{"id":"https://openalex.org/W2137009118","doi":"https://doi.org/10.1109/tifs.2010.2041808","title":"Predictive Network Anomaly Detection and Visualization","display_name":"Predictive Network Anomaly Detection and Visualization","publication_year":2010,"publication_date":"2010-02-17","ids":{"openalex":"https://openalex.org/W2137009118","doi":"https://doi.org/10.1109/tifs.2010.2041808","mag":"2137009118"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2010.2041808","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2010.2041808","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042158658","display_name":"Mehmet \u00c7elenk","orcid":"https://orcid.org/0000-0001-7104-5861"},"institutions":[{"id":"https://openalex.org/I4210106879","display_name":"Ohio University","ror":"https://ror.org/01jr3y717","country_code":"US","type":"education","lineage":["https://openalex.org/I4210106879"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mehmet Celenk","raw_affiliation_strings":["School of Electrical Engineering and Computer Science, Stocker Center, Ohio University, Athens, OH, USA","Sch. of Electr. Eng. & Comput. Sci., Ohio Univ., Athens, OH, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, Stocker Center, Ohio University, Athens, OH, USA","institution_ids":["https://openalex.org/I4210106879"]},{"raw_affiliation_string":"Sch. of Electr. Eng. & Comput. Sci., Ohio Univ., Athens, OH, USA#TAB#","institution_ids":["https://openalex.org/I4210106879"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111790694","display_name":"Thomas Conley","orcid":null},"institutions":[{"id":"https://openalex.org/I4210106879","display_name":"Ohio University","ror":"https://ror.org/01jr3y717","country_code":"US","type":"education","lineage":["https://openalex.org/I4210106879"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Thomas Conley","raw_affiliation_strings":["School of Electrical Engineering and Computer Science, Stocker Center, Ohio University, Athens, OH, USA","Sch. of Electr. Eng. & Comput. Sci., Ohio Univ., Athens, OH, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, Stocker Center, Ohio University, Athens, OH, USA","institution_ids":["https://openalex.org/I4210106879"]},{"raw_affiliation_string":"Sch. of Electr. Eng. & Comput. Sci., Ohio Univ., Athens, OH, USA#TAB#","institution_ids":["https://openalex.org/I4210106879"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033405017","display_name":"John O. Willis","orcid":null},"institutions":[{"id":"https://openalex.org/I4210106879","display_name":"Ohio University","ror":"https://ror.org/01jr3y717","country_code":"US","type":"education","lineage":["https://openalex.org/I4210106879"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John Willis","raw_affiliation_strings":["School of Electrical Engineering and Computer Science, Stocker Center, Ohio University, Athens, OH, USA","Sch. of Electr. Eng. & Comput. Sci., Ohio Univ., Athens, OH, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, Stocker Center, Ohio University, Athens, OH, USA","institution_ids":["https://openalex.org/I4210106879"]},{"raw_affiliation_string":"Sch. of Electr. Eng. & Comput. Sci., Ohio Univ., Athens, OH, USA#TAB#","institution_ids":["https://openalex.org/I4210106879"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103173067","display_name":"James Graham","orcid":"https://orcid.org/0000-0003-1375-3207"},"institutions":[{"id":"https://openalex.org/I4210106879","display_name":"Ohio University","ror":"https://ror.org/01jr3y717","country_code":"US","type":"education","lineage":["https://openalex.org/I4210106879"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"James Graham","raw_affiliation_strings":["School of Electrical Engineering and Computer Science, Stocker Center, Ohio University, Athens, OH, USA","Sch. of Electr. Eng. & Comput. Sci., Ohio Univ., Athens, OH, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, Stocker Center, Ohio University, Athens, OH, USA","institution_ids":["https://openalex.org/I4210106879"]},{"raw_affiliation_string":"Sch. of Electr. Eng. & Comput. Sci., Ohio