{"id":"https://openalex.org/W4281681671","doi":"https://doi.org/10.1109/noms54207.2022.9789939","title":"Enabling Malware Detection with Machine Learning on Programmable Switch","display_name":"Enabling Malware Detection with Machine Learning on Programmable Switch","publication_year":2022,"publication_date":"2022-04-25","ids":{"openalex":"https://openalex.org/W4281681671","doi":"https://doi.org/10.1109/noms54207.2022.9789939"},"language":"en","primary_location":{"id":"doi:10.1109/noms54207.2022.9789939","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms54207.2022.9789939","pdf_url":null,"source":{"id":"https://openalex.org/S4363605650","display_name":"NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100859605","display_name":"Hsin-Fu Chang","orcid":null},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Hsin-Fu Chang","raw_affiliation_strings":["National Yang Ming Chiao Tung University,Department of Electrical and Computer Engineering","Department of Electrical and Computer Engineering, National Yang Ming Chiao Tung University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Yang Ming Chiao Tung University,Department of Electrical and Computer Engineering","institution_ids":["https://openalex.org/I148366613"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, National Yang Ming Chiao Tung University","institution_ids":["https://openalex.org/I148366613"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001239437","display_name":"I-Chih Wang","orcid":"https://orcid.org/0000-0002-7002-8776"},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]},{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["TW","US"],"is_corresponding":false,"raw_author_name":"Michael I.-C. Wang","raw_affiliation_strings":["National Yang Ming Chiao Tung University,Department of Electrical and Computer Engineering","Department of Electrical and Computer Engineering, National Yang Ming Chiao Tung University","Department of Electrical and Computer Engineering, New York University Tandon School of Engineering"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Yang Ming Chiao Tung University,Department of Electrical and Computer Engineering","institution_ids":["https://openalex.org/I148366613"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, National Yang Ming Chiao Tung University","institution_ids":["https://openalex.org/I148366613"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, New York University Tandon School of Engineering","institution_ids":["https://openalex.org/I57206974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054327576","display_name":"Chi-Hsiang Hung","orcid":"https://orcid.org/0000-0003-1453-6247"},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Chi-Hsiang Hung","raw_affiliation_strings":["National Yang Ming Chiao Tung University,Advanced SDN Technology Research Center","Advanced SDN Technology Research Center, National Yang Ming Chiao Tung University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Yang Ming Chiao Tung University,Advanced SDN Technology Research Center","institution_ids":["https://openalex.org/I148366613"]},{"raw_affiliation_string":"Advanced SDN Technology Research Center, National Yang Ming Chiao Tung University","institution_ids":["https://openalex.org/I148366613"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100682308","display_name":"Charles H.\u2010P. Wen","orcid":"https://orcid.org/0000-0003-4623-9941"},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Charles H.-P Wen","raw_affiliation_strings":["National Yang Ming Chiao Tung University,Department of Electrical and Computer Engineering","Department of Electrical and Computer Engineering, National Yang Ming Chiao Tung University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"National Yang Ming Chiao Tung University,Department of Electrical and Computer Engineering","institution_ids":["https://openalex.org/I148366613"]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering, National Yang Ming Chiao Tung University","institution_ids":["https://openalex.org/I148366613"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.0708,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.71728907,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8612236976623535},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7611641883850098},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5894585847854614},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5659552812576294},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.5149872899055481},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5000977516174316},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.48188382387161255},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4630458652973175},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.4340023398399353},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.40821364521980286},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.35868972539901733},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.34825003147125244},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2856264114379883},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.249015212059021},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.21807751059532166},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.08292120695114136}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8612236976623535},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7611641883850098},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5894585847854614},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5659552812576294},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.5149872899055481},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5000977516174316},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.48188382387161255},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4630458652973175},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.4340023398399353},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.40821364521980286},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.35868972539901733},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.34825003147125244},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2856264114379883},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.249015212059021},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.21807751059532166},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.08292120695114136}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/noms54207.2022.9789939","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms54207.2022.9789939","pdf_url":null,"source":{"id":"https://openalex.org/S4363605650","display_name":"NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2022-2022 IEEE/IFIP Network Operations and Management Symposium","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W1516506771","https://openalex.org/W1674877186","https://openalex.org/W1994926493","https://openalex.org/W2598684549","https://openalex.org/W2607252931","https://openalex.org/W2926701059","https://openalex.org/W3000225415","https://openalex.org/W3087167621","https://openalex.org/W3117043094","https://openalex.org/W6637096788","https://openalex.org/W6735304853","https://openalex.org/W6782908489"],"related_works":["https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4285325964","https://openalex.org/W2061466315","https://openalex.org/W2376886931","https://openalex.org/W2010561419","https://openalex.org/W2374845301","https://openalex.org/W2351448539","https://openalex.org/W1977863481","https://openalex.org/W2384741105"],"abstract_inverted_index":{"Malware":[0],"detection":[1,20,104],"is":[2],"an":[3],"important":[4],"issue":[5],"for":[6,10,31,143],"network":[7,18],"security,":[8],"especially":[9],"the":[11,56,60,72,98,101,127,133,144],"Internet":[12],"of":[13,80,135],"Things":[14],"(IoT)":[15],"network.":[16,73,146],"Traditional":[17],"intrusion":[19],"system":[21],"(NIDS),":[22],"running":[23],"on":[24,38,67],"external":[25],"host":[26],"servers,":[27],"are":[28],"not":[29],"scalable":[30],"ever-increasing":[32],"IoT":[33,145],"traffic":[34],"and":[35,42,59,92],"waste":[36],"time":[37,110],"transmitting":[39],"data":[40],"back":[41],"forth.":[43],"Here,":[44],"we":[45],"propose":[46],"a":[47,106,112,125,140],"novel":[48],"architecture":[49],"called":[50],"on-switch":[51,75,102,128],"malware":[52,76,103,129],"detector":[53,77,130],"that":[54],"utilizes":[55],"programmable":[57],"switch":[58],"machine-learning":[61],"technique":[62],"to":[63,97],"achieve":[64],"better":[65,141],"performance":[66],"detecting":[68],"malicious":[69],"flows":[70],"in":[71],"The":[74],"mainly":[78],"consists":[79],"four":[81],"components:":[82],"(1)":[83],"packet":[84],"forwarder,":[85],"(2)":[86],"feature":[87],"extractor,":[88],"(3)":[89],"flow":[90],"director,":[91],"(4)":[93],"neural-network":[94],"detector.":[95],"According":[96],"experimental":[99],"results,":[100],"has":[105],"99.57%":[107],"shorter":[108],"response":[109],"than":[111],"conventional":[113,136],"signature-based":[114],"NIDS;":[115],"meanwhile":[116],"its":[117],"processing":[118],"capacity":[119],"increases":[120],"by":[121],"800":[122],"times.":[123],"As":[124],"result,":[126],"efficiently":[131],"overcomes":[132],"shortcomings":[134],"NIDSs,":[137],"making":[138],"it":[139],"fit":[142]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}