{"id":"https://openalex.org/W3134301561","doi":"https://doi.org/10.1109/icce-berlin50680.2020.9352164","title":"Detecting DDoS Attacks Near The Edge with Router Canaries","display_name":"Detecting DDoS Attacks Near The Edge with Router Canaries","publication_year":2020,"publication_date":"2020-11-09","ids":{"openalex":"https://openalex.org/W3134301561","doi":"https://doi.org/10.1109/icce-berlin50680.2020.9352164","mag":"3134301561"},"language":"en","primary_location":{"id":"doi:10.1109/icce-berlin50680.2020.9352164","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icce-berlin50680.2020.9352164","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE 10th International Conference on Consumer Electronics (ICCE-Berlin)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002111017","display_name":"Winston Howard","orcid":null},"institutions":[{"id":"https://openalex.org/I12834331","display_name":"University of Wyoming","ror":"https://ror.org/01485tq96","country_code":"US","type":"education","lineage":["https://openalex.org/I12834331"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Winston Howard","raw_affiliation_strings":["University of Wyoming,Department of Computer Science,Laramie,WY,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wyoming,Department of Computer Science,Laramie,WY,USA","institution_ids":["https://openalex.org/I12834331"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086398848","display_name":"Mike Borowczak","orcid":"https://orcid.org/0000-0001-9409-8245"},"institutions":[{"id":"https://openalex.org/I12834331","display_name":"University of Wyoming","ror":"https://ror.org/01485tq96","country_code":"US","type":"education","lineage":["https://openalex.org/I12834331"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mike Borowczak","raw_affiliation_strings":["University of Wyoming,Department of Computer Science,Laramie,WY,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wyoming,Department of Computer Science,Laramie,WY,USA","institution_ids":["https://openalex.org/I12834331"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.3241,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.6537621,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"4","issue":null,"first_page":"1","last_page":"4"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8885480165481567},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7990058660507202},{"id":"https://openalex.org/keywords/router","display_name":"Router","score":0.6725530624389648},{"id":"https://openalex.org/keywords/python","display_name":"Python (programming language)","score":0.5815328359603882},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5157649517059326},{"id":"https://openalex.org/keywords/trinoo","display_name":"Trinoo","score":0.5122537016868591},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.4967389702796936},{"id":"https://openalex.org/keywords/edge-device","display_name":"Edge device","score":0.4855060577392578},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.46740108728408813},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.4353524148464203},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4042506515979767},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.290503591299057},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.19291621446609497},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.12679359316825867}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8885480165481567},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7990058660507202},{"id":"https://openalex.org/C2775896111","wikidata":"https://www.wikidata.org/wiki/Q642560","display_name":"Router","level":2,"score":0.6725530624389648},{"id":"https://openalex.org/C519991488","wikidata":"https://www.wikidata.org/wiki/Q28865","display_name":"Python (programming language)","level":2,"score":0.5815328359603882},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5157649517059326},{"id":"https://openalex.org/C43639116","wikidata":"https://www.wikidata.org/wiki/Q7843050","display_name":"Trinoo","level":5,"score":0.5122537016868591},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.4967389702796936},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.4855060577392578},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.46740108728408813},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4353524148464203},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4042506515979767},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.290503591299057},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.19291621446609497},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.12679359316825867},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icce-berlin50680.2020.9352164","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icce-berlin50680.2020.9352164","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE 10th International Conference on Consumer Electronics (ICCE-Berlin)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6299999952316284,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W1577498723","https://openalex.org/W1789057254","https://openalex.org/W1965343849","https://openalex.org/W1979908518","https://openalex.org/W2037515642","https://openalex.org/W2068803497","https://openalex.org/W2119227347","https://openalex.org/W2137345105","https://openalex.org/W2146189323","https://openalex.org/W2157366001","https://openalex.org/W2163375756","https://openalex.org/W2346331195","https://openalex.org/W2963879636","https://openalex.org/W4295774880","https://openalex.org/W6638062720","https://openalex.org/W6680741580","https://openalex.org/W6683238159"],"related_works":["https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W1968168724","https://openalex.org/W2204131204","https://openalex.org/W2754163055","https://openalex.org/W4322008378","https://openalex.org/W2383770723","https://openalex.org/W2186749541","https://openalex.org/W2360429410","https://openalex.org/W4256682929"],"abstract_inverted_index":{"As":[0],"consumers":[1],"place":[2],"more":[3,170],"devices":[4,61,79,85],"within":[5],"their":[6],"local":[7,89],"networks":[8],"the":[9,25,43,53,107,146],"ability":[10],"to":[11,24,29,48,93,115,134],"detect":[12,49,156],"and":[13,32,64,117,173],"disrupt":[14],"Distributed":[15],"Denial":[16],"of":[17,55,70,77,106,145],"Service":[18],"(DDoS)":[19],"attacks":[20,51,82,159],"must":[21],"move":[22,37],"closer":[23],"edge":[26,44,60],"in":[27,113],"order":[28,92,114],"provide":[30],"resilient":[31],"effective":[33],"decentralized":[34],"protection.":[35],"To":[36],"detection":[38,125,137],"from":[39,86],"centralized":[40,130],"entities":[41],"towards":[42],"a":[45,75],"distributed":[46,123,151],"technique":[47],"DDoS":[50,158],"through":[52],"use":[54],"entropy-based":[56,120,124,152],"canaries":[57,153],"located":[58],"near":[59],"(e.g.,":[62],"switches,":[63],"routers)":[65],"is":[66,73,132],"proposed.":[67],"The":[68],"benefit":[69],"this":[71,95],"approach":[72,96],"that":[74],"set":[76],"infrastructure":[78],"could":[80],"prevent":[81],"using":[83,169],"hijacked":[84],"ever":[87],"leaving":[88],"networks.":[90],"In":[91],"evaluate":[94],"an":[97],"open-source":[98],"Python":[99],"software":[100],"package":[101],"was":[102],"built":[103],"on":[104,128],"top":[105],"Common":[108],"Open":[109],"Research":[110],"Emulator":[111],"(CORE)":[112],"simulate":[116],"assess":[118],"these":[119,150,163],"canaries.":[121],"This":[122],"technique,":[126],"based":[127],"prior":[129],"entropy-techniques,":[131],"able":[133],"achieve":[135],"100%":[136],"rate":[138],"even":[139],"when":[140],"attacker-node":[141],"comprise":[142],"only":[143],"25%":[144],"total":[147],"nodes.":[148],"While":[149],"can":[154],"rapidly":[155],"simulated":[157],"with":[160],"high":[161],"accuracy":[162],"preliminary":[164],"results":[165],"motivate":[166],"future":[167],"investigation":[168],"diverse":[171],"typologies":[172],"real-world":[174],"data.":[175]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}
