{"id":"https://openalex.org/W4317383046","doi":"https://doi.org/10.1109/rivf55975.2022.10013833","title":"A federated threat hunting system with big data analysis for SDN-enabled networks","display_name":"A federated threat hunting system with big data analysis for SDN-enabled networks","publication_year":2022,"publication_date":"2022-12-20","ids":{"openalex":"https://openalex.org/W4317383046","doi":"https://doi.org/10.1109/rivf55975.2022.10013833"},"language":"en","primary_location":{"id":"doi:10.1109/rivf55975.2022.10013833","is_oa":false,"landing_page_url":"https://doi.org/10.1109/rivf55975.2022.10013833","pdf_url":null,"source":{"id":"https://openalex.org/S4363608274","display_name":"2022 RIVF International Conference on Computing and Communication Technologies (RIVF)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 RIVF International Conference on Computing and Communication Technologies (RIVF)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064488776","display_name":"Nghia To Trong","orcid":"https://orcid.org/0000-0003-4810-9550"},"institutions":[{"id":"https://openalex.org/I123565023","display_name":"Vietnam National University Ho Chi Minh City","ror":"https://ror.org/00waaqh38","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Nghia To Trong","raw_affiliation_strings":["University of Information Technology,Information Security Laboratory,Ho Chi Minh City,Vietnam","Vietnam National University, Ho Chi Minh city, Vietnam","Information Security Laboratory, University of Information Technology, Ho Chi Minh City, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Information Technology,Information Security Laboratory,Ho Chi Minh City,Vietnam","institution_ids":[]},{"raw_affiliation_string":"Vietnam National University, Ho Chi Minh city, Vietnam","institution_ids":["https://openalex.org/I123565023"]},{"raw_affiliation_string":"Information Security Laboratory, University of Information Technology, Ho Chi Minh City, Vietnam","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059093327","display_name":"Hien Do Hoang","orcid":"https://orcid.org/0000-0001-8475-7075"},"institutions":[{"id":"https://openalex.org/I123565023","display_name":"Vietnam National University Ho Chi Minh City","ror":"https://ror.org/00waaqh38","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Hien Do Hoang","raw_affiliation_strings":["University of Information Technology,Information Security Laboratory,Ho Chi Minh City,Vietnam","Information Security Laboratory, University of Information Technology, Ho Chi Minh City, Vietnam","Vietnam National University, Ho Chi Minh city, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Information Technology,Information Security Laboratory,Ho Chi Minh City,Vietnam","institution_ids":[]},{"raw_affiliation_string":"Information Security Laboratory, University of Information Technology, Ho Chi Minh City, Vietnam","institution_ids":[]},{"raw_affiliation_string":"Vietnam National University, Ho Chi Minh city, Vietnam","institution_ids":["https://openalex.org/I123565023"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062016746","display_name":"Doan Minh Trung","orcid":"https://orcid.org/0000-0003-4880-5214"},"institutions":[{"id":"https://openalex.org/I123565023","display_name":"Vietnam National University Ho Chi Minh City","ror":"https://ror.org/00waaqh38","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Doan Minh Trung","raw_affiliation_strings":["University of Information Technology,Information Security Laboratory,Ho Chi Minh City,Vietnam","Vietnam National University, Ho Chi Minh city, Vietnam","Information Security Laboratory, University of Information Technology, Ho Chi Minh City, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Information Technology,Information Security Laboratory,Ho Chi Minh City,Vietnam","institution_ids":[]},{"raw_affiliation_string":"Vietnam National University, Ho Chi Minh city, Vietnam","institution_ids":["https://openalex.org/I123565023"]},{"raw_affiliation_string":"Information Security Laboratory, University of Information Technology, Ho Chi Minh City, Vietnam","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009023958","display_name":"Phan The Duy","orcid":"https://orcid.org/0000-0002-5945-3712"},"institutions":[{"id":"https://openalex.org/I123565023","display_name":"Vietnam National University Ho Chi Minh