{"id":"https://openalex.org/W2944759024","doi":"https://doi.org/10.1109/vizsec.2018.8709182","title":"Visual-Interactive Identification of Anomalous IP-Block Behavior Using Geo-IP Data","display_name":"Visual-Interactive Identification of Anomalous IP-Block Behavior Using Geo-IP Data","publication_year":2018,"publication_date":"2018-10-01","ids":{"openalex":"https://openalex.org/W2944759024","doi":"https://doi.org/10.1109/vizsec.2018.8709182","mag":"2944759024"},"language":"en","primary_location":{"id":"doi:10.1109/vizsec.2018.8709182","is_oa":false,"landing_page_url":"https://doi.org/10.1109/vizsec.2018.8709182","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE Symposium on Visualization for Cyber Security (VizSec)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5080024341","display_name":"Alex Ulmer","orcid":"https://orcid.org/0009-0008-3778-8184"},"institutions":[{"id":"https://openalex.org/I3019423309","display_name":"Fraunhofer Institute for Computer Graphics Research","ror":"https://ror.org/04gmsar03","country_code":"DE","type":"facility","lineage":["https://openalex.org/I3019423309","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Alex Ulmer","raw_affiliation_strings":["Fraunhofer IGD, Technische Universit\u00e4t Darmstadt, Germany"],"affiliations":[{"raw_affiliation_string":"Fraunhofer IGD, Technische Universit\u00e4t Darmstadt, Germany","institution_ids":["https://openalex.org/I3019423309","https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008337835","display_name":"Marija Schufrin","orcid":null},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]},{"id":"https://openalex.org/I3019423309","display_name":"Fraunhofer Institute for Computer Graphics Research","ror":"https://ror.org/04gmsar03","country_code":"DE","type":"facility","lineage":["https://openalex.org/I3019423309","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Marija Schufrin","raw_affiliation_strings":["Fraunhofer IGD, Technische Universit\u00e4t Darmstadt, Germany"],"affiliations":[{"raw_affiliation_string":"Fraunhofer IGD, Technische Universit\u00e4t Darmstadt, Germany","institution_ids":["https://openalex.org/I3019423309","https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084807986","display_name":"David Sessler","orcid":"https://orcid.org/0009-0006-0258-7927"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]},{"id":"https://openalex.org/I3019423309","display_name":"Fraunhofer Institute for Computer Graphics Research","ror":"https://ror.org/04gmsar03","country_code":"DE","type":"facility","lineage":["https://openalex.org/I3019423309","https://openalex.org/I4923324"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"David Sessler","raw_affiliation_strings":["Fraunhofer IGD, Technische Universit\u00e4t Darmstadt, Germany"],"affiliations":[{"raw_affiliation_string":"Fraunhofer IGD, Technische Universit\u00e4t Darmstadt, Germany","institution_ids":["https://openalex.org/I3019423309","https://openalex.org/I31512782"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032433963","display_name":"J\u00f6rn Kohlhammer","orcid":null},"institutions":[{"id":"https://openalex.org/I3019423309","display_name":"Fraunhofer Institute for Computer Graphics Research","ror":"https://ror.org/04gmsar03","country_code":"DE","type":"facility","lineage":["https://openalex.org/I3019423309","https://openalex.org/I4923324"]},{"id":"https://openalex.org/I31512782","display_name":"Technical University of Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Jorn Kohlhammer","raw_affiliation_strings":["Fraunhofer IGD, Technische Universit\u00e4t Darmstadt, Germany"],"affiliations":[{"raw_affiliation_string":"Fraunhofer IGD, Technische Universit\u00e4t Darmstadt, Germany","institution_ids":["https://openalex.org/I3019423309","https://openalex.org/I31512782"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5080024341"],"corresponding_institution_ids":["https://openalex.org/I3019423309","https://openalex.org/I31512782"],"apc_list":null,"apc_paid":null,"fwci":0.6267,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.75349746,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9890000224113464,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11439","display_name":"Video Analysis and