{"id":"https://openalex.org/W2134008955","doi":"https://doi.org/10.1109/lcn.2012.6423689","title":"Decoupling non-stationary and stationary components in long range network time series in the context of anomaly detection","display_name":"Decoupling non-stationary and stationary components in long range network time series in the context of anomaly detection","publication_year":2012,"publication_date":"2012-10-01","ids":{"openalex":"https://openalex.org/W2134008955","doi":"https://doi.org/10.1109/lcn.2012.6423689","mag":"2134008955"},"language":"en","primary_location":{"id":"doi:10.1109/lcn.2012.6423689","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lcn.2012.6423689","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"37th Annual IEEE Conference on Local Computer Networks","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050641921","display_name":"Cyriac James","orcid":null},"institutions":[{"id":"https://openalex.org/I24676775","display_name":"Indian Institute of Technology Madras","ror":"https://ror.org/03v0r5n49","country_code":"IN","type":"facility","lineage":["https://openalex.org/I24676775"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Cyriac James","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Madras, Chennai, India","Department of Computer Science & Engineering, Indian Institute of Technology Madras, Chennai - 600036, India#TAB#"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Madras, Chennai, India","institution_ids":["https://openalex.org/I24676775"]},{"raw_affiliation_string":"Department of Computer Science & Engineering, Indian Institute of Technology Madras, Chennai - 600036, India#TAB#","institution_ids":["https://openalex.org/I24676775"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032418366","display_name":"Hema A. Murthy","orcid":"https://orcid.org/0000-0003-3611-6550"},"institutions":[{"id":"https://openalex.org/I24676775","display_name":"Indian Institute of Technology Madras","ror":"https://ror.org/03v0r5n49","country_code":"IN","type":"facility","lineage":["https://openalex.org/I24676775"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Hema A. Murthy","raw_affiliation_strings":["Department of Computer Science and Engineering, Indian Institute of Technology Madras, Chennai, India","Department of Computer Science & Engineering, Indian Institute of Technology Madras, Chennai - 600036, India#TAB#"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Indian Institute of Technology Madras, Chennai, India","institution_ids":["https://openalex.org/I24676775"]},{"raw_affiliation_string":"Department of Computer Science & Engineering, Indian Institute of Technology Madras, Chennai - 600036, India#TAB#","institution_ids":["https://openalex.org/I24676775"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5050641921"],"corresponding_institution_ids":["https://openalex.org/I24676775"],"apc_list":null,"apc_paid":null,"fwci":1.0638,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.7991273,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"51","issue":null,"first_page":"76","last_page":"84"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6242769360542297},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6094133853912354},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6047682762145996},{"id":"https://openalex.org/keywords/series","display_name":"Series (stratigraphy)","score":0.5888020992279053},{"id":"https://openalex.org/keywords/time-series","display_name":"Time series","score":0.5611647963523865},{"id":"https://openalex.org/keywords/decoupling","display_name":"Decoupling (probability)","score":0.5216875076293945},{"id":"https://openalex.org/keywords/parametric-statistics","display_name":"Parametric statistics","score":0.5094061493873596},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.48603326082229614},{"id":"https://openalex.org/keywords/range","display_name":"Range (aeronautics)","score":0.4800166189670563},{"id":"https://openalex.org/keywords/exponential-smoothing","display_name":"Exponential