{"id":"https://openalex.org/W4412560743","doi":"https://doi.org/10.1109/ton.2025.3589279","title":"PS-Sketch: Fast and Accurate Detection of Persistent-Spreaders in High-Speed Networks","display_name":"PS-Sketch: Fast and Accurate Detection of Persistent-Spreaders in High-Speed Networks","publication_year":2025,"publication_date":"2025-07-22","ids":{"openalex":"https://openalex.org/W4412560743","doi":"https://doi.org/10.1109/ton.2025.3589279"},"language":"en","primary_location":{"id":"doi:10.1109/ton.2025.3589279","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ton.2025.3589279","pdf_url":null,"source":{"id":"https://openalex.org/S5407042750","display_name":"IEEE Transactions on Networking","issn_l":"2998-4157","issn":["2998-4157"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Networking","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100358037","display_name":"Zhaohui Wang","orcid":"https://orcid.org/0009-0006-8615-3287"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaohui Wang","raw_affiliation_strings":["Anhui Key Laboratory on High Performance Computing, School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"],"raw_orcid":"https://orcid.org/0009-0006-8615-3287","affiliations":[{"raw_affiliation_string":"Anhui Key Laboratory on High Performance Computing, School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024018042","display_name":"Ye Tian","orcid":"https://orcid.org/0000-0002-3428-1889"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ye Tian","raw_affiliation_strings":["Anhui Key Laboratory on High Performance Computing, School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"],"raw_orcid":"https://orcid.org/0000-0002-3428-1889","affiliations":[{"raw_affiliation_string":"Anhui Key Laboratory on High Performance Computing, School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103403998","display_name":"Yi-Yen Wu","orcid":null},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yiwen Wu","raw_affiliation_strings":["Anhui Key Laboratory on High Performance Computing, School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"],"raw_orcid":"https://orcid.org/0009-0002-9432-266X","affiliations":[{"raw_affiliation_string":"Anhui Key Laboratory on High Performance Computing, School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103738232","display_name":"Wei Chen","orcid":"https://orcid.org/0000-0003-1093-060X"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Chen","raw_affiliation_strings":["Anhui Key Laboratory on High Performance Computing, School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"],"raw_orcid":"https://orcid.org/0000-0003-1093-060X","affiliations":[{"raw_affiliation_string":"Anhui Key Laboratory on High Performance Computing, School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xinyu Zhang","orcid":"https://orcid.org/0009-0002-3934-2449"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinyu Zhang","raw_affiliation_strings":["Anhui Key Laboratory on High Performance Computing, School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"],"raw_orcid":"https://orcid.org/0009-0002-3934-2449","affiliations":[{"raw_affiliation_string":"Anhui Key Laboratory on High Performance Computing, School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China","institution_ids":["https://openalex.org/I126520041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002162759","display_name":"Xinming Zhang","orcid":"https://orcid.org/0000-0002-8136-6834"},"institutions":[{"id":"https://openalex.org/I126520041","display_name":"University of Science and Technology of China","ror":"https://ror.org/04c4dkn09","country_code":"CN","type":"education","lineage":["https://openalex.org/I126520041","https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinming Zhang","raw_affiliation_strings":["Anhui Key Laboratory on High Performance Computing, School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China"],"raw_orcid":"https://orcid.org/0000-0002-8136-6834","affiliations":[{"raw_affiliation_string":"Anhui Key Laboratory on High Performance Computing, School of Computer Science and Technology, University of Science and Technology of China, Hefei, Anhui, China","institution_ids":["https://openalex.org/I126520041"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I126520041"],"apc_list":null,"apc_paid":null,"fwci":3.0859,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.91337017,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":"33","issue":"6","first_page":"3504","last_page":"3519"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9829999804496765,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9829999804496765,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9431999921798706,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9154999852180481,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sketch","display_name":"Sketch","score":0.7768511772155762},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5559605360031128},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.19612807035446167}],"concepts":[{"id":"https://openalex.org/C2779231336","wikidata":"https://www.wikidata.org/wiki/Q7534724","display_name":"Sketch","level":2,"score":0.7768511772155762},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5559605360031128},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.19612807035446167}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ton.2025.3589279","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ton.2025.3589279","pdf_url":null,"source":{"id":"https://openalex.org/S5407042750","display_name":"IEEE