{"id":"https://openalex.org/W2112876634","doi":"https://doi.org/10.1145/1095890.1095920","title":"Fast payload-based flow estimation for traffic monitoring and network security","display_name":"Fast payload-based flow estimation for traffic monitoring and network security","publication_year":2005,"publication_date":"2005-10-26","ids":{"openalex":"https://openalex.org/W2112876634","doi":"https://doi.org/10.1145/1095890.1095920","mag":"2112876634"},"language":"en","primary_location":{"id":"doi:10.1145/1095890.1095920","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1095890.1095920","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2005 ACM symposium on Architecture for networking and communications systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100604067","display_name":"Hao Fang","orcid":"https://orcid.org/0009-0009-5901-7003"},"institutions":[{"id":"https://openalex.org/I72090969","display_name":"Nokia (United States)","ror":"https://ror.org/038km2573","country_code":"US","type":"company","lineage":["https://openalex.org/I2738502077","https://openalex.org/I72090969"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Fang Hao","raw_affiliation_strings":["Bell Labs, Holmdel, NJ","Bell Laboratories, Holmdel,NJ"],"affiliations":[{"raw_affiliation_string":"Bell Labs, Holmdel, NJ","institution_ids":[]},{"raw_affiliation_string":"Bell Laboratories, Holmdel,NJ","institution_ids":["https://openalex.org/I72090969"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108507325","display_name":"Murali Kodialam","orcid":null},"institutions":[{"id":"https://openalex.org/I72090969","display_name":"Nokia (United States)","ror":"https://ror.org/038km2573","country_code":"US","type":"company","lineage":["https://openalex.org/I2738502077","https://openalex.org/I72090969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Murali Kodialam","raw_affiliation_strings":["Bell Labs, Holmdel, NJ","Bell Laboratories, Holmdel,NJ"],"affiliations":[{"raw_affiliation_string":"Bell Labs, Holmdel, NJ","institution_ids":[]},{"raw_affiliation_string":"Bell Laboratories, Holmdel,NJ","institution_ids":["https://openalex.org/I72090969"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079816803","display_name":"T. V. Lakshman","orcid":null},"institutions":[{"id":"https://openalex.org/I72090969","display_name":"Nokia (United States)","ror":"https://ror.org/038km2573","country_code":"US","type":"company","lineage":["https://openalex.org/I2738502077","https://openalex.org/I72090969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"T. V. Lakshman","raw_affiliation_strings":["Bell Labs, Holmdel, NJ","Bell Laboratories, Holmdel,NJ"],"affiliations":[{"raw_affiliation_string":"Bell Labs, Holmdel, NJ","institution_ids":[]},{"raw_affiliation_string":"Bell Laboratories, Holmdel,NJ","institution_ids":["https://openalex.org/I72090969"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100323565","display_name":"Hui Zhang","orcid":"https://orcid.org/0000-0003-4576-2749"},"institutions":[{"id":"https://openalex.org/I20089843","display_name":"Princeton University","ror":"https://ror.org/00hx57361","country_code":"US","type":"education","lineage":["https://openalex.org/I20089843"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hui Zhang","raw_affiliation_strings":["NEC Laboratories America, Princeton, NJ"],"affiliations":[{"raw_affiliation_string":"NEC Laboratories America, Princeton, NJ","institution_ids":["https://openalex.org/I20089843"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5100604067"],"corresponding_institution_ids":["https://openalex.org/I72090969"],"apc_list":null,"apc_paid":null,"fwci":0.5156,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.68346088,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"211","last_page":"220"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7929752469062805},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.7664610147476196},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6318410634994507},{"id":"https://openalex.org/keywords/bloom-filter","display_name":"Bloom filter","score":0.5876232981681824},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.5538623332977295},{"id":"https://openalex.org/keywords/flow-network","display_name":"Flow network","score":0.5034665465354919},{"id":"https://openalex.org/keywords/longest-common-subsequence-problem","display_name":"Longest common subsequence problem","score":0.46269071102142334},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.44321632385253906},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.4350310266017914},{"id":"https://openalex.org/keywords/traffic-generation-model","display_name":"Traffic