{"id":"https://openalex.org/W3095388067","doi":"https://doi.org/10.1109/lnet.2020.3035272","title":"Faking Elephant Flows on the Count Min Sketch","display_name":"Faking Elephant Flows on the Count Min Sketch","publication_year":2020,"publication_date":"2020-11-02","ids":{"openalex":"https://openalex.org/W3095388067","doi":"https://doi.org/10.1109/lnet.2020.3035272","mag":"3095388067"},"language":"en","primary_location":{"id":"doi:10.1109/lnet.2020.3035272","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lnet.2020.3035272","pdf_url":null,"source":{"id":"https://openalex.org/S4210234060","display_name":"IEEE Networking Letters","issn_l":"2576-3156","issn":["2576-3156"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Networking Letters","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5059038412","display_name":"Josu Murua","orcid":null},"institutions":[{"id":"https://openalex.org/I50357001","display_name":"Universidad Carlos III de Madrid","ror":"https://ror.org/03ths8210","country_code":"ES","type":"education","lineage":["https://openalex.org/I50357001"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Josu Murua","raw_affiliation_strings":["Universidad Carlos III de Madrid, Legan\u00e9s, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad Carlos III de Madrid, Legan\u00e9s, Spain","institution_ids":["https://openalex.org/I50357001"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080322790","display_name":"Pedro Reviriego","orcid":"https://orcid.org/0000-0003-2540-5234"},"institutions":[{"id":"https://openalex.org/I50357001","display_name":"Universidad Carlos III de Madrid","ror":"https://ror.org/03ths8210","country_code":"ES","type":"education","lineage":["https://openalex.org/I50357001"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Pedro Reviriego","raw_affiliation_strings":["Universidad Carlos III de Madrid, Legan\u00e9s, Spain"],"raw_orcid":"https://orcid.org/0000-0003-2540-5234","affiliations":[{"raw_affiliation_string":"Universidad Carlos III de Madrid, Legan\u00e9s, Spain","institution_ids":["https://openalex.org/I50357001"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I50357001"],"apc_list":null,"apc_paid":null,"fwci":0.4637,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.67710415,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":"2","issue":"4","first_page":"199","last_page":"202"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sketch","display_name":"Sketch","score":0.9321804046630859},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7887901067733765},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6942445635795593},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5958991050720215},{"id":"https://openalex.org/keywords/fraction","display_name":"Fraction (chemistry)","score":0.5264133810997009},{"id":"https://openalex.org/keywords/flow","display_name":"Flow (mathematics)","score":0.507098913192749},{"id":"https://openalex.org/keywords/flow-network","display_name":"Flow network","score":0.4551643133163452},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.34726643562316895},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.28245455026626587},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2709047794342041},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.11761736869812012},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.10119861364364624},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.09965506196022034}],"concepts":[{"id":"https://openalex.org/C2779231336","wikidata":"https://www.wikidata.org/wiki/Q7534724","display_name":"Sketch","level":2,"score":0.9321804046630859},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7887901067733765},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6942445635795593},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5958991050720215},{"id":"https://openalex.org/C149629883","wikidata":"https://www.wikidata.org/wiki/Q660926","display_name":"Fraction (chemistry)","level":2,"score":0.5264133810997009},{"id":"https://openalex.org/C38349280","wikidata":"https://www.wikidata.org/wiki/Q1434290","display_name":"Flow (mathematics)","level":2,"score":0.507098913192749},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.4551643133163452},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.34726643562316895},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.28245455026626587},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2709047794342041},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.11761736869812012},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.10119861364364624},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.09965506196022034},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/lnet.2020.3035272","is_oa":false,"landing_page_url":"https://doi.org/10.1109/lnet.2020.3035272","pdf_url":null,"source":{"id":"https://openalex.org/S4210234060","display_name":"IEEE Networking Letters","issn_l":"2576-3156","issn":["2576-3156"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Networking Letters","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4034304795","display_name":null,"funder_award_id":"PID2019-104207RB-I0","funder_id":"https://openalex.org/F4320322930","funder_display_name":"Ministerio de Ciencia e Innovaci\u00f3n"},{"id":"https://openalex.org/G4814546071","display_name":null,"funder_award_id":"Go2Edge","funder_id":"https://openalex.org/F4320322930","funder_display_name":"Ministerio de Ciencia e Innovaci\u00f3n"},{"id":"https://openalex.org/G5923696992","display_name":null,"funder_award_id":"RED2018-102585-T","funder_id":"https://openalex.org/F4320322930","funder_display_name":"Ministerio de Ciencia e Innovaci\u00f3n"}],"funders":[{"id":"https://openalex.org/F4320322930","display_name":"Ministerio de Ciencia e Innovaci\u00f3n","ror":"https://ror.org/034900433"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W1493892051","https://openalex.org/W1524340365","https://openalex.org/W1552772576","https://openalex.org/W1599136440","https://openalex.org/W1675727887","https://openalex.org/W2012549717","https://openalex.org/W2022858489","https://openalex.org/W2080234606","https://openalex.org/W2834288129","https://openalex.org/W2952451113","https://openalex.org/W2983374155","https://openalex.org/W3005974829","https://openalex.org/W3013554296","https://openalex.org/W4249843299","https://openalex.org/W6629496199","https://openalex.org/W6636084539"],"related_works":["https://openalex.org/W2378994405","https://openalex.org/W2385974820","https://openalex.org/W4311255633","https://openalex.org/W2001284284","https://openalex.org/W2368007657","https://openalex.org/W4250257362","https://openalex.org/W2352790364","https://openalex.org/W2068289888","https://openalex.org/W2391191500","https://openalex.org/W2365398175"],"abstract_inverted_index":{"Detecting":[0],"flows":[1,17,48],"that":[2,150,154,187],"have":[3,199],"a":[4,27,60,121,151,174],"large":[5,52],"number":[6,46,127],"of":[7,30,47,62,83,99,118,128,137,202],"packets":[8,129],"is":[9,55,111,155,159,177,207],"an":[10,144,157,166,171],"important":[11],"function":[12],"in":[13,102,120,123,132],"network":[14],"monitoring.":[15],"Those":[16],"known":[18],"as":[19,73,161],"elephants":[20,95,193],"are":[21,75],"typically":[22],"few":[23],"but":[24],"account":[25],"for":[26,143],"significant":[28],"fraction":[29],"the":[31,45,63,87,97,103,107,116,126,135,141,188,204],"traffic":[32],"and":[33,53,89,125,179,183],"it":[34,54],"may":[35],"be":[36,50],"interesting":[37],"to":[38,58,72,77,93,114,146,148,168],"treat":[39],"them":[40],"differently.":[41],"In":[42,163],"high-speed":[43],"networks,":[44],"can":[49,190],"very":[51],"not":[56,156,198],"practical":[57],"keep":[59],"list":[61],"active":[64],"flows.":[65,80],"Instead,":[66],"approximate":[67],"data":[68],"structures":[69],"commonly":[70],"referred":[71],"sketches":[74,84,138],"used":[76,113],"detect":[78,94],"elephant":[79,158],"The":[81,181],"use":[82,136],"significantly":[85],"reduces":[86],"memory":[88],"computational":[90],"effort":[91],"needed":[92],"at":[96],"cost":[98],"small":[100],"inaccuracies":[101],"detection.":[104],"For":[105],"example,":[106],"Count-Min":[108,175,205],"Sketch":[109,176,206],"(CMS)":[110],"widely":[112],"estimate":[115],"frequency":[117],"elements":[119],"set":[122],"general":[124],"per":[130],"flow":[131,153],"particular.":[133],"However,":[134],"also":[139],"opens":[140],"door":[142],"attacker":[145,189],"try":[147],"make":[149],"specific":[152],"detected":[160],"such.":[162],"this":[164],"letter,":[165],"algorithm":[167],"perform":[169],"such":[170],"attack":[172],"on":[173],"presented":[178],"evaluated.":[180],"analysis":[182],"simulation":[184],"results":[185],"show":[186],"create":[191],"fake":[192],"even":[194],"when":[195],"he":[196],"does":[197],"any":[200],"knowledge":[201],"how":[203],"implemented.":[208]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}