{"id":"https://openalex.org/W4210309503","doi":"https://doi.org/10.1109/nca53618.2021.9685305","title":"Challenges in Identifying Network Attacks Using Netflow Data","display_name":"Challenges in Identifying Network Attacks Using Netflow Data","publication_year":2021,"publication_date":"2021-11-23","ids":{"openalex":"https://openalex.org/W4210309503","doi":"https://doi.org/10.1109/nca53618.2021.9685305"},"language":"en","primary_location":{"id":"doi:10.1109/nca53618.2021.9685305","is_oa":false,"landing_page_url":"https://doi.org/10.1109/nca53618.2021.9685305","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE 20th International Symposium on Network Computing and Applications (NCA)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015074167","display_name":"Edward Chuah","orcid":"https://orcid.org/0000-0002-8659-1803"},"institutions":[{"id":"https://openalex.org/I23923803","display_name":"University of Exeter","ror":"https://ror.org/03yghzc09","country_code":"GB","type":"education","lineage":["https://openalex.org/I23923803"]},{"id":"https://openalex.org/I67415387","display_name":"Lancaster University","ror":"https://ror.org/04f2nsd36","country_code":"GB","type":"education","lineage":["https://openalex.org/I67415387"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Edward Chuah","raw_affiliation_strings":["The University of Exeter,Stocker Road,UK","Lancaster University, Bailrigg, UK","The University of Exeter, Stocker Road, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Exeter,Stocker Road,UK","institution_ids":["https://openalex.org/I23923803"]},{"raw_affiliation_string":"Lancaster University, Bailrigg, UK","institution_ids":["https://openalex.org/I67415387"]},{"raw_affiliation_string":"The University of Exeter, Stocker Road, UK","institution_ids":["https://openalex.org/I23923803"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079786056","display_name":"Neeraj Suri","orcid":"https://orcid.org/0000-0003-1688-1167"},"institutions":[{"id":"https://openalex.org/I67415387","display_name":"Lancaster University","ror":"https://ror.org/04f2nsd36","country_code":"GB","type":"education","lineage":["https://openalex.org/I67415387"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Neeraj Suri","raw_affiliation_strings":["Lancaster University,Bailrigg,UK","Lancaster University, Bailrigg, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lancaster University,Bailrigg,UK","institution_ids":["https://openalex.org/I67415387"]},{"raw_affiliation_string":"Lancaster University, Bailrigg, UK","institution_ids":["https://openalex.org/I67415387"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005426902","display_name":"Arshad Jhumka","orcid":"https://orcid.org/0000-0003-0540-2845"},"institutions":[{"id":"https://openalex.org/I39555362","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86","country_code":"GB","type":"education","lineage":["https://openalex.org/I39555362"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Arshad Jhumka","raw_affiliation_strings":["The University of Warwick"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Warwick","institution_ids":["https://openalex.org/I39555362"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024988405","display_name":"Samantha Alt","orcid":null},"institutions":[{"id":"https://openalex.org/I4210158342","display_name":"Intel (United Kingdom)","ror":"https://ror.org/058cxws58","country_code":"GB","type":"company","lineage":["https://openalex.org/I1343180700","https://openalex.org/I4210158342"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Samantha Alt","raw_affiliation_strings":["Intel Corporation"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Intel Corporation","institution_ids":["https://openalex.org/I4210158342"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8139,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.6966633,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.9604147672653198},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8014956712722778},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.6351041793823242},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5378673672676086},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5254501700401306},{"id":"https://openalex.org/keywords/network-monitoring","display_name":"Network monitoring","score":0.4200472831726074},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4066636264324188}],"concepts":[{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.9604147672653198},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8014956712722778},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.6351041793823242},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5378673672676086},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5254501700401306},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.4200472831726074},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4066636264324188}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/nca53618.2021.9685305","is_oa":false,"landing_page_url":"https://doi.org/10.1109/nca53618.2021.9685305","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 IEEE 20th International Symposium on Network Computing and