{"id":"https://openalex.org/W2278600692","doi":"https://doi.org/10.1109/noms.2016.7502848","title":"Efficacy of Live DDoS Detection with Hadoop","display_name":"Efficacy of Live DDoS Detection with Hadoop","publication_year":2016,"publication_date":"2016-04-01","ids":{"openalex":"https://openalex.org/W2278600692","doi":"https://doi.org/10.1109/noms.2016.7502848","mag":"2278600692"},"language":"en","primary_location":{"id":"doi:10.1109/noms.2016.7502848","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms.2016.7502848","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1506.08953","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005835956","display_name":"Sufian Hameed","orcid":"https://orcid.org/0000-0003-4683-1988"},"institutions":[{"id":"https://openalex.org/I201384688","display_name":"National University of Computer and Emerging Sciences","ror":"https://ror.org/003eyb898","country_code":"PK","type":"education","lineage":["https://openalex.org/I201384688"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Sufian Hameed","raw_affiliation_strings":["IT Security Labs, NUCES, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IT Security Labs, NUCES, Pakistan","institution_ids":["https://openalex.org/I201384688"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101749322","display_name":"Usman Ali","orcid":"https://orcid.org/0000-0002-2039-1630"},"institutions":[{"id":"https://openalex.org/I201384688","display_name":"National University of Computer and Emerging Sciences","ror":"https://ror.org/003eyb898","country_code":"PK","type":"education","lineage":["https://openalex.org/I201384688"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Usman Ali","raw_affiliation_strings":["IT Security Labs, NUCES, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IT Security Labs, NUCES, Pakistan","institution_ids":["https://openalex.org/I201384688"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I201384688"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":39,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"488","last_page":"494"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.9574937224388123},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8124485015869141},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.7886459827423096},{"id":"https://openalex.org/keywords/trinoo","display_name":"Trinoo","score":0.722761332988739},{"id":"https://openalex.org/keywords/internet-control-message-protocol","display_name":"Internet Control Message Protocol","score":0.7122196555137634},{"id":"https://openalex.org/keywords/flooding","display_name":"Flooding (psychology)","score":0.7058048248291016},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.4973450005054474},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48509228229522705},{"id":"https://openalex.org/keywords/volume","display_name":"Volume (thermodynamics)","score":0.480991005897522},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.47027450799942017},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.21968570351600647},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.20500865578651428},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.09657841920852661}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.9574937224388123},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8124485015869141},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.7886459827423096},{"id":"https://openalex.org/C43639116","wikidata":"https://www.wikidata.org/wiki/Q7843050","display_name":"Trinoo","level":5,"score":0.722761332988739},{"id":"https://openalex.org/C195219913","wikidata":"https://www.wikidata.org/wiki/Q13162","display_name":"Internet Control Message Protocol","level":3,"score":0.7122196555137634},{"id":"https://openalex.org/C186594467","wikidata":"https://www.wikidata.org/wiki/Q1429176","display_name":"Flooding (psychology)","level":2,"score":0.7058048248291016},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.4973450005054474},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48509228229522705},{"id":"https://openalex.org/C20556612","wikidata":"https://www.wikidata.org/wiki/Q4469374","display_name":"Volume (thermodynamics)","level":2,"score":0.480991005897522},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.47027450799942017},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.21968570351600647},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.20500865578651428},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.09657841920852661},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/noms.2016.7502848","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms.2016.7502848","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2016 - 2016 IEEE/IFIP Network Operations and Management Symposium","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:1506.08953","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1506.08953","pdf_url":"https://arxiv.org/pdf/1506.08953","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1506.08953","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1506.08953","pdf_url":"https://arxiv.org/pdf/1506.08953","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"score":0.6000000238418579,"id":"https://metadata.un.org/sdg/11","display_name":"Sustainable cities and communities"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W297149609","https://openalex.org/W1516506771","https://openalex.org/W1674877186","https://openalex.org/W1912779191","https://openalex.org/W2078799390","https://openalex.org/W2087853663","https://openalex.org/W2091639747","https://openalex.org/W2106655090","https://openalex.org/W2110675786","https://openalex.org/W2124808847","https://openalex.org/W2134598092","https://openalex.org/W2136262545","https://openalex.org/W2136371656","https://openalex.org/W2155141181","https://openalex.org/W2162969618","https://openalex.org/W2545374358","https://openalex.org/W3138887713","https://openalex.org/W3160814718","https://openalex.org/W6610572728","https://openalex.org/W6637096788"],"related_works":["https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W1968168724","https://openalex.org/W2204131204","https://openalex.org/W4322008378","https://openalex.org/W2383770723","https://openalex.org/W2754163055","https://openalex.org/W2186749541","https://openalex.org/W2360429410","https://openalex.org/W3076649823"],"abstract_inverted_index":{"Distributed":[0],"Denial":[1],"of":[2,9,16,29,35,84,121,138],"Service":[3],"(DDoS)":[4],"flooding":[5,50,85,102],"attacks":[6,22,86,103,143],"are":[7,45],"one":[8],"the":[10,14,24,49,61,65,119,130],"biggest":[11],"challenges":[12],"to":[13,58,80,117],"availability":[15],"online":[17],"services":[18],"today.":[19],"These":[20],"DDoS":[21,77,96,126,142],"overwhelm":[23],"victim":[25,62],"with":[26],"huge":[27],"volume":[28],"traffic":[30],"and":[31,63,90,108,140],"render":[32],"it":[33,41],"incapable":[34],"performing":[36],"normal":[37],"communication":[38],"or":[39],"crashes":[40],"completely.":[42],"If":[43],"there":[44],"delays":[46],"in":[47,110,144],"detecting":[48,141],"attacks,":[51],"nothing":[52],"much":[53],"can":[54],"be":[55],"done":[56],"except":[57],"manually":[59],"disconnect":[60],"fix":[64],"problem.":[66],"In":[67],"this":[68],"paper,":[69],"we":[70,113,132],"propose":[71],"HADEC,":[72],"a":[73,94,115],"Hadoop":[74],"based":[75],"Live":[76],"Detection":[78],"framework":[79,123],"tackle":[81],"efficient":[82],"analysis":[83],"by":[87],"harnessing":[88],"MapReduce":[89],"HDFS.":[91],"We":[92],"implemented":[93],"counter-based":[95],"detection":[97],"algorithm":[98],"for":[99,124],"four":[100],"major":[101],"(TCP-SYN,":[104],"HTTP":[105],"GET,":[106],"UDP":[107],"ICMP)":[109],"MapReduce.":[111],"Subsequently":[112],"deployed":[114],"testbed":[116],"evaluate":[118],"performance":[120],"HADEC":[122,135],"live":[125],"detection.":[127],"Based":[128],"on":[129],"experiment":[131],"showed":[133],"that":[134],"is":[136],"capable":[137],"processing":[139],"affordable":[145],"time.":[146]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":7},{"year":2019,"cited_by_count":6},{"year":2018,"cited_by_count":7},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}