{"id":"https://openalex.org/W2048205386","doi":"https://doi.org/10.1109/itc.2014.6932930","title":"On the detection of network traffic anomalies in content delivery network services","display_name":"On the detection of network traffic anomalies in content delivery network services","publication_year":2014,"publication_date":"2014-09-01","ids":{"openalex":"https://openalex.org/W2048205386","doi":"https://doi.org/10.1109/itc.2014.6932930","mag":"2048205386"},"language":"en","primary_location":{"id":"doi:10.1109/itc.2014.6932930","is_oa":false,"landing_page_url":"https://doi.org/10.1109/itc.2014.6932930","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 26th International Teletraffic Congress (ITC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035993254","display_name":"Pierdomenico Fiadino","orcid":null},"institutions":[{"id":"https://openalex.org/I4210122474","display_name":"Forschungszentrum Telekommunikation Wien","ror":"https://ror.org/026nftk33","country_code":"AT","type":"facility","lineage":["https://openalex.org/I4210122474"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Pierdomenico Fiadino","raw_affiliation_strings":["FTW - Telecommunications Research Center, Vienna","FTW - Telecommunications Research Center Vienna"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FTW - Telecommunications Research Center, Vienna","institution_ids":["https://openalex.org/I4210122474"]},{"raw_affiliation_string":"FTW - Telecommunications Research Center Vienna","institution_ids":["https://openalex.org/I4210122474"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088798897","display_name":"Alessandro D\u2019Alconzo","orcid":null},"institutions":[{"id":"https://openalex.org/I4210122474","display_name":"Forschungszentrum Telekommunikation Wien","ror":"https://ror.org/026nftk33","country_code":"AT","type":"facility","lineage":["https://openalex.org/I4210122474"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Alessandro D'Alconzo","raw_affiliation_strings":["FTW - Telecommunications Research Center, Vienna","FTW - Telecommunications Research Center Vienna"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FTW - Telecommunications Research Center, Vienna","institution_ids":["https://openalex.org/I4210122474"]},{"raw_affiliation_string":"FTW - Telecommunications Research Center Vienna","institution_ids":["https://openalex.org/I4210122474"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018858695","display_name":"Arian B\u00e4r","orcid":null},"institutions":[{"id":"https://openalex.org/I4210122474","display_name":"Forschungszentrum Telekommunikation Wien","ror":"https://ror.org/026nftk33","country_code":"AT","type":"facility","lineage":["https://openalex.org/I4210122474"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Arian Bar","raw_affiliation_strings":["FTW - Telecommunications Research Center, Vienna","FTW - Telecommunications Research Center Vienna"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FTW - Telecommunications Research Center, Vienna","institution_ids":["https://openalex.org/I4210122474"]},{"raw_affiliation_string":"FTW - Telecommunications Research Center Vienna","institution_ids":["https://openalex.org/I4210122474"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002388358","display_name":"Alessandro Finamore","orcid":"https://orcid.org/0000-0003-2226-2506"},"institutions":[{"id":"https://openalex.org/I177477856","display_name":"Politecnico di Torino","ror":"https://ror.org/00bgk9508","country_code":"IT","type":"education","lineage":["https://openalex.org/I177477856"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Alessandro Finamore","raw_affiliation_strings":["Politecnico di Torino","Polit\u00e9cnico di Torino"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Politecnico di Torino","institution_ids":["https://openalex.org/I177477856"]},{"raw_affiliation_string":"Polit\u00e9cnico di Torino","institution_ids":["https://openalex.org/I177477856"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081556750","display_name":"Pedro Casas","orcid":"https://orcid.org/0000-0002-0951-2331"},"institutions":[{"id":"https://openalex.org/I4210122474","display_name":"Forschungszentrum Telekommunikation Wien","ror":"https://ror.org/026nftk33","country_code":"AT","type":"facility","lineage":["https://openalex.org/I4210122474"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Pedro