{"id":"https://openalex.org/W3108307243","doi":"https://doi.org/10.1109/icnp49622.2020.9259349","title":"Poster: Speeding Up Network Intrusion Detection","display_name":"Poster: Speeding Up Network Intrusion Detection","publication_year":2020,"publication_date":"2020-10-13","ids":{"openalex":"https://openalex.org/W3108307243","doi":"https://doi.org/10.1109/icnp49622.2020.9259349","mag":"3108307243"},"language":"en","primary_location":{"id":"doi:10.1109/icnp49622.2020.9259349","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icnp49622.2020.9259349","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE 28th International Conference on Network Protocols (ICNP)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014872058","display_name":"Jo\u00e3o Romeiras Amado","orcid":"https://orcid.org/0000-0001-5644-4397"},"institutions":[{"id":"https://openalex.org/I203847022","display_name":"Instituto Polit\u00e9cnico de Lisboa","ror":"https://ror.org/04ea70f07","country_code":"PT","type":"education","lineage":["https://openalex.org/I203847022"]},{"id":"https://openalex.org/I141596103","display_name":"University of Lisbon","ror":"https://ror.org/01c27hj86","country_code":"PT","type":"education","lineage":["https://openalex.org/I141596103"]}],"countries":["PT"],"is_corresponding":true,"raw_author_name":"Joao Romeiras Amado","raw_affiliation_strings":["Instituto Superior T\u00e9cnico, Universidade de Lisboa, Lisbon, Portugal"],"affiliations":[{"raw_affiliation_string":"Instituto Superior T\u00e9cnico, Universidade de Lisboa, Lisbon, Portugal","institution_ids":["https://openalex.org/I203847022","https://openalex.org/I141596103"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000789304","display_name":"Salvatore Signorello","orcid":"https://orcid.org/0000-0001-6628-0541"},"institutions":[{"id":"https://openalex.org/I141596103","display_name":"University of Lisbon","ror":"https://ror.org/01c27hj86","country_code":"PT","type":"education","lineage":["https://openalex.org/I141596103"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Salvatore Signorello","raw_affiliation_strings":["Faculdade de Ci\u00eancias, Universidade de Lisboa, Lisbon, Portugal"],"affiliations":[{"raw_affiliation_string":"Faculdade de Ci\u00eancias, Universidade de Lisboa, Lisbon, Portugal","institution_ids":["https://openalex.org/I141596103"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016455665","display_name":"Miguel Correia","orcid":"https://orcid.org/0000-0001-7873-5531"},"institutions":[{"id":"https://openalex.org/I203847022","display_name":"Instituto Polit\u00e9cnico de Lisboa","ror":"https://ror.org/04ea70f07","country_code":"PT","type":"education","lineage":["https://openalex.org/I203847022"]},{"id":"https://openalex.org/I141596103","display_name":"University of Lisbon","ror":"https://ror.org/01c27hj86","country_code":"PT","type":"education","lineage":["https://openalex.org/I141596103"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Miguel Correia","raw_affiliation_strings":["Instituto Superior T\u00e9cnico, Universidade de Lisboa, Lisbon, Portugal"],"affiliations":[{"raw_affiliation_string":"Instituto Superior T\u00e9cnico, Universidade de Lisboa, Lisbon, Portugal","institution_ids":["https://openalex.org/I203847022","https://openalex.org/I141596103"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063574513","display_name":"Fernando M. V. Ramos","orcid":"https://orcid.org/0000-0003-3585-8587"},"institutions":[{"id":"https://openalex.org/I203847022","display_name":"Instituto Polit\u00e9cnico de Lisboa","ror":"https://ror.org/04ea70f07","country_code":"PT","type":"education","lineage":["https://openalex.org/I203847022"]},{"id":"https://openalex.org/I141596103","display_name":"University of Lisbon","ror":"https://ror.org/01c27hj86","country_code":"PT","type":"education","lineage":["https://openalex.org/I141596103"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Fernando Ramos","raw_affiliation_strings":["Instituto Superior T\u00e9cnico, Universidade de Lisboa, Lisbon, Portugal"],"affiliations":[{"raw_affiliation_string":"Instituto Superior T\u00e9cnico, Universidade de Lisboa, Lisbon, Portugal","institution_ids":["https://openalex.org/I203847022","https://openalex.org/I141596103"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5014872058"],"corresponding_institution_ids":["https://openalex.org/I141596103","https://openalex.org/I203847022"],"apc_list":null,"apc_paid":null,"fwci":0.1542,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.54142469,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"13","issue":null,"first_page":"1","last_page":"2"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8125121593475342},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.7287871241569519},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6689810156822205},{"id":"https://openalex.org/keywords/sketch","display_name":"Sketch","score":0.6596698760986328},{"id":"https://openalex.org/keywords/forwarding-plane","display_name":"Forwarding