City","ror":"https://ror.org/00waaqh38","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Phan The Duy","raw_affiliation_strings":["University of Information Technology,Information Security Laboratory,Ho Chi Minh City,Vietnam","Information Security Laboratory, University of Information Technology, Ho Chi Minh City, Vietnam","Vietnam National University, Ho Chi Minh city, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Information Technology,Information Security Laboratory,Ho Chi Minh City,Vietnam","institution_ids":[]},{"raw_affiliation_string":"Information Security Laboratory, University of Information Technology, Ho Chi Minh City, Vietnam","institution_ids":[]},{"raw_affiliation_string":"Vietnam National University, Ho Chi Minh city, Vietnam","institution_ids":["https://openalex.org/I123565023"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5045030863","display_name":"Van-Hau Pham","orcid":"https://orcid.org/0000-0003-3147-3356"},"institutions":[{"id":"https://openalex.org/I123565023","display_name":"Vietnam National University Ho Chi Minh City","ror":"https://ror.org/00waaqh38","country_code":"VN","type":"education","lineage":["https://openalex.org/I123565023"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Van-Hau Pham","raw_affiliation_strings":["University of Information Technology,Information Security Laboratory,Ho Chi Minh City,Vietnam","Information Security Laboratory, University of Information Technology, Ho Chi Minh City, Vietnam","Vietnam National University, Ho Chi Minh city, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Information Technology,Information Security Laboratory,Ho Chi Minh City,Vietnam","institution_ids":[]},{"raw_affiliation_string":"Information Security Laboratory, University of Information Technology, Ho Chi Minh City, Vietnam","institution_ids":[]},{"raw_affiliation_string":"Vietnam National University, Ho Chi Minh city, Vietnam","institution_ids":["https://openalex.org/I123565023"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I123565023"],"apc_list":null,"apc_paid":null,"fwci":0.6421,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.62918396,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"35","last_page":"40"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8602299690246582},{"id":"https://openalex.org/keywords/homomorphic-encryption","display_name":"Homomorphic encryption","score":0.6892451047897339},{"id":"https://openalex.org/keywords/big-data","display_name":"Big data","score":0.6191445589065552},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6002471446990967},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5672568678855896},{"id":"https://openalex.org/keywords/variety","display_name":"Variety (cybernetics)","score":0.5565000772476196},{"id":"https://openalex.org/keywords/differential-privacy","display_name":"Differential privacy","score":0.5516852736473083},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.52491295337677},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.4788260757923126},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.4247579872608185},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3004923462867737},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.19656971096992493},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.14633116126060486}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8602299690246582},{"id":"https://openalex.org/C158338273","wikidata":"https://www.wikidata.org/wiki/Q2154943","display_name":"Homomorphic encryption","level":3,"score":0.6892451047897339},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.6191445589065552},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6002471446990967},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5672568678855896},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.5565000772476196},{"id":"https://openalex.org/C23130292","wikidata":"https://www.wikidata.org/wiki/Q5275358","display_name":"Differential privacy","level":2,"score":0.5516852736473083},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.52491295337677},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.4788260757923126},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.4247579872608185},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3004923462867737},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.19656971096992493},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.14633116126060486},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/rivf55975.2022.10013833","is_oa":false,"landing_page_url":"https://doi.org/10.1109/rivf55975.2022.10013833","pdf_url":null,"source":{"id":"https://openalex.org/S4363608274","display_name":"2022 