{"id":"https://openalex.org/W1999880153","doi":"https://doi.org/10.1145/1629607.1629610","title":"GT","display_name":"GT","publication_year":2009,"publication_date":"2009-10-07","ids":{"openalex":"https://openalex.org/W1999880153","doi":"https://doi.org/10.1145/1629607.1629610","mag":"1999880153"},"language":"en","primary_location":{"id":"doi:10.1145/1629607.1629610","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1629607.1629610","pdf_url":null,"source":{"id":"https://openalex.org/S66039016","display_name":"ACM SIGCOMM Computer Communication Review","issn_l":"0146-4833","issn":["0146-4833","1943-5819"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGCOMM Computer Communication Review","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034071044","display_name":"Francesco Gringoli","orcid":"https://orcid.org/0000-0003-2621-582X"},"institutions":[{"id":"https://openalex.org/I79940851","display_name":"University of Brescia","ror":"https://ror.org/02q2d2610","country_code":"IT","type":"education","lineage":["https://openalex.org/I79940851"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"F. Gringoli","raw_affiliation_strings":["Universit\u00e0 di Brescia, Brescia, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universit\u00e0 di Brescia, Brescia, Italy","institution_ids":["https://openalex.org/I79940851"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043206796","display_name":"Luca Salgarelli","orcid":null},"institutions":[{"id":"https://openalex.org/I79940851","display_name":"University of Brescia","ror":"https://ror.org/02q2d2610","country_code":"IT","type":"education","lineage":["https://openalex.org/I79940851"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Luca Salgarelli","raw_affiliation_strings":["Universit\u00e0 di Brescia, Brescia, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universit\u00e0 di Brescia, Brescia, Italy","institution_ids":["https://openalex.org/I79940851"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044175634","display_name":"Maurizio Dusi","orcid":"https://orcid.org/0000-0002-9633-4317"},"institutions":[{"id":"https://openalex.org/I79940851","display_name":"University of Brescia","ror":"https://ror.org/02q2d2610","country_code":"IT","type":"education","lineage":["https://openalex.org/I79940851"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"M. Dusi","raw_affiliation_strings":["Universit\u00e0 di Brescia, Brescia, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universit\u00e0 di Brescia, Brescia, Italy","institution_ids":["https://openalex.org/I79940851"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069395342","display_name":"N. Cascarano","orcid":null},"institutions":[{"id":"https://openalex.org/I177477856","display_name":"Politecnico di Torino","ror":"https://ror.org/00bgk9508","country_code":"IT","type":"education","lineage":["https://openalex.org/I177477856"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"N. Cascarano","raw_affiliation_strings":["Politecnico di Torino, Torino, Italy","Politecnico di Torino, Torino, Italy,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Politecnico di Torino, Torino, Italy","institution_ids":["https://openalex.org/I177477856"]},{"raw_affiliation_string":"Politecnico di Torino, Torino, Italy,","institution_ids":["https://openalex.org/I177477856"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089196445","display_name":"Fulvio Risso","orcid":"https://orcid.org/0000-0001-6134-7890"},"institutions":[{"id":"https://openalex.org/I177477856","display_name":"Politecnico di Torino","ror":"https://ror.org/00bgk9508","country_code":"IT","type":"education","lineage":["https://openalex.org/I177477856"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"F. Risso","raw_affiliation_strings":["Politecnico di Torino, Torino, Italy","Politecnico di Torino, Torino, Italy,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Politecnico di Torino, Torino, Italy","institution_ids":["https://openalex.org/I177477856"]},{"raw_affiliation_string":"Politecnico di Torino, Torino, Italy,","institution_ids":["https://openalex.org/I177477856"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072282499","display_name":"kc claffy","orcid":"https://orcid.org/0000-0003-4824-3493"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"k. c. claffy","raw_affiliation_strings":["CAIDA, San Diego, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CAIDA, San Diego, CA, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":14.0422,"has_fulltext":false,"cited_by_count":186,"citation_normalized_percentile":{"value":0.98926932,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"39","issue":"5","first_page":"12","last_page":"18"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8750108480453491},{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.7082815170288086},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.6452960968017578},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6179859638214111},{"id":"https://openalex.org/keywords/ground-truth","display_name":"Ground truth","score":0.5149779915809631},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4787132740020752},{"id":"https://openalex.org/keywords/stateful-firewall","display_name":"Stateful