{"id":"https://openalex.org/W4410359233","doi":"https://doi.org/10.1109/icoin63865.2025.10992901","title":"Two-Level Detection Method of DDoS Attack Mimicking CDN Caches","display_name":"Two-Level Detection Method of DDoS Attack Mimicking CDN Caches","publication_year":2025,"publication_date":"2025-01-15","ids":{"openalex":"https://openalex.org/W4410359233","doi":"https://doi.org/10.1109/icoin63865.2025.10992901"},"language":"en","primary_location":{"id":"doi:10.1109/icoin63865.2025.10992901","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icoin63865.2025.10992901","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Conference on Information Networking (ICOIN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004688878","display_name":"Kazuya Taniguchi","orcid":null},"institutions":[{"id":"https://openalex.org/I135768898","display_name":"Ritsumeikan University","ror":"https://ror.org/0197nmd03","country_code":"JP","type":"education","lineage":["https://openalex.org/I135768898","https://openalex.org/I4390039241"]}],"countries":["JP"],"is_corresponding":true,"raw_author_name":"Kazuya Taniguchi","raw_affiliation_strings":["Ritsumeikan University,Graduate School of Information Science and Engineering,Osaka,Japan,567-8570"],"affiliations":[{"raw_affiliation_string":"Ritsumeikan University,Graduate School of Information Science and Engineering,Osaka,Japan,567-8570","institution_ids":["https://openalex.org/I135768898"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101539765","display_name":"Noriaki Kamiyama","orcid":"https://orcid.org/0009-0006-9881-3780"},"institutions":[{"id":"https://openalex.org/I135768898","display_name":"Ritsumeikan University","ror":"https://ror.org/0197nmd03","country_code":"JP","type":"education","lineage":["https://openalex.org/I135768898","https://openalex.org/I4390039241"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Noriaki Kamiyama","raw_affiliation_strings":["Ritsumeikan University,College of Information Science and Engineering,Osaka,Japan,567-8570"],"affiliations":[{"raw_affiliation_string":"Ritsumeikan University,College of Information Science and Engineering,Osaka,Japan,567-8570","institution_ids":["https://openalex.org/I135768898"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5004688878"],"corresponding_institution_ids":["https://openalex.org/I135768898"],"apc_list":null,"apc_paid":null,"fwci":1.5567,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.83552816,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"207","last_page":"212"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9879999756813049,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.921500027179718,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8017860054969788},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7031725645065308},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.44790926575660706},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4279954731464386},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.12654998898506165},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.09246289730072021}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8017860054969788},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7031725645065308},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.44790926575660706},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4279954731464386},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.12654998898506165},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.09246289730072021}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icoin63865.2025.10992901","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icoin63865.2025.10992901","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 International Conference on Information Networking (ICOIN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W1977206554","https://openalex.org/W2070112613","https://openalex.org/W3174208623","https://openalex.org/W3183602784","https://openalex.org/W3186205164","https://openalex.org/W3211494975","https://openalex.org/W6769201380"],"related_works":["https://openalex.org/W2360429410","https://openalex.org/W2898696280","https://openalex.org/W2204131204","https://openalex.org/W2383770723","https://openalex.org/W2921433547","https://openalex.org/W2958385475","https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W2370216173","https://openalex.org/W2754163055"],"abstract_inverted_index":{"Distributed":[0],"Denial":[1],"of":[2,37],"Service":[3],"(DDoS)":[4],"attacks":[5,26],"have":[6],"become":[7,27],"increasingly":[8],"frequent,":[9],"overwhelming":[10],"target":[11],"servers":[12],"by":[13],"flooding":[14],"them":[15],"with":[16,101],"packets":[17],"from":[18],"bots.":[19],"Though":[20],"firewalls":[21],"can":[22],"block":[23],"illegitimate":[24],"traffic,":[25],"harder":[28],"to":[29,73],"detect":[30],"when":[31],"bots":[32],"spoof":[33],"the":[34,80,83],"IP":[35],"addresses":[36],"trusted":[38],"content":[39],"delivery":[40],"network":[41],"(CDN)":[42],"cache":[43],"servers.":[44],"To":[45],"mitigate":[46],"this,":[47],"we":[48],"propose":[49],"a":[50,56],"two-stage":[51],"detection":[52,95],"method":[53,71],"that":[54,90],"uses":[55],"dynamic":[57],"based":[58],"on":[59,82],"packet":[60],"arrival":[61],"intervals":[62],"and":[63,77],"DNS":[64],"$\\log$":[65],"analysis.":[66],"By":[67],"incorporating":[68],"Z-scores,":[69],"our":[70,91],"adapts":[72],"changing":[74],"traffic":[75],"patterns":[76],"significantly":[78],"reduces":[79],"load":[81],"origin":[84],"server":[85],"(OS).":[86],"Performance":[87],"evaluations":[88],"show":[89],"approach":[92],"enhances":[93],"DDoS":[94],"accuracy":[96],"while":[97],"lowering":[98],"processing":[99],"costs,":[100],"optimal":[102],"thresholds":[103],"designed":[104],"for":[105],"varying":[106],"environments.":[107]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