RIVF International Conference on Computing and Communication Technologies (RIVF)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 RIVF International Conference on Computing and Communication Technologies (RIVF)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","score":0.4300000071525574,"display_name":"Partnerships for the goals"}],"awards":[{"id":"https://openalex.org/G1560038193","display_name":null,"funder_award_id":"DS2022-26-02","funder_id":"https://openalex.org/F4320326592","funder_display_name":"Viet Nam National University Ho Chi Minh City"}],"funders":[{"id":"https://openalex.org/F4320326592","display_name":"Viet Nam National University Ho Chi Minh City","ror":"https://ror.org/00waaqh38"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1573569338","https://openalex.org/W2104933073","https://openalex.org/W2177808409","https://openalex.org/W2196215201","https://openalex.org/W2468280276","https://openalex.org/W2470725175","https://openalex.org/W2591712613","https://openalex.org/W2791727450","https://openalex.org/W2891367726","https://openalex.org/W2922110906","https://openalex.org/W2977098467","https://openalex.org/W3174621618","https://openalex.org/W3176372534","https://openalex.org/W4286961857","https://openalex.org/W4287237144","https://openalex.org/W6687403153","https://openalex.org/W6793226373","https://openalex.org/W6801929890"],"related_works":["https://openalex.org/W3038283795","https://openalex.org/W2604501336","https://openalex.org/W2734500670","https://openalex.org/W2558166297","https://openalex.org/W2315671126","https://openalex.org/W798507144","https://openalex.org/W2964481303","https://openalex.org/W2539930818","https://openalex.org/W4390664647","https://openalex.org/W1751413323"],"abstract_inverted_index":{"Software-defined":[0],"networking":[1],"(SDN)":[2],"is":[3,33,67,147],"a":[4,73,143],"potential":[5],"approach":[6,106],"for":[7,40,50,77,110,149],"modern":[8],"network":[9,179],"architecture,":[10],"which":[11,153],"has":[12],"received":[13],"great":[14],"attention":[15],"recently.":[16],"SDN-based":[17,161],"networks":[18],"also":[19,175],"face":[20],"security":[21,37,97],"issues,":[22],"and":[23,56,98,132],"they":[24],"can":[25,53,113],"become":[26],"targets":[27],"of":[28,35,63,75,94,96,121,129,139,192],"cyberattacks.":[29],"Cyber":[30],"threat":[31,51],"hunting":[32,52],"one":[34],"the":[36,61,78,85,127,137,160,165,170,177,183,190],"solutions":[38],"proposed":[39,184],"early":[41],"attack":[42],"detection":[43],"in":[44,159,195],"SDN.":[45,197],"Developing":[46],"machine":[47],"learning-based":[48],"IDS":[49],"detect":[54],"sophisticated":[55],"complex":[57],"cyber-attacks.":[58],"To":[59],"improve":[60],"accuracy":[62],"ML-IDS":[64],"models,":[65],"it":[66],"necessary":[68],"to":[69,181],"provide":[70],"data":[71,92,151],"from":[72,156],"variety":[74],"sources":[76],"training":[79,86],"process.":[80],"However,":[81],"participants":[82],"that":[83],"join":[84],"process":[87],"are":[88,154],"providing":[89,122],"their":[90,118,123],"own":[91],"because":[93],"issues":[95],"privacy.":[99],"In":[100,125],"this":[101],"paper,":[102],"we":[103],"propose":[104],"an":[105],"using":[107],"federated":[108],"learning":[109],"IDS.":[111],"Participants":[112],"train":[114],"models":[115],"themselves":[116],"on":[117,169,176],"devices":[119,158],"instead":[120],"data.":[124],"addition,":[126],"combination":[128],"differential":[130],"privacy":[131,138],"homomorphic":[133],"encryption":[134],"techniques":[135],"ensures":[136],"model":[140],"exchange.":[141],"Moreover,":[142],"distributed":[144],"processing":[145],"system":[146],"used":[148],"big":[150],"workloads,":[152],"generated":[155],"several":[157],"network.":[162],"We":[163],"perform":[164],"experiment":[166],"not":[167],"only":[168],"CIC-TON-IOT":[171],"2018":[172],"dataset":[173],"but":[174],"real":[178],"traffic":[180],"evaluate":[182],"model.":[185],"The":[186],"results":[187],"have":[188],"proven":[189],"potentiality":[191],"our":[193],"solution":[194],"protecting":[196]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}