{"id":"https://openalex.org/W2771695203","doi":"https://doi.org/10.1109/nfv-sdn.2017.8169867","title":"Secure network monitoring using programmable data planes","display_name":"Secure network monitoring using programmable data planes","publication_year":2017,"publication_date":"2017-11-01","ids":{"openalex":"https://openalex.org/W2771695203","doi":"https://doi.org/10.1109/nfv-sdn.2017.8169867","mag":"2771695203"},"language":"en","primary_location":{"id":"doi:10.1109/nfv-sdn.2017.8169867","is_oa":false,"landing_page_url":"https://doi.org/10.1109/nfv-sdn.2017.8169867","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/10451/30861","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101540081","display_name":"F\u00e1bio Henrique Pereira","orcid":"https://orcid.org/0000-0002-6075-5566"},"institutions":[{"id":"https://openalex.org/I141596103","display_name":"University of Lisbon","ror":"https://ror.org/01c27hj86","country_code":"PT","type":"education","lineage":["https://openalex.org/I141596103"]}],"countries":["PT"],"is_corresponding":true,"raw_author_name":"Fabio Pereira","raw_affiliation_strings":["LaSIGE, Universidade de Lisboa, Portugal"],"affiliations":[{"raw_affiliation_string":"LaSIGE, Universidade de Lisboa, Portugal","institution_ids":["https://openalex.org/I141596103"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072404521","display_name":"Nuno Neves","orcid":"https://orcid.org/0000-0003-0411-4542"},"institutions":[{"id":"https://openalex.org/I141596103","display_name":"University of Lisbon","ror":"https://ror.org/01c27hj86","country_code":"PT","type":"education","lineage":["https://openalex.org/I141596103"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Nuno Neves","raw_affiliation_strings":["LaSIGE, Universidade de Lisboa, Portugal"],"affiliations":[{"raw_affiliation_string":"LaSIGE, Universidade de Lisboa, Portugal","institution_ids":["https://openalex.org/I141596103"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063574513","display_name":"Fernando M. V. Ramos","orcid":"https://orcid.org/0000-0003-3585-8587"},"institutions":[{"id":"https://openalex.org/I141596103","display_name":"University of Lisbon","ror":"https://ror.org/01c27hj86","country_code":"PT","type":"education","lineage":["https://openalex.org/I141596103"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Fernando M. V. Ramos","raw_affiliation_strings":["LaSIGE, Universidade de Lisboa, Portugal"],"affiliations":[{"raw_affiliation_string":"LaSIGE, Universidade de Lisboa, Portugal","institution_ids":["https://openalex.org/I141596103"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5101540081"],"corresponding_institution_ids":["https://openalex.org/I141596103"],"apc_list":null,"apc_paid":null,"fwci":0.8772,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.7890617,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"286","last_page":"291"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10502","display_name":"Advanced Memory and Neural Computing","score":0.9962999820709229,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8216946125030518},{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.7823211550712585},{"id":"https://openalex.org/keywords/sketch","display_name":"Sketch","score":0.778902530670166},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.6950231790542603},{"id":"https://openalex.org/keywords/routing","display_name":"Routing (electronic design automation)","score":0.5021154880523682},{"id":"https://openalex.org/keywords/network-switch","display_name":"Network switch","score":0.4974570572376251},{"id":"https://openalex.org/keywords/network-monitoring","display_name":"Network monitoring","score":0.4477729797363281},{"id":"https://openalex.org/keywords/field-programmable-gate-array","display_name":"Field-programmable gate array","score":0.41267621517181396},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.40712323784828186},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3898860812187195},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.365379273891449},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.33359861373901367},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.12760961055755615},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.09172934293746948}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8216946125030518},{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.7823211550712585},{"id":"https://openalex.org/C2779231336","wikidata":"https://www.wikidata.org/wiki/Q7534724","display_name":"Sketch","level":2,"score":0.778902530670166},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.6950231790542603},{"id":"https://openalex.org/C74172769","wikidata":"https://www.wikidata.org/wiki/Q1446839","display_name":"Routing (electronic design automation)","level":2,"score":0.5021154880523682},{"id":"https://openalex.org/C119404949","wikidata":"https://www.wikidata.org/wiki/Q4503","display_name":"Network