{"id":"https://openalex.org/W2797475117","doi":"https://doi.org/10.1109/tsc.2018.2824809","title":"Multi-Scale LSTM Model for BGP Anomaly Classification","display_name":"Multi-Scale LSTM Model for BGP Anomaly Classification","publication_year":2018,"publication_date":"2018-04-10","ids":{"openalex":"https://openalex.org/W2797475117","doi":"https://doi.org/10.1109/tsc.2018.2824809","mag":"2797475117"},"language":"en","primary_location":{"id":"doi:10.1109/tsc.2018.2824809","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2018.2824809","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014113638","display_name":"Min Cheng","orcid":"https://orcid.org/0000-0001-5742-5948"},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Min Cheng","raw_affiliation_strings":["Department of Computer Science and Technology, City University of Hong Kong, China"],"raw_orcid":"https://orcid.org/0000-0001-5742-5948","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, City University of Hong Kong, China","institution_ids":["https://openalex.org/I168719708"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100404176","display_name":"Qing Li","orcid":"https://orcid.org/0000-0003-3370-471X"},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Qing Li","raw_affiliation_strings":["Department of Computer Science and Technology, City University of Hong Kong, China"],"raw_orcid":"https://orcid.org/0000-0003-3370-471X","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, City University of Hong Kong, China","institution_ids":["https://openalex.org/I168719708"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083333420","display_name":"Jianming Lv","orcid":"https://orcid.org/0000-0003-3691-4755"},"institutions":[{"id":"https://openalex.org/I90610280","display_name":"South China University of Technology","ror":"https://ror.org/0530pts50","country_code":"CN","type":"education","lineage":["https://openalex.org/I90610280"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianming Lv","raw_affiliation_strings":["Department of Computer Science, South China University of Technology, Guangzhou, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0003-3691-4755","affiliations":[{"raw_affiliation_string":"Department of Computer Science, South China University of Technology, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I90610280"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073720799","display_name":"Wenyin Liu","orcid":"https://orcid.org/0000-0002-6237-6607"},"institutions":[{"id":"https://openalex.org/I139024713","display_name":"Guangdong University of Technology","ror":"https://ror.org/04azbjn80","country_code":"CN","type":"education","lineage":["https://openalex.org/I139024713"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenyin Liu","raw_affiliation_strings":["School of Computer Science and Technology, Guangdong University of Technology, Guangzhou, Guangdong, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Guangdong University of Technology, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I139024713"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100356291","display_name":"Jianping Wang","orcid":"https://orcid.org/0000-0002-9318-1482"},"institutions":[{"id":"https://openalex.org/I168719708","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23","country_code":"HK","type":"education","lineage":["https://openalex.org/I168719708"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Jianping Wang","raw_affiliation_strings":["Department of Computer Science and Technology, City University of Hong Kong, China"],"raw_orcid":"https://orcid.org/0000-0002-9318-1482","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Technology, City University of Hong Kong, China","institution_ids":["https://openalex.org/I168719708"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.9805,"has_fulltext":false,"cited_by_count":66,"citation_normalized_percentile":{"value":0.94040968,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"14","issue":"3","first_page":"765","last_page":"778"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/border-gateway-protocol","display_name":"Border Gateway Protocol","score":0.8884782791137695},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8366053104400635},{"id":"https://openalex.org/keywords/reachability","display_name":"Reachability","score":0.5727320909500122},{"id":"https://openalex.org/keywords/routing","display_name":"Routing (electronic design automation)","score":0.557307243347168},{"id":"https://openalex.org/keywords/routing-protocol","display_name":"Routing