{"id":"https://openalex.org/W4406728997","doi":"https://doi.org/10.1109/ton.2025.3529861","title":"Real-Time Anomaly Detection for Large-Scale Network Devices","display_name":"Real-Time Anomaly Detection for Large-Scale Network Devices","publication_year":2025,"publication_date":"2025-01-22","ids":{"openalex":"https://openalex.org/W4406728997","doi":"https://doi.org/10.1109/ton.2025.3529861"},"language":"en","primary_location":{"id":"doi:10.1109/ton.2025.3529861","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ton.2025.3529861","pdf_url":null,"source":{"id":"https://openalex.org/S5407042750","display_name":"IEEE Transactions on Networking","issn_l":"2998-4157","issn":["2998-4157"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Networking","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114888805","display_name":"Tao Lei","orcid":"https://orcid.org/0009-0007-1282-3089"},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lei Tao","raw_affiliation_strings":["College of Software, Nankai University, Tianjin, China"],"raw_orcid":"https://orcid.org/0009-0007-1282-3089","affiliations":[{"raw_affiliation_string":"College of Software, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072210083","display_name":"Shenglin Zhang","orcid":"https://orcid.org/0000-0003-0330-0028"},"institutions":[{"id":"https://openalex.org/I1290206253","display_name":"Microsoft (United States)","ror":"https://ror.org/00d0nc645","country_code":"US","type":"company","lineage":["https://openalex.org/I1290206253"]},{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN","US"],"is_corresponding":false,"raw_author_name":"Shenglin Zhang","raw_affiliation_strings":["College of Software, Nankai University, Tianjin, China","Microsoft, Redmond, WA, USA"],"raw_orcid":"https://orcid.org/0000-0003-0330-0028","affiliations":[{"raw_affiliation_string":"College of Software, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]},{"raw_affiliation_string":"Microsoft, Redmond, WA, USA","institution_ids":["https://openalex.org/I1290206253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069713206","display_name":"Junhua Kuang","orcid":null},"institutions":[{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junhua Kuang","raw_affiliation_strings":["College of Software, Nankai University, Tianjin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Software, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049109551","display_name":"Xiao\u2010Wei Guo","orcid":"https://orcid.org/0000-0003-4712-1320"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]},{"id":"https://openalex.org/I205237279","display_name":"Nankai University","ror":"https://ror.org/01y1kjr75","country_code":"CN","type":"education","lineage":["https://openalex.org/I205237279"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiao-Wei Guo","raw_affiliation_strings":["College of Computer Science, National University of Defense Technology, Changsha, China","College of Software, Nankai University, Tianjin, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science, National University of Defense Technology, Changsha, China","institution_ids":["https://openalex.org/I170215575"]},{"raw_affiliation_string":"College of Software, Nankai University, Tianjin, China","institution_ids":["https://openalex.org/I205237279"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027243864","display_name":"Canqun Yang","orcid":"https://orcid.org/0009-0008-4757-2475"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Canqun Yang","raw_affiliation_strings":["College of Computer Science, National University of Defense Technology, Changsha, China"],"raw_orcid":"https://orcid.org/0009-0008-4757-2475","affiliations":[{"raw_affiliation_string":"College of Computer Science, National University of Defense Technology, Changsha, China","institution_ids":["https://openalex.org/I170215575"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":4.4323,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.93675668,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":"33","issue":"3","first_page":"1326","last_page":"1337"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9948999881744385,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9803000092506409,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6466964483261108},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.5586498379707336},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5290583372116089},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.47815045714378357},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.2641694247722626},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.16057443618774414},{"id":"https://openalex.org/keywords/cartography","display_name":"Cartography","score":0.128451406955719},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.1201130747795105}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6466964483