{"id":"https://openalex.org/W4210445337","doi":"https://doi.org/10.1109/tnsm.2022.3142254","title":"An Online Entropy-Based DDoS Flooding Attack Detection System With Dynamic Threshold","display_name":"An Online Entropy-Based DDoS Flooding Attack Detection System With Dynamic Threshold","publication_year":2022,"publication_date":"2022-01-26","ids":{"openalex":"https://openalex.org/W4210445337","doi":"https://doi.org/10.1109/tnsm.2022.3142254"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2022.3142254","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2022.3142254","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008758449","display_name":"Lo\u00efc D. Tsobdjou","orcid":"https://orcid.org/0000-0003-1781-7407"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Loic D. Tsobdjou","raw_affiliation_strings":["Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0003-1781-7407","affiliations":[{"raw_affiliation_string":"Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, QC, Canada","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074743707","display_name":"Samuel Pierre","orcid":"https://orcid.org/0000-0001-8063-8773"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Samuel Pierre","raw_affiliation_strings":["Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, QC, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, QC, Canada","institution_ids":["https://openalex.org/I45683168"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029227305","display_name":"Alejandro Quintero","orcid":"https://orcid.org/0000-0003-0917-8027"},"institutions":[{"id":"https://openalex.org/I45683168","display_name":"Polytechnique Montr\u00e9al","ror":"https://ror.org/05f8d4e86","country_code":"CA","type":"education","lineage":["https://openalex.org/I45683168"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Alejandro Quintero","raw_affiliation_strings":["Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0003-0917-8027","affiliations":[{"raw_affiliation_string":"Department of Computer and Software Engineering, Polytechnique Montreal, Montreal, QC, Canada","institution_ids":["https://openalex.org/I45683168"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I45683168"],"apc_list":null,"apc_paid":null,"fwci":6.8135,"has_fulltext":false,"cited_by_count":55,"citation_normalized_percentile":{"value":0.97356641,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"19","issue":"2","first_page":"1679","last_page":"1689"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8589372634887695},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7859138250350952},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.6144760251045227},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.5359889268875122},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5349876284599304},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4732257127761841},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4540160894393921},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.45385298132896423},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4316679537296295},{"id":"https://openalex.org/keywords/flooding","display_name":"Flooding (psychology)","score":0.43064630031585693},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3846660554409027},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3795059323310852}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8589372634887695},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7859138250350952},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.6144760251045227},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.5359889268875122},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5349876284599304},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4732257127761841},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4540160894393921},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.45385298132896423},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4316679537296295},{"id":"https://openalex.org/C186594467","wikidata":"https://www.wikidata.org/wiki/Q1429176","display_name":"Flooding (psychology)","level":2,"score":0.43064630031585693},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3846660554409027},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3795059323310852},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tnsm.2022.3142254","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2022.3142254","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},{"id":"pmh:oai:publications.polymtl.ca:50539","is_oa":false,"landing_page_url":"https://publications.polymtl.ca/50539/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401013","display_name":"PolyPublie (\u00c9cole Polytechnique de Montr\u00e9al)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I45683168","host_organization_name":"Polytechnique