{"id":"https://openalex.org/W1978465958","doi":"https://doi.org/10.1145/1269880.1269884","title":"Comparison of anomaly signal quality in common detection metrics","display_name":"Comparison of anomaly signal quality in common detection metrics","publication_year":2007,"publication_date":"2007-06-12","ids":{"openalex":"https://openalex.org/W1978465958","doi":"https://doi.org/10.1145/1269880.1269884","mag":"1978465958"},"language":"en","primary_location":{"id":"doi:10.1145/1269880.1269884","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1269880.1269884","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd annual ACM workshop on Mining network data","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043607848","display_name":"Daniela Brauckhoff","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Daniela Brauckhoff","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082989892","display_name":"Martin May","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Martin May","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5014709738","display_name":"Bernhard Plattner","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Bernhard Plattner","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I35440088"],"apc_list":null,"apc_paid":null,"fwci":0.2367,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.39633758,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"13","last_page":"16"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.9573000073432922,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7613023519515991},{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.703437864780426},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6890921592712402},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.6830093264579773},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.6129456162452698},{"id":"https://openalex.org/keywords/signal","display_name":"SIGNAL (programming language)","score":0.6023133397102356},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5976255536079407},{"id":"https://openalex.org/keywords/intersection","display_name":"Intersection (aeronautics)","score":0.5803301930427551},{"id":"https://openalex.org/keywords/measure","display_name":"Measure (data warehouse)","score":0.5314751267433167},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.47170495986938477},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.44892144203186035},{"id":"https://openalex.org/keywords/detection-theory","display_name":"Detection theory","score":0.43536460399627686},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.4179944694042206},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3979046046733856},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.11638450622558594},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09588012099266052},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.09316554665565491},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.06881648302078247},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.0645473301410675}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7613023519515991},{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.703437864780426},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6890921592712402},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.6830093264579773},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.6129456162452698},{"id":"https://openalex.org/C2779843651","wikidata":"https://www.wikidata.org/wiki/Q7390335","display_name":"SIGNAL (programming language)","level":2,"score":0.6023133397102356},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5976255536079407},{"id":"https://openalex.org/C64543145","wikidata":"https://www.wikidata.org/wiki/Q162942","display_name":"Intersection (aeronautics)","level":2,"score":0.5803301930427551},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.5314751267433167},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.47170495986938477},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.44892144203186035},{"id":"https://openalex.org/C137270730","wikidata":"https://www.wikidata.org/wiki/Q120811","display_name":"Detection theory","level":3,"score":0.43536460399627686},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.4179944694042206},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3979046046733856},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.11638450622558594},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09588012099266052},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.09316554665565491},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.06881648302078247},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0645473301410675},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1269880.1269884","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1269880.1269884","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd annual ACM workshop on Mining network data","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":3,"referenced_works":["https://openalex.org/W1536719366","https://openalex.org/W2108673751","https://openalex.org/W2155653793"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4377864969","https://openalex.org/W2972971679"],"abstract_inverted_index":{"Problems":[0],"involving":[1],"classification":[2],"and":[3,25,49,71,91],"pattern":[4],"recognition":[5],"can":[6],"often":[7],"be":[8],"profitably":[9],"viewed":[10],"from":[11,100],"the":[12,51,56,59,63,69,76,88],"perspective":[13],"of":[14,40,58,62,78,106],"signal":[15,46,53],"detection":[16,31,47,85],"theory.":[17],"We":[18,74],"present":[19],"ANEX":[20,42],"(ANomaly":[21],"EXposure),":[22],"a":[23,107],"simple":[24],"intuitive":[26],"measure":[27,80],"for":[28,87],"comparing":[29,82,97],"anomaly":[30,52],"metrics":[32,86],"regarding":[33],"their":[34],"capability":[35],"to":[36],"expose":[37],"certain":[38],"types":[39],"anomalies.":[41],"is":[43],"based":[44],"on":[45],"theory":[48],"determines":[50],"quality":[54],"with":[55],"help":[57],"intersection":[60],"area":[61],"metric's":[64],"probability":[65],"density":[66],"functions":[67],"in":[68],"normal":[70],"anomalous":[72],"case.":[73],"illustrate":[75],"applicability":[77],"our":[79],"by":[81,96],"15":[83],"frequently-used":[84],"Blaster":[89],"worm":[90],"discuss":[92],"some":[93],"early":[94],"results":[95],"NetFlow":[98],"data":[99],"four":[101],"different":[102],"border":[103],"gateway":[104],"routers":[105],"medium-sized":[108],"ISP":[109],"network.":[110]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}