{"id":"https://openalex.org/W1615570909","doi":"https://doi.org/10.1109/isi.2015.7165965","title":"Multi-granular aggregation of network flows for security analysis","display_name":"Multi-granular aggregation of network flows for security analysis","publication_year":2015,"publication_date":"2015-05-01","ids":{"openalex":"https://openalex.org/W1615570909","doi":"https://doi.org/10.1109/isi.2015.7165965","mag":"1615570909"},"language":"en","primary_location":{"id":"doi:10.1109/isi.2015.7165965","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isi.2015.7165965","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE International Conference on Intelligence and Security Informatics (ISI)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067698138","display_name":"Tao Ding","orcid":null},"institutions":[{"id":"https://openalex.org/I126744593","display_name":"University of Maryland, Baltimore","ror":"https://ror.org/04rq5mt64","country_code":"US","type":"education","lineage":["https://openalex.org/I126744593"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Tao Ding","raw_affiliation_strings":["Department of Information Systems, Baltimore Country (UMBC), Baltimore, MD","Department of Information Systems, University of Maryland, Baltimore Country (UMBC), Baltimore, MD 21225"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Systems, Baltimore Country (UMBC), Baltimore, MD","institution_ids":[]},{"raw_affiliation_string":"Department of Information Systems, University of Maryland, Baltimore Country (UMBC), Baltimore, MD 21225","institution_ids":["https://openalex.org/I126744593"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060546610","display_name":"Ahmed Aleroud","orcid":"https://orcid.org/0000-0003-4337-1488"},"institutions":[{"id":"https://openalex.org/I85507684","display_name":"Yarmouk University","ror":"https://ror.org/004mbaj56","country_code":"JO","type":"education","lineage":["https://openalex.org/I85507684"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Ahmed AlEroud","raw_affiliation_strings":["Yarmouk University, Irbid, JO","Yarmouk University, Irbid, Jordan, 21163"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yarmouk University, Irbid, JO","institution_ids":["https://openalex.org/I85507684"]},{"raw_affiliation_string":"Yarmouk University, Irbid, Jordan, 21163","institution_ids":["https://openalex.org/I85507684"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065573453","display_name":"George Karabatis","orcid":"https://orcid.org/0000-0002-2208-0801"},"institutions":[{"id":"https://openalex.org/I126744593","display_name":"University of Maryland, Baltimore","ror":"https://ror.org/04rq5mt64","country_code":"US","type":"education","lineage":["https://openalex.org/I126744593"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"George Karabatis","raw_affiliation_strings":["Department of Information Systems, Baltimore Country (UMBC), Baltimore, MD","Department of Information Systems, University of Maryland, Baltimore Country (UMBC), Baltimore, MD 21225"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Systems, Baltimore Country (UMBC), Baltimore, MD","institution_ids":[]},{"raw_affiliation_string":"Department of Information Systems, University of Maryland, Baltimore Country (UMBC), Baltimore, MD 21225","institution_ids":["https://openalex.org/I126744593"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"173","last_page":"175"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.8379809856414795},{"id":"https://openalex.org/keywords/granularity","display_name":"Granularity","score":0.8024417161941528},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7773137092590332},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6364996433258057},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.5826009511947632},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.5670061707496643},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5445637106895447},{"id":"https://openalex.org/keywords/flow","display_name":"Flow (mathematics)","score":0.4843069612979889},{"id":"https://openalex.org/keywords/flow-network","display_name":"Flow network","score":0.4776674211025238},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.4566260576248169},{"id":"https://openalex.org/keywords/granular-computing","display_name":"Granular computing","score":0.44703733921051025},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4263577461242676},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.42115330696105957},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.39158201217651367},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.26311394572257996},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.15435969829559326}],"concepts":[{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.8379809856414795},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.8024417161941528},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7773137092590332},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6364996433258057},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.5826009511947632},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5670061707496643},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5445637106895447},{"id":"https://openalex.org/C38349280","wikidata":"https://www.wikidata.org/wiki/Q1434290","display_name":"Flow (mathematics)","level":2,"score":0.4843069612979889},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.4776674211025238},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.4566260576248169},{"id":"https://openalex.org/C17209119","wikidata":"https://www.wikidata.org/wiki/Q5596712","display_name":"Granular computing","level":3,"score":0.44703733921051025},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4263577461242676},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.42115330696105957},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.39158201217651367},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.26311394572257996},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.15435969829559326},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C111012933","wikidata":"https://www.wikidata.org/wiki/Q3137210","display_name":"Rough set","level":2,"score":0.0},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isi.2015.7165965","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isi.2015.7165965","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 IEEE International Conference on Intelligence and Security Informatics (ISI)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6899999976158142,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W26074071","https://openalex.org/W1551705282","https://openalex.org/W1580437619","https://openalex.org/W1738203895","https://openalex.org/W1775772884","https://openalex.org/W1968439359","https://openalex.org/W1976047426","https://openalex.org/W2030553727","https://openalex.org/W2096118443","https://openalex.org/W2105140491","https://openalex.org/W2110385611","https://openalex.org/W2113061123","https://openalex.org/W2114718230","https://openalex.org/W2136420282","https://openalex.org/W2163950614","https://openalex.org/W2164210932","https://openalex.org/W2165875088","https://openalex.org/W2168938675","https://openalex.org/W2171331105","https://openalex.org/W2255206882","https://openalex.org/W2293322640","https://openalex.org/W2544088398","https://openalex.org/W3138598418","https://openalex.org/W3150719513","https://openalex.org/W4245906277","https://openalex.org/W4248484754","https://openalex.org/W6601098373","https://openalex.org/W6632924670","https://openalex.org/W6634604418","https://openalex.org/W6637830034","https://openalex.org/W6638021444","https://openalex.org/W6729439378"],"related_works":["https://openalex.org/W1795409297","https://openalex.org/W2013421631","https://openalex.org/W2282249876","https://openalex.org/W2907231604","https://openalex.org/W2765911721","https://openalex.org/W3091858790","https://openalex.org/W2264129129","https://openalex.org/W2922513649","https://openalex.org/W4239687749","https://openalex.org/W2087815680"],"abstract_inverted_index":{"Investigating":[0],"network":[1,22,59],"flows":[2,60],"is":[3],"an":[4],"approach":[5,54],"of":[6,38,47,73],"detecting":[7],"attacks":[8],"by":[9,20,68],"identifying":[10],"known":[11],"patterns.":[12],"Flow":[13],"statistics":[14],"are":[15],"used":[16],"to":[17,29],"discover":[18,30],"anomalies":[19],"aggregating":[21],"traces":[23],"and":[24,36,61],"then":[25],"using":[26],"machine-learning":[27],"classifiers":[28],"suspicious":[31],"activities.":[32],"However,":[33],"the":[34,39,45],"efficiency":[35],"effectiveness":[37],"flow":[40],"classification":[41],"models":[42],"depends":[43],"on":[44],"granularity":[46],"aggregation.":[48],"This":[49],"paper":[50],"describes":[51],"a":[52],"novel":[53],"that":[55],"aggregates":[56],"packets":[57],"into":[58],"correlates":[62],"them":[63],"with":[64],"security":[65],"events":[66],"generated":[67],"payload-based":[69],"IDSs":[70],"for":[71],"detection":[72],"cyber-attacks.":[74]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":5}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}