{"id":"https://openalex.org/W3035416814","doi":"https://doi.org/10.1109/noms47738.2020.9110414","title":"RAIN: Towards Real-Time Core Devices Anomaly Detection Through Session Data in Cloud Network","display_name":"RAIN: Towards Real-Time Core Devices Anomaly Detection Through Session Data in Cloud Network","publication_year":2020,"publication_date":"2020-04-01","ids":{"openalex":"https://openalex.org/W3035416814","doi":"https://doi.org/10.1109/noms47738.2020.9110414","mag":"3035416814"},"language":"en","primary_location":{"id":"doi:10.1109/noms47738.2020.9110414","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms47738.2020.9110414","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2020 - 2020 IEEE/IFIP Network Operations and Management Symposium","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100444762","display_name":"Haoyu Liu","orcid":"https://orcid.org/0000-0003-3755-5184"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Haoyu Liu","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066835481","display_name":"Chongrong Fang","orcid":"https://orcid.org/0000-0003-2357-0228"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chongrong Fang","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058033885","display_name":"Yining Qi","orcid":"https://orcid.org/0000-0001-6817-4443"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yining Qi","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078413859","display_name":"Jian Bai","orcid":null},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jian Bai","raw_affiliation_strings":["Alibaba Group, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103113067","display_name":"Shaozhe Wang","orcid":"https://orcid.org/0000-0003-0766-3424"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shaozhe Wang","raw_affiliation_strings":["Alibaba Group, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001207472","display_name":"Xiong Xiao","orcid":"https://orcid.org/0000-0002-3831-043X"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiong Xiao","raw_affiliation_strings":["Alibaba Group, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029408696","display_name":"Daxiang Kang","orcid":"https://orcid.org/0000-0002-2782-8508"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Daxiang Kang","raw_affiliation_strings":["Alibaba Group, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091295237","display_name":"Biao Lyu","orcid":"https://orcid.org/0000-0002-8096-5528"},"institutions":[{"id":"https://openalex.org/I45928872","display_name":"Alibaba Group (China)","ror":"https://ror.org/00k642b80","country_code":"CN","type":"company","lineage":["https://openalex.org/I45928872"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Biao Lyu","raw_affiliation_strings":["Alibaba Group, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Alibaba Group, Hangzhou, China","institution_ids":["https://openalex.org/I45928872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051951845","display_name":"Peng Cheng","orcid":"https://orcid.org/0000-0002-4221-2162"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Cheng","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100726041","display_name":"Jiming Chen","orcid":"https://orcid.org/0000-0003-3155-3145"},"institutions":[{"id":"https://openalex.org/I76130692","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884","country_code":"CN","type":"education","lineage":["https://openalex.org/I76130692"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiming Chen","raw_affiliation_strings":["Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I76130692"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":10,"corresponding_author_ids":["https://openalex.org/A5100444762"],"corresponding_institution_ids":["https://openalex.org/I76130692"],"apc_list":null,"apc_paid":null,"fwci":0.1542,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.50191352,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/session","display_name":"Session (web analytics)","score":0.7730015516281128},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7691255807876587},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6612914800643921},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5899339318275452},{"id":"https://openalex.org/keywords/core","display_name":"Core (optical fiber)","score":0.5777177810668945},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.420878529548645},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3909700810909271},{"id":"https://openalex.org/keywords/remote-sensing","display_name":"Remote sensing","score":0.3633708655834198},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.16751515865325928},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.15147405862808228},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.14950942993164062},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.13246500492095947},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.08387541770935059}],"concepts":[{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.7730015516281128},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7691255807876587},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6612914800643921},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5899339318275452},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.5777177810668945},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.420878529548645},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3909700810909271},{"id":"https://openalex.org/C62649853","wikidata":"https://www.wikidata.org/wiki/Q199687","display_name":"Remote sensing","level":1,"score":0.3633708655834198},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.16751515865325928},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.15147405862808228},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.14950942993164062},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.13246500492095947},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.08387541770935059},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/noms47738.2020.9110414","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms47738.2020.9110414","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2020 - 2020 IEEE/IFIP Network Operations and Management Symposium","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2047111942","https://openalex.org/W2120664731","https://openalex.org/W2141910941","https://openalex.org/W2157578436","https://openalex.org/W2198041540","https://openalex.org/W2296559352","https://openalex.org/W2501089562","https://openalex.org/W2502136739","https://openalex.org/W2795948303","https://openalex.org/W2798490655","https://openalex.org/W2911727988","https://openalex.org/W4251335428","https://openalex.org/W6697040247","https://openalex.org/W6750584272"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4377864969","https://openalex.org/W2972971679"],"abstract_inverted_index":{"Core":[0],"devices":[1,23,47,75,90],"form":[2],"the":[3,7,36,72,99],"critical":[4],"components":[5],"of":[6,27,31,38,45,74,136],"cloud":[8,39,126],"network":[9,25,127],"and":[10,91,113,132],"provide":[11],"service":[12],"to":[13,35,49,70,78,97],"multiple":[14],"tenants":[15],"simultaneously.":[16],"The":[17,84],"anomalies":[18],"that":[19,76],"happened":[20],"in":[21,123],"core":[22,46,89],"impact":[24],"availability":[26],"a":[28,110],"large":[29],"number":[30,73],"users,":[32],"meanwhile,":[33],"lead":[34],"degradation":[37],"providers\u2019":[40],"profits.":[41],"However,":[42],"direct":[43],"monitoring":[44],"needs":[48],"deploy":[50,68],"massive":[51],"heartbeat":[52],"checking":[53],"tools":[54],"on":[55],"numerous":[56],"related":[57],"components,":[58],"which":[59],"will":[60],"be":[61,79],"extremely":[62],"laborious.":[63],"In":[64],"this":[65],"paper,":[66],"we":[67],"RAIN":[69,106,119],"reduce":[71],"need":[77],"detailed":[80],"investigated":[81],"for":[82,128],"anomalies.":[83],"session":[85],"traffic":[86,137],"data":[87],"among":[88],"served":[92],"virtual":[93],"machines":[94],"are":[95],"utilized":[96],"conduct":[98],"analyzing.":[100],"To":[101],"guarantee":[102],"near":[103],"real-time":[104],"monitoring,":[105],"is":[107,133],"designed":[108],"as":[109],"two-step":[111],"structure":[112],"incorporating":[114],"four":[115],"feature-based":[116],"detection":[117],"methods.":[118],"has":[120],"been":[121],"deployed":[122],"Alibaba\u2019s":[124],"production":[125],"over":[129],"6":[130],"months":[131],"analyzing":[134],"terabytes":[135],"flow":[138],"metrics":[139],"per":[140],"day.":[141]},"counts_by_year":[{"year":2022,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}