protocol","score":0.5343588590621948},{"id":"https://openalex.org/keywords/default-free-zone","display_name":"Default-free zone","score":0.48755496740341187},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.4468122124671936},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.44553709030151367},{"id":"https://openalex.org/keywords/quality-of-service","display_name":"Quality of service","score":0.43255677819252014},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.41663995385169983},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.41458404064178467},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.4144389033317566},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.37925559282302856},{"id":"https://openalex.org/keywords/routing-table","display_name":"Routing table","score":0.3294709324836731},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.31522995233535767},{"id":"https://openalex.org/keywords/static-routing","display_name":"Static routing","score":0.31288790702819824},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.16114431619644165}],"concepts":[{"id":"https://openalex.org/C178086212","wikidata":"https://www.wikidata.org/wiki/Q11155","display_name":"Border Gateway Protocol","level":5,"score":0.8884782791137695},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8366053104400635},{"id":"https://openalex.org/C136643341","wikidata":"https://www.wikidata.org/wiki/Q1361526","display_name":"Reachability","level":2,"score":0.5727320909500122},{"id":"https://openalex.org/C74172769","wikidata":"https://www.wikidata.org/wiki/Q1446839","display_name":"Routing (electronic design automation)","level":2,"score":0.557307243347168},{"id":"https://openalex.org/C104954878","wikidata":"https://www.wikidata.org/wiki/Q1648707","display_name":"Routing protocol","level":3,"score":0.5343588590621948},{"id":"https://openalex.org/C101396714","wikidata":"https://www.wikidata.org/wiki/Q3021187","display_name":"Default-free zone","level":5,"score":0.48755496740341187},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.4468122124671936},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.44553709030151367},{"id":"https://openalex.org/C5119721","wikidata":"https://www.wikidata.org/wiki/Q220501","display_name":"Quality of service","level":2,"score":0.43255677819252014},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.41663995385169983},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.41458404064178467},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.4144389033317566},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.37925559282302856},{"id":"https://openalex.org/C184896649","wikidata":"https://www.wikidata.org/wiki/Q290066","display_name":"Routing table","level":4,"score":0.3294709324836731},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31522995233535767},{"id":"https://openalex.org/C204948658","wikidata":"https://www.wikidata.org/wiki/Q1119410","display_name":"Static routing","level":4,"score":0.31288790702819824},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.16114431619644165},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tsc.2018.2824809","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2018.2824809","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals","score":0.47999998927116394}],"awards":[{"id":"https://openalex.org/G5526867466","display_name":null,"funder_award_id":"U1611461","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6722152473","display_name":null,"funder_award_id":"9610367","funder_id":"https://openalex.org/F4320309893","funder_display_name":"City University of Hong Kong"}],"funders":[{"id":"https://openalex.org/F4320309893","display_name":"City University of Hong Kong","ror":"https://ror.org/03q8dnn23"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":67,"referenced_works":["https://openalex.org/W854541894","https://openalex.org/W1438045566","https://openalex.org/W1484672383","https://openalex.org/W1514535095","https://openalex.org/W1518156650","https://openalex.org/W1793121960","https://openalex.org/W1869752048","https://openalex.org/W1950788856","https://openalex.org/W1998632008","https://openalex.org/W2015535581","https://openalex.org/W2023978159","https://openalex.org/W2061351406","https://openalex.org/W2064675550","https://openalex.org/W2101234009","https://openalex.org/W2131494463","https://openalex.org/W2133564696","https://openalex.org/W2134583708","https://openalex.org/W2141173017","https://openalex.org/W2149600645","https://openalex