{"id":"https://openalex.org/W2113715597","doi":"https://doi.org/10.1109/lcn.2009.5355038","title":"npf-a simple, traffic-adaptive packet classifier using on-line reorganization of rule trees","display_name":"npf-a simple, traffic-adaptive packet classifier using on-line reorganization of rule trees","publication_year":2009,"publication_date":"2009-10-01","ids":{"openalex":"https://openalex.org/W2113715597","doi":"https://doi.org/10.1109/lcn.2009.5355038","mag":"2113715597"},"language":"en","primary_location":{"id":"doi:10.1109/lcn.2009.5355038","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lcn.2009.5355038","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2009 IEEE 34th Conference on Local Computer Networks","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024921792","display_name":"Shariful Hasan Shaikot","orcid":null},"institutions":[{"id":"https://openalex.org/I72951846","display_name":"Washington State University","ror":"https://ror.org/05dk0ce17","country_code":"US","type":"education","lineage":["https://openalex.org/I72951846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shariful Hasan Shaikot","raw_affiliation_strings":["School of Electrical Engineering and Computer Science, Washington State University, Pullman, WA, USA","School of Electrical Engineering and Computer Science, Washington State University, Pullman, Washington 99164-2752, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, Washington State University, Pullman, WA, USA","institution_ids":["https://openalex.org/I72951846"]},{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, Washington State University, Pullman, Washington 99164-2752, USA","institution_ids":["https://openalex.org/I72951846"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064143823","display_name":"Min\u2010Sik Kim","orcid":"https://orcid.org/0000-0001-7317-5360"},"institutions":[{"id":"https://openalex.org/I72951846","display_name":"Washington State University","ror":"https://ror.org/05dk0ce17","country_code":"US","type":"education","lineage":["https://openalex.org/I72951846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Min Sik Kim","raw_affiliation_strings":["School of Electrical Engineering and Computer Science, Washington State University, Pullman, WA, USA","School of Electrical Engineering and Computer Science, Washington State University, Pullman, Washington 99164-2752, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, Washington State University, Pullman, WA, USA","institution_ids":["https://openalex.org/I72951846"]},{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, Washington State University, Pullman, Washington 99164-2752, USA","institution_ids":["https://openalex.org/I72951846"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I72951846"],"apc_list":null,"apc_paid":null,"fwci":0.5489,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.61778563,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"899","last_page":"906"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8559293746948242},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.7950031161308289},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.6109737753868103},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5977516770362854},{"id":"https://openalex.org/keywords/packet-generator","display_name":"Packet generator","score":0.5700010657310486},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.5689942836761475},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.4377056658267975},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.43203556537628174},{"id":"https://openalex.org/keywords/fast-packet-switching","display_name":"Fast packet switching","score":0.4316033720970154},{"id":"https://openalex.org/keywords/packet-analyzer","display_name":"Packet analyzer","score":0.4273248314857483},{"id":"https://openalex.org/keywords/processing-delay","display_name":"Processing delay","score":0.4014829397201538},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.39734429121017456},{"id":"https://openalex.org/keywords/transmission-delay","display_name":"Transmission delay","score":0.2217893898487091},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.19397059082984924}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8559293746948242},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.7950031161308289},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6109737753868103},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5977516770362854},{"id":"https://openalex.org/C158381197","wikidata":"https://www.wikidata.org/wiki/Q606516","display_name":"Packet generator","level":5,"score":0.5700010657310486},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.5689942836761475},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.4377056658267975},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.43203556537628174},{"id":"https://openalex.org/C115023222","wikidata":"https://www.wikidata.org/wiki/Q5437045","display_name":"Fast packet