Transactions on Networking","issn_l":"2998-4157","issn":["2998-4157"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Networking","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G176760989","display_name":"\u672a\u6765\u4e92\u8054\u7f51\u4e2d\u9762\u5411\u547d\u540d\u6570\u636e\u9ad8\u53d8\u52a8\u65f6\u95f4\u5c40\u90e8\u6027\u7684\u9ad8\u6548\u3001\u5065\u58ee\u8def\u7531\u673a\u5236\u7814\u7a76","funder_award_id":"61672486","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6565933401","display_name":null,"funder_award_id":"62072425","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W1504269120","https://openalex.org/W1968574530","https://openalex.org/W1988150362","https://openalex.org/W2025051251","https://openalex.org/W2039390926","https://openalex.org/W2080234606","https://openalex.org/W2087704981","https://openalex.org/W2092660649","https://openalex.org/W2099480861","https://openalex.org/W2105818147","https://openalex.org/W2111678491","https://openalex.org/W2144982963","https://openalex.org/W2150399692","https://openalex.org/W2176566884","https://openalex.org/W2464380181","https://openalex.org/W2487095677","https://openalex.org/W2557530695","https://openalex.org/W2577957252","https://openalex.org/W2605823630","https://openalex.org/W2834288129","https://openalex.org/W2949774623","https://openalex.org/W3031847392","https://openalex.org/W3080797160","https://openalex.org/W3083506933","https://openalex.org/W3102387041","https://openalex.org/W3163459029","https://openalex.org/W4229922087","https://openalex.org/W4246313583","https://openalex.org/W4292263787","https://openalex.org/W4381946560","https://openalex.org/W4386156805","https://openalex.org/W4386396590","https://openalex.org/W4386486774","https://openalex.org/W4387447858","https://openalex.org/W4389988649","https://openalex.org/W4396734360","https://openalex.org/W4396910091","https://openalex.org/W4401176811"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2378994405","https://openalex.org/W2385974820","https://openalex.org/W2373478030","https://openalex.org/W2378679551","https://openalex.org/W3149739944","https://openalex.org/W2392363776","https://openalex.org/W2063051341"],"abstract_inverted_index":{"Large":[0],"spread":[1,137],"and":[2,14,43,58,74,97,120,130,175,189],"high":[3,168],"persistence":[4,57,112,134],"are":[5],"widely":[6],"observed":[7],"in":[8,17,46,116,121,170,180,187],"malicious":[9],"activities":[10],"such":[11],"as":[12],"botnets":[13],"DDoS":[15],"attacks":[16],"high-speed":[18],"networks,":[19],"while":[20],"how":[21],"to":[22,79,108,135],"identify":[23],"persistent-spreaders":[24,45],"is":[25,51,194],"still":[26],"a":[27,35,82],"challenging":[28],"issue.":[29],"In":[30,100],"this":[31],"work,":[32],"we":[33,103,124],"presentPS-Sketch,":[34],"system":[36,193],"for":[37,77,147],"estimating":[38,148,171],"persistent-spreads":[39],"of":[40,56,64,139,160],"network":[41,47,71,172],"flows":[42],"detecting":[44,181],"data":[48,92],"streams.":[49],"PS-Sketch":[50,85,166,186],"based":[52],"on":[53,156,196],"our":[54],"definitions":[55,67],"persistent-spread,":[59],"which":[60],"overcome":[61],"the":[62,65,95,98,101,122,126,136,140,143,149,157,177,192],"limitations":[63],"conventional":[66],"by":[68],"better":[69],"capturing":[70],"flows\u2019":[72,173],"behaviors,":[73],"being":[75],"difficult":[76],"attackers":[78],"bypass.":[80],"Within":[81],"switch\u2019s":[83],"pipeline,":[84],"processes":[86],"packets":[87],"with":[88],"two":[89],"adjacent":[90],"sketch":[91],"structures,":[93],"namely":[94],"P-sketch":[96],"S-sketch.":[99],"P-sketch,":[102],"employ":[104],"low-pass":[105],"filter":[106],"(LPF)":[107],"trace":[109],"an":[110,132],"element\u2019s":[111,133],"that":[113,142,165,191],"incorporates":[114],"occurrences":[115],"its":[117],"entire":[118],"history,":[119],"S-sketch,":[123],"extend":[125],"HyperLogLog":[127],"(HLL)":[128],"algorithm,":[129],"integrate":[131],"estimation":[138],"flow":[141],"element":[144],"belongs":[145],"to,":[146],"flow\u2019s":[150],"persistent-spread.":[151],"We":[152,183],"present":[153],"theoretical":[154],"analysis":[155],"error":[158],"bound":[159],"PS-Sketch.":[161],"Trace-driven":[162],"evaluation":[163],"shows":[164],"achieves":[167],"accuracy":[169],"persistent-spreads,":[174],"outperforms":[176],"existing":[178],"solutions":[179],"persistent-spreaders.":[182],"further":[184],"prototype":[185],"P4":[188],"show":[190],"deployable":[195],"commodity":[197],"hardware":[198],"switches.":[199]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}