{"id":"https://openalex.org/W2110719115","doi":"https://doi.org/10.1109/ijcnn.2011.6033434","title":"Visualisation of network forensics traffic data with a self-organising map for qualitative features","display_name":"Visualisation of network forensics traffic data with a self-organising map for qualitative features","publication_year":2011,"publication_date":"2011-07-01","ids":{"openalex":"https://openalex.org/W2110719115","doi":"https://doi.org/10.1109/ijcnn.2011.6033434","mag":"2110719115"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn.2011.6033434","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn.2011.6033434","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The 2011 International Joint Conference on Neural Networks","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085558846","display_name":"Esteban J. Palomo","orcid":"https://orcid.org/0000-0002-8547-9393"},"institutions":[{"id":"https://openalex.org/I82767444","display_name":"Universidad de M\u00e1laga","ror":"https://ror.org/036b2ww28","country_code":"ES","type":"education","lineage":["https://openalex.org/I82767444"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"E.J. Palomo","raw_affiliation_strings":["Department of Computer Science, University of Malaga, Malaga, Spain","Department of Computer Science, University of M\u00e1laga, (Spain)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Malaga, Malaga, Spain","institution_ids":["https://openalex.org/I82767444"]},{"raw_affiliation_string":"Department of Computer Science, University of M\u00e1laga, (Spain)","institution_ids":["https://openalex.org/I82767444"]}]},{"author_position":"middle","author":{"id":null,"display_name":"J. North","orcid":null},"institutions":[{"id":"https://openalex.org/I153648349","display_name":"University of Leicester","ror":"https://ror.org/04h699437","country_code":"GB","type":"education","lineage":["https://openalex.org/I153648349"]},{"id":"https://openalex.org/I66943878","display_name":"De Montfort University","ror":"https://ror.org/0312pnr83","country_code":"GB","type":"education","lineage":["https://openalex.org/I66943878"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"J. North","raw_affiliation_strings":["Department of Computer Technology, De Montfort University, Leicester, UK","Department of Computer Technology, De Monfort University, Leicester, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Technology, De Montfort University, Leicester, UK","institution_ids":["https://openalex.org/I66943878"]},{"raw_affiliation_string":"Department of Computer Technology, De Monfort University, Leicester, United Kingdom","institution_ids":["https://openalex.org/I153648349"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055283205","display_name":"David Elizondo","orcid":"https://orcid.org/0000-0002-7398-5870"},"institutions":[{"id":"https://openalex.org/I153648349","display_name":"University of Leicester","ror":"https://ror.org/04h699437","country_code":"GB","type":"education","lineage":["https://openalex.org/I153648349"]},{"id":"https://openalex.org/I66943878","display_name":"De Montfort University","ror":"https://ror.org/0312pnr83","country_code":"GB","type":"education","lineage":["https://openalex.org/I66943878"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"D. Elizondo","raw_affiliation_strings":["Department of Computer Technology, De Montfort University, Leicester, UK","Department of Computer Technology, De Monfort University, Leicester, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Technology, De Montfort University, Leicester, UK","institution_ids":["https://openalex.org/I66943878"]},{"raw_affiliation_string":"Department of Computer Technology, De Monfort University, Leicester, United Kingdom","institution_ids":["https://openalex.org/I153648349"]}]},{"author_position":"middle","author":{"id":null,"display_name":"R.M. Luque","orcid":null},"institutions":[{"id":"https://openalex.org/I82767444","display_name":"Universidad de M\u00e1laga","ror":"https://ror.org/036b2ww28","country_code":"ES","type":"education","lineage":["https://openalex.org/I82767444"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"R.M. Luque","raw_affiliation_strings":["Department of Computer Science, University of Malaga, Malaga, Spain","Department of Computer Science, University of M\u00e1laga, (Spain)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Malaga, Malaga, Spain","institution_ids":["https://openalex.org/I82767444"]},{"raw_affiliation_string":"Department of Computer Science, University of M\u00e1laga, (Spain)","institution_ids":["https://openalex.org/I82767444"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030510462","display_name":"Tim Watson","orcid":"https://orcid.org/0000-0002-3841-3332"},"institutions":[{"id":"https://openalex.org/I153648349","display_name":"University of Leicester","ror":"https://ror.org/04h699437","country_code":"GB","type":"education","lineage":["https://openalex.org/I153648349"]},{"id":"https://openalex.org/I66943878","display_name":"De Montfort University","ror":"https://ror.org/0312pnr83","country_code":"GB","type":"education","lineage":["https://openalex.org/I66943878"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"T. Watson","raw_affiliation_strings":["Department of Computer Technology, De Montfort University, Leicester, UK","Department of Computer Technology, De Monfort University, Leicester, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Technology, De Montfort University, Leicester, UK","institution_ids":["https://openalex.org/I66943878"]},{"raw_affiliation_string":"Department of Computer Technology, De Monfort University, Leicester, United Kingdom","institution_ids":["https://openalex.org/I153648349"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"1","issue":null,"first_page":"1740","last_page":"1747"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-forensics","display_name":"Network forensics","score":0.8709855675697327},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7998745441436768},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.6308212876319885},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5925130248069763},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.5924494862556458},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5913649201393127},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.5903025269508362},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.5427977442741394},{"id":"https://openalex.org/keywords/data-visualization","display_name":"Data