{"id":"https://openalex.org/W4408519729","doi":"https://doi.org/10.1109/ojcoms.2025.3550010","title":"A Hybrid Model for BGP Anomaly Detection Using Median Absolute Deviation and Machine Learning","display_name":"A Hybrid Model for BGP Anomaly Detection Using Median Absolute Deviation and Machine Learning","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4408519729","doi":"https://doi.org/10.1109/ojcoms.2025.3550010"},"language":"en","primary_location":{"id":"doi:10.1109/ojcoms.2025.3550010","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2025.3550010","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/ojcoms.2025.3550010","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5095893088","display_name":"Maria Andrea Romo-Chavero","orcid":"https://orcid.org/0009-0002-5224-1343"},"institutions":[{"id":"https://openalex.org/I98461037","display_name":"Tecnol\u00f3gico de Monterrey","ror":"https://ror.org/03ayjn504","country_code":"MX","type":"education","lineage":["https://openalex.org/I98461037"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Maria Andrea Romo-Chavero","raw_affiliation_strings":["Tecnologico de Monterrey, School of Engineering and Sciences, Monterrey, Mexico"],"raw_orcid":"https://orcid.org/0009-0002-5224-1343","affiliations":[{"raw_affiliation_string":"Tecnologico de Monterrey, School of Engineering and Sciences, Monterrey, Mexico","institution_ids":["https://openalex.org/I98461037"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5116657659","display_name":"Gustavo De los R\u00edos Alatorre","orcid":null},"institutions":[{"id":"https://openalex.org/I98461037","display_name":"Tecnol\u00f3gico de Monterrey","ror":"https://ror.org/03ayjn504","country_code":"MX","type":"education","lineage":["https://openalex.org/I98461037"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Gustavo De Los R\u00edos Alatorre","raw_affiliation_strings":["Tecnologico de Monterrey, School of Engineering and Sciences, Monterrey, Mexico"],"raw_orcid":"https://orcid.org/0009-0000-1910-0691","affiliations":[{"raw_affiliation_string":"Tecnologico de Monterrey, School of Engineering and Sciences, Monterrey, Mexico","institution_ids":["https://openalex.org/I98461037"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012414236","display_name":"Jos\u00e9 Antonio Cantoral-Ceballos","orcid":"https://orcid.org/0000-0001-5597-939X"},"institutions":[{"id":"https://openalex.org/I98461037","display_name":"Tecnol\u00f3gico de Monterrey","ror":"https://ror.org/03ayjn504","country_code":"MX","type":"education","lineage":["https://openalex.org/I98461037"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Jose Antonio Cantoral-Ceballos","raw_affiliation_strings":["Tecnologico de Monterrey, School of Engineering and Sciences, Monterrey, Mexico"],"raw_orcid":"https://orcid.org/0000-0001-5597-939X","affiliations":[{"raw_affiliation_string":"Tecnologico de Monterrey, School of Engineering and Sciences, Monterrey, Mexico","institution_ids":["https://openalex.org/I98461037"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031091191","display_name":"Jes\u00fas Arturo P\u00e9rez-D\u00edaz","orcid":"https://orcid.org/0000-0002-7678-5487"},"institutions":[{"id":"https://openalex.org/I98461037","display_name":"Tecnol\u00f3gico de Monterrey","ror":"https://ror.org/03ayjn504","country_code":"MX","type":"education","lineage":["https://openalex.org/I98461037"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Jes\u00fas Arturo P\u00e9rez-D\u00edaz","raw_affiliation_strings":["Tecnologico de Monterrey, School of Engineering and Sciences, Monterrey, Mexico"],"raw_orcid":"https://orcid.org/0000-0002-7678-5487","affiliations":[{"raw_affiliation_string":"Tecnologico de Monterrey, School of Engineering and Sciences, Monterrey, Mexico","institution_ids":["https://openalex.org/I98461037"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5017009914","display_name":"Carlos Martinez-Cagnazzo","orcid":"https://orcid.org/0000-0001-8828-5239"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Carlos Martinez-Cagnazzo","raw_affiliation_strings":["Technology Management, LACNIC, Montevideo, Uruguay"],"raw_orcid":"https://orcid.org/0000-0001-8828-5239","affiliations":[{"raw_affiliation_string":"Technology Management, LACNIC, Montevideo, Uruguay","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1750,"currency":"USD","value_usd":1750},"apc_paid":{"value":1750,"currency":"USD","value_usd":1750},"fwci":7.0351,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.96270233,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"6","issue":null,"first_page":"2102","last_page":"2116"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9861999750137329,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9861999750137329,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.968999981880188,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9627000093460083,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7566627264022827},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.6564339399337769},{"id":"https://openalex.org/keywords/absolute-deviation","display_name":"Absolute deviation","score":0.5584831237792969},{"id":"https://openalex.org/keywords/absolute","display_name":"Absolute (philosophy)","score":0.4518342912197113},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4075380861759186},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.3806726336479187},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.35157540440559387},{"id":"https://openalex.org/keywords/geodesy","display_name":"Geodesy","score":0.32428494095802307},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.2785031795501709},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.24074915051460266},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.13336971402168274},{"id":"https://openalex.org/keywords/philosophy","display_name":"Philosophy","score":0.07710662484169006}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7566627264022827},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.6564339399337769},{"id":"https://openalex.org/C120934525","wikidata":"https://www.wikidata.org/wiki/Q849149","display_name":"Absolute