{"id":"https://openalex.org/W2111002866","doi":"https://doi.org/10.1109/tifs.2010.2066970","title":"Dynamic Feature Analysis and Measurement for Large-Scale Network Traffic Monitoring","display_name":"Dynamic Feature Analysis and Measurement for Large-Scale Network Traffic Monitoring","publication_year":2010,"publication_date":"2010-08-18","ids":{"openalex":"https://openalex.org/W2111002866","doi":"https://doi.org/10.1109/tifs.2010.2066970","mag":"2111002866"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2010.2066970","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2010.2066970","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5075845093","display_name":"Xiaohong Guan","orcid":"https://orcid.org/0000-0002-8826-0362"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]},{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaohong Guan","raw_affiliation_strings":["Center of Intelligent and Networked Systems, TNLIST, Tsinghua University, Beijing, China","MOE Key Laboratory of Intelligent Networks and Network Security, State Key Laboratory of Manufacturing Systems, Xi'an Jiaotong University, Xi'an, Shaanxi, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center of Intelligent and Networked Systems, TNLIST, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]},{"raw_affiliation_string":"MOE Key Laboratory of Intelligent Networks and Network Security, State Key Laboratory of Manufacturing Systems, Xi'an Jiaotong University, Xi'an, Shaanxi, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062913166","display_name":"Tao Qin","orcid":"https://orcid.org/0000-0003-4874-2567"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tao Qin","raw_affiliation_strings":["MOE Key Laboratory of Intelligent Networks and Network Security, State Key Laboratory of Manufacturing Systems, Xi'an Jiaotong University, Xi'an, Shaanxi, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MOE Key Laboratory of Intelligent Networks and Network Security, State Key Laboratory of Manufacturing Systems, Xi'an Jiaotong University, Xi'an, Shaanxi, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100318248","display_name":"Wei Li","orcid":"https://orcid.org/0000-0002-6876-9962"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Li","raw_affiliation_strings":["MOE Key Laboratory of Intelligent Networks and Network Security, State Key Laboratory of Manufacturing Systems, Xi'an Jiaotong University, Xi'an, Shaanxi, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MOE Key Laboratory of Intelligent Networks and Network Security, State Key Laboratory of Manufacturing Systems, Xi'an Jiaotong University, Xi'an, Shaanxi, China","institution_ids":["https://openalex.org/I87445476"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022240408","display_name":"Pinghui Wang","orcid":"https://orcid.org/0000-0001-5779-6108"},"institutions":[{"id":"https://openalex.org/I87445476","display_name":"Xi'an Jiaotong University","ror":"https://ror.org/017zhmm22","country_code":"CN","type":"education","lineage":["https://openalex.org/I87445476"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pinghui Wang","raw_affiliation_strings":["MOE Key Laboratory of Intelligent Networks and Network Security, State Key Laboratory of Manufacturing Systems, Xi'an Jiaotong University, Xi'an, Shaanxi, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MOE Key Laboratory of Intelligent Networks and Network Security, State Key Laboratory of Manufacturing Systems, Xi'an Jiaotong University, Xi'an, Shaanxi, China","institution_ids":["https://openalex.org/I87445476"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.4623,"has_fulltext":false,"cited_by_count":24,"citation_normalized_percentile":{"value":0.83780351,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"5","issue":"4","first_page":"905","last_page":"919"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8319637775421143},{"id":"https://openalex.org/keywords/traffic-generation-model","display_name":"Traffic generation model","score":0.6283125281333923},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5938553810119629},{"id":"https://openalex.org/keywords/flow-network","display_name":"Flow network","score":0.4955390691757202},{"id":"https://openalex.org/keywords/dynamic-network-analysis","display_name":"Dynamic network analysis","score":0.4952816069126129},{"id":"https://openalex.org/keywords/network-traffic-simulation","display_name":"Network traffic simulation","score":0.4944946765899658},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.4680696725845337},{"id":"https://openalex.org/keywords/aggregate","display_name":"Aggregate (composite)","score":0.4628322422504425},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.4489695727825165},{"id":"https://openalex.org/keywords/network-monitoring","display_name":"Network monitoring","score":0.44396719336509705},{"id":"https://openalex.org/keywords/traffic-flow","display_name":"Traffic flow (computer networking)","score":0.42885392904281616},{"id":"https://openalex.org/keywords/traffic-analysis","display_name":"Traffic analysis","score":0.41718220710754395},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.41693389415740967},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.4124522805213928},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.40548574924468994},{"id":"https://openalex.org/keywords/network-traffic-control","display_name":"Network traffic control","score":0.29034870862960815},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.182317852973938}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8319637775421143},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.6283125281333923},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5938553810119629},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.4955390691757202},{"id":"https://openalex.org/C13540734","wikidata":"https://www.wikidata.org/wiki/Q5318996","display_name":"Dynamic network