Applications (NCA)","raw_type":"proceedings-article"},{"id":"pmh:oai:eprints.lancs.ac.uk:165368","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306401916","display_name":"Lancaster EPrints (Lancaster University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67415387","host_organization_name":"Lancaster University","host_organization_lineage":["https://openalex.org/I67415387"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Contribution in Book/Report/Proceedings"},{"id":"pmh:oai:wrap.warwick.ac.uk:165164","is_oa":false,"landing_page_url":"https://wrap.warwick.ac.uk/165164/","pdf_url":null,"source":{"id":"https://openalex.org/S4306400665","display_name":"Warwick Research Archive Portal (University of Warwick)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I39555362","host_organization_name":"University of Warwick","host_organization_lineage":["https://openalex.org/I39555362"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference Item"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5303011379","display_name":null,"funder_award_id":"EP/R00692X/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G979560605","display_name":"UKRI Trustworthy Autonomous Systems Node in Security","funder_award_id":"EP/V026763/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W59037818","https://openalex.org/W1509129286","https://openalex.org/W1649509697","https://openalex.org/W1992705187","https://openalex.org/W2037019152","https://openalex.org/W2073097601","https://openalex.org/W2096632950","https://openalex.org/W2100307718","https://openalex.org/W2122070588","https://openalex.org/W2135445066","https://openalex.org/W2145540050","https://openalex.org/W2157578436","https://openalex.org/W2278186031","https://openalex.org/W2746170296","https://openalex.org/W2748868501","https://openalex.org/W2765633793","https://openalex.org/W2789774689","https://openalex.org/W2792310543","https://openalex.org/W2804074543","https://openalex.org/W2804964061","https://openalex.org/W2883594698","https://openalex.org/W2883778034","https://openalex.org/W2898746803","https://openalex.org/W2947279621","https://openalex.org/W2947969447","https://openalex.org/W2959716986","https://openalex.org/W2963563709","https://openalex.org/W2973442392","https://openalex.org/W2995890446","https://openalex.org/W2996829813","https://openalex.org/W3002573977","https://openalex.org/W3003861670","https://openalex.org/W3006191761","https://openalex.org/W3010456454","https://openalex.org/W3014544197","https://openalex.org/W3046727872","https://openalex.org/W3088265015","https://openalex.org/W3102359135","https://openalex.org/W3112309056","https://openalex.org/W3120695945","https://openalex.org/W3135365241","https://openalex.org/W3139597027","https://openalex.org/W4237716509","https://openalex.org/W6602452583","https://openalex.org/W6636788186","https://openalex.org/W6743493502","https://openalex.org/W6763341900"],"related_works":["https://openalex.org/W4381544514","https://openalex.org/W3088530179","https://openalex.org/W2360330114","https://openalex.org/W2351053393","https://openalex.org/W4385692127","https://openalex.org/W2121836138","https://openalex.org/W2883026385","https://openalex.org/W2167753033","https://openalex.org/W2185542535","https://openalex.org/W2377721740"],"abstract_inverted_index":{"Large":[0],"networks":[1],"often":[2],"encounter":[3],"attacks":[4,130],"that":[5,71,102,131,145],"can":[6,38],"affect":[7],"the":[8,28,34,90,114,120],"network":[9,17,35,46,64,83,98,115,139],"availability.":[10],"While":[11],"multiple":[12],"techniques":[13],"exist":[14],"to":[15,43,67,82,97],"detect":[16],"attacks,":[18,108],"a":[19,60,110],"comprehensive":[20,61],"understanding":[21],"of":[22,33,63,113],"how":[23],"an":[24,40,74],"attack":[25,80,149],"occurs":[26],"considering":[27],"various":[29],"layers":[30],"and":[31],"components":[32],"software":[36],"stack,":[37],"be":[39],"important":[41],"element":[42],"help":[44],"improve":[45],"security.":[47],"By":[48],"performing":[49],"correlation":[50],"analysis":[51],"on":[52,138],"contemporary":[53],"unlabeled":[54],"Netflow":[55,91],"data,":[56],"this":[57],"paper":[58],"conducts":[59],"study":[62,137],"flow":[65],"events":[66],"identify":[68],"communication":[69],"patterns":[70],"may":[72],"precede":[73],"attack,":[75],"thereby":[76],"providing":[77],"potentially":[78],"useful":[79],"signatures":[81],"administrators.":[84],"Our":[85,136],"work":[86],"shows":[87],"that,":[88],"surprisingly,":[89],"data":[92],"is":[93],"not":[94],"strongly":[95],"correlated":[96],"attacks.":[99],"We":[100],"observe":[101],"while":[103],"spoof":[104],"requests":[105],"trigger":[106],"reflection":[107,129],"only":[109],"small":[111],"percentage":[112],"packets":[116],"are":[117,126],"associated":[118],"with":[119],"attack.":[121],"Furthermore,":[122],"lead":[123],"time":[124],"enhancements":[125],"feasible":[127],"for":[128],"show":[132],"long":[133],"dwell":[134],"times.":[135],"event":[140],"correlations":[141],"highlights":[142],"empirical":[143],"observations":[144],"could":[146],"facilitate":[147],"better":[148],"handling":[150],"in":[151],"large":[152],"networks.":[153]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}