261108},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.5586498379707336},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5290583372116089},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.47815045714378357},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2641694247722626},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.16057443618774414},{"id":"https://openalex.org/C58640448","wikidata":"https://www.wikidata.org/wiki/Q42515","display_name":"Cartography","level":1,"score":0.128451406955719},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.1201130747795105},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ton.2025.3529861","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ton.2025.3529861","pdf_url":null,"source":{"id":"https://openalex.org/S5407042750","display_name":"IEEE Transactions on Networking","issn_l":"2998-4157","issn":["2998-4157"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Networking","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2934107797","display_name":null,"funder_award_id":"62072264","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5602403601","display_name":null,"funder_award_id":"62302244","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G8260126168","display_name":null,"funder_award_id":"62272249","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W1723433682","https://openalex.org/W2014356541","https://openalex.org/W2026453187","https://openalex.org/W2028119131","https://openalex.org/W2070685860","https://openalex.org/W2078898317","https://openalex.org/W2161695290","https://openalex.org/W2285233685","https://openalex.org/W2405892775","https://openalex.org/W2743617586","https://openalex.org/W2785362611","https://openalex.org/W2786827964","https://openalex.org/W2901543039","https://openalex.org/W2947815220","https://openalex.org/W2948517885","https://openalex.org/W2950361482","https://openalex.org/W2962736999","https://openalex.org/W2962749092","https://openalex.org/W2964758013","https://openalex.org/W2999907777","https://openalex.org/W3023104975","https://openalex.org/W3034708216","https://openalex.org/W3081497074","https://openalex.org/W3083560262","https://openalex.org/W3134957034","https://openalex.org/W3154336492","https://openalex.org/W3169450514","https://openalex.org/W3170937175","https://openalex.org/W4224310748","https://openalex.org/W4285676605","https://openalex.org/W4312685826","https://openalex.org/W4378575337","https://openalex.org/W4385568016","https://openalex.org/W4388212302","https://openalex.org/W4389158499","https://openalex.org/W4391054939","https://openalex.org/W4397026321","https://openalex.org/W6632102171","https://openalex.org/W6720330311","https://openalex.org/W6765772966","https://openalex.org/W6798213735","https://openalex.org/W6873488466"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3120251014"],"abstract_inverted_index":{"With":[0,123],"the":[1,102,145],"booming":[2],"of":[3,18,36,114,141,156,162],"large-scale":[4],"network":[5,25],"devices,":[6],"anomaly":[7,69,109,147],"detection":[8,70,80,110,148,160],"on":[9],"multivariate":[10],"time":[11,55,77,155,161],"series":[12],"(MTS),":[13],"such":[14],"as":[15,66],"a":[16,34,67,117,151],"combination":[17],"CPU":[19],"utilization,":[20],"average":[21,138],"response":[22],"time,":[23],"and":[24,78,89,159],"packet":[26],"loss,":[27],"is":[28],"important":[29],"for":[30,42,56,91,111],"system":[31],"reliability.":[32],"Although":[33],"collection":[35],"learning-based":[37],"approaches":[38,50],"have":[39],"been":[40],"designed":[41],"this":[43,95],"purpose,":[44],"our":[45,131],"study":[46],"shows":[47],"that":[48,134],"these":[49],"suffer":[51],"from":[52,85,128],"long":[53],"initialization":[54,76,154],"sufficient":[57],"training":[58],"data.":[59],"Our":[60],"previously":[61],"proposed":[62],"JumpStarter":[63],"model":[64],"stands":[65],"MTS":[68,108,115,125],"method":[71],"characterized":[72],"by":[73],"its":[74],"brief":[75],"commendable":[79],"performance.":[81],"However,":[82],"it":[83],"suffers":[84],"high":[86],"computational":[87],"cost":[88],"inappropriateness":[90],"periodic":[92],"MTS.":[93],"In":[94],"paper,":[96],"we":[97],"propose":[98],"VersaGuardian,":[99],"which":[100],"introduces":[101],"Dynamic":[103],"Mode":[104],"Decomposition":[105],"technique":[106],"to":[107],"diverse":[112],"types":[113],"in":[116],"rapidly":[118],"initialized,":[119],"computationally":[120],"efficient":[121],"manner.":[122],"real-world":[124],"datasets":[126],"collected":[127],"three":[129],"companies,":[130],"results":[132],"show":[133],"VersaGuardian":[135],"achieves":[136],"an":[137],"F1":[139],"score":[140],"94.42%,":[142],"significantly":[143],"outperforming":[144],"popular":[146],"algorithms,":[149],"with":[150],"much":[152],"shorter":[153],"20":[157],"minutes":[158],"15.28":[163],"milliseconds.":[164]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}