Montr\u00e9al","host_organization_lineage":["https://openalex.org/I45683168"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article de revue"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W233671965","https://openalex.org/W1505752199","https://openalex.org/W1959274303","https://openalex.org/W1995875735","https://openalex.org/W2045819916","https://openalex.org/W2087853663","https://openalex.org/W2119227347","https://openalex.org/W2221759150","https://openalex.org/W2476770292","https://openalex.org/W2478981601","https://openalex.org/W2487868906","https://openalex.org/W2591391565","https://openalex.org/W2614907253","https://openalex.org/W2789828921","https://openalex.org/W2792023776","https://openalex.org/W2805622383","https://openalex.org/W2883895559","https://openalex.org/W2901284941","https://openalex.org/W2904333952","https://openalex.org/W2937339252","https://openalex.org/W2937711216","https://openalex.org/W2940145198","https://openalex.org/W2959627510","https://openalex.org/W2965568386","https://openalex.org/W2965954464","https://openalex.org/W2967136126","https://openalex.org/W2982682021","https://openalex.org/W2999400832","https://openalex.org/W3005218645","https://openalex.org/W3006271200","https://openalex.org/W3008695648","https://openalex.org/W3043187969","https://openalex.org/W3095107637","https://openalex.org/W3095428930","https://openalex.org/W3134219700","https://openalex.org/W3162682696","https://openalex.org/W3178453898","https://openalex.org/W3180751607","https://openalex.org/W3196594607","https://openalex.org/W3204823025","https://openalex.org/W3210229224","https://openalex.org/W4252827860","https://openalex.org/W6634650089"],"related_works":["https://openalex.org/W2360429410","https://openalex.org/W2898696280","https://openalex.org/W2204131204","https://openalex.org/W2383770723","https://openalex.org/W2921433547","https://openalex.org/W2958385475","https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W2370216173","https://openalex.org/W2754163055"],"abstract_inverted_index":{"Distributed":[0],"denial":[1,59],"of":[2,11,37,60,72,78,128,229],"service":[3,61],"attacks":[4,62,114],"are":[5,54],"cyber-attacks":[6],"that":[7,109],"target":[8],"the":[9,23,64,76,83,154,160,174,203,219],"availability":[10],"servers.":[12],"As":[13],"a":[14,28,116,120,166,179,191,210,224],"result,":[15],"legitimate":[16,99,199],"users":[17],"no":[18],"longer":[19],"have":[20,27,68],"access":[21],"to":[22,46,96,111,195,215],"service.":[24],"This":[25],"can":[26],"negative":[29],"impact":[30],"on":[31,186],"an":[32,106],"organization,":[33],"such":[34],"as":[35,165],"lack":[36],"reputation":[38],"and":[39,92,119,134,145,208,236],"economic":[40],"losses.":[41],"Therefore,":[42],"it":[43],"is":[44,171,177,184],"important":[45],"design":[47],"defense":[48],"mechanisms":[49],"against":[50],"these":[51,73],"attacks.":[52],"There":[53],"systems":[55,74],"for":[56],"detecting":[57],"distributed":[58],"in":[63,98,115,198,227],"literature,":[65],"which":[66],"still":[67],"various":[69],"shortcomings.":[70],"Some":[71],"detect":[75,112],"presence":[77],"attack":[79,84,140],"traffic":[80],"without":[81],"identifying":[82],"packets":[85],"or":[86],"flows.":[87],"Others":[88],"use":[89],"static":[90],"thresholds":[91],"therefore":[93],"cannot":[94],"adapt":[95],"changes":[97,197],"traffic.":[100,200],"In":[101],"this":[102],"paper,":[103],"we":[104],"propose":[105,190],"online":[107],"system":[108,126,205,222],"aims":[110],"flooding":[113],"short":[117],"timeframe":[118],"client\u2013server":[121],"environment.":[122],"The":[123,148,181],"proposed":[124,204,220],"detection":[125,151,221,230],"consists":[127],"five":[129],"modules,":[130],"namely":[131],"features":[132],"extraction":[133],"connections":[135,141],"construction,":[136],"suspicious":[137,149],"activity":[138,150,170],"detection,":[139,142],"alert":[143],"generation":[144],"threshold":[146,182,193],"update.":[147],"module":[152],"calculates":[153],"normalized":[155],"Shannon":[156],"entropy":[157,176],"by":[158],"considering":[159],"source":[161],"Internet":[162],"Protocol":[163],"address":[164],"random":[167],"variable.":[168],"Suspicious":[169],"detected":[172],"when":[173],"computed":[175],"below":[178],"threshold.":[180],"calculation":[183],"based":[185],"Chebyshev\u2019s":[187],"theorem.":[188],"We":[189,201],"dynamic":[192],"algorithm":[194],"track":[196],"evaluate":[202],"through":[206],"simulations":[207],"using":[209],"publicly":[211],"available":[212],"dataset.":[213],"Compared":[214],"other":[216],"similar":[217],"works,":[218],"has":[223],"better":[225],"performance":[226],"terms":[228],"rate,":[231,234],"false":[232],"positive":[233],"precision":[235],"overall":[237],"accuracy.":[238]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":18},{"year":2024,"cited_by_count":18},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":5}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}