{"id":"https://openalex.org/W2792136766","doi":"https://doi.org/10.1109/infocom.2018.8485858","title":"Mining Long-Term Stealthy User Behaviors on High Speed Links","display_name":"Mining Long-Term Stealthy User Behaviors on High Speed Links","publication_year":2018,"publication_date":"2018-04-01","ids":{"openalex":"https://openalex.org/W2792136766","doi":"https://doi.org/10.1109/infocom.2018.8485858","mag":"2792136766"},"language":"en","primary_location":{"id":"doi:10.1109/infocom.2018.8485858","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocom.2018.8485858","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2018 - IEEE Conference on Computer Communications","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102845337","display_name":"Pinghui Wang","orcid":"https://orcid.org/0000-0002-1434-837X"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Pinghui Wang","raw_affiliation_strings":["Shenzhen Research Institute of Xi'an Jiaotong University, Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"Shenzhen Research Institute of Xi'an Jiaotong University, Shenzhen, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101742841","display_name":"Peng Jia","orcid":"https://orcid.org/0000-0003-2190-8934"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Jia","raw_affiliation_strings":["MOE Key Laboratory for Intelligent Networks and Network Security, Xi'an Jiaotong University, Xi'an, China"],"affiliations":[{"raw_affiliation_string":"MOE Key Laboratory for Intelligent Networks and Network Security, Xi'an Jiaotong University, Xi'an, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101516220","display_name":"Jing Tao","orcid":"https://orcid.org/0009-0009-3911-4260"},"institutions":[{"id":"https://openalex.org/I4210108865","display_name":"Zhejiang Institute of Communications","ror":"https://ror.org/01q17sd51","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210108865"]},{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jing Tao","raw_affiliation_strings":["Zhejiang Research Institute of Xi'an Jiaotong University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang Research Institute of Xi'an Jiaotong University, Hangzhou, China","institution_ids":["https://openalex.org/I4210108865","https://openalex.org/I87445476"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075845093","display_name":"Xiaohong Guan","orcid":"https://orcid.org/0000-0002-8826-0362"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaohong Guan","raw_affiliation_strings":["Shenzhen Research Institute of Xi'an Jiaotong University, Shenzhen, China"],"affiliations":[{"raw_affiliation_string":"Shenzhen Research Institute of Xi'an Jiaotong University, Shenzhen, China","institution_ids":["https://openalex.org/I87445476"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5102845337"],"corresponding_institution_ids":["https://openalex.org/I87445476"],"apc_list":null,"apc_paid":null,"fwci":0.6515,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.75625938,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"2051","last_page":"2059"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.799056887626648},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6452940702438354},{"id":"https://openalex.org/keywords/bloom-filter","display_name":"Bloom filter","score":0.6158453226089478},{"id":"https://openalex.org/keywords/granularity","display_name":"Granularity","score":0.5958549976348877},{"id":"https://openalex.org/keywords/user-equipment","display_name":"User equipment","score":0.47997069358825684},{"id":"https://openalex.org/keywords/term","display_name":"Term (time)","score":0.4721683859825134},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.4609355032444},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4355924725532532},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.43094632029533386},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.368795245885849},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2303447425365448}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.799056887626648},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6452940702438354},{"id":"https://openalex.org/C147224247","wikidata":"https://www.wikidata.org/wiki/Q885373","display_name":"Bloom filter","level":2,"score":0.6158453226089478},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.5958549976348877},{"id":"https://openalex.org/C2781327853","wikidata":"https://www.wikidata.org/wiki/Q3552547","display_name":"User equipment","level":3,"score":0.47997069358825684},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.4721683859825134},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4609355032444},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4355924725532532},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.43094632029533386},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.368795245885849},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2303447425365448},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C68649174","wikidata":"https://www.wikidata.org/wiki/Q1379116","display_name":"Base