{"id":"https://openalex.org/W3005967176","doi":"https://doi.org/10.1109/uemcon47517.2019.8993021","title":"Machine Learning for DDoS Attack Classification Using Hive Plots","display_name":"Machine Learning for DDoS Attack Classification Using Hive Plots","publication_year":2019,"publication_date":"2019-10-01","ids":{"openalex":"https://openalex.org/W3005967176","doi":"https://doi.org/10.1109/uemcon47517.2019.8993021","mag":"3005967176"},"language":"en","primary_location":{"id":"doi:10.1109/uemcon47517.2019.8993021","is_oa":false,"landing_page_url":"https://doi.org/10.1109/uemcon47517.2019.8993021","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE 10th Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045360354","display_name":"Pablo Rivas","orcid":"https://orcid.org/0000-0002-8690-0987"},"institutions":[{"id":"https://openalex.org/I926137907","display_name":"Marist University","ror":"https://ror.org/04wx3x242","country_code":"US","type":"education","lineage":["https://openalex.org/I926137907"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Pablo Rivas","raw_affiliation_strings":["Department of Computer Science, Marist College, Poughkeepsie, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Marist College, Poughkeepsie, NY, USA","institution_ids":["https://openalex.org/I926137907"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050873803","display_name":"Casimer DeCusatis","orcid":"https://orcid.org/0000-0002-6181-6594"},"institutions":[{"id":"https://openalex.org/I926137907","display_name":"Marist University","ror":"https://ror.org/04wx3x242","country_code":"US","type":"education","lineage":["https://openalex.org/I926137907"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Casimer DeCusatis","raw_affiliation_strings":["Department of Computer Science, Marist College, Poughkeepsie, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Marist College, Poughkeepsie, NY, USA","institution_ids":["https://openalex.org/I926137907"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073391634","display_name":"Matthew Oakley","orcid":null},"institutions":[{"id":"https://openalex.org/I926137907","display_name":"Marist University","ror":"https://ror.org/04wx3x242","country_code":"US","type":"education","lineage":["https://openalex.org/I926137907"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Matthew Oakley","raw_affiliation_strings":["Department of Computer Science, Marist College, Poughkeepsie, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Marist College, Poughkeepsie, NY, USA","institution_ids":["https://openalex.org/I926137907"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013292483","display_name":"Alex Antaki","orcid":null},"institutions":[{"id":"https://openalex.org/I926137907","display_name":"Marist University","ror":"https://ror.org/04wx3x242","country_code":"US","type":"education","lineage":["https://openalex.org/I926137907"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alex Antaki","raw_affiliation_strings":["Department of Computer Science, Marist College, Poughkeepsie, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Marist College, Poughkeepsie, NY, USA","institution_ids":["https://openalex.org/I926137907"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041406138","display_name":"Nicholas Blaskey","orcid":null},"institutions":[{"id":"https://openalex.org/I926137907","display_name":"Marist University","ror":"https://ror.org/04wx3x242","country_code":"US","type":"education","lineage":["https://openalex.org/I926137907"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nicholas Blaskey","raw_affiliation_strings":["Department of Computer Science, Marist College, Poughkeepsie, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Marist College, Poughkeepsie, NY, USA","institution_ids":["https://openalex.org/I926137907"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075744057","display_name":"Steven LaFalce","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Steven LaFalce","raw_affiliation_strings":["IBM Systems, IBM Corporation, Poughkeepsie, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM Systems, IBM Corporation, Poughkeepsie, NY, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110386823","display_name":"Stephen Stone","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Stephen Stone","raw_affiliation_strings":["IBM Systems, IBM Corporation, Poughkeepsie, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM Systems, IBM Corporation, Poughkeepsie, NY, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.6736,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.86345098,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"0401","last_page":"0407"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.8981186151504517},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8869239091873169},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8163282871246338},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5789992213249207},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5696462392807007},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.5141887664794922},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.49727490544319153},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.47715967893600464},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.44675469398498535},{"id":"https://openalex.org/keywords/binary-classification","display_name":"Binary