{"id":"https://openalex.org/W3006503311","doi":"https://doi.org/10.1109/tdsc.2020.2973992","title":"On High-Speed Flow-Based Intrusion Detection Using Snort-Compatible Signatures","display_name":"On High-Speed Flow-Based Intrusion Detection Using Snort-Compatible Signatures","publication_year":2020,"publication_date":"2020-02-14","ids":{"openalex":"https://openalex.org/W3006503311","doi":"https://doi.org/10.1109/tdsc.2020.2973992","mag":"3006503311"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2020.2973992","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2020.2973992","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041626893","display_name":"Felix Erlacher","orcid":"https://orcid.org/0000-0001-5169-3060"},"institutions":[{"id":"https://openalex.org/I206945453","display_name":"Paderborn University","ror":"https://ror.org/058kzsd48","country_code":"DE","type":"education","lineage":["https://openalex.org/I206945453"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Felix Erlacher","raw_affiliation_strings":["Heinz Nixdorf Institute and Department of Computer Science, Paderborn University, Paderborn, Germany","[Heinz Nixdorf Institute and Department of Computer Science, Paderborn University, Germany (e-mail: erlacher@ccs-labs.org)]"],"raw_orcid":"https://orcid.org/0000-0001-5169-3060","affiliations":[{"raw_affiliation_string":"Heinz Nixdorf Institute and Department of Computer Science, Paderborn University, Paderborn, Germany","institution_ids":["https://openalex.org/I206945453"]},{"raw_affiliation_string":"[Heinz Nixdorf Institute and Department of Computer Science, Paderborn University, Germany (e-mail: erlacher@ccs-labs.org)]","institution_ids":["https://openalex.org/I206945453"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042212040","display_name":"Falko Dressler","orcid":"https://orcid.org/0000-0002-1989-1750"},"institutions":[{"id":"https://openalex.org/I206945453","display_name":"Paderborn University","ror":"https://ror.org/058kzsd48","country_code":"DE","type":"education","lineage":["https://openalex.org/I206945453"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Falko Dressler","raw_affiliation_strings":["Heinz Nixdorf Institute and Department of Computer Science, Paderborn University, Paderborn, Germany","[Heinz Nixdorf Institute and Department of Computer Science, Paderborn University, Germany (e-mail: dressler@ccs-labs.org)]"],"raw_orcid":"https://orcid.org/0000-0002-1989-1750","affiliations":[{"raw_affiliation_string":"Heinz Nixdorf Institute and Department of Computer Science, Paderborn University, Paderborn, Germany","institution_ids":["https://openalex.org/I206945453"]},{"raw_affiliation_string":"[Heinz Nixdorf Institute and Department of Computer Science, Paderborn University, Germany (e-mail: dressler@ccs-labs.org)]","institution_ids":["https://openalex.org/I206945453"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I206945453"],"apc_list":{"value":2045,"currency":"USD","value_usd":2045},"apc_paid":null,"fwci":5.9472,"has_fulltext":false,"cited_by_count":78,"citation_normalized_percentile":{"value":0.96176833,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":100},"biblio":{"volume":"19","issue":"1","first_page":"495","last_page":"506"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.791824221611023},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6829866170883179},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.6478460431098938},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4957941472530365},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.48038917779922485},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3904306888580322},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.38094156980514526},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.18152379989624023}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.791824221611023},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6829866170883179},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.6478460431098938},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4957941472530365},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.48038917779922485},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3904306888580322},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.38094156980514526},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.18152379989624023},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2020.2973992","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2020.2973992","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7652310647","display_name":null,"funder_award_id":"DR 