{"id":"https://openalex.org/W2768644120","doi":"https://doi.org/10.1109/csnet.2018.8602689","title":"SENATUS: An Approach to Joint Traffic Anomaly Detection and Root Cause Analysis","display_name":"SENATUS: An Approach to Joint Traffic Anomaly Detection and Root Cause Analysis","publication_year":2018,"publication_date":"2018-10-01","ids":{"openalex":"https://openalex.org/W2768644120","doi":"https://doi.org/10.1109/csnet.2018.8602689","mag":"2768644120"},"language":"en","primary_location":{"id":"doi:10.1109/csnet.2018.8602689","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csnet.2018.8602689","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 2nd Cyber Security in Networking Conference (CSNet)","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1711.09008","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037309230","display_name":"Atef Abdelkefi","orcid":null},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":true,"raw_author_name":"Atef Abdelkefi","raw_affiliation_strings":["NTNU, Norwegian University of Science and Technology","NTNU \u2014 Norwegian University of Science and Technology"],"affiliations":[{"raw_affiliation_string":"NTNU, Norwegian University of Science and Technology","institution_ids":["https://openalex.org/I204778367"]},{"raw_affiliation_string":"NTNU \u2014 Norwegian University of Science and Technology","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108054662","display_name":"Yuming Jiang","orcid":null},"institutions":[{"id":"https://openalex.org/I204778367","display_name":"Norwegian University of Science and Technology","ror":"https://ror.org/05xg72x27","country_code":"NO","type":"education","lineage":["https://openalex.org/I204778367"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Yuming Jiang","raw_affiliation_strings":["NTNU, Norwegian University of Science and Technology","NTNU \u2014 Norwegian University of Science and Technology"],"affiliations":[{"raw_affiliation_string":"NTNU, Norwegian University of Science and Technology","institution_ids":["https://openalex.org/I204778367"]},{"raw_affiliation_string":"NTNU \u2014 Norwegian University of Science and Technology","institution_ids":["https://openalex.org/I204778367"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100655558","display_name":"Sachin Sharma","orcid":"https://orcid.org/0000-0003-2404-1141"},"institutions":[{"id":"https://openalex.org/I104546213","display_name":"National College of Ireland","ror":"https://ror.org/02qzs9336","country_code":"IE","type":"education","lineage":["https://openalex.org/I104546213"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Sachin Sharma","raw_affiliation_strings":["National College of Ireland, Ireland","National College of Ireland (Ireland)"],"affiliations":[{"raw_affiliation_string":"National College of Ireland, Ireland","institution_ids":["https://openalex.org/I104546213"]},{"raw_affiliation_string":"National College of Ireland (Ireland)","institution_ids":["https://openalex.org/I104546213"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5037309230"],"corresponding_institution_ids":["https://openalex.org/I204778367"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.01345734,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7844940423965454},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.6383296847343445},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6359694600105286},{"id":"https://openalex.org/keywords/voting","display_name":"Voting","score":0.5054657459259033},{"id":"https://openalex.org/keywords/lossless-compression","display_name":"Lossless compression","score":0.4502071142196655},{"id":"https://openalex.org/keywords/bin","display_name":"Bin","score":0.414380818605423},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3753231465816498},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2872312068939209},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.21163123846054077},{"id":"https://openalex.org/keywords/data-compression","display_name":"Data compression","score":0.08503919839859009},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.0810312032699585}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7844940423965454},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.6383296847343445},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6359694600105286},{"id":"https://openalex.org/C520049643","wikidata":"https://www.wikidata.org/wiki/Q189760","display_name":"Voting","level":3,"score":0.5054657459259033},{"id":"https://openalex.org/C81081738","wikidata":"https://www.wikidata.org/wiki/Q55542","display_name":"Lossless compression","level":3,"score":0.4502071142196655},{"id":"https://openalex.org/C156273044","wikidata":"https://www.wikidata.org/wiki/Q4913766","display_name":"Bin","level":2,"score":0.414380818605423},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3753231465816498},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2872312068939209},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.21163123846054077},{"id":"https://openalex.org/C78548338","wikidata":"https://www.wikidata.org/wiki/Q2493","display_name":"Data compression","level":2,"score":0.08503919839859009},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0810312032699585},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":6,"locations":[{"id":"doi:10.1109/csnet.2018.8602689","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csnet.2018.8602689","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 2nd Cyber