Univ., Athens, OH, USA#TAB#","institution_ids":["https://openalex.org/I4210106879"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210106879"],"apc_list":null,"apc_paid":null,"fwci":5.8494,"has_fulltext":false,"cited_by_count":43,"citation_normalized_percentile":{"value":0.96484287,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"5","issue":"2","first_page":"288","last_page":"299"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7560838460922241},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.6772912740707397},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5597841143608093},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.527267336845398},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.5109761953353882},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.45206862688064575},{"id":"https://openalex.org/keywords/network-simulation","display_name":"Network simulation","score":0.4388897120952606},{"id":"https://openalex.org/keywords/network-traffic-simulation","display_name":"Network traffic simulation","score":0.43810707330703735},{"id":"https://openalex.org/keywords/network-management","display_name":"Network management","score":0.4365631639957428},{"id":"https://openalex.org/keywords/internet-traffic","display_name":"Internet traffic","score":0.42381173372268677},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.36740946769714355},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3475217819213867},{"id":"https://openalex.org/keywords/network-traffic-control","display_name":"Network traffic control","score":0.22132620215415955},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.12716373801231384},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.12392175197601318}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7560838460922241},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6772912740707397},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5597841143608093},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.527267336845398},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.5109761953353882},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.45206862688064575},{"id":"https://openalex.org/C139940560","wikidata":"https://www.wikidata.org/wiki/Q290036","display_name":"Network simulation","level":2,"score":0.4388897120952606},{"id":"https://openalex.org/C94168897","wikidata":"https://www.wikidata.org/wiki/Q574324","display_name":"Network traffic simulation","level":4,"score":0.43810707330703735},{"id":"https://openalex.org/C129763632","wikidata":"https://www.wikidata.org/wiki/Q1454667","display_name":"Network management","level":2,"score":0.4365631639957428},{"id":"https://openalex.org/C63969886","wikidata":"https://www.wikidata.org/wiki/Q3536440","display_name":"Internet traffic","level":3,"score":0.42381173372268677},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.36740946769714355},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3475217819213867},{"id":"https://openalex.org/C201100257","wikidata":"https://www.wikidata.org/wiki/Q393287","display_name":"Network traffic control","level":3,"score":0.22132620215415955},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.12716373801231384},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.12392175197601318},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2010.2041808","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2010.2041808","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.550000011920929}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W61646295","https://openalex.org/W140731404","https://openalex.org/W198953946","https://openalex.org/W648539636","https://openalex.org/W1551705282","https://openalex.org/W1596607002","https://openalex.org/W1627054999","https://openalex.org/W1823417729","https://openalex.org/W1963821050","https://openalex.org/W1969330003","https://openalex.org/W2008049708","https://openalex.org/W2025183498","https://openalex.org/W2045234005","https://openalex.org/W2049273599","https://openalex.org/W2085533912","https://openalex.org/W2091770145","https://openalex.org/W2100401758","https://openalex.org/W2104837959","https://openalex.org/W2108789784","https://openalex.org/W2109885200","https://openalex.org/W2113061123","https://openalex.org/W2115379950","https://openalex.org/W2128165614","