{"id":"https://openalex.org/W2790247732","doi":"https://doi.org/10.1109/tdsc.2018.2808344","title":"A Data-Driven Study of DDoS Attacks and Their Dynamics","display_name":"A Data-Driven Study of DDoS Attacks and Their Dynamics","publication_year":2018,"publication_date":"2018-01-01","ids":{"openalex":"https://openalex.org/W2790247732","doi":"https://doi.org/10.1109/tdsc.2018.2808344","mag":"2790247732"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2018.2808344","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2018.2808344","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100419959","display_name":"An Wang","orcid":"https://orcid.org/0000-0002-1701-9176"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"An Wang","raw_affiliation_strings":["Department of Computer Science, George Mason University, Fairfax"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, George Mason University, Fairfax","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089354880","display_name":"Wentao Chang","orcid":"https://orcid.org/0000-0003-2209-0505"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wentao Chang","raw_affiliation_strings":["Department of Computer Science, George Mason University, Fairfax"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, George Mason University, Fairfax","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065505890","display_name":"Songqing Chen","orcid":"https://orcid.org/0000-0003-4650-7125"},"institutions":[{"id":"https://openalex.org/I162714631","display_name":"George Mason University","ror":"https://ror.org/02jqj7156","country_code":"US","type":"education","lineage":["https://openalex.org/I162714631"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Songqing Chen","raw_affiliation_strings":["Department of Computer Science, George Mason University, Fairfax"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, George Mason University, Fairfax","institution_ids":["https://openalex.org/I162714631"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077402873","display_name":"Aziz Mohaisen","orcid":"https://orcid.org/0000-0003-3227-2505"},"institutions":[{"id":"https://openalex.org/I106165777","display_name":"University of Central Florida","ror":"https://ror.org/036nfer12","country_code":"US","type":"education","lineage":["https://openalex.org/I106165777"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aziz Mohaisen","raw_affiliation_strings":["Department of Computer Science, University of Central Florida, Orlando"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Central Florida, Orlando","institution_ids":["https://openalex.org/I106165777"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.3268,"has_fulltext":false,"cited_by_count":25,"citation_normalized_percentile":{"value":0.82059806,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.8209340572357178},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7272674441337585},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7123554944992065},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6002947688102722},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5959420204162598},{"id":"https://openalex.org/keywords/trinoo","display_name":"Trinoo","score":0.5411787033081055},{"id":"https://openalex.org/keywords/agile-software-development","display_name":"Agile software development","score":0.47639480233192444},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.4755028188228607},{"id":"https://openalex.org/keywords/schedule","display_name":"Schedule","score":0.44429704546928406},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.11752977967262268}],"concepts":[{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.8209340572357178},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7272674441337585},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7123554944992065},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6002947688102722},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5959420204162598},{"id":"https://openalex.org/C43639116","wikidata":"https://www.wikidata.org/wiki/Q7843050","display_name":"Trinoo","level":5,"score":0.5411787033081055},{"id":"https://openalex.org/C14185376","wikidata":"https://www.wikidata.org/wiki/Q30232","display_name":"Agile software development","level":2,"score":0.47639480233192444},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.4755028188228607},{"id":"https://openalex.org/C68387754","wikidata":"https://www.wikidata.org/wiki/Q7271585","display_name":"Schedule","level":2,"score":0.44429704546928406},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.11752977967262268},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2018.2808344","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2018.2808344","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.44999998807907104,"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals"}],"awards":[{"id":"https://openalex.org/G563433701","display_name":null,"funder_award_id":"NRF- 