smoothing","score":0.45342421531677246},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3640950322151184},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.2767176628112793},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.2612716555595398},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.2302848994731903},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.10157638788223267},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.08151811361312866},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.0809401273727417},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.07930013537406921}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6242769360542297},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6094133853912354},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6047682762145996},{"id":"https://openalex.org/C143724316","wikidata":"https://www.wikidata.org/wiki/Q312468","display_name":"Series (stratigraphy)","level":2,"score":0.5888020992279053},{"id":"https://openalex.org/C151406439","wikidata":"https://www.wikidata.org/wiki/Q186588","display_name":"Time series","level":2,"score":0.5611647963523865},{"id":"https://openalex.org/C205606062","wikidata":"https://www.wikidata.org/wiki/Q5249645","display_name":"Decoupling (probability)","level":2,"score":0.5216875076293945},{"id":"https://openalex.org/C117251300","wikidata":"https://www.wikidata.org/wiki/Q1849855","display_name":"Parametric statistics","level":2,"score":0.5094061493873596},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.48603326082229614},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.4800166189670563},{"id":"https://openalex.org/C133710760","wikidata":"https://www.wikidata.org/wiki/Q775837","display_name":"Exponential smoothing","level":2,"score":0.45342421531677246},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3640950322151184},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2767176628112793},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2612716555595398},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.2302848994731903},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.10157638788223267},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.08151811361312866},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0809401273727417},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.07930013537406921},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C133731056","wikidata":"https://www.wikidata.org/wiki/Q4917288","display_name":"Control engineering","level":1,"score":0.0},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/lcn.2012.6423689","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lcn.2012.6423689","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"37th Annual IEEE Conference on Local Computer Networks","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":56,"referenced_works":["https://openalex.org/W566857321","https://openalex.org/W1501633087","https://openalex.org/W1510378440","https://openalex.org/W1512184319","https://openalex.org/W1516506771","https://openalex.org/W1518315762","https://openalex.org/W1519631210","https://openalex.org/W1572793278","https://openalex.org/W1595464627","https://openalex.org/W1674877186","https://openalex.org/W1860000316","https://openalex.org/W1871954564","https://openalex.org/W1970359105","https://openalex.org/W1977940403","https://openalex.org/W1979575715","https://openalex.org/W1986140129","https://openalex.org/W1986917279","https://openalex.org/W2020944421","https://openalex.org/W2036532316","https://openalex.org/W2042166926","https://openalex.org/W2042244947","https://openalex.org/W2048380389","https://openalex.org/W2051795845","https://openalex.org/W2103849785","https://openalex.org/W2105818147","https://openalex.org/W2114615295","https://openalex.org/W2115331025","https://openalex.org/W2118931532","https://openalex.org/W2121904442","https://openalex.org/W2124164763","https://openalex.org/W2127784162","https://openalex.org/W2128599397","https://openalex.org/W2138705607","https://openalex.org/W2145023731","https://openalex.org/W2148275477","https://openalex.org/W2156896296","https://openalex.org/W2157578436","https://openalex.org/W2161317557","https://openalex.org/W2164101779","https://openalex.org/W2166431113","https://openalex.org/W2168535919","https://openalex.org/W2542991588","https://openalex.org/W3009746682","https://openalex.org/W3015379812","https://openalex.org/W3121583116","https://openalex.org/W3124733080","https://openalex.org/W4242671632","https://openalex.org/W4243455288","https://openalex.org/W4246982104","https://openalex.org/W6630003010","https://openalex.org/W6630402910","https://