{"id":"https://openalex.org/W2127965573","doi":"https://doi.org/10.1145/1555349.1555353","title":"Inferring undesirable behavior from P2P traffic analysis","display_name":"Inferring undesirable behavior from P2P traffic analysis","publication_year":2009,"publication_date":"2009-06-15","ids":{"openalex":"https://openalex.org/W2127965573","doi":"https://doi.org/10.1145/1555349.1555353","mag":"2127965573"},"language":"en","primary_location":{"id":"doi:10.1145/1555349.1555353","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1555349.1555353","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the eleventh international joint conference on Measurement and modeling of computer systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://porto.polito.it/2486381/2/TorresSigmetrics09.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5113675192","display_name":"Ruben Torres","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ruben D. Torres","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084369255","display_name":"Mohammad Hajjat","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohammad Y. Hajjat","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073265856","display_name":"Sanjay Rao","orcid":"https://orcid.org/0000-0003-4825-4352"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sanjay G. Rao","raw_affiliation_strings":["Purdue University, West Lafayette, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University, West Lafayette, IN, USA","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060087704","display_name":"Marco Mellia","orcid":"https://orcid.org/0000-0003-1859-6693"},"institutions":[{"id":"https://openalex.org/I177477856","display_name":"Politecnico di Torino","ror":"https://ror.org/00bgk9508","country_code":"IT","type":"education","lineage":["https://openalex.org/I177477856"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Marco Mellia","raw_affiliation_strings":["Politecnico di Torino, Torino, Italy","Politecnico di Torino, Torino, Italy,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Politecnico di Torino, Torino, Italy","institution_ids":["https://openalex.org/I177477856"]},{"raw_affiliation_string":"Politecnico di Torino, Torino, Italy,","institution_ids":["https://openalex.org/I177477856"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040690637","display_name":"Maurizio Matteo Munaf\u00f2","orcid":"https://orcid.org/0000-0002-4884-7310"},"institutions":[{"id":"https://openalex.org/I177477856","display_name":"Politecnico di Torino","ror":"https://ror.org/00bgk9508","country_code":"IT","type":"education","lineage":["https://openalex.org/I177477856"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Maurizio M. Munafo","raw_affiliation_strings":["Politecnico di Torino, Torino, Italy","Politecnico di Torino, Torino, Italy,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Politecnico di Torino, Torino, Italy","institution_ids":["https://openalex.org/I177477856"]},{"raw_affiliation_string":"Politecnico di Torino, Torino, Italy,","institution_ids":["https://openalex.org/I177477856"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.3416,"has_fulltext":false,"cited_by_count":22,"citation_normalized_percentile":{"value":0.96463066,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"25","last_page":"36"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8262906074523926},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.6551339626312256},{"id":"https://openalex.org/keywords/popularity","display_name":"Popularity","score":0.6310509443283081},{"id":"https://openalex.org/keywords/traffic-analysis","display_name":"Traffic analysis","score":0.6082862019538879},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.5036374926567078},{"id":"https://openalex.org/keywords/file-sharing","display_name":"File sharing","score":0.5026090145111084},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.49097660183906555},{"id":"https://openalex.org/keywords/peer-to-peer","display_name":"Peer-to-peer","score":0.47113317251205444},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.4529896080493927},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.42263635993003845},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4178251326084137},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.323947548866272},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.31570756435394287},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.27988672256469727},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2689395546913147},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.2406822144985199},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.19795390963554382}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8262906074523926},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.6551339626312256},{"id":"https://openalex.org/C2780586970","wikidata":"https://www.wikidata.org/wiki/Q1357284","display_name":"Popularity","level":2,"score":0.6310509443283081},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.6082862019538879},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.5036374926567078},{"id":"https://openalex.org/C551386961","wikidata":"https://www.wikidata.org/wiki/Q22666","display_name":"File sharing","level":3,"score":0.5026090145111084},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.49097660183906555},{"id":"https://openalex.org/C534932454","wikidata":"https://www.wikidata.org/wiki/Q161410","display_name":"Peer-to-peer","level":2,"score":0.47113317251205444},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.4529896080493927},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.42263635993003845},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4178251326084137},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.323947548866272},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.31570756435394287},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27988672256469727},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2689395546913147},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2406822144985199},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.19795390963554382},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":6,"locations":[{"id":"doi:10.1145/1555349.1555353","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1555349.1555353","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the eleventh international joint conference on Measurement and modeling of computer systems","raw_type":"proceedings-article"},{"id":"pmh:oai:docs.lib.purdue.edu:ecetr-1377","is_oa":false,"landing_page_url":"https://docs.lib.purdue.edu/ecetr/378","pdf_url":null,"source":{"id":"https://openalex.org/S4377196310","display_name":"Purdue e-Pubs (Purdue University System)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2801333002","host_organization_name":"Purdue University System","host_organization_lineage":["https://openalex.org/I2801333002"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Department of Electrical and Computer Engineering Technical Reports","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.155.2125","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.155.2125","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.ece.purdue.edu/~isl/Sigmetrics09.