{"id":"https://openalex.org/W4289655086","doi":"https://doi.org/10.1109/netsoft54395.2022.9844107","title":"Model-Driven Network Monitoring Using NetFlow Applied to Threat Detection","display_name":"Model-Driven Network Monitoring Using NetFlow Applied to Threat Detection","publication_year":2022,"publication_date":"2022-06-27","ids":{"openalex":"https://openalex.org/W4289655086","doi":"https://doi.org/10.1109/netsoft54395.2022.9844107"},"language":"en","primary_location":{"id":"doi:10.1109/netsoft54395.2022.9844107","is_oa":false,"landing_page_url":"https://doi.org/10.1109/netsoft54395.2022.9844107","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 8th International Conference on Network Softwarization (NetSoft)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://zenodo.org/record/6966169","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5090526617","display_name":"Daniel Gonz\u00e1lez-S\u00e1nchez","orcid":"https://orcid.org/0000-0002-7691-0030"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Daniel Gonzalez-Sanchez","raw_affiliation_strings":["Universidad Politécnica de Madrid,Dpto. de Ingeniería de Sistemas Telemáticos,Madrid,Spain"],"affiliations":[{"raw_affiliation_string":"Universidad Politécnica de Madrid,Dpto. de Ingeniería de Sistemas Telemáticos,Madrid,Spain","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028647467","display_name":"Ignacio D. Mart\u00ednez-Casanueva","orcid":"https://orcid.org/0000-0002-8573-127X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ignacio D. Martinez-Casanueva","raw_affiliation_strings":["Universidad Politécnica de Madrid,Dpto. de Ingeniería de Sistemas Telemáticos,Madrid,Spain"],"affiliations":[{"raw_affiliation_string":"Universidad Politécnica de Madrid,Dpto. de Ingeniería de Sistemas Telemáticos,Madrid,Spain","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103108041","display_name":"Antonio Pastor","orcid":"https://orcid.org/0000-0003-2849-9782"},"institutions":[{"id":"https://openalex.org/I4210134591","display_name":"Telefonica Research and Development","ror":"https://ror.org/03qgzzb04","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210097190","https://openalex.org/I4210134591"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Antonio Pastor","raw_affiliation_strings":["Global CTIO Telefónica Investigación y Desarrollo,Madrid,Spain"],"affiliations":[{"raw_affiliation_string":"Global CTIO Telefónica Investigación y Desarrollo,Madrid,Spain","institution_ids":["https://openalex.org/I4210134591"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047836147","display_name":"Luis Bellido","orcid":"https://orcid.org/0000-0001-9591-0928"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luis Bellido Triana","raw_affiliation_strings":["Universidad Politécnica de Madrid,Dpto. de Ingeniería de Sistemas Telemáticos,Madrid,Spain"],"affiliations":[{"raw_affiliation_string":"Universidad Politécnica de Madrid,Dpto. de Ingeniería de Sistemas Telemáticos,Madrid,Spain","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085542014","display_name":"Cristina Pinar Munoz Zamarro","orcid":null},"institutions":[{"id":"https://openalex.org/I4210134591","display_name":"Telefonica Research and Development","ror":"https://ror.org/03qgzzb04","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210097190","https://openalex.org/I4210134591"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Cristina Pinar Munoz Zamarro","raw_affiliation_strings":["Global CTIO Telefónica Investigación y Desarrollo,Madrid,Spain"],"affiliations":[{"raw_affiliation_string":"Global CTIO Telefónica Investigación y Desarrollo,Madrid,Spain","institution_ids":["https://openalex.org/I4210134591"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081147854","display_name":"Alejandro Antonio Moreno Sancho","orcid":null},"institutions":[{"id":"https://openalex.org/I4210134591","display_name":"Telefonica Research and Development","ror":"https://ror.org/03qgzzb04","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210097190","https://openalex.org/I4210134591"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Alejandro Antonio Moreno Sancho","raw_affiliation_strings":["Global CTIO Telefónica Investigación y Desarrollo,Madrid,Spain"],"affiliations":[{"raw_affiliation_string":"Global CTIO Telefónica Investigación y Desarrollo,Madrid,Spain","institution_ids":["https://openalex.org/I4210134591"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023613986","display_name":"David Fern\u00e1ndez","orcid":"https://orcid.org/0000-0002-2172-9162"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"David Fernandez Cambronero","raw_affiliation_strings":["Universidad Politécnica de Madrid,Dpto. de Ingeniería