{"id":"https://openalex.org/W4362496478","doi":"https://doi.org/10.1109/tnsm.2023.3264278","title":"AF-FDS: An Accurate, Fast, and Fine-Grained Detection Scheme for DDoS Attacks in High-Speed Networks With Asymmetric Routing","display_name":"AF-FDS: An Accurate, Fast, and Fine-Grained Detection Scheme for DDoS Attacks in High-Speed Networks With Asymmetric Routing","publication_year":2023,"publication_date":"2023-04-03","ids":{"openalex":"https://openalex.org/W4362496478","doi":"https://doi.org/10.1109/tnsm.2023.3264278"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2023.3264278","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2023.3264278","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5075441225","display_name":"Ziling Shao","orcid":"https://orcid.org/0009-0001-5643-8875"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Ziling Shao","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042105311","display_name":"Tingzheng Chen","orcid":"https://orcid.org/0009-0001-1410-3030"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tingzheng Chen","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043707940","display_name":"Guang Cheng","orcid":"https://orcid.org/0000-0001-8642-4362"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guang Cheng","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China","Jiangsu Province Engineering Research Center of Security for Ubiquitous Network, Nanjing, Jiangsu, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]},{"raw_affiliation_string":"Jiangsu Province Engineering Research Center of Security for Ubiquitous Network, Nanjing, Jiangsu, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073150709","display_name":"Xiaoyan Hu","orcid":"https://orcid.org/0000-0002-4172-1977"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiaoyan Hu","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100704550","display_name":"Weina Li","orcid":"https://orcid.org/0009-0003-0029-9305"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weina Li","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032328549","display_name":"Hua Wu","orcid":"https://orcid.org/0000-0002-8829-0182"},"institutions":[{"id":"https://openalex.org/I4210155350","display_name":"Purple Mountain Laboratories","ror":"https://ror.org/04zcbk583","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210155350"]},{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hua Wu","raw_affiliation_strings":["School of Cyber Science and Engineering, Southeast University, Nanjing, China","Future Network, Purple Mountain Laboratories for Network and Communication Security, Nanjing, China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]},{"raw_affiliation_string":"Future Network, Purple Mountain Laboratories for Network and Communication Security, Nanjing, China","institution_ids":["https://openalex.org/I4210155350"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5075441225"],"corresponding_institution_ids":["https://openalex.org/I76569877"],"apc_list":null,"apc_paid":null,"fwci":2.0122,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.86818541,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"20","issue":"4","first_page":"4964","last_page":"4981"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8634518384933472},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8567594289779663},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.6238428950309753},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5100367665290833},{"id":"https://openalex.org/keywords/routing","display_name":"Routing (electronic design automation)","score":0.487131804227829},{"id":"https://openalex.org/keywords/trinoo","display_name":"Trinoo","score":0.4607134759426117},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3593830466270447},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3506382703781128}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8634518384933472},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8567594289779663},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.6238428950309753},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5100367665290833},{"id":"https://openalex.org/C74172769","wikidata":"https://www.wikidata.org/wiki/Q1446839","display_name":"Routing (electronic design automation)","level":2,"score":0.487131804227829},{"id":"https://openalex.org/C43639116","wikidata":"https://www.wikidata.org/wiki/Q7843050","display_name":"Trinoo","level":5,"score":0.4607134759426117},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3593830466270447},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3506382703781128},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2023.3264278","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2023.3264278","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/8","score":0.5199999809265137,"display_name":"Decent