{"id":"https://openalex.org/W2616698631","doi":"https://doi.org/10.1109/wocc.2017.7928975","title":"A novel anomaly detection system using feature-based MSPCA with sketch","display_name":"A novel anomaly detection system using feature-based MSPCA with sketch","publication_year":2017,"publication_date":"2017-04-01","ids":{"openalex":"https://openalex.org/W2616698631","doi":"https://doi.org/10.1109/wocc.2017.7928975","mag":"2616698631"},"language":"en","primary_location":{"id":"doi:10.1109/wocc.2017.7928975","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wocc.2017.7928975","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 26th Wireless and Optical Communication Conference (WOCC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101632836","display_name":"Zhaomin Chen","orcid":"https://orcid.org/0000-0003-3253-4755"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Zhaomin Chen","raw_affiliation_strings":["Computer Network and Communication Graduate Lab, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Network and Communication Graduate Lab, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006146465","display_name":"Chai Kiat Yeo","orcid":"https://orcid.org/0000-0002-7618-1472"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Chai Kiat Yeo","raw_affiliation_strings":["Computer Network and Communication Graduate Lab, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Network and Communication Graduate Lab, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062087243","display_name":"Bu\u2010Sung Lee","orcid":"https://orcid.org/0000-0001-7828-7900"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Bu Sung Lee","raw_affiliation_strings":["Computer Network and Communication Graduate Lab, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Network and Communication Graduate Lab, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5113573780","display_name":"Chiew Tong Lau","orcid":null},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Chiew Tong Lau","raw_affiliation_strings":["Computer Network and Communication Graduate Lab, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Network and Communication Graduate Lab, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I172675005"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"35","issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7849062085151672},{"id":"https://openalex.org/keywords/sketch","display_name":"Sketch","score":0.7721585631370544},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7696622014045715},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.6366481184959412},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6076165437698364},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.5030278563499451},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4996159076690674},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.4910163879394531},{"id":"https://openalex.org/keywords/wavelet","display_name":"Wavelet","score":0.4797583818435669},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.47798460721969604},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.47508540749549866},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.42999333143234253},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.1419897973537445}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7849062085151672},{"id":"https://openalex.org/C2779231336","wikidata":"https://www.wikidata.org/wiki/Q7534724","display_name":"Sketch","level":2,"score":0.7721585631370544},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7696622014045715},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.6366481184959412},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6076165437698364},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.5030278563499451},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4996159076690674},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.4910163879394531},{"id":"https://openalex.org/C47432892","wikidata":"https://www.wikidata.org/wiki/Q831390","display_name":"Wavelet","level":2,"score":0.4797583818435669},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.47798460721969604},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.47508540749549866},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.42999333143234253},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.1419897973537445},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/wocc.2017.7928975","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wocc.2017.7928975","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 26th Wireless and Optical Communication Conference (WOCC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W433644524","https://openalex.org/W1980381208","https://openalex.org/W1985623009","https://openalex.org/W1993694278","https://openalex.org/W2007562169","https://openalex.org/W2036139261","https://openalex.org/W2040333627","https://openalex.org/W2056413992","https://openalex.org/W2065202763","https://openalex.org/W2118931532","https://openalex.org/W2123865948","https://openalex.org/W2129976399","https://openalex.org/W2134583708","https://openalex.org/W2154195006","https://openalex.org/W2166858086","https://openalex.org/W2169623711","https://openalex.org/W2170443645","https://openalex.org/W2314294401","https://openalex.org/W2389103637","https://openalex.org/W3009746682","https://openalex.org/W3138598418","https://openalex.org/W6615155006","https://openalex.org/W6679589109"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3030345572"],"abstract_inverted_index":{"Anomaly":[0],"detection":[1,32,121],"is":[2,13,123],"critical":[3],"given":[4],"the":[5,18,89],"raft":[6],"of":[7,92],"cyber":[8],"attacks":[9,129],"these":[10],"days.":[11],"It":[12],"thus":[14],"essential":[15],"to":[16,42,68],"identify":[17,69],"network":[19,30,81,100],"anomalies":[20],"more":[21,127],"accurately.":[22],"In":[23,74,117],"this":[24],"paper,":[25],"we":[26,78],"propose":[27],"a":[28],"novel":[29],"anomaly":[31,120],"system":[33,67,122],"which":[34,84],"combines":[35],"random":[36],"projections":[37],"(sketches)":[38],"and":[39,51],"feature-based":[40,119],"MSPCA":[41,54],"detect":[43],"anomalous":[44,57,70],"source":[45,71],"IP":[46,72],"addresses.":[47,73],"By":[48],"combining":[49],"PCA":[50],"wavelet":[52],"analysis,":[53],"can":[55],"separate":[56],"data":[58,63],"efficiently.":[59],"Incorporating":[60],"with":[61],"Sketch":[62],"structure":[64],"enables":[65],"our":[66,75],"proposed":[76],"system,":[77],"extract":[79],"several":[80],"flow-based":[82],"features":[83],"are":[85],"helpful":[86],"in":[87,125],"exposing":[88],"different":[90],"kinds":[91],"attacks.":[93],"We":[94],"conduct":[95],"two":[96],"comparisons":[97],"using":[98],"real":[99],"traces":[101],"from":[102],"MAWI":[103],"dataset.":[104],"The":[105],"results":[106],"show":[107],"that":[108],"MSPCA-based":[109],"method":[110],"has":[111],"better":[112],"performance":[113],"than":[114,130],"PCA-based":[115],"one.":[116],"addition,":[118],"superior":[124],"detecting":[126],"subtle":[128],"one":[131],"based":[132],"on":[133],"packet":[134],"counting.":[135]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}