de Sistemas Telemáticos,Madrid,Spain"],"affiliations":[{"raw_affiliation_string":"Universidad Politécnica de Madrid,Dpto. de Ingeniería de Sistemas Telemáticos,Madrid,Spain","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086797320","display_name":"Diego L\u00f3pez","orcid":"https://orcid.org/0000-0002-8326-2000"},"institutions":[{"id":"https://openalex.org/I4210134591","display_name":"Telefonica Research and Development","ror":"https://ror.org/03qgzzb04","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210097190","https://openalex.org/I4210134591"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Diego Lopez","raw_affiliation_strings":["Global CTIO Telefónica Investigación y Desarrollo,Madrid,Spain"],"affiliations":[{"raw_affiliation_string":"Global CTIO Telefónica Investigación y Desarrollo,Madrid,Spain","institution_ids":["https://openalex.org/I4210134591"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5090526617"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.2854,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.57334311,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"450","last_page":"455"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.9968949556350708},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8009402751922607},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5580659508705139},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.5498964786529541},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.4918649196624756},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3352566957473755},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.08652007579803467}],"concepts":[{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.9968949556350708},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8009402751922607},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5580659508705139},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.5498964786529541},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.4918649196624756},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3352566957473755},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.08652007579803467},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/netsoft54395.2022.9844107","is_oa":false,"landing_page_url":"https://doi.org/10.1109/netsoft54395.2022.9844107","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 8th International Conference on Network Softwarization (NetSoft)","raw_type":"proceedings-article"},{"id":"pmh:oai:zenodo.org:6966169","is_oa":true,"landing_page_url":"https://zenodo.org/record/6966169","pdf_url":"https://zenodo.org/record/6966169","source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferencePaper"},{"id":"pmh:oai:oa.upm.es:79616","is_oa":false,"landing_page_url":"https://oa.upm.es/79616/","pdf_url":null,"source":{"id":"https://openalex.org/S4377196323","display_name":"UPM Digital Archive (Technical University of Madrid)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I88060688","host_organization_name":"Universidad Polit\u00e9cnica de Madrid","host_organization_lineage":["https://openalex.org/I88060688"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2022 IEEE 8th International Conference on Network Softwarization (NetSoft) | 2022 IEEE 8th International Conference on Network Softwarization (NetSoft) | 27 June\u20131 July 2022 | Milan, Italy","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:zenodo.org:6966169","is_oa":true,"landing_page_url":"https://zenodo.org/record/6966169","pdf_url":"https://zenodo.org/record/6966169","source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferencePaper"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.4000000059604645,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G3254710655","display_name":null,"funder_award_id":"RED20","funder_id":"https://openalex.org/F4320322930","funder_display_name":"Ministerio de Ciencia e Innovaci\u00f3n"},{"id":"https://openalex.org/G3690828678","display_name":null,"funder_award_id":"PID2019","funder_id":"https://openalex.org/F4320322930","funder_display_name":"Ministerio de Ciencia e Innovaci\u00f3n"},{"id":"https://openalex.org/G4393466485","display_name":null,"funder_award_id":"871808","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G4531677044","display_name":null,"funder_award_id":"grant","funder_id":"https://openalex.org/F4320321837","funder_display_name":"Ministerio de Econom\u00eda y Competitividad"},{"id":"https://openalex.org/G4814546071","display_name":null,"funder_award_id":"Go2Edge","funder_id":"https://openalex.org/F4320322930","funder_display_name":"Ministerio de Ciencia e Innovaci\u00f3n"},{"id":"https://openalex.org/G4956428346","display_name":null,"funder_award_id":"Horizon 