generation model","score":0.42534857988357544},{"id":"https://openalex.org/keywords/flow","display_name":"Flow (mathematics)","score":0.42483511567115784},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4002350866794586},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.2506887912750244},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.17504727840423584}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7929752469062805},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.7664610147476196},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6318410634994507},{"id":"https://openalex.org/C147224247","wikidata":"https://www.wikidata.org/wiki/Q885373","display_name":"Bloom filter","level":2,"score":0.5876232981681824},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.5538623332977295},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.5034665465354919},{"id":"https://openalex.org/C120098539","wikidata":"https://www.wikidata.org/wiki/Q141001","display_name":"Longest common subsequence problem","level":2,"score":0.46269071102142334},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.44321632385253906},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4350310266017914},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.42534857988357544},{"id":"https://openalex.org/C38349280","wikidata":"https://www.wikidata.org/wiki/Q1434290","display_name":"Flow (mathematics)","level":2,"score":0.42483511567115784},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4002350866794586},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2506887912750244},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.17504727840423584},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1095890.1095920","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1095890.1095920","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2005 ACM symposium on Architecture for networking and communications systems","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W88694106","https://openalex.org/W1518067596","https://openalex.org/W1552389802","https://openalex.org/W1609518033","https://openalex.org/W1614703486","https://openalex.org/W1977141583","https://openalex.org/W2033811087","https://openalex.org/W2034302520","https://openalex.org/W2095646789","https://openalex.org/W2098366185","https://openalex.org/W2106330557","https://openalex.org/W2115775347","https://openalex.org/W2116967744","https://openalex.org/W2123258104","https://openalex.org/W2123770058","https://openalex.org/W2403035479","https://openalex.org/W2752929869","https://openalex.org/W2796930440","https://openalex.org/W4206137901","https://openalex.org/W4229628595"],"related_works":["https://openalex.org/W2086572746","https://openalex.org/W2604468458","https://openalex.org/W2157216338","https://openalex.org/W1662107788","https://openalex.org/W121740227","https://openalex.org/W3082379938","https://openalex.org/W2135966669","https://openalex.org/W2594143027","https://openalex.org/W2732769800","https://openalex.org/W2924589531"],"abstract_inverted_index":{"Real-time":[0],"IP":[1],"flow":[2,21,47],"estimation":[3,48],"has":[4],"many":[5],"potential":[6,72],"applications":[7],"in":[8,30,67,108],"network":[9],"management,":[10],"monitoring,":[11],"security,":[12],"and":[13,70,115],"traffic":[14,63],"engineering.":[15],"Existing":[16],"techniques":[17],"typically":[18],"rely":[19],"on":[20],"definitions":[22],"being":[23],"constrained":[24],"as":[25,90],"subsets":[26],"of":[27,93,105,120],"the":[28,68,94,118,121],"fields":[29],"packet":[31],"headers.":[32],"This":[33,99],"makes":[34],"flow-membership":[35],"tests":[36,55],"relatively":[37],"inexpensive.":[38],"In":[39],"this":[40,88],"paper,":[41],"we":[42],"consider":[43],"a":[44,81,91],"more":[45],"general":[46],"problem":[49,89],"that":[50],"needs":[51],"complex":[52],"packet-payload":[53],"based":[54],"for":[56,75,86],"flow-membership.":[57],"An":[58],"example":[59],"is":[60,100],"to":[61],"estimate":[62],"with":[64,110],"common":[65,96],"strings":[66],"payload":[69],"detect":[71],"virus":[73],"signatures":[74],"early":[76],"alarm":[77],"generation.":[78],"We":[79],"develop":[80],"fast,":[82],"memory":[83],"efficient":[84],"algorithm":[85],"solving":[87],"variant":[92],"longest":[95],"subsequence":[97],"problem.":[98],"done":[101],"via":[102],"an":[103],"application":[104],"Rabin":[106],"fingerprinting":[107],"combination":[109],"bloom":[111],"filters.":[112],"Both":[113],"analysis":[114],"simulation":[116],"show":[117],"effectiveness":[119],"developed":[122],"method.":[123]},"counts_by_year":[{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}