switching","level":5,"score":0.4316033720970154},{"id":"https://openalex.org/C95362637","wikidata":"https://www.wikidata.org/wiki/Q54366","display_name":"Packet analyzer","level":3,"score":0.4273248314857483},{"id":"https://openalex.org/C21434264","wikidata":"https://www.wikidata.org/wiki/Q7247320","display_name":"Processing delay","level":4,"score":0.4014829397201538},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.39734429121017456},{"id":"https://openalex.org/C108921912","wikidata":"https://www.wikidata.org/wiki/Q7834639","display_name":"Transmission delay","level":3,"score":0.2217893898487091},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.19397059082984924}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/lcn.2009.5355038","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lcn.2009.5355038","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2009 IEEE 34th Conference on Local Computer Networks","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5799999833106995}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W124244495","https://openalex.org/W1516506771","https://openalex.org/W1710586424","https://openalex.org/W1989218322","https://openalex.org/W2003648673","https://openalex.org/W2022106793","https://openalex.org/W2094051614","https://openalex.org/W2098580177","https://openalex.org/W2099844038","https://openalex.org/W2099964107","https://openalex.org/W2106356253","https://openalex.org/W2112208179","https://openalex.org/W2118179895","https://openalex.org/W2129700391","https://openalex.org/W2134826720","https://openalex.org/W2137145600","https://openalex.org/W2138178896","https://openalex.org/W2143377393","https://openalex.org/W2153102141","https://openalex.org/W2752885492","https://openalex.org/W3017037959","https://openalex.org/W3145128584","https://openalex.org/W6605045863","https://openalex.org/W6637563156"],"related_works":["https://openalex.org/W2372231800","https://openalex.org/W2005981682","https://openalex.org/W2771473299","https://openalex.org/W3011083237","https://openalex.org/W2406788951","https://openalex.org/W1605133625","https://openalex.org/W2514988192","https://openalex.org/W2023141338","https://openalex.org/W2022343998","https://openalex.org/W1996538372"],"abstract_inverted_index":{"Packet":[0],"classification":[1],"is":[2,40,136],"one":[3],"of":[4,8,48,87,91,98,107,109,133,217],"the":[5,34,46,71,88,96,131,167,173,227],"crucial":[6],"components":[7],"application":[9],"such":[10],"as":[11,28],"firewalls,":[12],"intrusion":[13,21],"detection,":[14],"and":[15,32,94,129,160],"differentiated":[16],"services.":[17],"For":[18],"example,":[19],"an":[20,54,77,114,134,215],"detection":[22],"system":[23],"(IDS)":[24],"classifies":[25],"packets":[26,60,121],"either":[27],"benign":[29],"or":[30],"malicious":[31,59],"alerts":[33],"network":[35],"administrator":[36],"when":[37],"hostile":[38],"traffic":[39,150,174],"detected.":[41],"Since":[42],"existing":[43,177],"IDS":[44,55,78,115,135],"spend":[45],"majority":[47],"CPU":[49],"time":[50,81,118,220],"in":[51,82,149,193,223],"packet":[52,72,83,124,162,211,222],"classification,":[53],"fails":[56],"to":[57,69,119,225],"detect":[58],"under":[61],"high":[62],"load.":[63],"Many":[64],"ideas":[65],"have":[66],"been":[67],"proposed":[68],"make":[70],"inspection":[73],"faster":[74],"so":[75],"that":[76,206],"spends":[79,116],"less":[80,219],"classification.":[84],"However,":[85],"because":[86],"increasing":[89],"number":[90,97],"security":[92],"threats":[93],"vulnerabilities,":[95],"rules":[99],"often":[100],"exceeds":[101],"thousands,":[102],"requiring":[103,179],"more":[104],"than":[105],"hundreds":[106],"megabytes":[108],"memory.":[110],"As":[111],"a":[112,158,180,209],"result,":[113],"longer":[117],"classify":[120,226],"since":[122],"each":[123],"incurs":[125],"many":[126],"memory":[127,139],"accesses,":[128],"thus":[130],"throughput":[132,195],"limited":[137],"by":[138,146,213],"bandwidth.":[140],"The":[141],"problem":[142],"can":[143],"be":[144],"mitigated":[145],"exploiting":[147],"locality":[148],"patterns.":[151],"In":[152],"this":[153],"paper,":[154],"we":[155],"propose":[156],"npf,":[157],"fast":[159],"traffic-adaptive":[161],"classifier":[163,212],"which":[164],"dynamically":[165],"reorganizes":[166],"internal":[168],"data":[169],"structure":[170],"based":[171],"on":[172,201],"pattern.":[175],"Unlike":[176],"approaches":[178],"separate,":[181],"off-line":[182],"reorganization":[183,187],"phase,":[184],"npf":[185,207],"performs":[186],"on-line":[188],"with":[189],"little":[190],"overhead,":[191],"resulting":[192],"higher":[194],"without":[196],"compromising":[197],"accuracy.":[198],"Experimental":[199],"results":[200],"our":[202],"test":[203],"bed":[204],"show":[205],"outperforms":[208],"traditional":[210],"spending":[214],"order":[216,224],"magnitude":[218],"per":[221],"packet.":[228]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2012,"cited_by_count":2}],"updated_date":"2026-08-12T21:12:35.861297","created_date":"2025-10-10T00:00:00"}