Summarization","score":0.9829999804496765,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8509653210639954},{"id":"https://openalex.org/keywords/table","display_name":"Table (database)","score":0.6166384816169739},{"id":"https://openalex.org/keywords/ip-address","display_name":"Ip address","score":0.6150720119476318},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.6079573631286621},{"id":"https://openalex.org/keywords/ip-forwarding","display_name":"IP forwarding","score":0.6056890487670898},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.600496768951416},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.5691733956336975},{"id":"https://openalex.org/keywords/visual-analytics","display_name":"Visual analytics","score":0.5469191670417786},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5301500558853149},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5290849208831787},{"id":"https://openalex.org/keywords/routing","display_name":"Routing (electronic design automation)","score":0.4917278587818146},{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.4791673719882965},{"id":"https://openalex.org/keywords/routing-table","display_name":"Routing table","score":0.4775348901748657},{"id":"https://openalex.org/keywords/loose-source-routing","display_name":"Loose Source Routing","score":0.45067715644836426},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.43415507674217224},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.32373684644699097},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.3076719641685486},{"id":"https://openalex.org/keywords/routing-protocol","display_name":"Routing protocol","score":0.29751598834991455},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.2902168929576874},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.2710493206977844},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.2165927290916443},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.13238796591758728}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8509653210639954},{"id":"https://openalex.org/C45235069","wikidata":"https://www.wikidata.org/wiki/Q278425","display_name":"Table (database)","level":2,"score":0.6166384816169739},{"id":"https://openalex.org/C2985371682","wikidata":"https://www.wikidata.org/wiki/Q11135","display_name":"Ip address","level":2,"score":0.6150720119476318},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.6079573631286621},{"id":"https://openalex.org/C174809319","wikidata":"https://www.wikidata.org/wiki/Q5973191","display_name":"IP forwarding","level":5,"score":0.6056890487670898},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.600496768951416},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.5691733956336975},{"id":"https://openalex.org/C59732488","wikidata":"https://www.wikidata.org/wiki/Q2528440","display_name":"Visual analytics","level":3,"score":0.5469191670417786},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5301500558853149},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5290849208831787},{"id":"https://openalex.org/C74172769","wikidata":"https://www.wikidata.org/wiki/Q1446839","display_name":"Routing (electronic design automation)","level":2,"score":0.4917278587818146},{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.4791673719882965},{"id":"https://openalex.org/C184896649","wikidata":"https://www.wikidata.org/wiki/Q290066","display_name":"Routing table","level":4,"score":0.4775348901748657},{"id":"https://openalex.org/C39997849","wikidata":"https://www.wikidata.org/wiki/Q6675974","display_name":"Loose Source Routing","level":5,"score":0.45067715644836426},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.43415507674217224},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.32373684644699097},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.3076719641685486},{"id":"https://openalex.org/C104954878","wikidata":"https://www.wikidata.org/wiki/Q1648707","display_name":"Routing protocol","level":3,"score":0.29751598834991455},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2902168929576874},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2710493206977844},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2165927290916443},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13238796591758728},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/vizsec.2018.8709182","is_oa":false,"landing_page_url":"https://doi.org/10.1109/vizsec.2018.8709182","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IEEE