2016K1A1A2912757","funder_id":"https://openalex.org/F4320320671","funder_display_name":"National Research Foundation"}],"funders":[{"id":"https://openalex.org/F4320320671","display_name":"National Research Foundation","ror":"https://ror.org/05s0g1g46"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W4861383","https://openalex.org/W37020084","https://openalex.org/W94487276","https://openalex.org/W116902681","https://openalex.org/W1432036814","https://openalex.org/W1467124950","https://openalex.org/W1520068592","https://openalex.org/W1546137167","https://openalex.org/W1573745704","https://openalex.org/W1775772884","https://openalex.org/W1788574667","https://openalex.org/W1827212170","https://openalex.org/W1964267679","https://openalex.org/W1981221397","https://openalex.org/W2000497232","https://openalex.org/W2007890152","https://openalex.org/W2010787569","https://openalex.org/W2018026534","https://openalex.org/W2049108821","https://openalex.org/W2063104870","https://openalex.org/W2068803497","https://openalex.org/W2075986968","https://openalex.org/W2080219770","https://openalex.org/W2081357650","https://openalex.org/W2084611853","https://openalex.org/W2091614396","https://openalex.org/W2091921805","https://openalex.org/W2103397552","https://openalex.org/W2108807571","https://openalex.org/W2111942706","https://openalex.org/W2127289656","https://openalex.org/W2130598205","https://openalex.org/W2134467961","https://openalex.org/W2135787110","https://openalex.org/W2144699258","https://openalex.org/W2146189323","https://openalex.org/W2150593711","https://openalex.org/W2155919101","https://openalex.org/W2157366001","https://openalex.org/W2158060559","https://openalex.org/W2164322841","https://openalex.org/W2256578114","https://openalex.org/W2402860450","https://openalex.org/W2465314304","https://openalex.org/W2573541888","https://openalex.org/W4233251690","https://openalex.org/W6601482572","https://openalex.org/W6603845587","https://openalex.org/W6604828220","https://openalex.org/W6630999382","https://openalex.org/W6632538867","https://openalex.org/W6638021444","https://openalex.org/W6638623425","https://openalex.org/W6676707958","https://openalex.org/W6683238159","https://openalex.org/W6683353320","https://openalex.org/W6684262448","https://openalex.org/W6712973307","https://openalex.org/W6719778201"],"related_works":["https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W1968168724","https://openalex.org/W2204131204","https://openalex.org/W2001331025","https://openalex.org/W4322008378","https://openalex.org/W2383770723","https://openalex.org/W2754163055","https://openalex.org/W2186749541","https://openalex.org/W2292210693"],"abstract_inverted_index":{"Despite":[0],"continuous":[1],"defense":[2],"efforts,":[3],"DDoS":[4,48,83,162],"attacks":[5,84,163],"are":[6,18,25,134,147],"still":[7],"very":[8],"prevalent":[9],"on":[10,58,79],"the":[11,47,51,54,59,62,68,71,86,165],"Internet.":[12],"In":[13,40],"such":[14,38,107,144],"arms":[15],"races,":[16],"attackers":[17,96],"becoming":[19],"more":[20,26],"agile":[21],"and":[22,106,129,143,149,167],"their":[23,99,126],"strategies":[24,69],"sophisticated":[27],"to":[28,45,66],"escape":[29],"from":[30,50],"detection.":[31],"Effective":[32],"defenses":[33],"demand":[34],"in-depth":[35],"understanding":[36],"of":[37,53,61],"strategies.":[39],"this":[41],"paper,":[42],"we":[43],"set":[44],"investigate":[46],"landscape":[49],"perspective":[52],"attackers.":[55],"We":[56],"focus":[57],"dynamics":[60,108],"attacking":[63],"force,":[64],"aiming":[65],"explore":[67],"behind":[70],"scenes,":[72],"if":[73],"any.":[74],"Our":[75,92],"study":[76],"is":[77],"based":[78],"50,704":[80],"different":[81,117],"Internet":[82],"across":[85],"globe":[87],"in":[88,102,140,164],"a":[89,103,157],"seven-month":[90],"period.":[91],"results":[93],"indicate":[94],"that":[95],"deliberately":[97],"schedule":[98],"controlled":[100],"bots":[101,138],"dynamic":[104],"fashion,":[105],"can":[109],"be":[110],"well":[111],"captured":[112],"by":[113,137],"statistical":[114],"distributions.":[115],"Furthermore,":[116],"botnet":[118],"families":[119],"exhibit":[120],"similar":[121],"scheduling":[122],"patterns,":[123],"strongly":[124],"suggesting":[125],"close":[127],"relationship":[128],"potential":[130],"collaborations.":[131],"Such":[132],"collaborations":[133],"further":[135],"confirmed":[136,150],"rotating":[139],"multiple":[141],"families,":[142],"rotation":[145],"patterns":[146],"examined":[148],"at":[151],"various":[152],"levels.":[153],"These":[154],"findings":[155],"lay":[156],"promising":[158],"foundation":[159],"for":[160],"predicting":[161],"future":[166],"aid":[168],"mitigation":[169],"efforts.":[170]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2},{"year":2018,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}