{"id":"https://openalex.org/W2200019417","doi":"https://doi.org/10.1109/milcom.2015.7357467","title":"Detection of stealthy TCP-based DoS attacks","display_name":"Detection of stealthy TCP-based DoS attacks","publication_year":2015,"publication_date":"2015-10-01","ids":{"openalex":"https://openalex.org/W2200019417","doi":"https://doi.org/10.1109/milcom.2015.7357467","mag":"2200019417"},"language":"en","primary_location":{"id":"doi:10.1109/milcom.2015.7357467","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom.2015.7357467","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2015 - 2015 IEEE Military Communications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069402162","display_name":"Azeem Aqil","orcid":null},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Azeem Aqil","raw_affiliation_strings":["UC Riverside"],"affiliations":[{"raw_affiliation_string":"UC Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085212625","display_name":"Ahmed Osama Fathy Atya","orcid":"https://orcid.org/0000-0002-5591-4657"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmed O. F. Atya","raw_affiliation_strings":["UC Riverside"],"affiliations":[{"raw_affiliation_string":"UC Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055045569","display_name":"Trent Jaeger","orcid":"https://orcid.org/0000-0002-4964-1170"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Trent Jaeger","raw_affiliation_strings":["Penn State University"],"affiliations":[{"raw_affiliation_string":"Penn State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086268637","display_name":"Srikanth V. Krishnamurthy","orcid":"https://orcid.org/0000-0002-6533-4381"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Srikanth V. Krishnamurthy","raw_affiliation_strings":["UC Riverside"],"affiliations":[{"raw_affiliation_string":"UC Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009965537","display_name":"Karl Levitt","orcid":"https://orcid.org/0000-0002-1464-2966"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Karl Levitt","raw_affiliation_strings":["UC Davis"],"affiliations":[{"raw_affiliation_string":"UC Davis","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055368149","display_name":"Patrick McDaniel","orcid":"https://orcid.org/0000-0003-2091-7484"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Patrick D. McDaniel","raw_affiliation_strings":["Penn State University"],"affiliations":[{"raw_affiliation_string":"Penn State University","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037582591","display_name":"Jeff Rowe","orcid":null},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jeff Rowe","raw_affiliation_strings":["UC Davis"],"affiliations":[{"raw_affiliation_string":"UC Davis","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103191815","display_name":"Ananthram Swami","orcid":"https://orcid.org/0000-0003-1439-332X"},"institutions":[{"id":"https://openalex.org/I166416128","display_name":"DEVCOM Army Research Laboratory","ror":"https://ror.org/011hc8f90","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I166416128","https://openalex.org/I2802705668","https://openalex.org/I4210154437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ananthram Swami","raw_affiliation_strings":["U.S. Army Research Laboratory"],"affiliations":[{"raw_affiliation_string":"U.S. Army Research Laboratory","institution_ids":["https://openalex.org/I166416128"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5069402162"],"corresponding_institution_ids":["https://openalex.org/I103635307"],"apc_list":null,"apc_paid":null,"fwci":1.3313,"has_fulltext":false,"cited_by_count":14,"citation_normalized_percentile":{"value":0.83753045,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"10","issue":null,"first_page":"348","last_page":"353"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9961000084877014,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7518855333328247},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7503918409347534},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7484681010246277},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5543180108070374},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5308966040611267},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"False positive rate","score":0.4508582353591919},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.4161509573459625},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3618486523628235},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3302587866783142},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.172679603099823},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.13623684644699097},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.1109778881072998},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.0836595892906189}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7518855333328247},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7503918409347534},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7484681010246277},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5543180108070374},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5308966040611267},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.4508582353591919},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.4161509573459625},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3618486523628235},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3302587866783142},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.172679603099823},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.13623684644699097},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.1109778881072998},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0836595892906189}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/milcom.2015.7357467","is_oa":false,"landing_page_url":"https://doi.org/10.1109/milcom.2015.7357467","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"MILCOM 2015 - 2015 IEEE Military Communications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W1524600321","https://openalex.org/W1677315679","https://openalex.org/W2067598246","https://openalex.org/W2092891024","https://openalex.org/W2125513999","https://openalex.org/W2127273221","https://openalex.org/W2163596216","https://openalex.org/W2164256494","https://openalex.org/W6631403701","https://openalex.org/W6637296327","https://openalex.org/W6678935822"],"related_works":["https://openalex.org/W3093744786","https://openalex.org/W2393267898","https://openalex.org/W2369874171","https://openalex.org/W2383301100","https://openalex.org/W2392864074","https://openalex.org/W2352639800","https://openalex.org/W3112374511","https://openalex.org/W4283582846","https://openalex.org/W2931259","https://openalex.org/W2062826214"],"abstract_inverted_index":{"Denial":[0],"of":[1,10,25,67,71,142],"service":[2],"(DoS)":[3],"attacks":[4,12,92,121],"are":[5,15,105,129],"among":[6],"the":[7,184,194],"most":[8],"crippling":[9],"network":[11],"because":[13],"they":[14],"easy":[16],"to":[17,43,118,158,190,206],"orchestrate":[18],"and":[19,145,193],"usually":[20],"cause":[21],"an":[22,60,115],"immediate":[23],"shutdown":[24],"whatever":[26],"resource":[27],"is":[28,51,122,166,176,188,198],"targeted.":[29],"Today's":[30],"intrusion":[31,109],"detection":[32,102,110,149],"systems":[33,56],"check":[34],"if":[35,45],"specific":[36,47],"single":[37],"scalar":[38],"features":[39,127,144,155],"exceed":[40],"a":[41,46,65,79,139,147,162,168],"threshold":[42,98,164],"determine":[44],"TCP-based":[48],"DoS":[49,182],"attack":[50,68],"underway.":[52],"To":[53],"defeat":[54],"such":[55,91,120,132,143],"we":[57,137],"demonstrate":[58,89,172],"that":[59,90,104,114,128,151,173],"attacker":[61],"can":[62,84],"simply":[63],"launch":[64],"combination":[66],"threads,":[69],"each":[70,160],"which":[72],"on":[73,135],"its":[74],"own":[75],"does":[76],"not":[77],"break":[78],"system":[80],"down":[81],"but":[82],"together":[83],"be":[85,94],"very":[86],"potent.":[87],"We":[88,112,171],"cannot":[93],"detected":[95],"by":[96,123,131,200],"simple":[97],"based":[99],"statistical":[100],"anomaly":[101],"techniques":[103],"used":[106],"in":[107,179],"today's":[108],"systems.":[111],"argue":[113],"effective":[116,178],"way":[117],"detect":[119],"jointly":[124,152],"considering":[125],"multiple":[126],"affected":[130],"attacks.":[133],"Based":[134],"this,":[136],"identify":[138],"possible":[140],"set":[141],"design":[146],"new":[148],"approach":[150,175],"examines":[153],"these":[154],"with":[156],"regards":[157],"whether":[159],"exceeds":[161],"high":[163],"or":[165],"below":[167],"low":[169],"threshold.":[170],"this":[174],"extremely":[177],"detecting":[180],"stealthy":[181],"attacks;":[183],"true":[185],"positive":[186,196],"rate":[187,197],"close":[189],"100":[191],"%":[192,203],"false":[195],"decreased":[199],"about":[201],"66":[202],"as":[204],"compared":[205],"traditional":[207],"detectors.":[208]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}