classification","score":0.4122297465801239},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.36469823122024536},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3063480854034424},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.28710898756980896}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.8981186151504517},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8869239091873169},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8163282871246338},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5789992213249207},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5696462392807007},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.5141887664794922},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.49727490544319153},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.47715967893600464},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.44675469398498535},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.4122297465801239},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.36469823122024536},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3063480854034424},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.28710898756980896},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/uemcon47517.2019.8993021","is_oa":false,"landing_page_url":"https://doi.org/10.1109/uemcon47517.2019.8993021","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE 10th Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W572872720","https://openalex.org/W1665214252","https://openalex.org/W1680392829","https://openalex.org/W1969697916","https://openalex.org/W2035720976","https://openalex.org/W2095705004","https://openalex.org/W2101234009","https://openalex.org/W2104888576","https://openalex.org/W2128965269","https://openalex.org/W2133324003","https://openalex.org/W2147767253","https://openalex.org/W2163605009","https://openalex.org/W2259770643","https://openalex.org/W2331021930","https://openalex.org/W2478098398","https://openalex.org/W2499575013","https://openalex.org/W2651453473","https://openalex.org/W2757307166","https://openalex.org/W2791241574","https://openalex.org/W2798682259","https://openalex.org/W2810674385","https://openalex.org/W2889557246","https://openalex.org/W2910266888","https://openalex.org/W2910718753","https://openalex.org/W3096178011","https://openalex.org/W4285719527","https://openalex.org/W6637242042","https://openalex.org/W6637386731","https://openalex.org/W6674330103","https://openalex.org/W6675354045","https://openalex.org/W6684191040","https://openalex.org/W6754230774"],"related_works":["https://openalex.org/W4226246648","https://openalex.org/W3157993706","https://openalex.org/W3125413540","https://openalex.org/W2981904269","https://openalex.org/W4226000081","https://openalex.org/W3195729625","https://openalex.org/W3205952707","https://openalex.org/W4281611264","https://openalex.org/W3005085357","https://openalex.org/W2101819884"],"abstract_inverted_index":{"Cyberattacks":[0],"have":[1,12],"been":[2],"on":[3,79],"the":[4,29,52],"increase":[5],"as":[6],"computing":[7,82],"power":[8],"and":[9,54,93,102,112,125],"data":[10,67,139],"storage":[11],"become":[13],"more":[14],"accessible.":[15],"The":[16],"use":[17],"of":[18,32,48,56,59,91,95],"recent":[19],"advances":[20],"in":[21,35],"machine":[22,49,124],"learning":[23,50,135],"across":[24],"different":[25],"fields":[26],"has":[27],"increased":[28],"potential":[30],"adoption":[31],"new":[33],"algorithms":[34],"solving":[36],"important":[37],"technological":[38],"problems.":[39],"In":[40],"this":[41],"paper":[42],"we":[43,73],"describe":[44],"a":[45,80,105,114,126,133],"novel":[46],"application":[47],"for":[51],"detection":[53],"classification":[55],"distributed":[57],"denial":[58],"service":[60],"(DDoS)":[61],"cybersecurity":[62],"attacks.":[63],"Attack":[64,84],"pattern":[65,119],"training":[66],"is":[68],"obtained":[69],"from":[70,99],"honeypots":[71,101],"which":[72],"created":[74],"to":[75],"impersonate":[76],"various":[77],"APIs":[78],"cloud":[81],"network.":[83],"characteristics":[85],"including":[86],"source":[87],"IP":[88],"address,":[89],"country":[90],"origin,":[92],"time":[94],"attack":[96,118],"are":[97],"collected":[98],"our":[100,145],"visualized":[103],"using":[104,132],"three-axis":[106],"hive":[107],"plot.":[108],"We":[109],"then":[110],"implemented":[111],"trained":[113,131],"non-probabilistic":[115],"binary":[116],"linear":[117],"classifier.":[120],"A":[121],"support":[122],"vector":[123],"convolutional":[127],"neural":[128],"network":[129],"were":[130],"supervised":[134],"model":[136],"with":[137,151],"labeled":[138],"sets.":[140],"Experimental":[141],"results":[142],"suggest":[143],"that":[144],"models":[146],"can":[147],"detect":[148],"DDoS":[149],"attacks":[150],"high":[152],"accuracy":[153],"rates.":[154]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}