Security in Networking Conference (CSNet)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:1711.09008","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1711.09008","pdf_url":"https://arxiv.org/pdf/1711.09008","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:2768644120","is_oa":true,"landing_page_url":"http://export.arxiv.org/pdf/1711.09008","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"pmh:oai:ntnuopen.ntnu.no:11250/2593539","is_oa":true,"landing_page_url":"http://hdl.handle.net/11250/2593539","pdf_url":null,"source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"1-8","raw_type":"info:eu-repo/semantics/bookPart"},{"id":"pmh:oai:trap.ncirl.ie:4074","is_oa":false,"landing_page_url":"http://trap.ncirl.ie/4074/","pdf_url":null,"source":{"id":"https://openalex.org/S4306400345","display_name":"TRAP@NCI (National College of Ireland)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I104546213","host_organization_name":"National College of Ireland","host_organization_lineage":["https://openalex.org/I104546213"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference or Workshop Item"},{"id":"doi:10.48550/arxiv.1711.09008","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.1711.09008","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1711.09008","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1711.09008","pdf_url":"https://arxiv.org/pdf/1711.09008","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.8299999833106995,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320320367","display_name":"Cleansky","ror":"https://ror.org/03nv0z257"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2768644120.pdf"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W1601141003","https://openalex.org/W1979877030","https://openalex.org/W1997299558","https://openalex.org/W2029025881","https://openalex.org/W2029332168","https://openalex.org/W2060037683","https://openalex.org/W2079348093","https://openalex.org/W2103816577","https://openalex.org/W2118931532","https://openalex.org/W2121511513","https://openalex.org/W2124303512","https://openalex.org/W2130430857","https://openalex.org/W2133063338","https://openalex.org/W2136185850","https://openalex.org/W2140738143","https://openalex.org/W2141177935","https://openalex.org/W2144936818","https://openalex.org/W2145962650","https://openalex.org/W2152215311","https://openalex.org/W2162877493","https://openalex.org/W2288664677","https://openalex.org/W4245906277","https://openalex.org/W4313784310","https://openalex.org/W6630198464","https://openalex.org/W6633220545","https://openalex.org/W6637407815","https://openalex.org/W6720330311"],"related_works":["https://openalex.org/W2962974491","https://openalex.org/W2130317780","https://openalex.org/W2381317587","https://openalex.org/W2775542991","https://openalex.org/W2001381273","https://openalex.org/W2024560139","https://openalex.org/W285122196","https://openalex.org/W3153668390","https://openalex.org/W1601141003","https://openalex.org/W2383908966","https://openalex.org/W2157578436","https://openalex.org/W2377881304","https://openalex.org/W2127084909","https://openalex.org/W2756758272","https://openalex.org/W2374245279","https://openalex.org/W3004202485","https://openalex.org/W2085533912","https://openalex.org/W2887511144","https://openalex.org/W3160296701","https://openalex.org/W2967568588"],"abstract_inverted_index":{"In":[0,78,96],"this":[1],"paper,":[2],"we":[3],"propose":[4],"a":[5,22,44,119,154],"novel":[6],"approach,":[7],"called":[8],"SENATUS,":[9],"for":[10,89],"joint":[11],"anomaly":[12,90],"detection":[13,91],"and":[14,38,159],"root-cause":[15],"analysis.":[16],"Inspired":[17],"from":[18,153],"the":[19,24,28,41,59,70,79,93,98,108,116,127,136,140],"concept":[20],"of":[21,27,47,75,130,139,144,170],"senate,":[23],"key":[25],"idea":[26],"proposed":[29],"approach":[30,163],"is":[31,87,124,146],"divided":[32],"into":[33],"three":[34],"stages:":[35],"election,":[36],"voting":[37,80],"decision.":[39],"At":[40],"election":[42],"stage,":[43,81,118],"small":[45],"number":[46],"traffic":[48,76,104,150,171,183],"flow":[49],"sets":[50],"(termed":[51],"as":[52],"senator":[53,94,128],"flows)":[54],"are":[55,101],"chosen":[56],"based":[57],"on":[58,92],"K-sparse":[60],"approximation":[61],"technique,":[62],"which":[63,164],"can":[64],"be":[65],"used":[66,88],"to":[67,106,126,134],"represent":[68],"approximately":[69],"total":[71],"(usually":[72],"huge)":[73],"set":[74],"flows.":[77,95],"Principal":[82],"Component":[83],"Pursuit":[84],"(PCP)":[85],"analysis":[86],"addition,":[97],"detected":[99],"anomalies":[100,166],"correlated":[102],"across":[103],"features":[105],"identify":[107],"most":[109],"possible":[110],"anomalous":[111,131],"time":[112,132],"bins.":[113],"Finally,":[114],"in":[115,181],"decision":[117],"machine":[120],"learning":[121],"(ML)":[122],"technique":[123],"applied":[125],"flows":[129],"bins":[133],"find":[135],"root":[137],"cause":[138],"anomalies.":[141,184],"The":[142,173],"performance":[143],"SENATUS":[145,177],"evaluated":[147],"using":[148,167],"real":[149],"traces":[151],"collected":[152],"Pan":[155],"European":[156],"network,":[157],"GEANT,":[158],"compared":[160],"against":[161],"another":[162],"detects":[165],"lossless":[168],"compression":[169],"histograms.":[172],"evaluation":[174],"shows":[175],"that":[176],"has":[178],"higher":[179],"effectiveness":[180],"diagnosing":[182]},"counts_by_year":[],"updated_date":"2026-03-25T13:04:00.132906","created_date":"2025-10-10T00:00:00"}