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.161.595","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.161.595","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.telematica.polito.it/mellia/papers/TorresSigmetrics09.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.511.9894","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.511.9894","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://mmnet.iis.sinica.edu.tw/botnet/file/20091109/20091109_2.pdf","raw_type":"text"},{"id":"pmh:oai:porto.polito.it:2486381","is_oa":true,"landing_page_url":"http://porto.polito.it/2486381/2/TorresSigmetrics09.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306402038","display_name":"PORTO Publications Open Repository TOrino (Politecnico di Torino)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177477856","host_organization_name":"Politecnico di Torino","host_organization_lineage":["https://openalex.org/I177477856"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:porto.polito.it:2486381","is_oa":true,"landing_page_url":"http://porto.polito.it/2486381/2/TorresSigmetrics09.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306402038","display_name":"PORTO Publications Open Repository TOrino (Politecnico di Torino)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I177477856","host_organization_name":"Politecnico di Torino","host_organization_lineage":["https://openalex.org/I177477856"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[{"score":0.4099999964237213,"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W1541300462","https://openalex.org/W1549590828","https://openalex.org/W1565377632","https://openalex.org/W1597305440","https://openalex.org/W1673310716","https://openalex.org/W1938740620","https://openalex.org/W1987261375","https://openalex.org/W2012095206","https://openalex.org/W2055261595","https://openalex.org/W2068336551","https://openalex.org/W2076226477","https://openalex.org/W2096998282","https://openalex.org/W2099544033","https://openalex.org/W2102481563","https://openalex.org/W2110980583","https://openalex.org/W2111214891","https://openalex.org/W2119245106","https://openalex.org/W2119895316","https://openalex.org/W2120955848","https://openalex.org/W2121511513","https://openalex.org/W2121569129","https://openalex.org/W2122226347","https://openalex.org/W2124869686","https://openalex.org/W2125890410","https://openalex.org/W2136277584","https://openalex.org/W2144098589","https://openalex.org/W2164210932","https://openalex.org/W2168014536","https://openalex.org/W2255206882","https://openalex.org/W2293322640","https://openalex.org/W4239654371","https://openalex.org/W6633894697"],"related_works":["https://openalex.org/W3047641002","https://openalex.org/W1536439466","https://openalex.org/W2083716046","https://openalex.org/W2365147575","https://openalex.org/W1989121153","https://openalex.org/W2109460974","https://openalex.org/W1990561111","https://openalex.org/W2107007432","https://openalex.org/W3005410774","https://openalex.org/W4250311836"],"abstract_inverted_index":{"While":[0],"peer-to-peer":[1],"(P2P)":[2],"systems":[3,34,51],"have":[4],"emerged":[5],"in":[6,8,89],"popularity":[7],"recent":[9],"years,":[10],"their":[11,42],"large-scale":[12],"and":[13,44,65,132,139,146,178,205],"complexity":[14],"make":[15],"them":[16],"difficult":[17],"to":[18,58,68,99,114,130,144,190],"reason":[19],"about.":[20],"In":[21],"this":[22,59],"paper,":[23],"we":[24,61],"argue":[25],"that":[26,49,173],"systematic":[27],"analysis":[28,73,152],"of":[29,32,39,85,93,117,156,161,170,183,195],"traffic":[30,78,96,172],"characteristics":[31],"P2P":[33,104,166,202],"can":[35,198],"reveal":[36],"a":[37,55,82,86,102,121,127],"wealth":[38],"information":[40],"about":[41],"behavior,":[43],"highlight":[45],"potential":[46],"undesirable":[47,70,157],"activities":[48],"such":[50,196],"may":[52,174,186],"exhibit.":[53],"As":[54],"first":[56],"step":[57],"end,":[60],"present":[62],"an":[63],"offline":[64],"semi-automated":[66],"approach":[67],"detect":[69],"behavior.":[71],"Our":[72,151],"is":[74,97],"applied":[75],"on":[76],"real":[77],"traces":[79],"collected":[80],"from":[81],"Point-of-Presence":[83],"(PoP)":[84],"national-wide":[87],"ISP":[88],"which":[90],"over":[91],"70%":[92],"the":[94,115,148,181],"total":[95],"due":[98,189],"eMule":[100],"[19],":[101],"popular":[103],"file-sharing":[105],"system.":[106],"Flow-level":[107],"measurements":[108],"are":[109],"aggregated":[110],"into":[111],"\"samples\"":[112],"referring":[113],"activity":[116],"each":[118],"host":[119],"during":[120],"time":[122],"interval.":[123],"We":[124],"then":[125],"employ":[126],"clustering":[128],"technique":[129],"automatically":[131],"coarsely":[133],"identify":[134],"similar":[135],"behavior":[136,158],"across":[137],"samples,":[138],"extensively":[140],"use":[141],"domain":[142],"knowledge":[143],"interpret":[145],"analyze":[147],"resulting":[149],"clusters.":[150],"shows":[153],"several":[154],"examples":[155],"including":[159],"evidence":[160],"DDoS":[162],"attacks":[163],"exploiting":[164],"live":[165],"clients,":[167],"significant":[168],"amounts":[169],"unwanted":[171],"harm":[175],"network":[176,200],"performance,":[177],"instances":[179],"where":[180],"performance":[182],"participating":[184],"peers":[185],"be":[187],"subverted":[188],"maliciously":[191],"deployed":[192],"servers.":[193],"Identification":[194],"patterns":[197],"benefit":[199],"operators,":[201],"system":[203],"developers,":[204],"actual":[206],"end-users.":[207]},"counts_by_year":[{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":6}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}