{"id":"https://openalex.org/W2997270780","doi":"https://doi.org/10.1109/icct46805.2019.8947103","title":"SAWANT: Smart Window Based Anomaly Detection Using Netflow Traffic","display_name":"SAWANT: Smart Window Based Anomaly Detection Using Netflow Traffic","publication_year":2019,"publication_date":"2019-10-01","ids":{"openalex":"https://openalex.org/W2997270780","doi":"https://doi.org/10.1109/icct46805.2019.8947103","mag":"2997270780"},"language":"en","primary_location":{"id":"doi:10.1109/icct46805.2019.8947103","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icct46805.2019.8947103","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE 19th International Conference on Communication Technology (ICCT)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067761049","display_name":"Mohammad Hashem Haghighat","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mohammad Hashem Haghighat","raw_affiliation_strings":["Department of Automation, Tsinghua University, Beijing, China","Tsinghua University, Department of Automation, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Automation, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua University, Department of Automation, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063381587","display_name":"Zohreh Abtahi Foroushani","orcid":null},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zohreh Abtahi Foroushani","raw_affiliation_strings":["Department of Automation, Tsinghua University, Beijing, China","Tsinghua University, Department of Automation, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Automation, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Tsinghua University, Department of Automation, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100361875","display_name":"Jun Li","orcid":"https://orcid.org/0000-0002-5308-5672"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jun Li","raw_affiliation_strings":["Research Institute of Information Technology Tsinghua University, Beijing, China","Research Institute of Information Technology, Tsinghua University, Beijing, China#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Research Institute of Information Technology Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"Research Institute of Information Technology, Tsinghua University, Beijing, China#TAB#","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I99065089"],"apc_list":null,"apc_paid":null,"fwci":1.4422,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.81501909,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1396","last_page":"1402"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.9798363447189331},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7653394341468811},{"id":"https://openalex.org/keywords/window","display_name":"Window (computing)","score":0.6196286082267761},{"id":"https://openalex.org/keywords/sliding-window-protocol","display_name":"Sliding window protocol","score":0.5935830473899841},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5772612690925598},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.4822740852832794},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.43136757612228394},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4262644648551941},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.41860127449035645},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.41242337226867676},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.41095319390296936},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.40283918380737305},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3485282063484192},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2876300513744354},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09097880125045776},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.08114230632781982}],"concepts":[{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.9798363447189331},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7653394341468811},{"id":"https://openalex.org/C2778751112","wikidata":"https://www.wikidata.org/wiki/Q835016","display_name":"Window (computing)","level":2,"score":0.6196286082267761},{"id":"https://openalex.org/C102392041","wikidata":"https://www.wikidata.org/wiki/Q592860","display_name":"Sliding window protocol","level":3,"score":0.5935830473899841},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5772612690925598},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.4822740852832794},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.43136757612228394},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4262644648551941},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.41860127449035645},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.41242337226867676},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.41095319390296936},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.40283918380737305},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3485282063484192},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2876300513744354},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09097880125045776},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.08114230632781982}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icct46805.2019.8947103","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icct46805.2019.8947103","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE 19th International Conference on Communication Technology (ICCT)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W1520068592","https://openalex.org/W1574447377","https://openalex.org/W1811853421","https://openalex.org/W1906479473","https://openalex.org/W1985987493","https://openalex.org/W2005162110","https://openalex.org/W2065042218","https://openalex.org/W2143612262","https://openalex.org/W2155883880","https://openalex.org/W2160815625","https://openalex.org/W2163605009","https://openalex.org/W2183397118","https://openalex.org/W2184045248","https://openalex.org/W2335999708","https://openalex.org/W2399941526","https://openalex.org/W2560162835","https://openalex.org/W2561257879","https://openalex.org/W2607252931","https://openalex.org/W2617931713","https://openalex.org/W2734140326","https://openalex.org/W2762776925","https://openalex.org/W2765633793","https://openalex.org/W2766315530","https://openalex.org/W2787944753","https://openalex.org/W2792023776","https://openalex.org/W2793130454","https://openalex.org/W2904644348","https://openalex.org/W4238294603","https://openalex.org/W6630999382","https://openalex.org/W6684191040"],"related_works":["https://openalex.org/W4230824443","https://openalex.org/W2038807247","https://openalex.org/W2184748140","https://openalex.org/W2097156747","https://openalex.org/W2110675786","https://openalex.org/W2559738661","https://openalex.org/W2052466667","https://openalex.org/W3120717340","https://openalex.org/W2567044960","https://openalex.org/W1679070068"],"abstract_inverted_index":{"Network":[0],"security":[1],"becomes":[2],"a":[3,33,65,75,127],"big":[4],"concern":[5],"nowadays.":[6],"Although":[7],"many":[8],"solutions":[9],"have":[10],"been":[11],"developed":[12],"to":[13,41,53,74,79],"detect":[14,42],"network":[15,46],"anomalies,":[16],"the":[17,88,95,101],"number":[18,130],"of":[19,45,83,90,118,131],"successful":[20],"attacks":[21],"like":[22],"DDoS,":[23],"Phishing,":[24],"and":[25],"Spam":[26],"are":[27,62,71],"boosting":[28],"dramatically.":[29],"In":[30],"this":[31],"paper,":[32],"novel":[34],"behavior-based":[35],"method,":[36],"called":[37],"SAWANT,":[38],"is":[39],"proposed":[40],"malicious":[43,81,120],"rate":[44,82,89],"traffic.":[47],"SAWANT":[48,110],"uses":[49],"deep":[50,76],"learning":[51,77],"architecture":[52],"analyze":[54],"netflow":[55,92],"data,":[56],"in":[57],"which":[58],"several":[59],"meaningful":[60],"attributes":[61,70],"extracted":[63],"using":[64],"sliding":[66],"window":[67,96],"technique.":[68],"Extracted":[69],"then":[72],"taken":[73],"structure":[78],"identify":[80],"each":[84],"window,":[85],"that":[86,109],"represents":[87],"abnormal":[91],"records":[93,132],"per":[94],"size.":[97],"Experimental":[98],"results":[99],"over":[100],"well-known":[102],"labeled":[103],"botnet":[104],"traffic":[105],"CTU":[106],"13":[107],"showed":[108],"was":[111],"highly":[112],"accurate":[113],"as":[114],"more":[115],"than":[116],"99%":[117],"predicted":[119],"rates":[121],"were":[122],"correct,":[123],"while":[124],"it":[125],"required":[126],"very":[128],"small":[129],"for":[133],"training.":[134]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}