{"id":"https://openalex.org/W3005444580","doi":"https://doi.org/10.1109/tnsm.2020.2971213","title":"Managing IoT Cyber-Security Using Programmable Telemetry and Machine Learning","display_name":"Managing IoT Cyber-Security Using Programmable Telemetry and Machine Learning","publication_year":2020,"publication_date":"2020-02-04","ids":{"openalex":"https://openalex.org/W3005444580","doi":"https://doi.org/10.1109/tnsm.2020.2971213","mag":"3005444580"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2020.2971213","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2020.2971213","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070030239","display_name":"Arunan Sivanathan","orcid":"https://orcid.org/0000-0002-5596-8372"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Arunan Sivanathan","raw_affiliation_strings":["School of Electrical Engineering and Telecommunications, University of New South Wales, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-5596-8372","affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Telecommunications, University of New South Wales, Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030677680","display_name":"Hassan Habibi Gharakheili","orcid":"https://orcid.org/0000-0002-9333-7635"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hassan Habibi Gharakheili","raw_affiliation_strings":["School of Electrical Engineering and Telecommunications, University of New South Wales, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0002-9333-7635","affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Telecommunications, University of New South Wales, Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5091021682","display_name":"Vijay Sivaraman","orcid":"https://orcid.org/0000-0001-7985-6765"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Vijay Sivaraman","raw_affiliation_strings":["School of Electrical Engineering and Telecommunications, University of New South Wales, Sydney, Australia"],"raw_orcid":"https://orcid.org/0000-0001-7985-6765","affiliations":[{"raw_affiliation_string":"School of Electrical Engineering and Telecommunications, University of New South Wales, Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I31746571"],"apc_list":{"value":2645,"currency":"USD","value_usd":2645},"apc_paid":null,"fwci":7.043,"has_fulltext":false,"cited_by_count":86,"citation_normalized_percentile":{"value":0.9752693,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"17","issue":"1","first_page":"60","last_page":"74"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8468992710113525},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.6786512136459351},{"id":"https://openalex.org/keywords/networking-hardware","display_name":"Networking hardware","score":0.5232119560241699},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4808376729488373},{"id":"https://openalex.org/keywords/upgrade","display_name":"Upgrade","score":0.4606584906578064},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.4548954367637634},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.4331924021244049},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3248797655105591},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.20122504234313965},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1736164689064026}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8468992710113525},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.6786512136459351},{"id":"https://openalex.org/C159631557","wikidata":"https://www.wikidata.org/wiki/Q1546066","display_name":"Networking hardware","level":2,"score":0.5232119560241699},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4808376729488373},{"id":"https://openalex.org/C2780615140","wikidata":"https://www.wikidata.org/wiki/Q920419","display_name":"Upgrade","level":2,"score":0.4606584906578064},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.4548954367637634},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.4331924021244049},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3248797655105591},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.20122504234313965},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1736164689064026}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2020.2971213","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2020.2971213","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":58,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W1761375015","https://openalex.org/W2001037010","https://openalex.org/W2019678549","https://openalex.org/W2029758586","https://openalex.org/W2051000513","https://openalex.org/W2051552208","https://openalex.org/W2109024380","https://openalex.org/W2111619626","https://openalex.org/W2116286374","https://openalex.org/W2126830184","https://openalex.org/W2129018774","https://openalex.org/W2146012756","https://openalex.org/W2147118406","https://openalex.org/W2161251616","https://openalex.org/W2171634548