station","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/infocom.2018.8485858","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocom.2018.8485858","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2018 - IEEE Conference on Computer Communications","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W1504269120","https://openalex.org/W1858168446","https://openalex.org/W1966127114","https://openalex.org/W1968574530","https://openalex.org/W1977141583","https://openalex.org/W1977951613","https://openalex.org/W2001947543","https://openalex.org/W2003496171","https://openalex.org/W2010973140","https://openalex.org/W2021681605","https://openalex.org/W2026032151","https://openalex.org/W2031657002","https://openalex.org/W2058358261","https://openalex.org/W2077599515","https://openalex.org/W2098366185","https://openalex.org/W2099220942","https://openalex.org/W2102481563","https://openalex.org/W2106287567","https://openalex.org/W2109885200","https://openalex.org/W2123845384","https://openalex.org/W2127455097","https://openalex.org/W2141390805","https://openalex.org/W2141441292","https://openalex.org/W2142099410","https://openalex.org/W2143439191","https://openalex.org/W2147776030","https://openalex.org/W2150010995","https://openalex.org/W2150399692","https://openalex.org/W2167973519","https://openalex.org/W2168305032","https://openalex.org/W2169927847","https://openalex.org/W2205557629","https://openalex.org/W2305788608","https://openalex.org/W2473813716","https://openalex.org/W2577957252","https://openalex.org/W2605823630","https://openalex.org/W2607280777","https://openalex.org/W2743723076","https://openalex.org/W3006383271","https://openalex.org/W4231093806","https://openalex.org/W4231916799","https://openalex.org/W4232254113","https://openalex.org/W4233471163","https://openalex.org/W4236629897","https://openalex.org/W4248708867","https://openalex.org/W4250544186","https://openalex.org/W6630256667","https://openalex.org/W6639080731","https://openalex.org/W6698379459"],"related_works":["https://openalex.org/W2086572746","https://openalex.org/W2604468458","https://openalex.org/W2157216338","https://openalex.org/W1662107788","https://openalex.org/W121740227","https://openalex.org/W3082379938","https://openalex.org/W2135966669","https://openalex.org/W2594143027","https://openalex.org/W2732769800","https://openalex.org/W2924589531"],"abstract_inverted_index":{"Mining":[0],"user":[1,136,146,185],"behaviors":[2,46,53,186,209],"over":[3,54,158],"high":[4],"speed":[5],"links":[6],"is":[7,107],"important":[8],"for":[9,125,219],"applications":[10],"such":[11,22,32,47],"as":[12,23,33,48,172],"network":[13,112],"anomaly":[14],"detection.":[15],"Previous":[16],"work":[17],"focuses":[18],"on":[19,104,226],"monitoring":[20],"anomalies":[21],"extremely":[24],"frequent":[25,50,70,208],"users":[26,43,73,82],"occurring":[27],"in":[28,83,91,114,128,217],"a":[29,55,84,92,115,145,173,182],"short":[30],"timeslot":[31,62],"1":[34,65],"minute.":[35],"Little":[36],"attention":[37],"has":[38],"been":[39],"paid":[40],"to":[41,98,109,150,179,205],"detect":[42,206],"with":[44],"stealthy":[45],"persistent":[49,72,207],"and":[51,89,101,134,176,229],"co-occurrence":[52],"long":[56,116],"period":[57,117],"of":[58,95,118,155,184],"time":[59],"at":[60],"the":[61,162,230],"granularity":[63,67],"(e.g.,":[64],"minute":[66],"level).":[68],"Unlike":[69],"users,":[71],"do":[74],"not":[75,215],"necessarily":[76],"occur":[77,90],"more":[78],"frequently":[79],"than":[80],"other":[81],"single":[85],"timeslot,":[86],"but":[87],"persist":[88],"larger":[93],"number":[94],"timeslots.":[96],"Due":[97],"limited":[99],"computation":[100],"storage":[102],"resources":[103],"routers,":[105],"it":[106],"prohibitive":[108],"collect":[110],"massive":[111],"traffic":[113,132],"time.":[119,159],"We":[120,222],"develop":[121],"an":[122],"end-to-end":[123],"method":[124,149,175,201],"solving":[126],"challenges":[127],"both":[129],"long-term":[130],"online":[131],"collection":[133],"offline":[135,220],"behavior":[137],"analysis.":[138,221],"To":[139,160],"achieve":[140],"this":[141],"goal,":[142],"we":[143,169,196],"design":[144],"embedding":[147,200],"(UE)":[148],"fast":[151],"build":[152],"compact":[153],"sketches":[154],"user-occurrence":[156,188],"events":[157,189],"reduce":[161],"estimation":[163],"error":[164],"introduced":[165],"by":[166],"Bloom":[167],"Filter,":[168],"model":[170],"UE":[171,192,203],"sampling":[174],"propose":[177],"methods":[178,235],"accurately":[180],"mine":[181],"variety":[183],"from":[187,191],"rebuilt":[190],"sketches.":[193],"In":[194],"addition,":[195],"introduce":[197],"another":[198],"new":[199],"reversible":[202],"(RUE)":[204],"when":[210],"monitored":[211],"users'":[212],"IDs":[213],"are":[214],"given":[216],"advance":[218],"conduct":[223],"extensive":[224],"experiments":[225],"real-world":[227],"traffic,":[228],"results":[231],"demonstrate":[232],"that":[233],"our":[234],"significantly":[236],"outperform":[237],"state-of-the-art":[238],"methods.":[239]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2019,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}