{"id":"https://openalex.org/W3216737187","doi":"https://doi.org/10.1109/isncc52172.2021.9615889","title":"Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN","display_name":"Intelligent DDoS Detection in Botnet Combined with Packet-Level Features under SDN","publication_year":2021,"publication_date":"2021-10-31","ids":{"openalex":"https://openalex.org/W3216737187","doi":"https://doi.org/10.1109/isncc52172.2021.9615889","mag":"3216737187"},"language":"en","primary_location":{"id":"doi:10.1109/isncc52172.2021.9615889","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isncc52172.2021.9615889","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 International Symposium on Networks, Computers and Communications (ISNCC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028845261","display_name":"Shuhan Chen","orcid":"https://orcid.org/0000-0001-9996-0666"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Shuhan Chen","raw_affiliation_strings":["Zhejiang University,Hangzhou,China","Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037799648","display_name":"Congqi Shen","orcid":null},"institutions":[{"id":"https://openalex.org/I4210123185","display_name":"Zhejiang Lab","ror":"https://ror.org/02m2h7991","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210123185"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Congqi Shen","raw_affiliation_strings":["Zhejiang Lab,Hangzhou,China","Zhejiang Lab, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang Lab,Hangzhou,China","institution_ids":["https://openalex.org/I4210123185"]},{"raw_affiliation_string":"Zhejiang Lab, Hangzhou, China","institution_ids":["https://openalex.org/I4210123185"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019438395","display_name":"Danrui Yu","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Danrui Yu","raw_affiliation_strings":["Zhejiang University,Hangzhou,China","Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022695086","display_name":"Yuqin Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuqin Wu","raw_affiliation_strings":["Zhejiang University,Hangzhou,China","Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5019893827","display_name":"Chun\u2010Ming Wu","orcid":"https://orcid.org/0000-0002-2476-2785"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunming Wu","raw_affiliation_strings":["Zhejiang University,Hangzhou,China","Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University,Hangzhou,China","institution_ids":["https://openalex.org/I76130692"]},{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5028845261"],"corresponding_institution_ids":["https://openalex.org/I76130692"],"apc_list":null,"apc_paid":null,"fwci":0.1528,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.53120865,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.9625165462493896},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8657047748565674},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.830926239490509},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.7213212251663208},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6894879341125488},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.6867132186889648},{"id":"https://openalex.org/keywords/packet-drop-attack","display_name":"Packet drop attack","score":0.5909313559532166},{"id":"https://openalex.org/keywords/packet-analyzer","display_name":"Packet analyzer","score":0.4845997095108032},{"id":"https://openalex.org/keywords/packet-forwarding","display_name":"Packet forwarding","score":0.456484317779541},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4268840253353119},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.26331663131713867},{"id":"https://openalex.org/keywords/routing-protocol","display_name":"Routing protocol","score":0.10406658053398132},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.08012151718139648}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.9625165462493896},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8657047748565674},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.830926239490509},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.7213212251663208},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6894879341125488},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6867132186889648},{"id":"https://openalex.org/C35546906","wikidata":"https://www.wikidata.org/wiki/Q2900718","display_name":"Packet drop attack","level":5,"score":0.5909313559532166},{"id":"https://openalex.org/C95362637","wikidata":"https://www.wikidata.org/wiki/Q54366","display_name":"Packet analyzer","level":3,"score":0.4845997095108032},{"id":"https://openalex.org/C120317029","wikidata":"https://www.wikidata.org/wiki/Q874048","display_name":"Packet forwarding","level":3,"score":0.456484317779541},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4268840253353119},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.26331663131713867},{"id":"https://openalex.org/C104954878","wikidata":"https://www.wikidata.org/wiki/Q1648707","display_name":"Routing protocol","level":3,"score":0.10406658053398132},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.08012151718139648},{"id":"https://openalex.org/C89305328","wikidata":"https://www.wikidata.org/wiki/Q1755411","display_name":"Link-state routing protocol","level":4,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isncc52172.2021.9615889","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isncc52172.2021.9615889","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 International Symposium on Networks, Computers and Communications (ISNCC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6399999856948853,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320322927","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884"},{"id":"https://openalex.org/F4320337504","display_name":"Research and Development","ror":"https://ror.org/027s68j25"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1646065384","https://openalex.org/W1969948191","https://openalex.org/W2514341538","https://openalex.org/W2582369139","https://openalex.org/W2756940441","https://openalex.org/W2765220306","https://openalex.org/W2782978729","https://openalex.org/W2783146946","https://openalex.org/W2883594698","https://openalex.org/W2899310174","https://openalex.org/W2899948414","https://openalex.org/W2963320092","https://openalex.org/W2965954464","https://openalex.org/W3000568417","https://openalex.org/W6745527817","https://openalex.org/W6772900071"],"related_works":["https://openalex.org/W2001331025","https://openalex.org/W2063104870","https://openalex.org/W2292210693","https://openalex.org/W3132742126","https://openalex.org/W2765293204","https://openalex.org/W2772752414","https://openalex.org/W2519215548","https://openalex.org/W755140349","https://openalex.org/W2977340457","https://openalex.org/W2359138149"],"abstract_inverted_index":{"Botnets":[0],"provide":[1],"a":[2,22,30,69,108],"fundamental":[3],"infrastructure":[4],"for":[5],"various":[6],"kinds":[7],"of":[8,42,90,149],"network":[9,46,58,79],"attacks,":[10],"such":[11],"as":[12],"DDoS":[13,17,35,114,150],"attack,":[14],"etc.":[15],"Detecting":[16],"attack":[18,36,65,100,151],"in":[19,37,145],"botnet":[20,38],"is":[21,51,143],"long-standing":[23],"challenge.":[24],"In":[25,125],"this":[26],"paper,":[27],"we":[28,81,127],"propose":[29],"novel":[31],"method":[32,131,142],"to":[33,52,62,86,98,112],"detect":[34,113],"through":[39],"the":[40,64,129,140,147],"analysis":[41],"packet":[43,61,94,159],"forwarding":[44,95],"and":[45,60,67],"traffic.":[47],"The":[48,135],"primary":[49],"idea":[50],"collect":[53],"features":[54,104,156],"from":[55,77,158],"both":[56],"overall":[57,78],"traffic":[59],"describe":[63,99],"pattern":[66],"conduct":[68],"detection":[70,152],"model":[71,111],"with":[72,132],"high":[73],"accuracy.":[74],"Firstly,":[75],"apart":[76],"traffic,":[80],"calculate":[82],"several":[83],"statistics":[84],"related":[85],"looking":[87],"up":[88],"functions":[89],"flow":[91],"tables":[92],"during":[93],"on":[96],"switches":[97],"pattern.":[101],"Secondly,":[102],"these":[103],"are":[105],"put":[106],"into":[107],"deep":[109],"learning":[110],"attack.":[115],"We":[116],"perform":[117],"evaluations":[118],"under":[119],"Software":[120],"Defined":[121],"Networking":[122],"(SDN)":[123],"paradigm.":[124],"particular,":[126],"compare":[128],"proposed":[130,141],"traditional":[133],"methods.":[134],"experimental":[136],"results":[137],"demonstrate":[138],"that":[139],"meaningful":[144],"improving":[146],"accuracy":[148],"by":[153],"adding":[154],"packet-level":[155],"extracted":[157],"forwarding.":[160]},"counts_by_year":[{"year":2022,"cited_by_count":1}],"updated_date":"2025-11-25T14:43:58.451035","created_date":"2025-10-10T00:00:00"}