openalex.org/W6630825995","https://openalex.org/W6637096788","https://openalex.org/W6669706742","https://openalex.org/W6677150613","https://openalex.org/W6677230841"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4377864969","https://openalex.org/W2972971679"],"abstract_inverted_index":{"Network":[0],"traffic":[1,95,312],"characterisation":[2],"and":[3,110,163,202,233,304,327,339],"modeling":[4],"using":[5,26,112,140],"time":[6,23,39,70,90,180,220],"series":[7,24,91],"models":[8],"is":[9,83,117,150,269,292,354],"an":[10,84,97,243],"area":[11],"which":[12],"has":[13],"been":[14],"extensively":[15],"studied":[16],"in":[17,120,131,198,294],"the":[18,33,42,54,57,73,88,106,121,128,161,169,182,209,212,253,257,261,263,266,278,318,347,350,357],"past.":[19],"Coarse-grained":[20],"(aggregated":[21],"traffic)":[22],"analysis":[25,116],"parametric":[27,113],"approach,":[28,137],"primarily":[29],"carried":[30,118,343],"out":[31,119,344],"at":[32,65,96,176],"backbone":[34],"network":[35,67,94,219],"over":[36,68,101,321],"a":[37,102,135,238,322],"long":[38,103,217],"period":[40,71,104,323],"(of":[41,72,105,181],"order":[43,74,107,183],"of":[44,75,93,108,123,127,160,179,184,200,208,215,260,265,280,287,296,317,324,349],"days":[45,109],"to":[46,86,152,166,173,187,225,345],"months),":[47],"show":[48],"strong":[49],"deterministic":[50],"cyclic":[51],"trends,":[52],"while":[53],"fine-grained":[55,89],"(at":[56],"packet":[58],"or":[59,142],"flow":[60],"level)":[61],"counterpart,":[62],"done":[63],"mostly":[64],"edge":[66,98,319],"small":[69],"few":[76,185],"minutes),":[77],"exhibit":[78,226],"self-similar":[79],"behaviour.":[80],"This":[81],"paper":[82,210],"attempt":[85],"study":[87],"characteristics":[92,214],"network,":[99],"observed":[100,355],"weeks),":[111],"approach.":[114],"The":[115,205],"context":[122],"anomaly":[124],"detection.":[125],"Most":[126],"earlier":[129],"attempts":[130],"this":[132,192],"direction":[133],"followed":[134],"non-parametric":[136],"by":[138,237,271],"either":[139],"adaptive":[141,338],"non-adaptive":[143,340],"(i.e":[144,248],"assuming":[145],"stationarity)":[146],"mechanisms,":[147],"whose":[148],"performance":[149,362],"found":[151,224],"be":[153,174,235],"extremely":[154],"sensitive":[155],"towards":[156],"empirically":[157],"determined":[158],"parameters":[159,171],"model":[162,170,267],"hence":[164],"difficult":[165],"determine.":[167],"Also,":[168],"need":[172],"recomputed":[175],"regular":[177],"intervals":[178,331],"seconds":[186],"minutes).":[188],"To":[189],"some":[190],"extent,":[191],"make":[193],"such":[194,216],"algorithms":[195],"less":[196],"attractive":[197],"terms":[199,295],"generality":[201],"practical":[203],"implementation.":[204],"first":[206,245],"part":[207,259],"discusses":[211],"statistical":[213],"range":[218],"series.":[221],"These":[222],"are":[223,308,342],"structural":[227],"breaks":[228],"apart":[229],"from":[230,252,315],"transient":[231],"shocks":[232],"can":[234],"approximated":[236],"stationary":[239,250],"AR":[240],"model,":[241],"after":[242],"absolute":[244],"difference":[246],"transformation":[247],"decoupling":[249],"component":[251],"non-stationary":[254],"one).":[255],"In":[256],"later":[258],"paper,":[262],"efficacy":[264],"proposed":[268,351,358],"evaluated,":[270],"conducting":[272],"extensive":[273],"trace":[274],"driven":[275],"simulations":[276],"for":[277,328,367],"detection":[279,302,305,365],"low":[281,371],"intensity":[282],"TCP":[283],"SYN":[284],"flood":[285],"Denial":[286],"Service":[288],"(DoS)":[289],"attacks.":[290],"Performance":[291],"measured":[293],"false":[297,299,368],"positives,":[298],"alarm":[300],"time,":[301],"rate":[303],"delay.":[306],"Experiments":[307],"performed":[309],"on":[310],"actual":[311],"traces":[313],"collected":[314],"one":[316],"networks":[320],"three":[325],"months":[326],"various":[329],"sampling":[330],"(10s,":[332],"60s,":[333],"120s).":[334],"Comparative":[335],"studies":[336],"with":[337,363],"methods":[341],"demonstrate":[346],"relevance":[348],"model.":[352],"It":[353],"that":[356],"method":[359],"gives":[360],"better":[361],"100%":[364],"accuracy":[366],"positive":[369],"as":[370,372],"0.9%.":[373]},"counts_by_year":[{"year":2018,"cited_by_count":2},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":2},{"year":2013,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}