{"id":"https://openalex.org/W2786490145","doi":"https://doi.org/10.1109/msp.2018.1331021","title":"Flow-Based Compromise Detection: Lessons Learned","display_name":"Flow-Based Compromise Detection: Lessons Learned","publication_year":2018,"publication_date":"2018-01-01","ids":{"openalex":"https://openalex.org/W2786490145","doi":"https://doi.org/10.1109/msp.2018.1331021","mag":"2786490145"},"language":"en","primary_location":{"id":"doi:10.1109/msp.2018.1331021","is_oa":false,"landing_page_url":"https://doi.org/10.1109/msp.2018.1331021","pdf_url":null,"source":{"id":"https://openalex.org/S61906035","display_name":"IEEE Security & Privacy","issn_l":"1540-7993","issn":["1540-7993","1558-4046"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Security & Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://ris.utwente.nl/ws/files/23866526/j1hof.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5087439261","display_name":"Rick Hofstede","orcid":null},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":true,"raw_author_name":"Rick Hofstede","raw_affiliation_strings":["University of Twente"],"affiliations":[{"raw_affiliation_string":"University of Twente","institution_ids":["https://openalex.org/I94624287"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067140003","display_name":"Aiko Pras","orcid":"https://orcid.org/0000-0002-5091-8608"},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Aiko Pras","raw_affiliation_strings":["University of Twente"],"affiliations":[{"raw_affiliation_string":"University of Twente","institution_ids":["https://openalex.org/I94624287"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025537461","display_name":"Anna Sperotto","orcid":"https://orcid.org/0000-0002-9481-5846"},"institutions":[{"id":"https://openalex.org/I94624287","display_name":"University of Twente","ror":"https://ror.org/006hf6230","country_code":"NL","type":"education","lineage":["https://openalex.org/I94624287"]}],"countries":["NL"],"is_corresponding":false,"raw_author_name":"Anna Sperotto","raw_affiliation_strings":["University of Twente"],"affiliations":[{"raw_affiliation_string":"University of Twente","institution_ids":["https://openalex.org/I94624287"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078551681","display_name":"Gabi Dreo Rodosek","orcid":"https://orcid.org/0000-0002-8702-8553"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gabi Dreo Rodosek","raw_affiliation_strings":["Universität der Bundeswehr München"],"affiliations":[{"raw_affiliation_string":"Universität der Bundeswehr München","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5087439261"],"corresponding_institution_ids":["https://openalex.org/I94624287"],"apc_list":null,"apc_paid":null,"fwci":2.5351,"has_fulltext":true,"cited_by_count":18,"citation_normalized_percentile":{"value":0.90071518,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"16","issue":"1","first_page":"82","last_page":"89"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/compromise","display_name":"Compromise","score":0.9196527600288391},{"id":"https://openalex.org/keywords/flow","display_name":"Flow (mathematics)","score":0.46456801891326904},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4366025924682617},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.24952134490013123},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.0924559235572815},{"id":"https://openalex.org/keywords/mechanics","display_name":"Mechanics","score":0.08591583371162415},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.06665924191474915}],"concepts":[{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.9196527600288391},{"id":"https://openalex.org/C38349280","wikidata":"https://www.wikidata.org/wiki/Q1434290","display_name":"Flow (mathematics)","level":2,"score":0.46456801891326904},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4366025924682617},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.24952134490013123},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0924559235572815},{"id":"https://openalex.org/C57879066","wikidata":"https://www.wikidata.org/wiki/Q41217","display_name":"Mechanics","level":1,"score":0.08591583371162415},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.06665924191474915}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/msp.2018.1331021","is_oa":false,"landing_page_url":"https://doi.org/10.1109/msp.2018.1331021","pdf_url":null,"source":{"id":"https://openalex.org/S61906035","display_name":"IEEE Security & Privacy","issn_l":"1540-7993","issn":["1540-7993","1558-4046"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Security & Privacy","raw_type":"journal-article"},{"id":"pmh:oai:ris.utwente.nl:openaire/cf6bc4e4-ad1e-477c-afce-8c5b6e1204c4","is_oa":true,"landing_page_url":"https://research.utwente.nl/en/publications/cf6bc4e4-ad1e-477c-afce-8c5b6e1204c4","pdf_url":"https://ris.utwente.nl/ws/files/23866526/j1hof.pdf","source":{"id":"https://openalex.org/S4406922991","display_name":"University of Twente Research Information","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Hofstede, R, Pras, A, Sperotto, A & Dreo Rodosek, G 2018, 'Flow-Based Compromise Detection : Lessons Learned', IEEE security & privacy, vol. 16, no. 1, 8283485, pp. 82-89. https://doi.org/10.1109/MSP.2018.1331021","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:ris.utwente.nl:publications/cf6bc4e4-ad1e-477c-afce-8c5b6e1204c4","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922991","display_name":"University of Twente Research Information","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":""}],"best_oa_location":{"id":"pmh:oai:ris.utwente.nl:openaire/cf6bc4e4-ad1e-477c-afce-8c5b6e1204c4","is_oa":true,"landing_page_url":"https://research.utwente.nl/en/publications/cf6bc4e4-ad1e-477c-afce-8c5b6e1204c4","pdf_url":"https://ris.utwente.nl/ws/files/23866526/j1hof.pdf","source":{"id":"https://openalex.org/S4406922991","display_name":"University of Twente Research Information","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Hofstede, R, Pras, A, Sperotto, A & Dreo Rodosek, G 2018, 'Flow-Based Compromise Detection : Lessons Learned', IEEE security & privacy, vol. 16, no. 1, 8283485, pp. 82-89. https://doi.org/10.1109/MSP.2018.1331021","raw_type":"info:eu-repo/semantics/publishedVersion"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2786490145.pdf","grobid_xml":"https://content.openalex.org/works/W2786490145.grobid-xml"},"referenced_works_count":11,"referenced_works":["https://openalex.org/W1576184827","https://openalex.org/W1580437619","https://openalex.org/W1589512055","https://openalex.org/W2004013580","https://openalex.org/W2024110320","https://openalex.org/W2053550965","https://openalex.org/W2109024380","https://openalex.org/W2135160648","https://openalex.org/W2473128072","https://openalex.org/W2599239214","https://openalex.org/W6635284596"],"related_works":["https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2164141394","https://openalex.org/W1967649051","https://openalex.org/W3036524962","https://openalex.org/W4240977217","https://openalex.org/W2508088450","https://openalex.org/W4214750239","https://openalex.org/W2389434635","https://openalex.org/W2279908259"],"abstract_inverted_index":{"Although":[0],"the":[1,31],"aggregated":[2],"nature":[3],"of":[4,13],"exported":[5],"flow":[6,17,34],"data":[7,18,24,35],"provides":[8],"many":[9],"advantages":[10],"in":[11,37,42],"terms":[12],"privacy":[14],"and":[15,39,45],"scalability,":[16],"may":[19],"contain":[20],"artifacts":[21],"that":[22],"impair":[23],"analysis.":[25],"In":[26],"this":[27],"article,":[28],"we":[29],"investigate":[30],"differences":[32],"between":[33],"analysis":[36],"theory":[38],"practice\u2014that":[40],"is,":[41],"lab":[43],"environments":[44],"production":[46],"networks.":[47]},"counts_by_year":[{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":1}],"updated_date":"2026-03-17T17:19:04.345684","created_date":"2025-10-10T00:00:00"}