visualization","score":0.5054295063018799},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.45103344321250916},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4428125023841858},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2249467372894287},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.14549532532691956}],"concepts":[{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.8709855675697327},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7998745441436768},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.6308212876319885},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5925130248069763},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.5924494862556458},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5913649201393127},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.5903025269508362},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.5427977442741394},{"id":"https://openalex.org/C172367668","wikidata":"https://www.wikidata.org/wiki/Q6504956","display_name":"Data visualization","level":3,"score":0.5054295063018799},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.45103344321250916},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4428125023841858},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2249467372894287},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.14549532532691956},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/ijcnn.2011.6033434","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn.2011.6033434","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The 2011 International Joint Conference on Neural Networks","raw_type":"proceedings-article"},{"id":"pmh:oai:dora.dmu.ac.uk:2086/5373","is_oa":false,"landing_page_url":"http://hdl.handle.net/2086/5373","pdf_url":null,"source":{"id":"https://openalex.org/S4306400394","display_name":"DMU Open Research Archive (De Montfort University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66943878","host_organization_name":"De Montfort University","host_organization_lineage":["https://openalex.org/I66943878"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.4699999988079071}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W65738273","https://openalex.org/W194643239","https://openalex.org/W247080092","https://openalex.org/W1249474216","https://openalex.org/W1491897949","https://openalex.org/W1493144261","https://openalex.org/W1570131942","https://openalex.org/W1952056635","https://openalex.org/W1968043276","https://openalex.org/W1992419399","https://openalex.org/W2010573219","https://openalex.org/W2017543213","https://openalex.org/W2088709281","https://openalex.org/W2159160833","https://openalex.org/W3127548822","https://openalex.org/W4285719527","https://openalex.org/W6609230490","https://openalex.org/W6790479236"],"related_works":["https://openalex.org/W2972427363","https://openalex.org/W2121070677","https://openalex.org/W2161391695","https://openalex.org/W4238452393","https://openalex.org/W1500698787","https://openalex.org/W188028618","https://openalex.org/W2489557937","https://openalex.org/W1970399788","https://openalex.org/W4385257722","https://openalex.org/W2111038567"],"abstract_inverted_index":{"Digital":[0],"crimes":[1,12],"are":[2,85,198],"a":[3,25,70,135,156,182],"part":[4],"of":[5,10,50,56,59,63,66,105,167,238],"modern":[6],"life":[7],"but":[8],"evidence":[9,65],"these":[11,22,82],"can":[13,38,40,79,125,146,230],"be":[14,45,130,147,231],"captured":[15],"in":[16,86,118,121,134,184,200,204,235,249],"network":[17,60,98,127,185,251],"traffic":[18,99,177,202,211],"data":[19,100,212],"logs.":[20],"Analysing":[21],"logs":[23],"is":[24,29,109],"difficult":[26],"process,":[27],"this":[28,90,154,168,228],"especially":[30],"true":[31],"as":[32,181],"the":[33,48,51,57,103,122,165,170,188,194,201,207,219,236,244,250],"format":[34],"that":[35,78,137,197,227],"different":[36],"attacks":[37],"take":[39],"vary":[41],"tremendously":[42],"and":[43,76,96,132,143,145,216,218,241],"may":[44],"unknown":[46],"at":[47],"time":[49],"analysis.":[52],"The":[53,111,210,224],"main":[54],"objective":[55],"field":[58],"forensics":[61,240],"consists":[62],"gathering":[64],"illegal":[67],"acts":[68],"from":[69],"networking":[71],"infrastructure.":[72],"Therefore,":[73],"software":[74],"tools,":[75],"techniques,":[77],"help":[80],"with":[81],"digital":[83,239],"investigations":[84],"great":[87],"demand.":[88],"In":[89,161],"paper,":[91],"an":[92],"approach":[93],"to":[94,129,163,176,206,233,242],"analysing":[95],"visualising":[97],"based":[101],"upon":[102],"use":[104,180],"self-organising":[106,112,171],"maps":[107],"(SOM)":[108],"presented.":[110],"map":[113,172],"has":[114,173],"been":[115,174],"widely":[116],"used":[117,232],"clustering":[119],"tasks":[120],"literature;":[123],"it":[124],"enable":[126],"clusters":[128],"created":[131],"visualised":[133,217],"manner":[136],"makes":[138],"them":[139],"immediately":[140],"more":[141],"intuitive":[142],"understandable":[144],"performed":[148],"on":[149],"high-dimensional":[150],"input":[151],"data,":[152,178,203],"transforming":[153],"into":[155,192],"much":[157],"lower":[158],"dimensional":[159],"space.":[160],"order":[162],"show":[164],"usefulness":[166],"approach,":[169],"applied":[175],"for":[179,246],"tool":[183],"forensics.":[186],"Moreover,":[187],"proposed":[189],"SOM":[190],"takes":[191],"account":[193],"qualitative":[195],"features":[196],"present":[199],"addition":[205],"quantitative":[208],"features.":[209],"was":[213,214],"clustered":[215],"results":[220,225],"were":[221],"then":[222],"analysed.":[223],"demonstrate":[226],"technique":[229],"aid":[234],"comprehension":[237],"facilitate":[243],"search":[245],"anomalous":[247],"behaviour":[248],"environment.":[252]},"counts_by_year":[{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2016,"cited_by_count":3},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":4},{"year":2012,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}