{"id":"https://openalex.org/W4233008960","doi":"https://doi.org/10.1109/perser.2004.1356777","title":"Abnormality metrics to detect and protect against network attacks","display_name":"Abnormality metrics to detect and protect against network attacks","publication_year":2004,"publication_date":"2004-12-23","ids":{"openalex":"https://openalex.org/W4233008960","doi":"https://doi.org/10.1109/perser.2004.1356777"},"language":"en","primary_location":{"id":"doi:10.1109/perser.2004.1356777","is_oa":false,"landing_page_url":"https://doi.org/10.1109/perser.2004.1356777","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The IEEE/ACS International Conference onPervasive Services, 2004. ICPS 2004. Proceedings.","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005828574","display_name":"Guangzhi Qu","orcid":"https://orcid.org/0000-0003-4047-9514"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Guangzhi Qu","raw_affiliation_strings":["ITL Laboratory, University of Arizona Tucson, USA"],"affiliations":[{"raw_affiliation_string":"ITL Laboratory, University of Arizona Tucson, USA","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086250008","display_name":"S. Hariri","orcid":null},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"S. Hariri","raw_affiliation_strings":["ITL Laboratory, University of Arizona Tucson, USA"],"affiliations":[{"raw_affiliation_string":"ITL Laboratory, University of Arizona Tucson, USA","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076417995","display_name":"S. Jangiti","orcid":null},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"S. Jangiti","raw_affiliation_strings":["ITL Laboratory, University of Arizona Tucson, USA"],"affiliations":[{"raw_affiliation_string":"ITL Laboratory, University of Arizona Tucson, USA","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048639303","display_name":"Sajid Hussain","orcid":"https://orcid.org/0000-0003-3714-4246"},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"S. Hussain","raw_affiliation_strings":["ITL Laboratory, University of Arizona Tucson, USA"],"affiliations":[{"raw_affiliation_string":"ITL Laboratory, University of Arizona Tucson, USA","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101136369","display_name":"Seungchan Oh","orcid":null},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Seungchan Oh","raw_affiliation_strings":["ITL Laboratory, University of Arizona Tucson, USA"],"affiliations":[{"raw_affiliation_string":"ITL Laboratory, University of Arizona Tucson, USA","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059040234","display_name":"M. Yousif","orcid":null},"institutions":[{"id":"https://openalex.org/I1343180700","display_name":"Intel (United States)","ror":"https://ror.org/01ek73717","country_code":"US","type":"company","lineage":["https://openalex.org/I1343180700"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"M. Yousif","raw_affiliation_strings":["Intel Corporation, USA"],"affiliations":[{"raw_affiliation_string":"Intel Corporation, USA","institution_ids":["https://openalex.org/I1343180700"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056435229","display_name":"S. Fayssal","orcid":null},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"S. Fayssal","raw_affiliation_strings":["ITL Laboratory, University of Arizona Tucson, USA"],"affiliations":[{"raw_affiliation_string":"ITL Laboratory, University of Arizona Tucson, USA","institution_ids":["https://openalex.org/I138006243"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5005828574"],"corresponding_institution_ids":["https://openalex.org/I138006243"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.4936775,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"105","last_page":"111"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8196024894714355},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.6976087093353271},{"id":"https://openalex.org/keywords/abnormality","display_name":"Abnormality","score":0.6668617129325867},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.6622136831283569},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6334146857261658},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.6086940169334412},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5579478740692139},{"id":"https://openalex.org/keywords/workload","display_name":"Workload","score":0.46784958243370056},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4570792019367218},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.31183624267578125},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.10656967759132385}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8196024894714355},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6976087093353271},{"id":"https://openalex.org/C50965678","wikidata":"https://www.wikidata.org/wiki/Q2724302","display_name":"Abnormality","level":2,"score":0.6668617129325867},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.6622136831283569},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6334146857261658},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.6086940169334412},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5579478740692139},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.46784958243370056},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4570792019367218},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.31183624267578125},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.10656967759132385},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/perser.2004.1356777","is_oa":false,"landing_page_url":"https://doi.org/10.1109/perser.2004.1356777","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"The IEEE/ACS International Conference onPervasive Services, 2004. ICPS 2004. Proceedings.","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Gender equality","score":0.5,"id":"https://metadata.un.org/sdg/5"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":2,"referenced_works":["https://openalex.org/W112022908","https://openalex.org/W2157929035"],"related_works":["https://openalex.org/W2294483539","https://openalex.org/W2378449000","https://openalex.org/W3187581118","https://openalex.org/W2938399969","https://openalex.org/W3143747655","https://openalex.org/W2002178493","https://openalex.org/W2901835651","https://openalex.org/W2883616266","https://openalex.org/W4230824443","https://openalex.org/W2292210693"],"abstract_inverted_index":{"Internet":[0],"has":[1,30],"been":[2],"growing":[3],"at":[4],"an":[5],"amazing":[6],"rate":[7],"and":[8,27,37,44,48,59,68,76,93,122,130,150,177,201],"it":[9,50],"becomes":[10,51],"pervasive":[11,42,105],"in":[12,166],"all":[13],"aspects":[14],"of":[15,24,61,65,74,102,144,181,198],"our":[16],"life.":[17],"On":[18],"the":[19,22,62,100,127,132,142,147,152,162,167,179],"other":[20],"hand,":[21],"ubiquity":[23],"networked":[25],"computers":[26],"their":[28,33,45],"services":[29,46,69],"significantly":[31],"increased":[32],"vulnerability":[34],"to":[35,54,89,98,124,140,160,175,184],"virus":[36],"worm":[38,195,203],"attacks.":[39],"To":[40],"make":[41],"systems":[43,67],"reliable":[47],"secure":[49],"highly":[52],"essential":[53],"develop":[55],"on-line":[56],"monitoring,":[57],"analysis,":[58],"quantification":[60],"operational":[63],"state":[64],"such":[66,190],"under":[70],"a":[71,155,172],"wide":[72],"range":[73],"normal":[75],"abnormal":[77,91],"workload":[78],"scenarios.":[79],"We":[80,169],"prevent":[81],"several":[82,186],"abnormality":[83,133],"metrics":[84,139,183],"that":[85],"can":[86,95],"be":[87,96],"used":[88,97],"detect":[90,185],"behaviors":[92],"also":[94],"quantify":[99,141],"impact":[101,143],"attach":[103],"on":[104,114,118,146,151],"system":[106,153],"sendees.":[107],"Our":[108],"online":[109],"monitoring":[110],"approach":[111],"is":[112],"based":[113],"deploying":[115],"software":[116],"agents":[117],"selected":[119],"routers,":[120],"clients":[121],"servers":[123],"continuously":[125],"monitor":[126],"measurement":[128],"attributes":[129],"compute":[131],"metrics.":[134],"Further,":[135],"we":[136],"use":[137],"this":[138],"attacks":[145,189],"individual":[148],"components":[149,165],"as":[154,191],"whole.":[156],"This":[157],"analysis":[158],"leads":[159],"identify":[161],"most":[163],"critical":[164],"system.":[168],"have":[170],"built":[171],"test":[173],"bed":[174],"experiment":[176],"evaluate":[178],"effectiveness":[180],"these":[182],"well-known":[187],"network":[188],"MS":[192],"SQL":[193],"slammer":[194],"attack,":[196,200],"Denial":[197],"Service":[199],"email":[202],"spam.":[204]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}