{"id":"https://openalex.org/W4412446091","doi":"https://doi.org/10.1109/noms57970.2025.11073723","title":"Advancing Network Monitoring with Packet-Level Records and Selective Flow Aggregation","display_name":"Advancing Network Monitoring with Packet-Level Records and Selective Flow Aggregation","publication_year":2025,"publication_date":"2025-05-12","ids":{"openalex":"https://openalex.org/W4412446091","doi":"https://doi.org/10.1109/noms57970.2025.11073723"},"language":"en","primary_location":{"id":"doi:10.1109/noms57970.2025.11073723","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms57970.2025.11073723","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2025-2025 IEEE Network Operations and Management Symposium","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038357994","display_name":"Ina Berenice Fink","orcid":"https://orcid.org/0000-0002-9146-215X"},"institutions":[{"id":"https://openalex.org/I887968799","display_name":"RWTH Aachen University","ror":"https://ror.org/04xfq0f34","country_code":"DE","type":"education","lineage":["https://openalex.org/I887968799"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ina Berenice Fink","raw_affiliation_strings":["Communication and Distributed Systems, RWTH Aachen University,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Communication and Distributed Systems, RWTH Aachen University,Germany","institution_ids":["https://openalex.org/I887968799"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5057626571","display_name":"Ike Kunze","orcid":"https://orcid.org/0000-0001-8609-800X"},"institutions":[{"id":"https://openalex.org/I887968799","display_name":"RWTH Aachen University","ror":"https://ror.org/04xfq0f34","country_code":"DE","type":"education","lineage":["https://openalex.org/I887968799"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Ike Kunze","raw_affiliation_strings":["Communication and Distributed Systems, RWTH Aachen University,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Communication and Distributed Systems, RWTH Aachen University,Germany","institution_ids":["https://openalex.org/I887968799"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103091356","display_name":"Pascal Hein","orcid":"https://orcid.org/0009-0008-7406-9840"},"institutions":[{"id":"https://openalex.org/I887968799","display_name":"RWTH Aachen University","ror":"https://ror.org/04xfq0f34","country_code":"DE","type":"education","lineage":["https://openalex.org/I887968799"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Pascal Hein","raw_affiliation_strings":["Communication and Distributed Systems, RWTH Aachen University,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Communication and Distributed Systems, RWTH Aachen University,Germany","institution_ids":["https://openalex.org/I887968799"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027786698","display_name":"Jan Pennekamp","orcid":"https://orcid.org/0000-0003-0398-6904"},"institutions":[{"id":"https://openalex.org/I887968799","display_name":"RWTH Aachen University","ror":"https://ror.org/04xfq0f34","country_code":"DE","type":"education","lineage":["https://openalex.org/I887968799"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jan Pennekamp","raw_affiliation_strings":["Communication and Distributed Systems, RWTH Aachen University,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Communication and Distributed Systems, RWTH Aachen University,Germany","institution_ids":["https://openalex.org/I887968799"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006766512","display_name":"Benjamin Standaert","orcid":null},"institutions":[{"id":"https://openalex.org/I204465549","display_name":"Washington University in St. Louis","ror":"https://ror.org/01yc7t268","country_code":"US","type":"education","lineage":["https://openalex.org/I204465549"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Benjamin Standaert","raw_affiliation_strings":["Washington University in St. Louis,Missouri,United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Washington University in St. Louis,Missouri,United States","institution_ids":["https://openalex.org/I204465549"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078646305","display_name":"Klaus Wehrle","orcid":"https://orcid.org/0000-0001-8609-800X"},"institutions":[{"id":"https://openalex.org/I887968799","display_name":"RWTH Aachen University","ror":"https://ror.org/04xfq0f34","country_code":"DE","type":"education","lineage":["https://openalex.org/I887968799"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Klaus Wehrle","raw_affiliation_strings":["Communication and Distributed Systems, RWTH Aachen University,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Communication and Distributed Systems, RWTH Aachen University,Germany","institution_ids":["https://openalex.org/I887968799"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089216902","display_name":"Jan