work and economic growth"}],"awards":[{"id":"https://openalex.org/G2160318020","display_name":null,"funder_award_id":"2020YFB1807503","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W1998161329","https://openalex.org/W2031779012","https://openalex.org/W2080234606","https://openalex.org/W2096159591","https://openalex.org/W2098260620","https://openalex.org/W2130873367","https://openalex.org/W2402560368","https://openalex.org/W2503118350","https://openalex.org/W2743723076","https://openalex.org/W2761831203","https://openalex.org/W2798388460","https://openalex.org/W2834288129","https://openalex.org/W2886128149","https://openalex.org/W2899576538","https://openalex.org/W2919413299","https://openalex.org/W2952844932","https://openalex.org/W2965954464","https://openalex.org/W2967106834","https://openalex.org/W2977051664","https://openalex.org/W2982682021","https://openalex.org/W2989746927","https://openalex.org/W2997125001","https://openalex.org/W3003916746","https://openalex.org/W3016758778","https://openalex.org/W3021239539","https://openalex.org/W3021409083","https://openalex.org/W3036749504","https://openalex.org/W3047158911","https://openalex.org/W3047429575","https://openalex.org/W3117129541","https://openalex.org/W3151470781","https://openalex.org/W3168781723","https://openalex.org/W3178543220","https://openalex.org/W3178751310","https://openalex.org/W3199406030","https://openalex.org/W4206645429","https://openalex.org/W4206760296","https://openalex.org/W4210401924","https://openalex.org/W4210630306","https://openalex.org/W4226017458","https://openalex.org/W4249843299","https://openalex.org/W4285601299"],"related_works":["https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W1968168724","https://openalex.org/W2204131204","https://openalex.org/W2754163055","https://openalex.org/W4322008378","https://openalex.org/W2383770723","https://openalex.org/W2186749541","https://openalex.org/W2360429410","https://openalex.org/W4256682929"],"abstract_inverted_index":{"Distributed":[0],"Denial":[1],"of":[2,36,122,142,169,190],"Service":[3],"(DDoS)":[4],"attacks":[5,108,124,171,205],"have":[6,15],"posed":[7],"severe":[8],"threats":[9],"to":[10,41,53],"the":[11,42,57,74,120,143,147,193],"Internet.":[12,75],"Although":[13],"researchers":[14],"proposed":[16],"many":[17],"DDoS":[18,29,93,107,123,170,204],"detection":[19,86],"schemes,":[20],"there":[21],"are":[22,31,50,71],"still":[23],"some":[24],"challenging":[25],"issues.":[26],"Traditional":[27],"per-flow-based":[28],"methods":[30,49,70,78,198],"impractical":[32],"for":[33,106],"massive":[34],"amounts":[35],"high-speed":[37,62,110],"network":[38,158],"traffic":[39],"due":[40],"huge":[43],"resource":[44],"consumption.":[45],"In":[46],"addition,":[47],"existing":[48,77],"not":[51,80],"designed":[52],"take":[54],"into":[55],"account":[56],"widespread":[58],"asymmetric":[59,113,160,218],"routing":[60,161,219],"in":[61,65,109,155,217],"networks,":[63],"resulting":[64],"false":[66,209],"positives":[67],"when":[68,90],"these":[69],"deployed":[72],"on":[73,119],"Furthermore,":[76,192],"can":[79,136,165,202],"achieve":[81,137],"a":[82,127,156,173,187,207],"good":[83],"trade-off":[84],"between":[85],"accuracy":[87],"and":[88,101,125,140,183,213],"granularity":[89],"detecting":[91],"hybrid":[92],"attacks.":[94],"This":[95],"paper":[96],"proposes":[97],"an":[98],"Accurate,":[99],"Fast,":[100],"Fine-grained":[102],"Detection":[103],"Scheme":[104],"(AF-FDS)":[105],"networks":[111],"with":[112,159,179,195,206],"routing.":[114],"We":[115],"select":[116],"features":[117,145],"based":[118],"characteristics":[121],"design":[126],"data":[128],"structure":[129],"Double":[130],"Composite":[131],"Structure":[132],"Sketch":[133],"(DCSS).":[134],"DCSS":[135],"fast":[138],"recording":[139],"extraction":[141],"selected":[144],"from":[146],"sampled":[148],"traffic.":[149],"Experimental":[150],"results":[151],"using":[152],"real-world":[153],"traces":[154],"10Gbps":[157],"show":[162],"that":[163,200],"AF-FDS":[164,201],"detect":[166,203],"nine":[167],"types":[168],"at":[172,186],"fine-grained":[174],"level":[175],"within":[176],"15":[177],"seconds":[178],"over":[180],"98.0%":[181],"precision":[182],"recall,":[184],"even":[185],"sampling":[188],"rate":[189,211],"1/1024.":[191],"comparison":[194],"several":[196],"state-of-the-art":[197],"illustrates":[199],"lower":[208],"positive":[210],"(FPR)":[212],"shorter":[214],"alarm":[215],"time":[216],"scenarios.":[220]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}