{"id":"https://openalex.org/W2147776030","doi":"https://doi.org/10.1109/infcom.2011.5935169","title":"Scan detection in high-speed networks based on optimal dynamic bit sharing","display_name":"Scan detection in high-speed networks based on optimal dynamic bit sharing","publication_year":2011,"publication_date":"2011-04-01","ids":{"openalex":"https://openalex.org/W2147776030","doi":"https://doi.org/10.1109/infcom.2011.5935169","mag":"2147776030"},"language":"en","primary_location":{"id":"doi:10.1109/infcom.2011.5935169","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infcom.2011.5935169","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 Proceedings IEEE INFOCOM","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100455308","display_name":"Tao Li","orcid":"https://orcid.org/0000-0002-5024-0198"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tao Li","raw_affiliation_strings":["Department of Computer & Information Science & Engineering, University of Florida, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer & Information Science & Engineering, University of Florida, USA","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006184530","display_name":"Shigang Chen","orcid":"https://orcid.org/0000-0001-7867-7765"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shigang Chen","raw_affiliation_strings":["Department of Computer & Information Science & Engineering, University of Florida, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer & Information Science & Engineering, University of Florida, USA","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006055233","display_name":"Wen Luo","orcid":"https://orcid.org/0000-0001-6160-237X"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wen Luo","raw_affiliation_strings":["Department of Computer & Information Science & Engineering, University of Florida, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer & Information Science & Engineering, University of Florida, USA","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5013747973","display_name":"Ming Zhang","orcid":"https://orcid.org/0000-0003-3085-3074"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ming Zhang","raw_affiliation_strings":["Department of Computer & Information Science & Engineering, University of Florida, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer & Information Science & Engineering, University of Florida, USA","institution_ids":["https://openalex.org/I33213144"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I33213144"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":23,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3200","last_page":"3208"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9933000206947327,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.80430006980896},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.6056056618690491},{"id":"https://openalex.org/keywords/static-random-access-memory","display_name":"Static random-access memory","score":0.5530176162719727},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.5397949814796448},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4868428111076355},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4402960538864136},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.4196091890335083},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.4020678997039795},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3305876851081848},{"id":"https://openalex.org/keywords/computer-engineering","display_name":"Computer engineering","score":0.3304591774940491},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.23211681842803955},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.15238532423973083},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.14770683646202087},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.09440591931343079}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.80430006980896},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.6056056618690491},{"id":"https://openalex.org/C68043766","wikidata":"https://www.wikidata.org/wiki/Q267416","display_name":"Static random-access memory","level":2,"score":0.5530176162719727},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.5397949814796448},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4868428111076355},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4402960538864136},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.4196091890335083},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4020678997039795},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3305876851081848},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.3304591774940491},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.23211681842803955},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.15238532423973083},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.14770683646202087},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09440591931343079},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/infcom.2011.5935169","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infcom.2011.5935169","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2011 Proceedings IEEE INFOCOM","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W139562302","https://openalex.org/W1493892051","https://openalex.org/W1502031136","https://openalex.org/W1601184934","https://openalex.org/W1675727887","https://openalex.org/W1977141583","https://openalex.org/W1993284846","https://openalex.org/W1993482412","https://openalex.org/W2058358261","https://openalex.org/W2059739152","https://openalex.org/W2069980026","https://openalex.org/W2111678491","https://openalex.org/W2123845384","https://openalex.org/W2136053377","https://openalex.org/W2140816706","https://openalex.org/W2148665392","https://openalex.org/W2150191781","https://openalex.org/W2150399692","https://openalex.org/W2162332844","https://openalex.org/W2169927847","https://openalex.org/W4206137901","https://openalex.org/W6629496199","https://openalex.org/W6630161968","https://openalex.org/W6637291754","https://openalex.org/W6648522431"],"related_works":["https://openalex.org/W4392590355","https://openalex.org/W3151633427","https://openalex.org/W2212894501","https://openalex.org/W2793465010","https://openalex.org/W3024050170","https://openalex.org/W2109451123","https://openalex.org/W4378977321","https://openalex.org/W1976168335","https://openalex.org/W3211992815","https://openalex.org/W179354024"],"abstract_inverted_index":{"Scan":[0],"detection":[1,11,30,72,168],"is":[2,26,51,64],"one":[3],"of":[4,46,131,148],"the":[5,19,44,54,102,109,116,140,146,153,165,181],"most":[6],"important":[7],"functions":[8],"in":[9,31,105],"intrusion":[10],"systems.":[12],"In":[13],"order":[14,106],"to":[15,27,38,48,97,107,138,151,175],"keep":[16],"up":[17],"with":[18,123,180],"ever-higher":[20],"line":[21],"speed,":[22],"recent":[23],"research":[24],"trend":[25],"implement":[28],"scan":[29,71,167],"fast":[32],"but":[33,53],"small":[34],"SRAM.":[35],"This":[36],"leads":[37],"a":[39,61,92,135,158],"difficult":[40],"technical":[41],"challenge":[42],"because":[43],"amount":[45,147],"traffic":[47,161],"be":[49],"monitored":[50],"huge":[52],"on-die":[55],"memory":[56,149,171],"space":[57],"for":[58,86],"performing":[59],"such":[60],"monitoring":[62],"task":[63],"very":[65],"limited.":[66],"We":[67,90],"propose":[68],"an":[69,128],"efficient":[70],"scheme":[73,113,169],"based":[74,156],"on":[75,157],"dynamic":[76],"bit":[77,84],"sharing,":[78],"which":[79],"incorporates":[80],"probabilistic":[81],"sampling":[82],"and":[83],"sharing":[85],"compact":[87],"information":[88,100],"storage.":[89],"design":[91],"maximum":[93],"likelihood":[94],"estimation":[95],"method":[96],"extract":[98],"persource":[99],"from":[101],"shared":[103],"bits":[104],"determine":[108,139],"scanners.":[110],"Our":[111],"new":[112],"ensures":[114],"that":[115,144,164],"false":[117],"positive/false":[118],"negative":[119],"ratios":[120],"are":[121],"bounded":[122],"high":[124],"probability.":[125],"Moreover,":[126],"given":[127],"arbitrary":[129],"set":[130],"bounds,":[132],"we":[133],"develop":[134],"systematic":[136],"approach":[137],"optimal":[141],"system":[142],"parameters":[143],"minimize":[145],"needed":[150],"meet":[152],"bounds.":[154],"Experiments":[155],"real":[159],"Internet":[160],"trace":[162],"demonstrate":[163],"proposed":[166],"reduces":[170],"consumption":[172],"by":[173],"three":[174],"twenty":[176],"times":[177],"when":[178],"comparing":[179],"best":[182],"existing":[183],"work.":[184]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}