","https://openalex.org/W2182112800","https://openalex.org/W2274307588","https://openalex.org/W2292021756","https://openalex.org/W2305788608","https://openalex.org/W2485229854","https://openalex.org/W2485569983","https://openalex.org/W2574448563","https://openalex.org/W2593983841","https://openalex.org/W2620213176","https://openalex.org/W2626904088","https://openalex.org/W2750674396","https://openalex.org/W2754804809","https://openalex.org/W2766295581","https://openalex.org/W2768718335","https://openalex.org/W2797742547","https://openalex.org/W2886320151","https://openalex.org/W2886897065","https://openalex.org/W2888505697","https://openalex.org/W2905724129","https://openalex.org/W2906719522","https://openalex.org/W2911964244","https://openalex.org/W2914034567","https://openalex.org/W2920956968","https://openalex.org/W2930144424","https://openalex.org/W2946905075","https://openalex.org/W2963899832","https://openalex.org/W3014695699","https://openalex.org/W3099414328","https://openalex.org/W3103349363","https://openalex.org/W3103913776","https://openalex.org/W3105750153","https://openalex.org/W4245409806","https://openalex.org/W4255593574","https://openalex.org/W4288640495","https://openalex.org/W6698379459","https://openalex.org/W6734718403","https://openalex.org/W6739320202","https://openalex.org/W6744392808","https://openalex.org/W6759562694","https://openalex.org/W6762982010","https://openalex.org/W6786116714","https://openalex.org/W6910651515"],"related_works":["https://openalex.org/W2368672678","https://openalex.org/W2582981600","https://openalex.org/W4389238932","https://openalex.org/W2363739491","https://openalex.org/W29333886","https://openalex.org/W2352638015","https://openalex.org/W2945708474","https://openalex.org/W2403281104","https://openalex.org/W3046111095","https://openalex.org/W2367547703"],"abstract_inverted_index":{"Cyber-security":[0],"risks":[1],"for":[2,229],"Internet":[3],"of":[4,12,24,50,77,103,121,142,166,183,215],"Things":[5],"(IoT)":[6],"devices":[7,26,88,108,177],"sourced":[8],"from":[9,178],"a":[10,114,119,133,163],"diversity":[11],"vendors":[13],"and":[14,60,117,147,186,197,205,213,218],"deployed":[15],"in":[16,52,110,227],"large":[17],"numbers,":[18],"are":[19,96],"growing":[20],"rapidly.":[21],"Therefore,":[22],"management":[23],"these":[25],"is":[27],"becoming":[28],"increasingly":[29],"important":[30],"to":[31,73,85,135,173],"network":[32,35,45,92,140],"operators.":[33],"Existing":[34],"monitoring":[36,222],"technologies":[37],"perform":[38],"traffic":[39,101,122,203],"analysis":[40],"using":[41,201],"specialized":[42],"acceleration":[43],"on":[44,90],"switches,":[46],"or":[47,157,235],"full":[48],"inspection":[49],"packets":[51],"software,":[53],"which":[54],"can":[55,224],"be":[56,225],"complex,":[57],"expensive,":[58],"inflexible,":[59],"unscalable.":[61],"In":[62],"this":[63],"paper,":[64],"we":[65],"use":[66,170],"SDN":[67],"paradigm":[68],"combined":[69],"with":[70,81,155],"machine":[71],"learning":[72],"leverage":[74],"the":[75,139,209],"benefits":[76],"programmable":[78],"flow-based":[79],"telemetry":[80],"flexible":[82],"data-driven":[83],"models":[84,168,196],"manage":[86],"IoT":[87,107,144,176,184],"based":[89],"their":[91,148,188,199],"activity.":[93],"Our":[94],"contributions":[95],"three-fold:":[97],"(1)":[98],"We":[99,161,193,207],"analyze":[100],"traces":[102],"17":[104],"real":[105,202],"consumer":[106],"collected":[109],"our":[111,195,216,221],"lab":[112],"over":[113],"six-month":[115],"period":[116],"identify":[118,187],"set":[120],"flows":[123],"(per-device)":[124],"whose":[125],"time-series":[126],"attributes":[127,172],"computed":[128],"at":[129],"multiple":[130],"timescales":[131],"(from":[132],"minute":[134],"an":[136],"hour)":[137],"characterize":[138],"behavior":[141],"various":[143],"device":[145],"types,":[146],"operating":[149],"states":[150,189],"(i.e.,":[151],"booting,":[152],"actively":[153],"interacted":[154],"user,":[156],"being":[158],"idle);":[159],"(2)":[160],"develop":[162],"multi-stage":[164],"architecture":[165],"inference":[167],"that":[169],"flow-level":[171],"automatically":[174],"distinguish":[175],"non-IoTs,":[179],"classify":[180],"individual":[181],"types":[182],"devices,":[185],"during":[190],"normal":[191],"operations.":[192],"train":[194],"validate":[198],"efficacy":[200],"traces;":[204],"(3)":[206],"quantify":[208],"trade-off":[210],"between":[211],"performance":[212],"cost":[214],"solution,":[217],"demonstrate":[219],"how":[220],"scheme":[223],"used":[226],"operation":[228],"detecting":[230],"behavioral":[231],"changes":[232],"(firmware":[233],"upgrade":[234],"cyber":[236],"attacks).":[237]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":19},{"year":2023,"cited_by_count":15},{"year":2022,"cited_by_count":12},{"year":2021,"cited_by_count":20},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":1}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}