firewall","score":0.458842396736145},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.39855459332466125},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.29561007022857666},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.28809064626693726},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.11181670427322388},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.1081705391407013}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8750108480453491},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.7082815170288086},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.6452960968017578},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6179859638214111},{"id":"https://openalex.org/C146849305","wikidata":"https://www.wikidata.org/wiki/Q370766","display_name":"Ground truth","level":2,"score":0.5149779915809631},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4787132740020752},{"id":"https://openalex.org/C22927095","wikidata":"https://www.wikidata.org/wiki/Q1784206","display_name":"Stateful firewall","level":3,"score":0.458842396736145},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.39855459332466125},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.29561007022857666},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.28809064626693726},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.11181670427322388},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.1081705391407013},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C104062141","wikidata":"https://www.wikidata.org/wiki/Q2601295","display_name":"Extremal black hole","level":3,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1629607.1629610","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1629607.1629610","pdf_url":null,"source":{"id":"https://openalex.org/S66039016","display_name":"ACM SIGCOMM Computer Communication Review","issn_l":"0146-4833","issn":["0146-4833","1943-5819"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM SIGCOMM Computer Communication Review","raw_type":"journal-article"},{"id":"pmh:oai:iris.unibs.it:11379/22773","is_oa":false,"landing_page_url":"http://hdl.handle.net/11379/22773","pdf_url":null,"source":{"id":"https://openalex.org/S4306400804","display_name":"Institutional Research Information System (Universit\u00e0 degli Studi di Brescia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66752286","host_organization_name":"University of Milano-Bicocca","host_organization_lineage":["https://openalex.org/I66752286"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7200000286102295,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W122591841","https://openalex.org/W1586284606","https://openalex.org/W1788721064","https://openalex.org/W2011628134","https://openalex.org/W2014872186","https://openalex.org/W2100644924","https://openalex.org/W2121973001","https://openalex.org/W2122226347","https://openalex.org/W2136695760","https://openalex.org/W6604936284"],"related_works":["https://openalex.org/W2365857366","https://openalex.org/W8359669","https://openalex.org/W40377838","https://openalex.org/W2380723950","https://openalex.org/W2274587657","https://openalex.org/W2158110327","https://openalex.org/W2009238965","https://openalex.org/W4237341780","https://openalex.org/W2296501187","https://openalex.org/W2361515550"],"abstract_inverted_index":{"Much":[0],"of":[1,36,86,109,117],"Internet":[2,49,63],"traffic":[3,50],"modeling,":[4],"firewall,":[5],"and":[6,18,33],"intrusion":[7],"detection":[8],"research":[9],"requires":[10],"traces":[11],"where":[12],"some":[13],"ground":[14,45,67,103],"truth":[15,46,68,104],"regarding":[16],"application":[17,71],"protocol":[19],"is":[20],"associated":[21],"with":[22,48,95],"each":[23],"packet":[24,97],"or":[25],"flow.":[26],"This":[27],"paper":[28],"presents":[29],"the":[30,54,70,89],"design,":[31],"development":[32],"experimental":[34,74],"evaluation":[35],"gt,":[37],"an":[38],"open":[39],"source":[40],"software":[41],"toolset":[42],"for":[43],"associating":[44],"information":[47,60],"traces.":[51],"By":[52],"probing":[53],"monitored":[55],"host's":[56],"kernel":[57],"to":[58],"obtain":[59],"on":[61,88],"active":[62],"sessions,":[64],"gt":[65,100],"gathers":[66],"at":[69,81],"level.":[72],"Preliminary":[73],"results":[75],"show":[76],"that":[77],"gt's":[78],"effectiveness":[79],"comes":[80],"little":[82],"cost":[83],"in":[84,107,115],"terms":[85,108,116],"overhead":[87],"hosting":[90],"machines.":[91],"Furthermore,":[92],"when":[93],"coupled":[94],"other":[96],"inspection":[98],"mechanisms,":[99],"can":[101],"derive":[102],"not":[105],"only":[106],"applications":[110],"(e.g.,":[111,119],"e-mail),":[112],"but":[113],"also":[114],"protocols":[118],"SMTP":[120],"vs.":[121],"POP3).":[122]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":10},{"year":2019,"cited_by_count":7},{"year":2018,"cited_by_count":12},{"year":2017,"cited_by_count":15},{"year":2016,"cited_by_count":18},{"year":2015,"cited_by_count":16},{"year":2014,"cited_by_count":28},{"year":2013,"cited_by_count":18},{"year":2012,"cited_by_count":10}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2016-06-24T00:00:00"}