639/20-1","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"}],"funders":[{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W103634144","https://openalex.org/W817867204","https://openalex.org/W1574159338","https://openalex.org/W1607458575","https://openalex.org/W1966809779","https://openalex.org/W1986497098","https://openalex.org/W1987556290","https://openalex.org/W1994212840","https://openalex.org/W2039638209","https://openalex.org/W2040333627","https://openalex.org/W2040534455","https://openalex.org/W2053550965","https://openalex.org/W2107206872","https://openalex.org/W2126082439","https://openalex.org/W2132081438","https://openalex.org/W2140938170","https://openalex.org/W2145722235","https://openalex.org/W2161443757","https://openalex.org/W2171331105","https://openalex.org/W2255206882","https://openalex.org/W2322704764","https://openalex.org/W2334853001","https://openalex.org/W2532292920","https://openalex.org/W2563349746","https://openalex.org/W2620580412","https://openalex.org/W2626201315","https://openalex.org/W2748475951","https://openalex.org/W2751762880","https://openalex.org/W2768250513","https://openalex.org/W2772649302","https://openalex.org/W2786490145","https://openalex.org/W2789828921","https://openalex.org/W2820900234","https://openalex.org/W2885770268","https://openalex.org/W2886540402","https://openalex.org/W2893143447","https://openalex.org/W2920026702","https://openalex.org/W4205324726","https://openalex.org/W4232580291","https://openalex.org/W4253072731","https://openalex.org/W6634496787","https://openalex.org/W6637096788","https://openalex.org/W6638909795","https://openalex.org/W6729439378","https://openalex.org/W6736253275","https://openalex.org/W6766161250"],"related_works":["https://openalex.org/W1535080110","https://openalex.org/W306312984","https://openalex.org/W857189463","https://openalex.org/W4288094128","https://openalex.org/W2979675132","https://openalex.org/W2790520092","https://openalex.org/W4306309337","https://openalex.org/W2312786236","https://openalex.org/W20648474","https://openalex.org/W2109516765"],"abstract_inverted_index":{"Signature-based":[0,105],"Network":[1],"Intrusion":[2,106],"Detection":[3,107],"Systems":[4],"(NIDS)":[5],"have":[6],"become":[7,35],"state-of-the-art":[8],"in":[9,76,82],"modern":[10,21],"network":[11,23,29,62,138],"security":[12,190],"solutions.":[13],"However,":[14],"most":[15],"systems":[16],"are":[17,66],"not":[18],"designed":[19],"for":[20,38],"high-speed":[22,40],"links.":[24],"In":[25],"the":[26,36,46,74,103,117,148,158,181,185,188],"field":[27],"of":[28,73,102,111,157,170,174],"monitoring,":[30],"an":[31],"alternative":[32],"solution":[33],"has":[34],"choice":[37],"such":[39],"networks.":[41],"Flow-monitoring,":[42],"typically":[43],"based":[44],"on":[45],"Internet":[47],"Protocol":[48],"Flow":[49],"Information":[50],"Export":[51],"(IPFIX)":[52],"standard,":[53],"now":[54,97],"goes":[55],"well":[56],"beyond":[57],"collecting":[58],"statistical":[59],"information":[60],"about":[61],"connections.":[63],"Current":[64],"solutions":[65],"even":[67],"able":[68],"to":[69,79,91,124,144],"include":[70],"selected":[71],"parts":[72],"payload":[75],"these":[77],"Flows":[78],"be":[80,162,168],"used":[81],"conjunction":[83],"with":[84,134],"NIDS.":[85],"Recently,":[86],"we":[87],"extended":[88],"this":[89],"concept":[90],"application":[92],"layer":[93],"HTTP":[94,112,127],"Flows.":[95,128],"We":[96],"present":[98],"our":[99],"improved":[100],"version":[101],"IPFIX-based":[104],"System":[108],"(FIXIDS).Fixidsmakes":[109],"use":[110],"intrusion":[113],"detection":[114,151,182],"signatures":[115],"from":[116],"popular":[118],"Snort":[119,166],"system":[120],"and":[121,176,184],"applies":[122],"them":[123],"incoming":[125],"IPFIX-conforming":[126],"Our":[129],"evaluation":[130],"shows":[131],"thatFixidscan":[132],"deal":[133],"four":[135],"times":[136],"higher":[137],"data":[139,159,186],"rates":[140],"without":[141],"drops":[142],"compared":[143],"Snort,":[145],"while":[146],"maintaining":[147],"same":[149],"event":[150],"rate.":[152],"Furthermore,":[153],"a":[154,171],"substantial":[155],"part":[156],"traffic":[160],"can":[161,167,192],"outsourced":[163],"toFixidsso":[164],"that":[165],"relieved":[169],"significant":[172],"portion":[173],"rules":[175],"traffic.":[177],"This":[178],"increases":[179],"both":[180],"rate":[183,187],"overall":[189],"appliance":[191],"handle.":[193]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":18},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":16},{"year":2022,"cited_by_count":17},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":2}],"updated_date":"2026-08-28T12:50:07.497085","created_date":"2025-10-10T00:00:00"}