R\u00fcth","orcid":"https://orcid.org/0000-0002-4993-3210"},"institutions":[{"id":"https://openalex.org/I887968799","display_name":"RWTH Aachen University","ror":"https://ror.org/04xfq0f34","country_code":"DE","type":"education","lineage":["https://openalex.org/I887968799"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jan R\u00fcth","raw_affiliation_strings":["Communication and Distributed Systems, RWTH Aachen University,Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Communication and Distributed Systems, RWTH Aachen University,Germany","institution_ids":["https://openalex.org/I887968799"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.3242,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.92765544,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6350443363189697},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6173344254493713},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4805312752723694}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6350443363189697},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6173344254493713},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4805312752723694}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/noms57970.2025.11073723","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms57970.2025.11073723","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2025-2025 IEEE Network Operations and Management Symposium","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W1986497098","https://openalex.org/W2053550965","https://openalex.org/W2130583399","https://openalex.org/W2142839897","https://openalex.org/W2160727041","https://openalex.org/W2171331105","https://openalex.org/W2246035246","https://openalex.org/W2293280451","https://openalex.org/W2468229642","https://openalex.org/W2487095677","https://openalex.org/W2563349746","https://openalex.org/W2628759714","https://openalex.org/W2798627392","https://openalex.org/W2820900234","https://openalex.org/W2878215196","https://openalex.org/W2951243021","https://openalex.org/W2989087174","https://openalex.org/W3008603700","https://openalex.org/W3036035276","https://openalex.org/W3046744974","https://openalex.org/W3095924252","https://openalex.org/W3101335188","https://openalex.org/W3105682467","https://openalex.org/W3120695945","https://openalex.org/W3129668023","https://openalex.org/W3136284412","https://openalex.org/W3168924310","https://openalex.org/W3185617097","https://openalex.org/W3187007737","https://openalex.org/W3216105720","https://openalex.org/W4253269957","https://openalex.org/W4281724341","https://openalex.org/W4288079454","https://openalex.org/W4381744893","https://openalex.org/W4385521722","https://openalex.org/W4388699220","https://openalex.org/W4390102136","https://openalex.org/W4401942527","https://openalex.org/W6680989907","https://openalex.org/W6681894326","https://openalex.org/W6691035161","https://openalex.org/W6691504563","https://openalex.org/W6753664479","https://openalex.org/W6762923431","https://openalex.org/W6786649462"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"Due":[0],"to":[1,44,69,140,142,145],"its":[2,115],"superior":[3],"efficiency,":[4],"network":[5,42,92,120],"operators":[6,43],"frequently":[7],"prefer":[8],"flow":[9],"monitoring":[10,64,93,147],"over":[11],"full":[12],"packet":[13,146],"captures.":[14],"However,":[15],"packet-level":[16,63],"information":[17],"is":[18],"crucial":[19],"for":[20],"the":[21,80,99,137],"timely":[22],"and":[23,27,48,76,90,109,117,122],"reliable":[24],"detection,":[25],"investigation,":[26],"mitigation":[28],"of":[29,83,101],"security":[30],"incidents.":[31],"Currently,":[32],"no":[33],"solution":[34,59],"effectively":[35],"balances":[36],"these":[37],"two":[38],"contradicting":[39],"approaches,":[40],"forcing":[41],"compromise":[45],"between":[46,74],"efficiency":[47,75],"accuracy.":[49,77],"In":[50],"this":[51],"paper,":[52],"we":[53],"thus":[54],"propose":[55],"HybridMon,":[56],"a":[57,71],"hybrid":[58],"that":[60,129],"combines":[61],"condensed":[62],"with":[65],"selective":[66],"flow-based":[67],"aggregation":[68],"strike":[70],"new":[72],"balance":[73],"Operating":[78],"on":[79],"data":[81],"plane":[82],"P4-programmable":[84],"switches,":[85],"HybridMon":[86,102,130],"enables":[87],"fine-grained,":[88],"practical,":[89],"flexible":[91],"at":[94],"Tbps":[95],"speeds.":[96],"We":[97],"validate":[98],"effectiveness":[100],"through":[103],"extensive":[104],"evaluations":[105],"using":[106],"Internet":[107],"backbone":[108],"university":[110],"campus":[111],"traffic":[112],"traces,":[113],"demonstrating":[114],"reliability":[116],"performance":[118],"in":[119],"forensics":[121],"intrusion":[123],"detection":[124],"contexts.":[125],"Our":[126],"results":[127],"show":[128],"reliably":[131],"monitors":[132],"all":[133],"flows":[134],"while":[135],"reducing":[136],"output":[138],"bandwidth":[139],"12%":[141],"20%":[143],"compared":[144],"when":[148],"exporting":[149],"standard":[150],"features.":[151]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}