{"id":"https://openalex.org/W4319781217","doi":"https://doi.org/10.1109/imcom56909.2023.10035661","title":"A two-stage detection system of DDoS attacks in SDN using a trigger with multiple features and self-adaptive thresholds","display_name":"A two-stage detection system of DDoS attacks in SDN using a trigger with multiple features and self-adaptive thresholds","publication_year":2023,"publication_date":"2023-01-03","ids":{"openalex":"https://openalex.org/W4319781217","doi":"https://doi.org/10.1109/imcom56909.2023.10035661"},"language":"en","primary_location":{"id":"doi:10.1109/imcom56909.2023.10035661","is_oa":false,"landing_page_url":"https://doi.org/10.1109/imcom56909.2023.10035661","pdf_url":null,"source":{"id":"https://openalex.org/S4363608560","display_name":"2023 17th International Conference on Ubiquitous Information Management and Communication (IMCOM)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 17th International Conference on Ubiquitous Information Management and Communication (IMCOM)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072026563","display_name":"Muyuan Niu","orcid":"https://orcid.org/0009-0009-0242-7052"},"institutions":[{"id":"https://openalex.org/I135598925","display_name":"Kyushu University","ror":"https://ror.org/00p4k0j84","country_code":"JP","type":"education","lineage":["https://openalex.org/I135598925"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Muyuan Niu","raw_affiliation_strings":["Kyushu University,Department of Informatics,Fukuoka,Japan","Department of Informatics, Kyushu University, Fukuoka, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kyushu University,Department of Informatics,Fukuoka,Japan","institution_ids":["https://openalex.org/I135598925"]},{"raw_affiliation_string":"Department of Informatics, Kyushu University, Fukuoka, Japan","institution_ids":["https://openalex.org/I135598925"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101060854","display_name":"Yaokai Feng","orcid":null},"institutions":[{"id":"https://openalex.org/I135598925","display_name":"Kyushu University","ror":"https://ror.org/00p4k0j84","country_code":"JP","type":"education","lineage":["https://openalex.org/I135598925"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yaokai Feng","raw_affiliation_strings":["Technology Kyushu University,Department of Advanced Information,Fukuoka,Japan","Department of Advanced Information, Technology Kyushu University, Fukuoka, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technology Kyushu University,Department of Advanced Information,Fukuoka,Japan","institution_ids":["https://openalex.org/I135598925"]},{"raw_affiliation_string":"Department of Advanced Information, Technology Kyushu University, Fukuoka, Japan","institution_ids":["https://openalex.org/I135598925"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001126368","display_name":"Kouichi Sakurai","orcid":"https://orcid.org/0000-0003-4621-1674"},"institutions":[{"id":"https://openalex.org/I135598925","display_name":"Kyushu University","ror":"https://ror.org/00p4k0j84","country_code":"JP","type":"education","lineage":["https://openalex.org/I135598925"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kouichi Sakurai","raw_affiliation_strings":["Kyushu University,Department of Informatics,Fukuoka,Japan","Department of Informatics, Kyushu University, Fukuoka, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kyushu University,Department of Informatics,Fukuoka,Japan","institution_ids":["https://openalex.org/I135598925"]},{"raw_affiliation_string":"Department of Informatics, Kyushu University, Fukuoka, Japan","institution_ids":["https://openalex.org/I135598925"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I135598925"],"apc_list":null,"apc_paid":null,"fwci":2.5397,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.89510675,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8251252174377441},{"id":"https://openalex.org/keywords/thresholding","display_name":"Thresholding","score":0.7368586659431458},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.6787402629852295},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6361385583877563},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5674738883972168},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.5106151700019836},{"id":"https://openalex.org/keywords/adaptation","display_name":"Adaptation (eye)","score":0.5071032047271729},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4530850648880005},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4426741600036621},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.40492838621139526},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.36909031867980957},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3248663544654846},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2478245496749878},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.1721583902835846},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.12738960981369019},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.10442450642585754}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8251252174377441},{"id":"https://openalex.org/C191178318","wikidata":"https://www.wikidata.org/wiki/Q2256906","display_name":"Thresholding","level":3,"score":0.7368586659431458},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6787402629852295},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6361385583877563},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5674738883972168},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.5106151700019836},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.5071032047271729},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4530850648880005},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4426741600036621},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.40492838621139526},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36909031867980957},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3248663544654846},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2478245496749878},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.1721583902835846},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.12738960981369019},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.10442450642585754},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/imcom56909.2023.10035661","is_oa":false,"landing_page_url":"https://doi.org/10.1109/imcom56909.2023.10035661","pdf_url":null,"source":{"id":"https://openalex.org/S4363608560","display_name":"2023 