plane","score":0.6086574196815491},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.46003398299217224},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.45654889941215515},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4474749267101288},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.44735750555992126},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4456685483455658},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3797849118709564},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2526007890701294},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.11486509442329407},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.08059641718864441}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8125121593475342},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.7287871241569519},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6689810156822205},{"id":"https://openalex.org/C2779231336","wikidata":"https://www.wikidata.org/wiki/Q7534724","display_name":"Sketch","level":2,"score":0.6596698760986328},{"id":"https://openalex.org/C10597312","wikidata":"https://www.wikidata.org/wiki/Q5473302","display_name":"Forwarding plane","level":3,"score":0.6086574196815491},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.46003398299217224},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45654889941215515},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4474749267101288},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.44735750555992126},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4456685483455658},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3797849118709564},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2526007890701294},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.11486509442329407},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.08059641718864441}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icnp49622.2020.9259349","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icnp49622.2020.9259349","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE 28th International Conference on Network Protocols (ICNP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W1858168446","https://openalex.org/W2134519279","https://openalex.org/W2342408547","https://openalex.org/W2501089562","https://openalex.org/W2930144424","https://openalex.org/W4253731216","https://openalex.org/W6639080731"],"related_works":["https://openalex.org/W2378994405","https://openalex.org/W2385974820","https://openalex.org/W2373478030","https://openalex.org/W2378679551","https://openalex.org/W3149739944","https://openalex.org/W2392363776","https://openalex.org/W2063051341","https://openalex.org/W2591066345","https://openalex.org/W1494563618","https://openalex.org/W2357022711"],"abstract_inverted_index":{"Modern":[0],"network":[1,42,52],"data":[2,23],"planes":[3],"have":[4],"enabled":[5],"new":[6],"measurement":[7,38,67],"approaches,":[8],"including":[9],"efficient":[10],"sketch-based":[11],"techniques":[12],"with":[13],"provable":[14],"trade-offs":[15],"between":[16],"memory":[17],"and":[18,69],"accuracy,":[19],"directly":[20],"in":[21,118],"the":[22,31,74],"plane,":[24],"at":[25],"line":[26],"rate.":[27],"We":[28],"thus":[29],"ask":[30],"question:":[32],"can":[33],"one":[34],"leverage":[35],"this":[36],"richer":[37],"plane":[39],"to":[40,55,73,89,96,107,114],"improve":[41],"intrusion":[43],"detection?":[44],"Our":[45],"answer":[46],"is":[47],"SPID,":[48],"a":[49,63,90],"push-based,":[50],"feature-rich":[51],"monitoring":[53,75],"approach":[54],"assist":[56],"learning-based":[57],"attack":[58,109],"detection.":[59],"SPID":[60,105],"switches":[61],"run":[62],"diverse":[64],"set":[65],"of":[66],"primitives":[68],"proactively":[70],"push":[71],"measurements":[72,82],"system":[76],"when":[77,112],"relevant":[78],"changes":[79],"occur.":[80,102],"Network":[81],"are":[83],"then":[84],"fed":[85],"as":[86,100],"input":[87],"features":[88],"classifier":[91],"based":[92],"on":[93],"unsupervised":[94],"learning":[95],"detect":[97],"ongoing":[98],"attacks,":[99],"they":[101],"In":[103],"consequence,":[104],"aims":[106],"reduce":[108],"detection":[110],"time,":[111],"comparing":[113],"existing":[115],"solutions":[116],"present":[117],"large":[119],"scale":[120],"networks.":[121]},"counts_by_year":[{"year":2022,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}