{"id":"https://openalex.org/W3095924252","doi":"https://doi.org/10.1109/tnsm.2020.3034278","title":"Exploring Network-Wide Flow Data With Flowyager","display_name":"Exploring Network-Wide Flow Data With Flowyager","publication_year":2020,"publication_date":"2020-10-27","ids":{"openalex":"https://openalex.org/W3095924252","doi":"https://doi.org/10.1109/tnsm.2020.3034278","mag":"3095924252"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2020.3034278","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2020.3034278","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2010.13120","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5062640874","display_name":"Said Jawad Saidi","orcid":"https://orcid.org/0000-0002-8846-8905"},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Said Jawad Saidi","raw_affiliation_strings":["Internet Architecture Research Group, Max Planck Institute for Informatics, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0002-8846-8905","affiliations":[{"raw_affiliation_string":"Internet Architecture Research Group, Max Planck Institute for Informatics, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210109712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077847644","display_name":"Aniss Maghsoudlou","orcid":"https://orcid.org/0000-0003-2772-6648"},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Aniss Maghsoudlou","raw_affiliation_strings":["Internet Architecture Research Group, Max Planck Institute for Informatics, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0003-2772-6648","affiliations":[{"raw_affiliation_string":"Internet Architecture Research Group, Max Planck Institute for Informatics, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210109712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024258064","display_name":"Damien Foucard","orcid":null},"institutions":[{"id":"https://openalex.org/I2800804238","display_name":"Fraunhofer Institute for Open Communication Systems","ror":"https://ror.org/00px80p03","country_code":"DE","type":"facility","lineage":["https://openalex.org/I2800804238","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I4577782","display_name":"Technische Universit\u00e4t Berlin","ror":"https://ror.org/03v4gjf40","country_code":"DE","type":"education","lineage":["https://openalex.org/I4577782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Damien Foucard","raw_affiliation_strings":["Open Distributed Systems Research Group, TU Berlin, Berlin, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Open Distributed Systems Research Group, TU Berlin, Berlin, Germany","institution_ids":["https://openalex.org/I2800804238","https://openalex.org/I4577782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005247877","display_name":"Georgios Smaragdakis","orcid":"https://orcid.org/0000-0002-4127-3617"},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]},{"id":"https://openalex.org/I4577782","display_name":"Technische Universit\u00e4t Berlin","ror":"https://ror.org/03v4gjf40","country_code":"DE","type":"education","lineage":["https://openalex.org/I4577782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Georgios Smaragdakis","raw_affiliation_strings":["Faculty IV-Electric Engineering and Computer Science, TU Berlin, Berlin, Germany","Internet Architecture Research Group, Max Planck Institute for Informatics, Saarbr\u00fccken, Germany"],"raw_orcid":"https://orcid.org/0000-0002-4127-3617","affiliations":[{"raw_affiliation_string":"Faculty IV-Electric Engineering and Computer Science, TU Berlin, Berlin, Germany","institution_ids":["https://openalex.org/I4577782"]},{"raw_affiliation_string":"Internet Architecture Research Group, Max Planck Institute for Informatics, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210109712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067322016","display_name":"Ingmar Poese","orcid":"https://orcid.org/0000-0002-6326-9854"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ingmar Poese","raw_affiliation_strings":["BENOCS GmbH, Berlin, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"BENOCS GmbH, Berlin, Germany","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027274731","display_name":"Anja Feldmann","orcid":"https://orcid.org/0000-0002-5530-6993"},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]},{"id":"https://openalex.org/I91712215","display_name":"Saarland University","ror":"https://ror.org/01jdpyv68","country_code":"DE","type":"education","lineage":["https://openalex.org/I91712215"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Anja Feldmann","raw_affiliation_strings":["Internet Architecture Research Group, Max Planck Institute for Informatics, Saarbr\u00fccken, Germany","Saarland Informatics Campus, Saarland University, Saarbr\u00fccken, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Internet Architecture Research Group, Max Planck Institute for Informatics, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I4210109712"]},{"raw_affiliation_string":"Saarland Informatics Campus, Saarland