{"id":"https://openalex.org/W2944020552","doi":"https://doi.org/10.1109/vizsec.2018.8709177","title":"Visualizing Automatically Detected Periodic Network Activity","display_name":"Visualizing Automatically Detected Periodic Network Activity","publication_year":2018,"publication_date":"2018-10-01","ids":{"openalex":"https://openalex.org/W2944020552","doi":"https://doi.org/10.1109/vizsec.2018.8709177","mag":"2944020552"},"language":"en","primary_location":{"id":"doi:10.1109/vizsec.2018.8709177","is_oa":false,"landing_page_url":"https://doi.org/10.1109/vizsec.2018.8709177","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE Symposium on Visualization for Cyber Security (VizSec)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055142047","display_name":"Robert Gove","orcid":"https://orcid.org/0000-0001-5864-4595"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Robert Gove","raw_affiliation_strings":["Two Six Labs"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Two Six Labs","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5006159974","display_name":"Lauren Deason","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Lauren Deason","raw_affiliation_strings":["PUNCH Cyber Analytics Group"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"PUNCH Cyber Analytics Group","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.06,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.83239148,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9914000034332275,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7602337002754211},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.6217010617256165},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6120597124099731},{"id":"https://openalex.org/keywords/polling","display_name":"Polling","score":0.593201756477356},{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.5126225352287292},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.5083276629447937},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4864484965801239},{"id":"https://openalex.org/keywords/metadata","display_name":"Metadata","score":0.46856218576431274},{"id":"https://openalex.org/keywords/period-length","display_name":"Period length","score":0.4574034512042999},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3608587384223938},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.23370292782783508},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.17460864782333374},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.15619662404060364},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1455400288105011},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.12666535377502441},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.12354135513305664}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7602337002754211},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.6217010617256165},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6120597124099731},{"id":"https://openalex.org/C204854418","wikidata":"https://www.wikidata.org/wiki/Q1362921","display_name":"Polling","level":2,"score":0.593201756477356},{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.5126225352287292},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.5083276629447937},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4864484965801239},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.46856218576431274},{"id":"https://openalex.org/C2910820772","wikidata":"https://www.wikidata.org/wiki/Q184743","display_name":"Period length","level":2,"score":0.4574034512042999},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3608587384223938},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.23370292782783508},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.17460864782333374},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.15619662404060364},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1455400288105011},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.12666535377502441},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.12354135513305664},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1109/vizsec.2018.8709177","is_oa":false,"landing_page_url":"https://doi.org/10.1109/vizsec.2018.8709177","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE Symposium on Visualization for Cyber Security (VizSec)","raw_type":"proceedings-article"},{"id":"pmh:oai:share.osf.io:405929e9-a0b1-4557-b830-72968ebcf2df","is_oa":false,"landing_page_url":"https://osf.io/rnpwy","pdf_url":null,"source":{"id":"https://openalex.org/S4306401127","display_name":"OSF Preprints (OSF Preprints)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2799848540","host_organization_name":"Center for Open Science","host_organization_lineage":["https://openalex.org/I2799848540"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Project"},{"id":"pmh:oai:share.osf.io:460AE-0BB-EAD","is_oa":false,"landing_page_url":"http://api.osf.io/v2/nodes/4vcb3/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401127","display_name":"OSF Preprints (OSF Preprints)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2799848540","host_organization_name":"Center for Open Science","host_organization_lineage":["https://openalex.org/I2799848540"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"project"},{"id":"pmh:oai:share.osf.io:4621E-2F7-F2E","is_oa":false,"landing_page_url":"http://api.osf.io/v2/nodes/rnpwy/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401127","display_name":"OSF Preprints (OSF Preprints)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2799848540","host_organization_name":"Center for Open Science","host_organization_lineage":["https://openalex.org/I2799848540"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"project"},{"id":"pmh:oai:share.osf.io:813cdc8d-cd43-4daa-884d-a4e23b6372ab","is_oa":false,"landing_page_url":"https://osf.io/4vcb3","pdf_url":null,"source":{"id":"https://openalex.org/S4306401127","display_name":"OSF Preprints (OSF Preprints)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2799848540","host_organization_name":"Center for Open Science","host_organization_lineage":["https://openalex.org/I2799848540"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"ProjectComponent"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5799999833106995,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W27994497","https://openalex.org/W1496787004","https://openalex.org/W1922573661","https://openalex.org/W1943462367","https://openalex.org/W1985456010","https://openalex.org/W2057714964","https://openalex.org/W2097236039","https://openalex.org/W2109076134","https://openalex.org/W2111263072","https://openalex.org/W2120256168","https://openalex.org/W2122060742","https://openalex.org/W2128938146","https://openalex.org/W2130971075","https://openalex.org/W2135415614","https://openalex.org/W2325996806","https://openalex.org/W2552186063","https://openalex.org/W2555608580","https://openalex.org/W2603136197"],"related_works":["https://openalex.org/W2134539183","https://openalex.org/W2359209543","https://openalex.org/W2370801098","https://openalex.org/W2380475535","https://openalex.org/W2377112249","https://openalex.org/W4320027669","https://openalex.org/W2611702147","https://openalex.org/W1777713421","https://openalex.org/W2076641224","https://openalex.org/W4230065665"],"abstract_inverted_index":{"Malware":[0],"frequently":[1],"leaves":[2],"periodic":[3,17,84,131,141],"signals":[4,10],"in":[5,46,133],"network":[6,18],"logs,":[7],"but":[8],"these":[9],"are":[11,70],"easily":[12],"drowned":[13],"out":[14],"by":[15],"non-malicious":[16,140],"activity,":[19],"such":[20],"as":[21],"software":[22],"updates":[23],"and":[24,101,118,139],"other":[25],"polling":[26],"activity.":[27,110,142],"This":[28],"paper":[29],"describes":[30],"a":[31,47,122,134],"novel":[32],"algorithm":[33,57],"based":[34,73],"on":[35,74,115],"Discrete":[36],"Fourier":[37],"Transforms":[38],"capable":[39],"of":[40,55,77,88,137],"detecting":[41],"multiple":[42],"distinct":[43],"period":[44,97],"lengths":[45,98],"given":[48],"time":[49],"series.":[50],"We":[51,111],"pair":[52],"the":[53,75,78,83],"output":[54],"this":[56],"with":[58],"aggregation":[59],"summary":[60],"tables":[61],"that":[62],"give":[63],"users":[64,92],"information":[65],"scent":[66],"about":[67],"which":[68],"detections":[69,90,103],"worth":[71],"investigating":[72],"metadata":[76],"log":[79],"events":[80],"rather":[81],"than":[82],"signal.":[85],"A":[86],"visualization":[87],"selected":[89],"enables":[91],"to":[93,106,127],"see":[94],"all":[95],"detected":[96],"per":[99],"entity,":[100],"compare":[102],"between":[104],"entities":[105],"check":[107],"for":[108],"coordinated":[109],"evaluate":[112],"our":[113],"approach":[114],"real-world":[116],"netflow":[117],"DNS":[119],"data":[120],"from":[121],"large":[123,135],"organization,":[124],"demonstrating":[125],"how":[126],"successfully":[128],"find":[129],"malicious":[130],"activity":[132],"pool":[136],"noise":[138]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}