Casas","raw_affiliation_strings":["FTW - Telecommunications Research Center, Vienna","FTW - Telecommunications Research Center Vienna"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FTW - Telecommunications Research Center, Vienna","institution_ids":["https://openalex.org/I4210122474"]},{"raw_affiliation_string":"FTW - Telecommunications Research Center Vienna","institution_ids":["https://openalex.org/I4210122474"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.9651,"has_fulltext":false,"cited_by_count":29,"citation_normalized_percentile":{"value":0.97110297,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11478","display_name":"Caching and Content Delivery","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/peering","display_name":"Peering","score":0.9239094257354736},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8441349267959595},{"id":"https://openalex.org/keywords/cache","display_name":"Cache","score":0.7723588347434998},{"id":"https://openalex.org/keywords/content-delivery-network","display_name":"Content delivery network","score":0.7332496643066406},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.6810758113861084},{"id":"https://openalex.org/keywords/provisioning","display_name":"Provisioning","score":0.646331787109375},{"id":"https://openalex.org/keywords/content-delivery","display_name":"Content delivery","score":0.638654351234436},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.636987566947937},{"id":"https://openalex.org/keywords/quality-of-experience","display_name":"Quality of experience","score":0.6164684891700745},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5731110572814941},{"id":"https://openalex.org/keywords/quality-of-service","display_name":"Quality of service","score":0.5333174467086792},{"id":"https://openalex.org/keywords/internet-traffic","display_name":"Internet traffic","score":0.47493985295295715},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.4262970983982086},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3247523903846741},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.26953810453414917}],"concepts":[{"id":"https://openalex.org/C95981142","wikidata":"https://www.wikidata.org/wiki/Q772532","display_name":"Peering","level":3,"score":0.9239094257354736},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8441349267959595},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.7723588347434998},{"id":"https://openalex.org/C2778898579","wikidata":"https://www.wikidata.org/wiki/Q72588","display_name":"Content delivery network","level":3,"score":0.7332496643066406},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6810758113861084},{"id":"https://openalex.org/C172191483","wikidata":"https://www.wikidata.org/wiki/Q1071806","display_name":"Provisioning","level":2,"score":0.646331787109375},{"id":"https://openalex.org/C2986847828","wikidata":"https://www.wikidata.org/wiki/Q269415","display_name":"Content delivery","level":2,"score":0.638654351234436},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.636987566947937},{"id":"https://openalex.org/C2779333187","wikidata":"https://www.wikidata.org/wiki/Q3132648","display_name":"Quality of experience","level":3,"score":0.6164684891700745},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5731110572814941},{"id":"https://openalex.org/C5119721","wikidata":"https://www.wikidata.org/wiki/Q220501","display_name":"Quality of service","level":2,"score":0.5333174467086792},{"id":"https://openalex.org/C63969886","wikidata":"https://www.wikidata.org/wiki/Q3536440","display_name":"Internet traffic","level":3,"score":0.47493985295295715},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.4262970983982086},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3247523903846741},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.26953810453414917},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/itc.2014.6932930","is_oa":false,"landing_page_url":"https://doi.org/10.1109/itc.2014.6932930","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2014 26th International Teletraffic Congress (ITC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W3487859","https://openalex.org/W285471286","https://openalex.org/W1554371160","https://openalex.org/W1976986662","https://openalex.org/W1999803037","https://openalex.org/W2003674501","https://openalex.org/W2007759057","https://openalex.org/W2026654227","https://openalex.org/W2041196105","https://openalex.org/W2072852200","https://openalex.org/W2085533912","https://openalex.org/W2086990834","https://openalex.org/W2099111195","https://openalex.org/W2130384722","https://openalex.org/W2137632784","https://openalex.org/W2162266953","https://openalex.org/W2164408300","https://openalex.org/W2298622429","https://openalex.org/W3166957157","https://openalex.org/W3172197133","https://openalex.org/W4239856175","https://openalex.org/W6600140087","https://openalex.org/W6683971944","https://openalex.org/W7045218109"],"related_works":["https://openalex.org/W2062382656","https://openalex.org/W1498985941","https://openalex.org/W2555431679","https://openalex.org/W2136428677","https://openalex.org/W2331062380","https://openalex.org/W2952628067","https://openalex.org/W2768491979","https://openalex.org/W3126902404","https://openalex.org/W2562217811","https://openalex.org/W1995586121"],"abstract_inverted_index":{"Today's":[0],"Internet":[1,133,146],"traffic":[2,109,180,234],"is":[3,64,205],"largely":[4],"dominated":[5],"by":[6,25,111,158,236,246],"major":[7,132,144],"content":[8,35],"providers":[9],"and":[10,21,30,57,81,98,137,192,212,230,259],"highly":[11],"distributed":[12],"Content":[13],"Delivery":[14],"Networks":[15],"(CDNs).":[16],"Internet-scale":[17],"applications":[18],"like":[19,28],"Facebook":[20,136,179],"YouTube":[22,188],"are":[23,87],"served":[24,88],"large":[26],"CDNs":[27],"Akamai":[29,159],"Google":[31],"CDN,":[32],"which":[33],"push":[34],"as":[36,40,116,118],"close":[37],"to":[38,42,72,210],"end-users":[39],"possible":[41],"improve":[43],"the":[44,48,51,59,108,112,120,128,154,167,178,185,196,208,233,248,253],"overall":[45],"performance":[46],"of":[47,53,130,187,199,252],"applications,":[49,134],"minimize":[50],"effects":[52],"peering":[54],"point":[55],"congestion":[56],"enhance":[58],"user":[60],"experience.":[61,122,200],"The":[62,238],"load":[63,99],"balanced":[65],"among":[66],"multiple":[67],"servers":[68],"or":[69],"caches":[70],"according":[71],"non-disclosed":[73],"CDN":[74],"internal":[75],"policies.":[76],"As":[77],"such,":[78],"adopting":[79],"space":[80],"time":[82],"variant":[83],"policies,":[84],"users'":[85,197],"requests":[86],"from":[89],"different":[90,94],"physical":[91],"locations":[92],"at":[93,143],"time.":[95],"Cache":[96],"selection":[97,156,190],"balancing":[100],"policies":[101],"can":[102],"have":[103],"a":[104],"relevant":[105],"impact":[106,194],"on":[107,119,173,195],"routed":[110],"underlying":[113],"transport":[114,164],"network,":[115],"well":[117],"end-user":[121],"In":[123],"this":[124],"paper,":[125],"we":[126,151,170,183,218],"analyze":[127],"provisioning":[129],"two":[131,140],"namely":[135],"YouTube,":[138],"in":[139,162,177,232],"datasets":[141],"collected":[142],"European":[145],"Service":[147],"Providers":[148],"(ISPs).":[149],"First,":[150],"show":[152],"how":[153],"cache":[155,189],"performed":[157],"might":[160],"result":[161],"higher":[163,257],"costs":[165],"for":[166,207,225],"ISP.":[168],"Second,":[169],"present":[171,219],"evidence":[172],"large-scale":[174],"outages":[175],"occurring":[176],"distribution.":[181],"Finally,":[182],"characterize":[184],"variation":[186],"strategies":[191],"their":[193],"quality":[198],"We":[201],"argue":[202],"that":[203],"it":[204],"important":[206],"ISP":[209],"rapidly":[211],"automatically":[213],"detect":[214],"such":[215],"events.":[216],"Therefore,":[217],"an":[220],"Anomaly":[221],"Detection":[222],"(AD)":[223],"system":[224],"detecting":[226],"unexpected":[227],"cache-selection":[228],"events":[229],"changes":[231],"delivered":[235],"CDNs.":[237],"proposed":[239],"algorithm":[240],"improves":[241],"over":[242],"traditional":[243],"AD":[244],"approaches":[245],"analyzing":[247],"complete":[249],"probability":[250],"distribution":[251],"monitored":[254],"features,":[255],"providing":[256],"visibility":[258],"better":[260],"detection":[261],"capabilities.":[262]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":6},{"year":2015,"cited_by_count":11},{"year":2014,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}