17th International Conference on Ubiquitous Information Management and Communication (IMCOM)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 17th International Conference on Ubiquitous Information Management and Communication (IMCOM)","raw_type":"proceedings-article"},{"id":"pmh:oai:catalog.lib.kyushu-u.ac.jp:2324/7178585","is_oa":false,"landing_page_url":"http://hdl.handle.net/2324/7178585","pdf_url":null,"source":{"id":"https://openalex.org/S4306400832","display_name":"Kyushu University Institutional Repository (QIR) (Kyushu University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I135598925","host_organization_name":"Kyushu University","host_organization_lineage":["https://openalex.org/I135598925"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"International Conference on Ubiquitous Information Management and Communication (IMCOM)","raw_type":"conference paper"},{"id":"pmh:oai:irdb.nii.ac.jp:01211:0006244052","is_oa":false,"landing_page_url":"https://hdl.handle.net/2324/7178585","pdf_url":null,"source":{"id":"https://openalex.org/S7407056385","display_name":"Institutional Repositories DataBase (IRDB)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184597095","host_organization_name":"National Institute of Informatics","host_organization_lineage":["https://openalex.org/I184597095"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference paper"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.5,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1572339221","https://openalex.org/W1974653278","https://openalex.org/W2017524370","https://openalex.org/W2037998200","https://openalex.org/W2065851304","https://openalex.org/W2080081718","https://openalex.org/W2349764948","https://openalex.org/W2569775632","https://openalex.org/W2587508615","https://openalex.org/W2798638741","https://openalex.org/W2958285686","https://openalex.org/W3042433202","https://openalex.org/W3046569687","https://openalex.org/W3123969097","https://openalex.org/W3136990693","https://openalex.org/W6712378139"],"related_works":["https://openalex.org/W1542224353","https://openalex.org/W1661087619","https://openalex.org/W4386482731","https://openalex.org/W2765763546","https://openalex.org/W4385302085","https://openalex.org/W2360429410","https://openalex.org/W4256682929","https://openalex.org/W2039821316","https://openalex.org/W2388081684","https://openalex.org/W4302160995"],"abstract_inverted_index":{"Software-defined":[0],"networking":[1],"(SDN)":[2],"has":[3],"received":[4],"a":[5,55,113,140,249,254],"lot":[6],"of":[7,22,104,146,185,191,207,224,243,264,282],"attention":[8],"in":[9,13,53,77,90,125,179,188,215,220,248],"academia":[10],"and":[11,16,38,112,127,163,209,236],"industry":[12],"recent":[14],"years,":[15],"DDoS":[17],"attacks":[18],"are":[19,80,194,239],"still":[20,159],"one":[21,110,128,161],"the":[23,60,67,75,78,83,98,105,147,164,183,186,189,205,211,216,221,225,244,262,266,276,279,283],"most":[24,190],"dangerous":[25],"threats.":[26],"As":[27],"cyberattacks":[28],"become":[29,35],"more":[30,36],"sophisticated,":[31],"detection":[32,50,62,69,92,144,149,222,269,280],"systems":[33,93],"also":[34],"complex":[37,61],"computationally":[39,267],"intensive,":[40],"for":[41,134],"example,":[42],"Deep":[43],"Learning-based":[44],"detection.":[45],"Against":[46],"this":[47,201],"background,":[48],"two-stage":[49],"is":[51,57,71,101,118,130,168,246,271,286],"proposed,":[52],"which":[54,171],"trigger":[56,79,136],"introduced":[58],"before":[59],"being":[63],"invoked.":[64,102],"That":[65],"is,":[66],"heavy":[68],"module":[70,223,270],"called":[72],"only":[73,160,196],"when":[74,97],"requirements":[76],"satisfied.":[81],"Clearly,":[82],"triggering":[84],"mechanism":[85,167],"plays":[86],"an":[87],"important":[88],"role":[89],"such":[91],"as":[94],"it":[95,117,173],"determines":[96],"second":[99,226],"stage":[100],"Most":[103],"existing":[106],"relevant":[107],"studies":[108],"utilize":[109],"feature":[111,129],"fixed":[114],"threshold.":[115],"However,":[116],"not":[119,132,287],"easy":[120],"to":[121,176],"predefine":[122],"suitable":[123],"thresholds":[124],"practice,":[126],"often":[131],"sufficient":[133],"effective":[135],"conditions":[137],"that":[138,261],"have":[139],"significant":[141],"impact":[142],"on":[143],"performance":[145,184,242,281],"whole":[148],"system.":[150],"The":[151,241,257],"latest":[152],"related":[153,192],"work":[154],"uses":[155],"dynamic":[156],"thresholding,":[157],"but":[158],"feature,":[162],"threshold":[165,212],"adaptation":[166],"too":[169,174],"simplistic,":[170],"make":[172],"difficult":[175],"be":[177],"used":[178],"real":[180],"applications.":[181],"Moreover,":[182],"approach":[187],"works":[193],"verified":[195],"using":[197,253],"simulated":[198,250],"data.":[199],"In":[200,218],"study,":[202],"we":[203],"increase":[204],"number":[206],"features":[208,229],"optimized":[210],"adjustment":[213],"method":[214],"trigger.":[217],"addition,":[219],"stage,":[227],"six":[228],"carefully":[230],"determined":[231],"from":[232],"traffic":[233],"bytes,":[234],"packets,":[235],"IP":[237],"addresses":[238],"used.":[240],"proposal":[245],"demonstrated":[247],"SDN":[251],"environment":[252],"public":[255],"dataset.":[256],"experimental":[258],"results":[259],"indicate":[260],"times":[263],"calling":[265],"intensive":[268],"significantly":[272],"reduced,":[273],"while":[274],"at":[275],"same":[277],"time":[278],"overall":[284],"system":[285],"degraded.":[288]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}