deviation","level":2,"score":0.5584831237792969},{"id":"https://openalex.org/C2777487392","wikidata":"https://www.wikidata.org/wiki/Q481201","display_name":"Absolute (philosophy)","level":2,"score":0.4518342912197113},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4075380861759186},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.3806726336479187},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.35157540440559387},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.32428494095802307},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.2785031795501709},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.24074915051460266},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.13336971402168274},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.07710662484169006},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/ojcoms.2025.3550010","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2025.3550010","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:bd33d85b312742629ef9ade63b92876c","is_oa":true,"landing_page_url":"https://doaj.org/article/bd33d85b312742629ef9ade63b92876c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Open Journal of the Communications Society, Vol 6, Pp 2102-2116 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/ojcoms.2025.3550010","is_oa":true,"landing_page_url":"https://doi.org/10.1109/ojcoms.2025.3550010","pdf_url":null,"source":{"id":"https://openalex.org/S4210202420","display_name":"IEEE Open Journal of the Communications Society","issn_l":"2644-125X","issn":["2644-125X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310316002","host_organization_name":"IEEE Communications Society","host_organization_lineage":["https://openalex.org/P4310316002","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Communications Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Open Journal of the Communications Society","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W1982506807","https://openalex.org/W2159943424","https://openalex.org/W2542543501","https://openalex.org/W2976646594","https://openalex.org/W2990923974","https://openalex.org/W2991838577","https://openalex.org/W2997591727","https://openalex.org/W3021503072","https://openalex.org/W3040266635","https://openalex.org/W3107341829","https://openalex.org/W3112904950","https://openalex.org/W3216660278","https://openalex.org/W4225114726","https://openalex.org/W4294631279","https://openalex.org/W4310511513","https://openalex.org/W4386715559","https://openalex.org/W4395464135","https://openalex.org/W4402100671","https://openalex.org/W6860047124"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3120251014"],"abstract_inverted_index":{"Detecting":[0],"anomalies":[1],"in":[2,11,21,82,156],"the":[3,12,17,22,36,153,166,170,188,197],"Border":[4],"Gateway":[5],"Protocol":[6],"(BGP)":[7],"has":[8],"proved":[9],"relevant":[10],"cybersecurity":[13],"field":[14],"due":[15],"to":[16,29,41],"protocol\u2019s":[18],"critical":[19],"role":[20],"Internet\u2019s":[23],"infrastructure.":[24],"BGP":[25],"vulnerabilities":[26],"can":[27,118],"lead":[28],"major":[30],"disruptions":[31],"and":[32,44,87,105,138,147,169,183,193,211],"connectivity":[33],"failures,":[34],"highlighting":[35],"need":[37],"for":[38,196],"early":[39],"detection":[40,67,80,112,121,206,218],"maintain":[42],"stable":[43],"secure":[45],"Internet":[46],"services.":[47],"To":[48],"address":[49],"this":[50],"challenge,":[51],"our":[52,59,110],"article":[53],"presents":[54],"an":[55,178],"enhanced":[56],"version":[57],"of":[58,93,181,185,191,199],"previously":[60],"published":[61],"Median":[62],"Absolute":[63],"Deviation":[64],"(MAD)":[65],"anomaly":[66,79,120,217],"system.":[68],"We":[69,151],"introduce":[70],"a":[71,90,141],"novel":[72],"dynamic":[73],"threshold":[74],"mechanism":[75],"that":[76,108,215],"significantly":[77],"enhances":[78],"performance":[81,155],"BGP,":[83],"achieving":[84],"superior":[85],"accuracy":[86,180],"F1-score.":[88],"Through":[89],"comparative":[91],"analysis":[92],"machine":[94,145],"learning":[95,146],"(ML)":[96],"classification":[97],"models\u2014including":[98],"Random":[99],"Forest,":[100],"Extra":[101],"Trees,":[102],"XGBoost,":[103],"LightGBM,":[104],"CatBoost\u2014we":[106],"demonstrate":[107],"integrating":[109],"MAD":[111,127,192],"system":[113],"with":[114,131,207],"these":[115],"ML":[116,194],"models":[117,154,195],"improve":[119],"significantly.":[122],"Additionally,":[123],"we":[124],"explore":[125],"how":[126],"performs":[128],"when":[129],"combined":[130],"neural":[132,148],"networks":[133],"such":[134,159],"as":[135,160],"RNN,":[136],"GRU,":[137],"LSTM,":[139],"providing":[140],"valuable":[142],"comparison":[143],"between":[144],"network-based":[149],"approaches.":[150],"evaluate":[152],"well-known":[157],"events,":[158],"CodeRed":[161],"1":[162],"v2,":[163],"Slammer,":[164],"Nimda,":[165],"Moscow":[167],"blackout,":[168],"Telekom":[171],"Malaysia":[172],"(TMnet)":[173],"misconfiguration.":[174],"Our":[175,202],"results":[176],"show":[177],"overall":[179],"0.99":[182],"F1-score":[184],"0.98,":[186],"demonstrating":[187],"effective":[189],"integration":[190],"identification":[198],"security":[200],"threats.":[201],"approach":[203],"enables":[204],"proactive":[205],"minimal":[208],"computational":[209],"costs":[210],"reduced":[212],"preprocessing,":[213],"proving":[214],"efficient":[216],"is":[219],"achievable.":[220]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}