{"id":"https://openalex.org/W4412445116","doi":"https://doi.org/10.1109/noms57970.2025.11073727","title":"Towards Building Network Outlier Detection System for Network Traffic Monitoring","display_name":"Towards Building Network Outlier Detection System for Network Traffic Monitoring","publication_year":2025,"publication_date":"2025-05-12","ids":{"openalex":"https://openalex.org/W4412445116","doi":"https://doi.org/10.1109/noms57970.2025.11073727"},"language":"en","primary_location":{"id":"doi:10.1109/noms57970.2025.11073727","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms57970.2025.11073727","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2025-2025 IEEE Network Operations and Management Symposium","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5087179836","display_name":"Josef Koumar","orcid":"https://orcid.org/0000-0002-3643-9723"},"institutions":[{"id":"https://openalex.org/I44504214","display_name":"Czech Technical University in Prague","ror":"https://ror.org/03kqpb082","country_code":"CZ","type":"education","lineage":["https://openalex.org/I44504214"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Josef Koumar","raw_affiliation_strings":["Czech Technical University in Prague"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Czech Technical University in Prague","institution_ids":["https://openalex.org/I44504214"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033867729","display_name":"Jaroslav Pe\u0161ek","orcid":"https://orcid.org/0000-0003-1634-9779"},"institutions":[{"id":"https://openalex.org/I44504214","display_name":"Czech Technical University in Prague","ror":"https://ror.org/03kqpb082","country_code":"CZ","type":"education","lineage":["https://openalex.org/I44504214"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Jaroslav Pesek","raw_affiliation_strings":["Czech Technical University in Prague"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Czech Technical University in Prague","institution_ids":["https://openalex.org/I44504214"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084472511","display_name":"Kamil Je\u0159\u00e1bek","orcid":"https://orcid.org/0000-0002-5317-9222"},"institutions":[{"id":"https://openalex.org/I60587646","display_name":"Brno University of Technology","ror":"https://ror.org/03613d656","country_code":"CZ","type":"education","lineage":["https://openalex.org/I60587646"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Kamil Jerabek","raw_affiliation_strings":["Brno Technical University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Brno Technical University","institution_ids":["https://openalex.org/I60587646"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062180857","display_name":"Tom\u00e1\u0161 \u010cejka","orcid":"https://orcid.org/0000-0001-7794-9511"},"institutions":[{"id":"https://openalex.org/I54634078","display_name":"CESNET, z\u00e1jmov\u00e9 sdru\u017een\u00ed pr\u00e1vnick\u00fdch osob","ror":"https://ror.org/050dkka69","country_code":"CZ","type":"other","lineage":["https://openalex.org/I54634078"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Tom\u00e1\u0161 \u010cejka","raw_affiliation_strings":["CESNET, a.l.e"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CESNET, a.l.e","institution_ids":["https://openalex.org/I54634078"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":9.9069,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.98436223,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9933000206947327,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.705531656742096},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.66319340467453},{"id":"https://openalex.org/keywords/network-monitoring","display_name":"Network monitoring","score":0.46717366576194763},{"id":"https://openalex.org/keywords/traffic-generation-model","display_name":"Traffic generation model","score":0.46514785289764404},{"id":"https://openalex.org/keywords/outlier","display_name":"Outlier","score":0.4319971799850464},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.4304133951663971},{"id":"https://openalex.org/keywords/network-traffic-simulation","display_name":"Network traffic simulation","score":0.42717477679252625},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.42015740275382996},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4198135733604431},{"id":"https://openalex.org/keywords/network-traffic-control","display_name":"Network traffic control","score":0.35286158323287964},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.2836180329322815},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.22816357016563416},{"id":"https://openalex.org/keywords/quality-of-service","display_name":"Quality of