Symposium on Visualization for Cyber Security (VizSec)","raw_type":"proceedings-article"},{"id":"pmh:oai:fraunhofer.de:N-546319","is_oa":false,"landing_page_url":"http://publica.fraunhofer.de/documents/N-546319.html","pdf_url":null,"source":{"id":"https://openalex.org/S4306400801","display_name":"Publikationsdatenbank der Fraunhofer-Gesellschaft (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Fraunhofer IGD","raw_type":"Conference Paper"},{"id":"pmh:oai:publica.fraunhofer.de:publica/404640","is_oa":false,"landing_page_url":"https://publica.fraunhofer.de/handle/publica/404640","pdf_url":null,"source":{"id":"https://openalex.org/S4306400318","display_name":"Fraunhofer-Publica (Fraunhofer-Gesellschaft)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4923324","host_organization_name":"Fraunhofer-Gesellschaft","host_organization_lineage":["https://openalex.org/I4923324"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"conference paper"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7900000214576721,"display_name":"Sustainable cities and communities","id":"https://metadata.un.org/sdg/11"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W172711948","https://openalex.org/W1971985463","https://openalex.org/W2011258666","https://openalex.org/W2026741765","https://openalex.org/W2045806546","https://openalex.org/W2065283652","https://openalex.org/W2069222612","https://openalex.org/W2096578360","https://openalex.org/W2101398448","https://openalex.org/W2113344319","https://openalex.org/W2133396782","https://openalex.org/W2135415614","https://openalex.org/W2136616733","https://openalex.org/W2138647480","https://openalex.org/W2162877415","https://openalex.org/W2252211299","https://openalex.org/W2542543501","https://openalex.org/W2592064508","https://openalex.org/W3162417966","https://openalex.org/W4232322345","https://openalex.org/W4233802931","https://openalex.org/W4236855197","https://openalex.org/W6607057097","https://openalex.org/W6691227101"],"related_works":["https://openalex.org/W2189433536","https://openalex.org/W1738523313","https://openalex.org/W2001532699","https://openalex.org/W2556801474","https://openalex.org/W1685212199","https://openalex.org/W2349181755","https://openalex.org/W1530900609","https://openalex.org/W2519731080","https://openalex.org/W2183259095","https://openalex.org/W924237072"],"abstract_inverted_index":{"Routing":[0],"of":[1,12,20,62,81,122],"network":[2],"packets":[3],"from":[4],"one":[5],"computer":[6],"to":[7,45,98,148,152],"another":[8],"is":[9,25,69,78],"the":[10,13,17,48,141,150],"backbone":[11],"internet":[14],"and":[15,37,42,119,145],"impacts":[16],"everyday":[18],"life":[19],"many":[21,32],"people.":[22],"Although,":[23],"this":[24,85,103,154],"a":[26,60,74,89,137],"fully":[27],"automated":[28],"process":[29],"it":[30],"has":[31],"security":[33],"issues.":[34],"IP":[35,123],"hijacks":[36],"misconfigurations":[38],"occur":[39],"very":[40],"often":[41],"are":[43],"difficult":[44],"detect.":[46],"In":[47,84],"past":[49],"visual":[50],"analytics":[51],"approaches":[52],"aimed":[53],"at":[54,110],"detecting":[55],"these":[56,63],"phenomenons":[57],"but":[58],"only":[59,93],"few":[61],"integrated":[64],"geographical":[65],"references.":[66],"Geo-IP":[67,96,111],"data":[68,97,104,112,155],"being":[70],"used":[71],"mostly":[72],"as":[73],"lookup":[75],"table":[76],"which":[77,92],"an":[79],"undervaluation":[80],"its":[82],"capabilities.":[83],"paper":[86],"we":[87,134],"present":[88],"visual-interactive":[90],"system":[91],"relies":[94],"on":[95],"create":[99],"more":[100],"awareness":[101],"for":[102,140],"source.":[105],"We":[106],"show":[107],"that":[108],"looking":[109],"over":[113],"time":[114],"in":[115,157],"combination":[116],"with":[117,130],"owner":[118],"location":[120],"information":[121],"blocks":[124],"already":[125],"reveals":[126],"suspicious":[127],"cases.":[128],"Together":[129],"our":[131],"design":[132],"study":[133],"also":[135],"contribute":[136],"pre-processing":[138],"algorithm":[139],"Maxmind":[142],"GeoIP2":[143],"City":[144],"ISP":[146],"databases,":[147],"motivate":[149],"community":[151],"integrate":[153],"source":[156],"future":[158],"approaches.":[159]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}