https://openalex.org/W2131389289","https://openalex.org/W2139610926","https://openalex.org/W2144006900","https://openalex.org/W2144901348","https://openalex.org/W2148506461","https://openalex.org/W2158026984","https://openalex.org/W2158060559","https://openalex.org/W2162012429","https://openalex.org/W2162945174","https://openalex.org/W2165032725","https://openalex.org/W2168761028","https://openalex.org/W2171126763","https://openalex.org/W2271467998","https://openalex.org/W2304584367","https://openalex.org/W3005635621","https://openalex.org/W4238847195","https://openalex.org/W4239856175","https://openalex.org/W4241915340","https://openalex.org/W6632924670","https://openalex.org/W6681559822","https://openalex.org/W6685236952"],"related_works":["https://openalex.org/W2097411249","https://openalex.org/W2045978600","https://openalex.org/W2393327671","https://openalex.org/W2149296637","https://openalex.org/W2381224743","https://openalex.org/W3195411348","https://openalex.org/W3174483388","https://openalex.org/W2623390184","https://openalex.org/W2144521388","https://openalex.org/W2365664302"],"abstract_inverted_index":{"Various":[0],"approaches":[1],"have":[2],"been":[3],"developed":[4],"for":[5,12,100,105,160],"quantifying":[6],"and":[7,16,48,66,84,119,150,163,215],"displaying":[8],"network":[9,14,34,46,59,79,95,157,170,182,205,212,218,237,244],"traffic":[10,183,213],"information":[11],"determining":[13],"status":[15],"in":[17,58,201,204,208,211,216,230,239],"detecting":[18],"anomalies.":[19],"Although":[20],"many":[21],"of":[22,32,45,93,108,129,155,242],"these":[23,169],"methods":[24],"are":[25,56,126,153],"effective,":[26],"they":[27],"rely":[28],"on":[29,137,180],"the":[30,90,111,127,138,156,195,240],"collection":[31],"long-term":[33],"statistics.":[35,123],"Here,":[36],"we":[37],"present":[38],"an":[39],"approach":[40,132],"that":[41,168,194],"uses":[42],"short-term":[43,113],"observations":[44],"features":[47,158,171],"their":[49],"respective":[50],"time":[51,121],"averaged":[52],"entropies.":[53],"Acute":[54],"changes":[55],"localized":[57],"feature":[60,102,206],"space":[61],"using":[62],"adaptive":[63],"Wiener":[64],"filtering":[65],"auto-regressive":[67],"moving":[68],"average":[69,98],"modeling.":[70],"The":[71,175],"color-enhanced":[72],"datagram":[73],"is":[74,103,115,178,199,227],"designed":[75],"to":[76,81,117,133,220,236],"allow":[77],"a":[78,88,94,130,232],"engineer":[80],"quickly":[82],"capture":[83],"visually":[85],"comprehend":[86],"at":[87],"glance":[89],"statistical":[91],"characteristics":[92],"anomaly.":[96],"First,":[97],"entropy":[99],"each":[101],"calculated":[104],"every":[106],"second":[107],"observation.":[109],"Then,":[110],"resultant":[112],"measurement":[114],"subjected":[116],"first-":[118],"second-order":[120],"averaging":[122],"These":[124],"measurements":[125],"basis":[128],"novel":[131],"anomaly":[134],"estimation":[135],"based":[136],"well-known":[139],"Fisher":[140],"linear":[141],"discriminant":[142],"(FLD).":[143],"Average":[144],"port,":[145,147],"high":[146],"server":[148],"ports,":[149],"peered":[151],"ports":[152],"some":[154],"used":[159],"stochastic":[161],"clustering":[162],"filtering.":[164],"We":[165],"empirically":[166],"determine":[167],"obey":[172],"Gaussian-like":[173],"distributions.":[174],"proposed":[176],"algorithm":[177],"tested":[179],"real-time":[181],"data":[184],"from":[185],"Ohio":[186],"University's":[187],"main":[188],"Internet":[189],"connection.":[190],"Experimentation":[191],"has":[192],"shown":[193],"presented":[196],"FLD-based":[197],"scheme":[198],"accurate":[200],"identifying":[202],"anomalies":[203,210],"space,":[207],"localizing":[209],"flow,":[214],"helping":[217],"engineers":[219],"prevent":[221],"potential":[222],"hazards.":[223],"Furthermore,":[224],"its":[225],"performance":[226],"highly":[228],"effective":[229],"providing":[231],"colorized":[233],"visualization":[234],"chart":[235],"analysts":[238],"presence":[241],"bursty":[243],"traffic.":[245]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":4},{"year":2015,"cited_by_count":4},{"year":2014,"cited_by_count":6},{"year":2013,"cited_by_count":6},{"year":2012,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}