.org/W2152233525","https://openalex.org/W2159505618","https://openalex.org/W2186910770","https://openalex.org/W2189612184","https://openalex.org/W2259801182","https://openalex.org/W2270470215","https://openalex.org/W2288074780","https://openalex.org/W2295763703","https://openalex.org/W2331481034","https://openalex.org/W2417568479","https://openalex.org/W2470039937","https://openalex.org/W2470673105","https://openalex.org/W2516815969","https://openalex.org/W2532073801","https://openalex.org/W2544774554","https://openalex.org/W2567172578","https://openalex.org/W2583164363","https://openalex.org/W2583684860","https://openalex.org/W2586380145","https://openalex.org/W2591981842","https://openalex.org/W2594919904","https://openalex.org/W2753352458","https://openalex.org/W2902455138","https://openalex.org/W2951008357","https://openalex.org/W2953384591","https://openalex.org/W2963069010","https://openalex.org/W2963078493","https://openalex.org/W2964091467","https://openalex.org/W2964308564","https://openalex.org/W4293718132","https://openalex.org/W6623517193","https://openalex.org/W6630875275","https://openalex.org/W6638318767","https://openalex.org/W6639082767","https://openalex.org/W6640754710","https://openalex.org/W6675354045","https://openalex.org/W6679434410","https://openalex.org/W6679844565","https://openalex.org/W6680930200","https://openalex.org/W6683078286","https://openalex.org/W6686914113","https://openalex.org/W6696429117","https://openalex.org/W6713134421","https://openalex.org/W6732899423","https://openalex.org/W6733640274","https://openalex.org/W6734275685","https://openalex.org/W6756753118","https://openalex.org/W7055499513"],"related_works":["https://openalex.org/W2159910630","https://openalex.org/W2383446437","https://openalex.org/W155403277","https://openalex.org/W2121820137","https://openalex.org/W2167739288","https://openalex.org/W4375870822","https://openalex.org/W4394634312","https://openalex.org/W2542365088","https://openalex.org/W2949602303","https://openalex.org/W1520989834"],"abstract_inverted_index":{"As":[0],"a":[1,85,104,118,184],"policy-based":[2],"routing":[3,16,39,56],"protocol,":[4],"the":[5,34,59,68,95,126,130,143,147,151,156,189],"primary":[6],"purpose":[7],"of":[8,28,31,38,70,132],"Border":[9],"Gateway":[10],"Protocol":[11],"(BGP)":[12],"is":[13,108,123],"to":[14,19,53,77,93,110,136],"exchange":[15],"reachability":[17,37],"information":[18,40,113],"provide":[20,54],"sufficient":[21],"end-to-end":[22],"Quality-of-Service":[23],"(QoS).":[24],"The":[25,61,177],"constant":[26],"increase":[27],"anomalous":[29,96],"traffic":[30],"BGP":[32,99,169],"affects":[33],"connectivity":[35],"and":[36,117,142],"among":[41],"different":[42,133,159],"Autonomous":[43],"Systems":[44],"(ASs),":[45],"which":[46,74],"calls":[47],"for":[48],"building":[49],"accurate":[50],"alerting":[51,160],"models":[52],"stable":[55],"services":[57],"in":[58,150,158],"Internet.":[60],"previous":[62],"works":[63],"classify":[64],"anomalies":[65],"without":[66],"considering":[67],"characteristic":[69],"multiple":[71,115],"time":[72,134],"scales,":[73,116],"may":[75],"lead":[76],"inaccurate":[78],"classification.":[79],"In":[80,101],"this":[81],"paper,":[82],"we":[83,162],"propose":[84],"novel":[86],"Multi-Scale":[87],"Long":[88],"Short-Term":[89],"Memory":[90],"(MSLSTM)":[91],"model":[92,182],"capture":[94],"behaviors":[97],"from":[98,173],"traffic.":[100],"our":[102,181],"model,":[103],"Discrete":[105],"Wavelet":[106],"Transform":[107],"used":[109],"obtain":[111],"temporal":[112,148],"on":[114,167],"hierarchical":[119],"two-layer":[120],"LSTM":[121],"architecture":[122],"devised":[124],"where":[125],"first":[127],"layer":[128,145],"learns":[129],"attentions":[131],"scales":[135],"generate":[137],"an":[138],"integrated":[139],"historical":[140],"representation,":[141],"second":[144],"captures":[146],"dependency":[149],"learned":[152],"representation.":[153],"To":[154],"evaluate":[155],"feasibility":[157],"scenarios,":[161],"conduct":[163],"comprehensive":[164],"experiments":[165],"based":[166],"several":[168],"data":[170],"sets":[171],"collected":[172],"real":[174],"world":[175],"applications.":[176],"results":[178],"demonstrate":[179],"that":[180],"achieves":[183],"promising":[185],"performance":[186],"compared":[187],"with":[188],"state-of-the-art":[190],"approaches.":[191]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":12},{"year":2021,"cited_by_count":10},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":2}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}