University, Saarbr\u00fccken, Germany","institution_ids":["https://openalex.org/I91712215"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6182,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.71849029,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"17","issue":"4","first_page":"1988","last_page":"2006"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8302299976348877},{"id":"https://openalex.org/keywords/router","display_name":"Router","score":0.7018118500709534},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5112709999084473},{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.48800864815711975},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4543243944644928},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.4310087561607361},{"id":"https://openalex.org/keywords/volume","display_name":"Volume (thermodynamics)","score":0.4275949001312256},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.20008650422096252}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8302299976348877},{"id":"https://openalex.org/C2775896111","wikidata":"https://www.wikidata.org/wiki/Q642560","display_name":"Router","level":2,"score":0.7018118500709534},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5112709999084473},{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.48800864815711975},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4543243944644928},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.4310087561607361},{"id":"https://openalex.org/C20556612","wikidata":"https://www.wikidata.org/wiki/Q4469374","display_name":"Volume (thermodynamics)","level":2,"score":0.4275949001312256},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.20008650422096252},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/tnsm.2020.3034278","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2020.3034278","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2010.13120","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2010.13120","pdf_url":"https://arxiv.org/pdf/2010.13120","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:pure.mpg.de:item_3265350","is_oa":false,"landing_page_url":"http://hdl.handle.net/21.11116/0000-0007-7295-0","pdf_url":null,"source":{"id":"https://openalex.org/S4306400654","display_name":"MPG.PuRe (Max Planck Society)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I149899117","host_organization_name":"Max Planck Society","host_organization_lineage":["https://openalex.org/I149899117"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:pure.mpg.de:item_3267836","is_oa":true,"landing_page_url":"http://hdl.handle.net/21.11116/0000-0007-8562-4","pdf_url":null,"source":{"id":"https://openalex.org/S4306400654","display_name":"MPG.PuRe (Max Planck Society)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I149899117","host_organization_name":"Max Planck Society","host_organization_lineage":["https://openalex.org/I149899117"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/workingPaper"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2010.13120","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2010.13120","pdf_url":"https://arxiv.org/pdf/2010.13120","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1491338525","display_name":null,"funder_award_id":"ERC- StG-679158","funder_id":"https://openalex.org/F4320334678","funder_display_name":"European Research Council"}],"funders":[{"id":"https://openalex.org/F4320334678","display_name":"European Research Council","ror":"https://ror.org/0472cxd90"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":110,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W47053282","https://openalex.org/W59037818","https://openalex.org/W1230574503","https://openalex.org/W1553409264","https://openalex.org/W1577498723","https://openalex.org/W1848389068","https://openalex.org/W1858168446","https://openalex.org/W1865797552","https://openalex.org/W1977141583","https://openalex.org/W1977951613","https://openalex.org/W1978977658","https://openalex.org/W1983051954","https://openalex.org/W1989454965","https://openalex.org/W1997299558","https://openalex.org/W2004255221","https://openalex.org/W2009654908","https://openalex.org/W2018989507","https://openalex.org/W2053550965","https://openalex.org/W2061133001","https://openalex.org/W2068803497","https://openalex.org/W2088134864","https://openalex.org/W2098366185","https://openalex.org/W2099347745","https://openalex.org/W2105047865","https://openalex.org/W2112053513","https://openalex.org/W2122196204","https://openalex.org/W2124658069","https://openalex.org/W2127455097","https://openalex.org/W2130873644","https://openalex.org/W2141441292","https://openalex.org/W2142099410","https://openalex.org/W2142932694","https://openalex.org/W2144261930","https://openalex.org/W2146467316","https://openalex.org/W2150191781","https://openalex.org/W2155883880","https://openalex.org/W2157366001","https://openalex.org/W2157578436","https://openalex.org/W2162266953","https://openalex.org/W2162969618","https://openalex.org/W2167450247","https://openalex.org/W2169636627","https://openalex.org/W2189465200","https://openalex.org/W2295862636","https://openalex.org/W2303191924","https://openalex.org/W2305788608","https://openalex.org/W2408119291","https://openalex.org/W2487095677","https://openalex.org/W2549994809","https://openalex.org/W2559053077","https://openalex.org/W2562897376","https://openalex.org/