{"id":"https://openalex.org/W4388212738","doi":"https://doi.org/10.1109/nof58724.2023.10302813","title":"SAFFIRRE: Selective Aggregate Filtering Through Filter Rule Refinement","display_name":"SAFFIRRE: Selective Aggregate Filtering Through Filter Rule Refinement","publication_year":2023,"publication_date":"2023-10-04","ids":{"openalex":"https://openalex.org/W4388212738","doi":"https://doi.org/10.1109/nof58724.2023.10302813"},"language":"en","primary_location":{"id":"doi:10.1109/nof58724.2023.10302813","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/nof58724.2023.10302813","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 14th International Conference on Network of the Future (NoF)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058509075","display_name":"Hauke Heseding","orcid":null},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Hauke Heseding","raw_affiliation_strings":["Karlsruhe Institute of Technology (KIT),Institute of Telematics,Karlsruhe,Germany","Institute of Telematics, Karlsruhe Institute of Technology (KIT), Karlsruhe, Germany","KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT), Karlsruhe, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Karlsruhe Institute of Technology (KIT),Institute of Telematics,Karlsruhe,Germany","institution_ids":["https://openalex.org/I102335020"]},{"raw_affiliation_string":"Institute of Telematics, Karlsruhe Institute of Technology (KIT), Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]},{"raw_affiliation_string":"KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT), Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042984919","display_name":"Felix Bachmann","orcid":"https://orcid.org/0000-0002-7153-7441"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Felix Bachmann","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Philipp Sebastian Bien","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Philipp Sebastian Bien","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5083451909","display_name":"Martina Zitterbart","orcid":"https://orcid.org/0000-0003-0088-6289"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Martina Zitterbart","raw_affiliation_strings":["Karlsruhe Institute of Technology (KIT),Institute of Telematics,Karlsruhe,Germany","Institute of Telematics, Karlsruhe Institute of Technology (KIT), Karlsruhe, Germany","KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT), Karlsruhe, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Karlsruhe Institute of Technology (KIT),Institute of Telematics,Karlsruhe,Germany","institution_ids":["https://openalex.org/I102335020"]},{"raw_affiliation_string":"Institute of Telematics, Karlsruhe Institute of Technology (KIT), Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]},{"raw_affiliation_string":"KASTEL Security Research Labs, Karlsruhe Institute of Technology (KIT), Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.18282279,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"42","last_page":"46"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8333904147148132},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8025883436203003},{"id":"https://openalex.org/keywords/aggregate","display_name":"Aggregate (composite)","score":0.6858497858047485},{"id":"https://openalex.org/keywords/filter","display_name":"Filter (signal processing)","score":0.6515642404556274},{"id":"https://openalex.org/keywords/upstream","display_name":"Upstream (networking)","score":0.5181042551994324},{"id":"https://openalex.org/keywords/hierarchy","display_name":"Hierarchy","score":0.4688751697540283},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4634622633457184},{"id":"https://openalex.org/keywords/volume","display_name":"Volume (thermodynamics)","score":0.4468746781349182},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.43061214685440063},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.42874765396118164},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.35841625928878784},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.1165444552898407},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.08118528127670288}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8333904147148132},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8025883436203003},{"id":"https://openalex.org/C4679612","wikidata":"https://www.wikidata.org/wiki/Q866298","display_name":"Aggregate (composite)","level":2,"score":0.6858497858047485},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.6515642404556274},{"id":"https://openalex.org/C191172861","wikidata":"https://www.wikidata.org/wiki/Q7899321","display_name":"Upstream (networking)","level":2,"score":0.5181042551994324},{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.4688751697540283},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4634622633457184},{"id":"https://openalex.org/C20556612","wikidata":"https://www.wikidata.org/wiki/Q4469374","display_name":"Volume (thermodynamics)","level":2,"score":0.4468746781349182},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.43061214685440063},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.42874765396118164},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.35841625928878784},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.1165444552898407},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.08118528127670288},{"id":"https://openalex.org/C192562407","wikidata":"https://www.wikidata.org/wiki/Q228736","display_name":"Materials science","level":0,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C34447519","wikidata":"https://www.wikidata.org/wiki/Q179522","display_name":"Market economy","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C159985019","wikidata":"https://www.wikidata.org/wiki/Q181790","display_name":"Composite material","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/nof58724.2023.10302813","is_oa":false,"landing_page_url":"http://dx.doi.org/10.1109/nof58724.2023.10302813","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 14th International Conference on Network of the Future (NoF)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6200000047683716,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W1848389068","https://openalex.org/W2040333627","https://openalex.org/W2065776696","https://openalex.org/W2752929869","https://openalex.org/W2964291137","https://openalex.org/W2995496823","https://openalex.org/W3008207353","https://openalex.org/W3037997326","https://openalex.org/W3139597027","https://openalex.org/W4290991406","https://openalex.org/W6795076093"],"related_works":["https://openalex.org/W4386482731","https://openalex.org/W2765763546","https://openalex.org/W4385302085","https://openalex.org/W2360429410","https://openalex.org/W4390188535","https://openalex.org/W4256682929","https://openalex.org/W335511927","https://openalex.org/W2471811227","https://openalex.org/W2217591390","https://openalex.org/W2157496457"],"abstract_inverted_index":{"Volumetric":[0],"Distributed":[1],"Denial":[2],"of":[3,78],"Service":[4],"attacks":[5],"send":[6],"unsolicited":[7],"high-volume":[8],"traffic":[9,35,64,67,97,118],"to":[10,57,82,95],"overwhelm":[11],"network":[12,59],"infrastructures":[13],"and":[14,87,116],"disrupt":[15],"service":[16],"availability.":[17],"To":[18],"counteract":[19],"such":[20],"attacks,":[21],"we":[22],"introduce":[23],"Selective":[24],"Aggregate":[25],"Filtering":[26],"through":[27],"Filter":[28],"Rule":[29],"Refinement.":[30],"This":[31],"novel":[32],"approach":[33],"monitors":[34],"aggregates":[36,68],"over":[37,103],"the":[38],"IP":[39],"address":[40],"hierarchy":[41],"with":[42,69,112],"hierarchical":[43,79],"heavy":[44,80],"hitter":[45],"algorithms.":[46],"Based":[47],"on":[48],"this,":[49],"it":[50,92],"builds":[51],"effective":[52],"droplists":[53],"for":[54],"upstream":[55],"filtering":[56],"protect":[58],"infrastructures.":[60],"By":[61],"estimating":[62],"attack":[63,117],"volumes":[65],"in":[66,109],"machine":[70],"learning,":[71],"filter":[72,100],"rule":[73,101],"refinement":[74],"compensates":[75],"several":[76],"drawbacks":[77],"hitters":[81],"achieve":[83],"low":[84],"false":[85,88],"positive":[86],"negative":[89],"rates.":[90],"Furthermore,":[91],"enables":[93],"adaptation":[94],"dynamic":[96,110],"by":[98],"tracking":[99],"precision":[102],"time.":[104],"We":[105],"evaluate":[106],"mitigation":[107],"effectiveness":[108],"situations":[111],"challenging":[113],"mixed":[114],"legitimate":[115],"distributions.":[119]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}