service","score":0.10011756420135498}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.705531656742096},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.66319340467453},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.46717366576194763},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.46514785289764404},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.4319971799850464},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4304133951663971},{"id":"https://openalex.org/C94168897","wikidata":"https://www.wikidata.org/wiki/Q574324","display_name":"Network traffic simulation","level":4,"score":0.42717477679252625},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.42015740275382996},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4198135733604431},{"id":"https://openalex.org/C201100257","wikidata":"https://www.wikidata.org/wiki/Q393287","display_name":"Network traffic control","level":3,"score":0.35286158323287964},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2836180329322815},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.22816357016563416},{"id":"https://openalex.org/C5119721","wikidata":"https://www.wikidata.org/wiki/Q220501","display_name":"Quality of service","level":2,"score":0.10011756420135498},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/noms57970.2025.11073727","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms57970.2025.11073727","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2025-2025 IEEE Network Operations and Management Symposium","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/11","score":0.5799999833106995,"display_name":"Sustainable cities and communities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W2049058890","https://openalex.org/W2751947116","https://openalex.org/W2912386632","https://openalex.org/W3001052135","https://openalex.org/W3007537043","https://openalex.org/W3041286073","https://openalex.org/W3091873932","https://openalex.org/W3117098906","https://openalex.org/W3126527130","https://openalex.org/W3200624536","https://openalex.org/W3206325220","https://openalex.org/W4206622111","https://openalex.org/W4232939599","https://openalex.org/W4285233543","https://openalex.org/W4298085187","https://openalex.org/W4313343358","https://openalex.org/W4389077648","https://openalex.org/W4390546166","https://openalex.org/W6634397726"],"related_works":["https://openalex.org/W2362416893","https://openalex.org/W2612238703","https://openalex.org/W2924962435","https://openalex.org/W4379534844","https://openalex.org/W1994698836","https://openalex.org/W2013380757","https://openalex.org/W2391622324","https://openalex.org/W2035170846","https://openalex.org/W2140139251","https://openalex.org/W2745966507"],"abstract_inverted_index":{"Traffic":[0],"monitoring":[1],"is":[2],"important":[3],"for":[4,115,146],"supporting":[5],"network":[6,42,79,147],"security":[7],"and":[8,89,111,130,136],"management.":[9],"Recent":[10],"advancements":[11],"have":[12],"explored":[13],"machine":[14],"learning-based":[15],"approaches":[16],"to":[17,75],"classify":[18],"encrypted":[19],"traffic,":[20],"yet":[21],"the":[22,125,134],"challenge":[23],"of":[24,98,118,127],"obtaining":[25],"current":[26],"threat":[27],"datasets":[28],"persists,":[29],"leaving":[30],"supervised":[31],"models":[32],"reliant":[33],"on":[34,71,91],"outdated":[35],"information.":[36],"Outlier":[37,64],"detection,":[38],"which":[39],"identifies":[40],"anomalous":[41],"behavior":[43],"without":[44],"requiring":[45],"labeled":[46],"data,":[47],"addresses":[48],"this":[49],"limitation":[50],"by":[51,81],"flagging":[52],"suspicious":[53],"deviations":[54],"from":[55],"expected":[56],"patterns.":[57],"This":[58,122],"paper":[59,123],"proposes":[60],"a":[61,68,92,102],"novel":[62],"Network":[63],"Detection":[65],"System":[66],"(NODS),":[67],"platform":[69],"based":[70],"open-source":[72],"software":[73],"designed":[74],"detect":[76],"outliers":[77,100],"in":[78,139],"traffic":[80],"leveraging":[82],"forecasting":[83],"models.":[84],"Our":[85],"system":[86,109,145],"was":[87],"deployed":[88],"tested":[90],"large":[93],"ISP":[94],"infrastructure.":[95],"The":[96],"evaluation":[97],"detected":[99],"over":[101],"one-month":[103],"period":[104],"showed":[105],"key":[106],"insights":[107],"into":[108],"performance":[110,131],"provided":[112],"valuable":[113],"lessons":[114,137],"future":[116],"deployment":[117],"outlier":[119,143],"detection":[120,144],"methods.":[121],"details":[124],"architecture":[126],"NODS,":[128],"deployment,":[129],"while":[132],"highlighting":[133],"challenges":[135],"learned":[138],"building":[140],"an":[141],"effective":[142],"traffic.":[148]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}