2020 research and innovatio","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G5036817778","display_name":null,"funder_award_id":"European Union's Horizon 2020 research and innov","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G5923696992","display_name":null,"funder_award_id":"RED2018-102585-T","funder_id":"https://openalex.org/F4320322930","funder_display_name":"Ministerio de Ciencia e Innovaci\u00f3n"},{"id":"https://openalex.org/G6466702191","display_name":null,"funder_award_id":"RED2018-102585-T","funder_id":"https://openalex.org/F4320321837","funder_display_name":"Ministerio de Econom\u00eda y Competitividad"},{"id":"https://openalex.org/G7529808829","display_name":null,"funder_award_id":"883335","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G7620178049","display_name":null,"funder_award_id":"PID2019-105257RB-C21","funder_id":"https://openalex.org/F4320322930","funder_display_name":"Ministerio de Ciencia e Innovaci\u00f3n"},{"id":"https://openalex.org/G8051717526","display_name":null,"funder_award_id":"Grant","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G8318064016","display_name":null,"funder_award_id":"Horizon","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G8633428685","display_name":null,"funder_award_id":"European Union's Horizon 2020 research and innovat","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320321837","display_name":"Ministerio de Econom\u00eda y Competitividad","ror":"https://ror.org/034900433"},{"id":"https://openalex.org/F4320322930","display_name":"Ministerio de Ciencia e Innovaci\u00f3n","ror":"https://ror.org/034900433"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4289655086.pdf","grobid_xml":"https://content.openalex.org/works/W4289655086.grobid-xml"},"referenced_works_count":15,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W2019669975","https://openalex.org/W2298376471","https://openalex.org/W2342408547","https://openalex.org/W2490927957","https://openalex.org/W2498466688","https://openalex.org/W2969540442","https://openalex.org/W2980839873","https://openalex.org/W3081417472","https://openalex.org/W3102359135","https://openalex.org/W3211805421","https://openalex.org/W4253269957","https://openalex.org/W6795225956","https://openalex.org/W6834718111","https://openalex.org/W6893712006"],"related_works":["https://openalex.org/W2134539183","https://openalex.org/W2359209543","https://openalex.org/W2370801098","https://openalex.org/W2380475535","https://openalex.org/W2377112249","https://openalex.org/W4320027669","https://openalex.org/W2611702147","https://openalex.org/W1777713421","https://openalex.org/W4289655086","https://openalex.org/W3199479007"],"abstract_inverted_index":{"In":[0,25,42,71,90],"recent":[1],"years,":[2],"several":[3],"research":[4],"works":[5],"have":[6],"proposed":[7,80,101],"the":[8,35,48,56,94,100,152],"analysis":[9,176],"of":[10,34,38],"network":[11,39,113,117,156],"flow":[12,40,49,157],"information":[13,51,58,158],"using":[14,151],"machine":[15],"learning":[16],"in":[17,111,115,164],"order":[18,91],"to":[19,52,85,92,108,121,136,178],"detect":[20,122],"threats":[21],"or":[22],"anomalous":[23],"activities.":[24],"this":[26,72,142],"sense,":[27],"NetFlow-based":[28,87],"systems":[29],"stand":[30],"out":[31],"as":[32,81],"one":[33],"main":[36],"sources":[37],"information.":[41],"these":[43],"systems,":[44],"NetFlow":[45,97,102],"collectors":[46,140],"provide":[47],"monitoring":[50,88],"be":[53,109,160],"analyzed,":[54],"but":[55],"particular":[57],"structure":[59],"and":[60,132,162,167,173],"format":[61],"provided":[62],"by":[63,150],"different":[64],"collector":[65,98,127],"implementations":[66],"is":[67,79],"a":[68,74,82,96,112,165],"recurring":[69],"problem.":[70],"paper,":[73],"new":[75],"YANG":[76,103,153],"data":[77,144,175],"model":[78,84,104],"standard":[83],"use":[86],"data.":[89],"validate":[93],"proposal,":[95],"incorporating":[99],"has":[105],"been":[106],"developed,":[107],"integrated":[110],"scenario":[114],"which":[116],"flows":[118],"are":[119],"analyzed":[120],"malicious":[123],"cryptomining":[124],"activity.":[125],"This":[126],"extends":[128],"an":[129],"existing":[130,139],"one,":[131],"provides":[133,171],"design":[134],"patterns":[135],"incorporate":[137],"other":[138],"into":[141],"common":[143],"model.":[145],"Our":[146],"results":[147],"show":[148],"how,":[149],"modeling":[154],"language,":[155],"can":[159],"handled":[161],"aggregated":[163],"formal":[166],"unified":[168],"way":[169],"that":[170],"flexibility":[172],"facilitates":[174],"applied":[177],"threat":[179],"detection.":[180]},"counts_by_year":[{"year":2023,"cited_by_count":2}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}