739},{"id":"https://openalex.org/keywords/port","display_name":"Port (circuit theory)","score":0.4306427836418152},{"id":"https://openalex.org/keywords/traffic-shaping","display_name":"Traffic shaping","score":0.42974719405174255},{"id":"https://openalex.org/keywords/traffic-generation-model","display_name":"Traffic generation model","score":0.4227047562599182},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3942891061306},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.14708375930786133},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14242419600486755}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8144873380661011},{"id":"https://openalex.org/C192697461","wikidata":"https://www.wikidata.org/wiki/Q4045918","display_name":"OpenFlow","level":3,"score":0.7918208837509155},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.7113831043243408},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6471523642539978},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.6425148248672485},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.5812627077102661},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5091270804405212},{"id":"https://openalex.org/C20556612","wikidata":"https://www.wikidata.org/wiki/Q4469374","display_name":"Volume (thermodynamics)","level":2,"score":0.5063499212265015},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5060097575187683},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.4933680593967438},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.47350651025772095},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4534660577774048},{"id":"https://openalex.org/C45235069","wikidata":"https://www.wikidata.org/wiki/Q278425","display_name":"Table (database)","level":2,"score":0.4376864433288574},{"id":"https://openalex.org/C201100257","wikidata":"https://www.wikidata.org/wiki/Q393287","display_name":"Network traffic control","level":3,"score":0.4343835115432739},{"id":"https://openalex.org/C32802771","wikidata":"https://www.wikidata.org/wiki/Q2443617","display_name":"Port (circuit theory)","level":2,"score":0.4306427836418152},{"id":"https://openalex.org/C46451311","wikidata":"https://www.wikidata.org/wiki/Q262550","display_name":"Traffic shaping","level":4,"score":0.42974719405174255},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.4227047562599182},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3942891061306},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.14708375930786133},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14242419600486755},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icccn.2016.7568527","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icccn.2016.7568527","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 25th International Conference on Computer Communication and Networks (ICCCN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1367232","https://openalex.org/W1499049447","https://openalex.org/W1608332342","https://openalex.org/W1769222792","https://openalex.org/W1858168446","https://openalex.org/W1965972569","https://openalex.org/W1977141583","https://openalex.org/W1995484833","https://openalex.org/W2030102079","https://openalex.org/W2048110401","https://openalex.org/W2053550965","https://openalex.org/W2062832101","https://openalex.org/W2085849301","https://openalex.org/W2098366185","https://openalex.org/W2105047865","https://openalex.org/W2110704543","https://openalex.org/W2142099410","https://openalex.org/W2142244319","https://openalex.org/W2157895134","https://openalex.org/W2157963538","https://openalex.org/W2169927847","https://openalex.org/W2542641847","https://openalex.org/W4206137901","https://openalex.org/W6600060985","https://openalex.org/W6637995443","https://openalex.org/W6639080731"],"related_works":["https://openalex.org/W2612238703","https://openalex.org/W2362416893","https://openalex.org/W2369087827","https://openalex.org/W2949949254","https://openalex.org/W2061862347","https://openalex.org/W2110595875","https://openalex.org/W2140139251","https://openalex.org/W2391622324","https://openalex.org/W2035170846","https://openalex.org/W2421597544"],"abstract_inverted_index":{"In":[0],"a":[1,77,167,171],"large":[2],"network,":[3],"it":[4,129],"is":[5,33,122],"often":[6,40],"important":[7],"to":[8,11,36,61,108,180],"be":[9],"able":[10],"detect":[12],"high-volume":[13],"traffic":[14,29,88,98,141],"in":[15,56],"near":[16],"real-time.":[17],"Existing":[18],"work":[19],"on":[20,42,84,96,166],"the":[21,68,120,138,155],"detection":[22,81,147,164,183],"and":[23,39,90,103,136,140,148,157,188],"identification":[24,149],"of":[25,58,70,150,159],"such":[26],"high":[27],"volume":[28],"(so-called":[30],"heavy":[31,79,110,151,162,181],"hitters)":[32],"typically":[34],"delegated":[35],"individual":[37],"nodes":[38],"relies":[41,95],"deep":[43],"packet":[44,47],"inspection":[45],"and/or":[46],"sampling.":[48],"However,":[49],"these":[50],"techniques":[51],"have":[52],"well":[53],"known":[54],"limitations":[55],"terms":[57],"its":[59],"ability":[60],"scale":[62],"with":[63,125,132],"network":[64,134],"size.":[65],"Inspired":[66],"by":[67],"capabilities":[69],"Software":[71],"Defined":[72],"Networking":[73],"(SDN),":[74],"we":[75],"explore":[76],"novel":[78],"hitter":[80,111,163,182],"solution":[82],"based":[83],"understanding":[85],"connections":[86],"between":[87],"statistics":[89,99,142],"OpenFlow":[91],"rules.":[92],"Our":[93],"approach":[94,117,179],"mining":[97],"(e.g.":[100],"port":[101],"bitrate)":[102],"forwarding":[104],"table":[105],"entry":[106],"(FTE)":[107],"improve":[109],"detection.":[112],"The":[113,173],"rationale":[114],"behind":[115],"this":[116],"are":[118],"(i)":[119],"information":[121],"readily":[123],"available":[124],"minimal":[126],"overheads,":[127],"thus":[128],"scales":[130],"better":[131],"increasing":[133],"size;":[135],"(ii)":[137],"FTEs":[139],"provide":[143],"different":[144],"vantage":[145],"for":[146],"hitters.":[152],"We":[153],"evaluate":[154],"effectiveness":[156],"accuracy":[158,187],"our":[160,178],"proposed":[161],"algorithm":[165],"test":[168,174],"bed":[169],"as":[170],"proof-of-concept.":[172],"results":[175],"show":[176],"that":[177],"simultaneously":[184],"achieves":[185],"considerable":[186],"good":[189],"scalability.":[190]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":5},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":7},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}