W2572562038","https://openalex.org/W2585501424","https://openalex.org/W2604783387","https://openalex.org/W2737988660","https://openalex.org/W2743093301","https://openalex.org/W2743723076","https://openalex.org/W2768883253","https://openalex.org/W2795730141","https://openalex.org/W2798281766","https://openalex.org/W2834288129","https://openalex.org/W2864823780","https://openalex.org/W2878215196","https://openalex.org/W2898344238","https://openalex.org/W2903436061","https://openalex.org/W2903538278","https://openalex.org/W2917789045","https://openalex.org/W2919413299","https://openalex.org/W2949209897","https://openalex.org/W2961297601","https://openalex.org/W2964173183","https://openalex.org/W2970978109","https://openalex.org/W2996250107","https://openalex.org/W3002749125","https://openalex.org/W3008207353","https://openalex.org/W3010296785","https://openalex.org/W3010612350","https://openalex.org/W3016354376","https://openalex.org/W3021277422","https://openalex.org/W3030235304","https://openalex.org/W3044839826","https://openalex.org/W3103656239","https://openalex.org/W3137162676","https://openalex.org/W3176042448","https://openalex.org/W4206137901","https://openalex.org/W4233670650","https://openalex.org/W4238172360","https://openalex.org/W4244822104","https://openalex.org/W4246071789","https://openalex.org/W4249475204","https://openalex.org/W4253729210","https://openalex.org/W4255868445","https://openalex.org/W6601885060","https://openalex.org/W6602452583","https://openalex.org/W6628088091","https://openalex.org/W6633322224","https://openalex.org/W6639080731","https://openalex.org/W6649748432","https://openalex.org/W6687322159","https://openalex.org/W6698187285","https://openalex.org/W6698379459","https://openalex.org/W6714182509","https://openalex.org/W6731119795","https://openalex.org/W6732959492","https://openalex.org/W6736413256","https://openalex.org/W6748333624","https://openalex.org/W6750153429","https://openalex.org/W6750678765","https://openalex.org/W6756512173"],"related_works":["https://openalex.org/W2134539183","https://openalex.org/W2359209543","https://openalex.org/W2370801098","https://openalex.org/W2380475535","https://openalex.org/W2377112249","https://openalex.org/W4320027669","https://openalex.org/W3199479007","https://openalex.org/W2611702147","https://openalex.org/W4289655086","https://openalex.org/W2369355274"],"abstract_inverted_index":{"Many":[0],"network":[1],"operations,":[2],"ranging":[3],"from":[4,36],"attack":[5],"investigation":[6],"and":[7,42,55,95,126,142,149,161,176,222,236],"mitigation":[8],"to":[9,50,67,131,134],"traffic":[10,29,53,90],"management,":[11],"require":[12],"answering":[13,156],"network-wide":[14,76,220],"flow":[15,20,59,111,136,157],"queries":[16,158,221],"in":[17],"seconds.":[18],"Although":[19],"records":[21],"are":[22,105,118],"collected":[23],"at":[24,169],"each":[25],"router,":[26],"using":[27],"available":[28,113],"capture":[30,91,115],"utilities,":[31],"querying":[32],"the":[33,51,69,109,140,197,233,238,241],"resulting":[34],"datasets":[35],"hundreds":[37,189],"of":[38,58,88,108,144,190,207,240],"routers":[39],"across":[40,159],"sites":[41,160],"over":[43],"time,":[44],"remains":[45],"a":[46,73,81,151,166,171,177],"significant":[47],"challenge":[48],"due":[49],"sheer":[52],"volume":[54],"distributed":[56],"nature":[57],"records.":[60,137],"In":[61],"this":[62],"article,":[63],"we":[64,101,182],"investigate":[65],"how":[66],"improve":[68],"response":[70,199],"time":[71,162,200],"for":[72,155,186],"priori":[74],"unknown":[75],"queries.":[77],"We":[78],"present":[79],"Flowyager,":[80],"system":[82],"that":[83,100,122,196],"is":[84],"built":[85],"on":[86],"top":[87],"existing":[89],"utilities.":[92,116],"Flowyager":[93,138,167,217],"generates":[94],"analyzes":[96],"tree":[97],"data":[98,112,120,213],"structures,":[99],"call":[102],"Flowtrees,":[103,145],"which":[104],"succinct":[106],"summaries":[107],"raw":[110,135],"by":[114,129,204],"Flowtrees":[117],"self-adjusted":[119],"structures":[121],"drastically":[123],"reduce":[124],"space":[125],"transfer":[127],"requirements,":[128],"75%":[130],"95%,":[132],"compared":[133,210],"manages":[139],"storage":[141],"transfers":[143],"supports":[146],"Flowtree":[147],"operators,":[148],"provides":[150],"structured":[152],"query":[153,198],"language":[154],"periods.":[163],"By":[164],"deploying":[165],"prototype":[168],"both":[170],"large":[172],"Internet":[173,179],"Exchange":[174],"Point":[175],"Tier-1":[178],"Service":[180],"Provider,":[181],"showcase":[183],"its":[184],"capabilities":[185,226],"networks":[187],"with":[188,211],"router":[191],"interfaces.":[192],"Our":[193],"results":[194],"show":[195],"can":[201],"be":[202],"reduced":[203],"an":[205],"order":[206],"magnitude":[208],"when":[209],"alternative":[212],"analytics":[214],"platforms.":[215],"Thus,":[216],"enables":[218],"interactive":[219],"offers":[223],"unprecedented":[224],"drill-down":[225],"to,":[227],"e.g.,":[228],"identify":[229],"DDoS":[230],"culprits,":[231],"pinpoint":[232],"involved":[234],"sites,":[235],"determine":[237],"length":[239],"attack.":[242]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2021,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}