analysis","level":2,"score":0.4952816069126129},{"id":"https://openalex.org/C94168897","wikidata":"https://www.wikidata.org/wiki/Q574324","display_name":"Network traffic simulation","level":4,"score":0.4944946765899658},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.4680696725845337},{"id":"https://openalex.org/C4679612","wikidata":"https://www.wikidata.org/wiki/Q866298","display_name":"Aggregate (composite)","level":2,"score":0.4628322422504425},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.4489695727825165},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.44396719336509705},{"id":"https://openalex.org/C207512268","wikidata":"https://www.wikidata.org/wiki/Q3074551","display_name":"Traffic flow (computer networking)","level":2,"score":0.42885392904281616},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.41718220710754395},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.41693389415740967},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.4124522805213928},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.40548574924468994},{"id":"https://openalex.org/C201100257","wikidata":"https://www.wikidata.org/wiki/Q393287","display_name":"Network traffic control","level":3,"score":0.29034870862960815},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.182317852973938},{"id":"https://openalex.org/C159985019","wikidata":"https://www.wikidata.org/wiki/Q181790","display_name":"Composite material","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.0},{"id":"https://openalex.org/C192562407","wikidata":"https://www.wikidata.org/wiki/Q228736","display_name":"Materials science","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2010.2066970","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2010.2066970","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":64,"referenced_works":["https://openalex.org/W21741679","https://openalex.org/W172040345","https://openalex.org/W173994131","https://openalex.org/W216468746","https://openalex.org/W1501706198","https://openalex.org/W1533657962","https://openalex.org/W1567483855","https://openalex.org/W1744212210","https://openalex.org/W1836055303","https://openalex.org/W1865797552","https://openalex.org/W1964890720","https://openalex.org/W1970121628","https://openalex.org/W1973515534","https://openalex.org/W1974918169","https://openalex.org/W1977951613","https://openalex.org/W1997299558","https://openalex.org/W2003793121","https://openalex.org/W2006775240","https://openalex.org/W2025051251","https://openalex.org/W2068593619","https://openalex.org/W2074373872","https://openalex.org/W2080234606","https://openalex.org/W2085533912","https://openalex.org/W2096847629","https://openalex.org/W2100594177","https://openalex.org/W2102481563","https://openalex.org/W2103662262","https://openalex.org/W2104494338","https://openalex.org/W2108673751","https://openalex.org/W2117747231","https://openalex.org/W2119271160","https://openalex.org/W2121486093","https://openalex.org/W2121511513","https://openalex.org/W2124430127","https://openalex.org/W2126276672","https://openalex.org/W2127417949","https://openalex.org/W2130598205","https://openalex.org/W2130797543","https://openalex.org/W2131389289","https://openalex.org/W2144936818","https://openalex.org/W2152112690","https://openalex.org/W2155915275","https://openalex.org/W2162240407","https://openalex.org/W2165184405","https://openalex.org/W2166431113","https://openalex.org/W2168917894","https://openalex.org/W2293322640","https://openalex.org/W2988492621","https://openalex.org/W3011498814","https://openalex.org/W3016680209","https://openalex.org/W3138273970","https://openalex.org/W4239856175","https://openalex.org/W4240655627","https://openalex.org/W4243435663","https://openalex.org/W4244733066","https://openalex.org/W4246071789","https://openalex.org/W4248484754","https://openalex.org/W6600928830","https://openalex.org/W6606907887","https://openalex.org/W6607117926","https://openalex.org/W6638686577","https://openalex.org/W6639201976","https://openalex.org/W6675791751","https://openalex.org/W6684764302"],"related_works":["https://openalex.org/W1994698836","https://openalex.org/W2362416893","https://openalex.org/W125799710","https://openalex.org/W2316456859","https://openalex.org/W2035170846","https://openalex.org/W1525888863","https://openalex.org/W2391622324","https://openalex.org/W2612238703","https://openalex.org/W3128550596","https://openalex.org/W2360514690"],"abstract_inverted_index":{"Measuring":[0],"and":[1,25,29,50,55,65,81],"monitoring":[2],"the":[3,31,35,52,60,78,89,93,114,122,130],"changes":[4,33,91,132],"of":[5,34,59,92,133],"network":[6,16,116],"traffic":[7,37,48,53,117,135],"patterns":[8,136],"in":[9,125],"large-scale":[10],"networks":[11],"are":[12,63,68,85,102],"crucial":[13],"for":[14,27],"effective":[15],"management.":[17],"In":[18],"this":[19,126],"paper,":[20],"we":[21],"present":[22],"a":[23],"framework":[24],"method":[26,123],"detecting":[28],"measuring":[30],"dynamic":[32,90,131],"pivotal":[36,134],"patterns.":[38,95],"A":[39,70],"bidirectional":[40],"regional":[41,61],"flow":[42,79,83,94],"model":[43,73],"is":[44,74],"established":[45],"to":[46,76,87,104],"aggregate":[47],"packets":[49],"extract":[51],"metrics":[54,80],"profiles.":[56],"The":[57,96,109],"characteristics":[58],"flows":[62],"analyzed":[64],"interesting":[66],"findings":[67],"obtained.":[69],"directed":[71],"graph":[72],"applied":[75],"describe":[77],"six":[82],"features":[84],"extracted":[86],"capture":[88,129],"measurements":[97],"based":[98,112],"on":[99,113],"Renyi":[100],"entropy":[101],"developed":[103],"quantitatively":[105],"monitor":[106],"these":[107],"changes.":[108],"experimental":[110],"results":[111],"actual":[115],"data":[118],"traces":[119],"show":[120],"that":[121],"presented":[124],"paper":[127],"can":[128],"effectively.":[137]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":3},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}