switch","level":2,"score":0.4974570572376251},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.4477729797363281},{"id":"https://openalex.org/C42935608","wikidata":"https://www.wikidata.org/wiki/Q190411","display_name":"Field-programmable gate array","level":2,"score":0.41267621517181396},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40712323784828186},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3898860812187195},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.365379273891449},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.33359861373901367},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.12760961055755615},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.09172934293746948}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/nfv-sdn.2017.8169867","is_oa":false,"landing_page_url":"https://doi.org/10.1109/nfv-sdn.2017.8169867","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE Conference on Network Function Virtualization and Software Defined Networks (NFV-SDN)","raw_type":"proceedings-article"},{"id":"pmh:oai:repositorio.ul.pt:10451/30861","is_oa":true,"landing_page_url":"http://hdl.handle.net/10451/30861","pdf_url":null,"source":{"id":"https://openalex.org/S4306402433","display_name":"Portuguese National Funding Agency for Science, Research and Technology (RCAAP Project by FCT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"master thesis"}],"best_oa_location":{"id":"pmh:oai:repositorio.ul.pt:10451/30861","is_oa":true,"landing_page_url":"http://hdl.handle.net/10451/30861","pdf_url":null,"source":{"id":"https://openalex.org/S4306402433","display_name":"Portuguese National Funding Agency for Science, Research and Technology (RCAAP Project by FCT)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"master thesis"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6399999856948853,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320334779","display_name":"Funda\u00e7\u00e3o para a Ci\u00eancia e a Tecnologia","ror":"https://ror.org/00snfqn58"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W1903862285","https://openalex.org/W1994926493","https://openalex.org/W2080234606","https://openalex.org/W2134519279","https://openalex.org/W2487095677","https://openalex.org/W2605823630"],"related_works":["https://openalex.org/W4381544514","https://openalex.org/W2360330114","https://openalex.org/W2351053393","https://openalex.org/W2883026385","https://openalex.org/W2167753033","https://openalex.org/W2185542535","https://openalex.org/W2001320494","https://openalex.org/W2383094426","https://openalex.org/W2393932895","https://openalex.org/W2378554716"],"abstract_inverted_index":{"The":[0,64,199],"accuracy":[1,42],"provided":[2],"by":[3,61,126,209],"traditional":[4],"sampling-based":[5],"monitoring":[6,135,143,170],"approaches,":[7],"such":[8,137],"as":[9,151],"NetFlow,":[10],"is":[11,95,120],"increasingly":[12],"being":[13],"considered":[14],"insufficient":[15],"to":[16,37,54,83,147,155,211],"meet":[17],"the":[18,44,51,56,70,75,101,104,134,142,164,185,205],"requirements":[19],"of":[20,30,41,58,66,92,103,122,184,201],"today's":[21],"networks.":[22],"By":[23,132],"summarizing":[24],"all":[25],"traffic":[26,154],"for":[27,43,163,197],"specific":[28],"statistics":[29],"interest,":[31],"sketch-based":[32,81,169],"alternatives":[33],"have":[34],"been":[35],"shown":[36],"achieve":[38],"higher":[39],"levels":[40],"same":[45],"cost.":[46],"Existing":[47],"switches,":[48],"however,":[49],"lack":[50,98],"necessary":[52],"capability":[53],"perform":[55],"sort":[57],"processing":[59,71],"required":[60],"this":[62,111,159],"approach.":[63],"emergence":[65],"programmable":[67,176],"switches":[68],"and":[69],"they":[72,97],"enable":[73],"in":[74,87,175,192],"data":[76],"plane":[77],"has":[78],"recently":[79],"led":[80],"solutions":[82,94],"be":[84,212],"made":[85],"possible":[86],"switching":[88],"hardware.":[89],"One":[90],"limitation":[91,112],"existing":[93],"that":[96,107,172],"security.":[99],"At":[100],"scale":[102],"datacenter":[105],"networks":[106],"power":[108],"cloud":[109,130],"computing,":[110],"becomes":[113],"a":[114,167,181,194],"serious":[115],"concern.":[116],"For":[117],"instance,":[118],"there":[119],"evidence":[121],"security":[123,210],"incidents":[124],"perpetrated":[125],"malicious":[127],"insiders":[128],"inside":[129],"infrastructures.":[131],"compromising":[133],"algorithm,":[136],"an":[138],"attacker":[139],"can":[140,173],"render":[141],"process":[144],"useless,":[145],"leading":[146],"undesirable":[148],"actions":[149],"(such":[150],"routing":[152],"sensitive":[153],"disallowed":[156],"locations).":[157],"In":[158],"paper":[160],"we":[161],"propose,":[162],"first":[165],"time,":[166],"secure":[168,182],"solution":[171,203],"run":[174],"switches.":[177,198],"Our":[178],"algorithm":[179],"-":[180,189],"version":[183],"well-known":[186],"count-min":[187],"sketch":[188],"was":[190],"implemented":[191],"P4,":[193],"programming":[195],"language":[196],"evaluation":[200],"our":[202],"demonstrates":[204],"performance":[206],"penalty":[207],"introduced":[208],"negligible.":[213]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}