{"id":"https://openalex.org/W2010582541","doi":"https://doi.org/10.1109/infcom.2013.6566977","title":"Cardinality change-based early detection of large-scale cyber-attacks","display_name":"Cardinality change-based early detection of large-scale cyber-attacks","publication_year":2013,"publication_date":"2013-04-01","ids":{"openalex":"https://openalex.org/W2010582541","doi":"https://doi.org/10.1109/infcom.2013.6566977","mag":"2010582541"},"language":"en","primary_location":{"id":"doi:10.1109/infcom.2013.6566977","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infcom.2013.6566977","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 Proceedings IEEE INFOCOM","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014351158","display_name":"Wenji Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I173911158","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78","country_code":"US","type":"education","lineage":["https://openalex.org/I173911158"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wenji Chen","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Iowa State University, USA","Dept. of Electr. & Comput. Eng., Iowa State Univ., Ames, IA, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Iowa State University, USA","institution_ids":["https://openalex.org/I173911158"]},{"raw_affiliation_string":"Dept. of Electr. & Comput. Eng., Iowa State Univ., Ames, IA, USA#TAB#","institution_ids":["https://openalex.org/I173911158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100355692","display_name":"Yang Liu","orcid":"https://orcid.org/0000-0001-7300-9215"},"institutions":[{"id":"https://openalex.org/I173911158","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78","country_code":"US","type":"education","lineage":["https://openalex.org/I173911158"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yang Liu","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Iowa State University, USA","Dept. of Electr. & Comput. Eng., Iowa State Univ., Ames, IA, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Iowa State University, USA","institution_ids":["https://openalex.org/I173911158"]},{"raw_affiliation_string":"Dept. of Electr. & Comput. Eng., Iowa State Univ., Ames, IA, USA#TAB#","institution_ids":["https://openalex.org/I173911158"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100719924","display_name":"Yong Guan","orcid":"https://orcid.org/0000-0003-0445-1848"},"institutions":[{"id":"https://openalex.org/I173911158","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78","country_code":"US","type":"education","lineage":["https://openalex.org/I173911158"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Yong Guan","raw_affiliation_strings":["Department of Electrical and Computer Engineering, Iowa State University, USA","Dept. of Electr. & Comput. Eng., Iowa State Univ., Ames, IA, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, Iowa State University, USA","institution_ids":["https://openalex.org/I173911158"]},{"raw_affiliation_string":"Dept. of Electr. & Comput. Eng., Iowa State Univ., Ames, IA, USA#TAB#","institution_ids":["https://openalex.org/I173911158"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I173911158"],"apc_list":null,"apc_paid":null,"fwci":4.1509,"has_fulltext":false,"cited_by_count":35,"citation_normalized_percentile":{"value":0.94315502,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1788","last_page":"1796"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cardinality","display_name":"Cardinality (data modeling)","score":0.8332560062408447},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7715264558792114},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.5953884720802307},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.532865047454834},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.5010514259338379},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4901057183742523},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.47896483540534973},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.47587767243385315},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.43239104747772217},{"id":"https://openalex.org/keywords/eventual-consistency","display_name":"Eventual consistency","score":0.420841783285141},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3934546709060669},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3897475004196167},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.2064935863018036},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.1312370002269745}],"concepts":[{"id":"https://openalex.org/C87117476","wikidata":"https://www.wikidata.org/wiki/Q362383","display_name":"Cardinality (data modeling)","level":2,"score":0.8332560062408447},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7715264558792114},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.5953884720802307},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.532865047454834},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.5010514259338379},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4901057183742523},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.47896483540534973},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.47587767243385315},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.43239104747772217},{"id":"https://openalex.org/C34422012","wikidata":"https://www.wikidata.org/wiki/Q6125872","display_name":"Eventual consistency","level":4,"score":0.420841783285141},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3934546709060669},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3897475004196167},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2064935863018036},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1312370002269745},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C93361087","wikidata":"https://www.wikidata.org/wiki/Q4426698","display_name":"Data consistency","level":2,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C37279795","wikidata":"https://www.wikidata.org/wiki/Q2492305","display_name":"Consistency model","level":3,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/infcom.2013.6566977","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infcom.2013.6566977","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2013 Proceedings IEEE INFOCOM","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5400000214576721,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W1601184934","https://openalex.org/W1785933978","https://openalex.org/W1922851884","https://openalex.org/W1954903228","https://openalex.org/W1990465412","https://openalex.org/W2058358261","https://openalex.org/W2088068898","https://openalex.org/W2091083310","https://openalex.org/W2099480861","https://openalex.org/W2100307718","https://openalex.org/W2100735174","https://openalex.org/W2103126020","https://openalex.org/W2105934885","https://openalex.org/W2124646923","https://openalex.org/W2128846062","https://openalex.org/W2142889610","https://openalex.org/W2144982963","https://openalex.org/W2150399692","https://openalex.org/W2155372339","https://openalex.org/W2401054255","https://openalex.org/W4232254113","https://openalex.org/W4254978353","https://openalex.org/W6635935638","https://openalex.org/W6640487242","https://openalex.org/W6640663528","https://openalex.org/W6675247803","https://openalex.org/W6675625363","https://openalex.org/W6681658524","https://openalex.org/W6713023146"],"related_works":["https://openalex.org/W2002177687","https://openalex.org/W2058438338","https://openalex.org/W2019471580","https://openalex.org/W2941284322","https://openalex.org/W4224920876","https://openalex.org/W2168299207","https://openalex.org/W2124475651","https://openalex.org/W2585354854","https://openalex.org/W2064478620","https://openalex.org/W2485961789"],"abstract_inverted_index":{"Cyber-attacks":[0],"are":[1],"happening":[2],"every":[3],"day,":[4],"with":[5],"a":[6,57,85,103,147,235],"variety":[7],"of":[8,22,72,79,98,121,142,158,228],"behaviors":[9],"and":[10,52,95,145,200,205,221,240],"objects.":[11],"For":[12],"example,":[13],"email":[14,23,92],"spammers":[15],"may":[16,35,105,126],"compromise":[17],"computers":[18],"to":[19,37,39,42,166,244],"sign-up":[20],"millions":[21],"accounts":[24,81],"for":[25,151,186],"sending":[26],"spam":[27,91],"emails;":[28],"during":[29],"worm":[30,108],"spreading,":[31],"each":[32],"infected":[33],"host":[34,87,104],"try":[36],"connect":[38],"many":[40,49],"hosts":[41],"further":[43],"spread":[44],"the":[45,61,70,77,80,96,99,119,122,156,216,226],"worm,":[46],"etc.":[47],"However,":[48],"such":[50],"large-scale":[51,168],"often":[53,88],"distributed":[54,140,247],"cyber-attacks":[55],"share":[56],"common":[58],"characteristic":[59],"that":[60,125,209],"activities":[62],"involved":[63],"in":[64,67,69,90,107,118,139,215,238],"them":[65],"result":[66],"changes":[68,117,214],"cardinality":[71,78,97,120,217],"attack":[73,143],"traffic.":[74],"Examples":[75],"include:":[76],"signed":[82],"up":[83],"by":[84],"compromised":[86],"increases":[89],"delivery":[93],"scenarios,":[94],"connections":[100],"made":[101],"from":[102,162],"increase":[106],"spreading":[109],"scenarios.":[110],"In":[111],"this":[112,132,229],"paper,":[113],"we":[114],"focus":[115],"on":[116],"network/attack":[123],"traffic":[124],"indicate":[127],"on-going":[128],"cyber-attacks.":[129],"We":[130,192,224],"formulate":[131],"problem":[133],"as":[134,176,178,234],"cardinality-based":[135],"change":[136],"point":[137],"detection":[138],"streams":[141],"traffic,":[144],"develop":[146],"nonparametric":[148],"error-bounded":[149],"scheme":[150,154,172,211],"it.":[152],"Our":[153],"supports":[155],"capability":[157],"merging":[159],"information":[160],"collected":[161],"multiple":[163],"monitoring":[164,242],"points":[165],"detect":[167,213,245],"attacks.":[169,249],"Also,":[170],"our":[171,210],"uses":[173],"small":[174],"space":[175],"well":[177],"constant":[179],"processing":[180],"time,":[181],"which":[182],"makes":[183],"it":[184],"applicable":[185],"spaceconstrained":[187],"network":[188,239],"or":[189],"security":[190,241],"systems.":[191],"have":[193],"conducted":[194],"experiments":[195],"using":[196],"both":[197],"real-world":[198],"traces":[199],"synthetic":[201],"data.":[202],"Experimental":[203],"results":[204],"theoretical":[206],"analysis":[207],"show":[208],"can":[212],"within":[218],"given":[219],"time":[220],"error":[222],"bounds.":[223],"expect":[225],"solutions":[227],"work":[230],"will":[231],"be":[232],"deployed":[233],"building":[236],"block":[237],"systems":[243],"large":[246],"cyber":[248]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":9},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":5},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":1}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}