{"id":"https://openalex.org/W2068061330","doi":"https://doi.org/10.1145/1752046.1752049","title":"Improving the accuracy of network intrusion detection systems under load using selective packet discarding","display_name":"Improving the accuracy of network intrusion detection systems under load using selective packet discarding","publication_year":2010,"publication_date":"2010-04-02","ids":{"openalex":"https://openalex.org/W2068061330","doi":"https://doi.org/10.1145/1752046.1752049","mag":"2068061330"},"language":"en","primary_location":{"id":"doi:10.1145/1752046.1752049","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1752046.1752049","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Third European Workshop on System Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006771814","display_name":"Antonis Papadogiannakis","orcid":null},"institutions":[{"id":"https://openalex.org/I8901234","display_name":"Foundation for Research and Technology Hellas","ror":"https://ror.org/052rphn09","country_code":"GR","type":"facility","lineage":["https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Antonis Papadogiannakis","raw_affiliation_strings":["Foundation for Research and Technology -- Hellas, Heraklion, Crete, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Foundation for Research and Technology -- Hellas, Heraklion, Crete, Greece","institution_ids":["https://openalex.org/I8901234"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007101727","display_name":"Michalis Polychronakis","orcid":"https://orcid.org/0000-0002-3106-0343"},"institutions":[{"id":"https://openalex.org/I8901234","display_name":"Foundation for Research and Technology Hellas","ror":"https://ror.org/052rphn09","country_code":"GR","type":"facility","lineage":["https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Michalis Polychronakis","raw_affiliation_strings":["Foundation for Research and Technology -- Hellas, Heraklion, Crete, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Foundation for Research and Technology -- Hellas, Heraklion, Crete, Greece","institution_ids":["https://openalex.org/I8901234"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5006368259","display_name":"Evangelos P. Markatos","orcid":"https://orcid.org/0000-0003-3563-7733"},"institutions":[{"id":"https://openalex.org/I8901234","display_name":"Foundation for Research and Technology Hellas","ror":"https://ror.org/052rphn09","country_code":"GR","type":"facility","lineage":["https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Evangelos P. Markatos","raw_affiliation_strings":["Foundation for Research and Technology -- Hellas, Heraklion, Crete, Greece"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Foundation for Research and Technology -- Hellas, Heraklion, Crete, Greece","institution_ids":["https://openalex.org/I8901234"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I8901234"],"apc_list":null,"apc_paid":null,"fwci":4.1073,"has_fulltext":false,"cited_by_count":41,"citation_normalized_percentile":{"value":0.95404595,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"15","last_page":"21"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.8232663869857788},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8134326934814453},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7740894556045532},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.6229923367500305},{"id":"https://openalex.org/keywords/throughput","display_name":"Throughput","score":0.5651239156723022},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5527252554893494},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.5244824290275574},{"id":"https://openalex.org/keywords/packet-analyzer","display_name":"Packet analyzer","score":0.4669070839881897},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.15805071592330933},{"id":"https://openalex.org/keywords/wireless","display_name":"Wireless","score":0.1092657744884491},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.08252611756324768}],"concepts":[{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.8232663869857788},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8134326934814453},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7740894556045532},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.6229923367500305},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.5651239156723022},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5527252554893494},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.5244824290275574},{"id":"https://openalex.org/C95362637","wikidata":"https://www.wikidata.org/wiki/Q54366","display_name":"Packet analyzer","level":3,"score":0.4669070839881897},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.15805071592330933},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.1092657744884491},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.08252611756324768}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1752046.1752049","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1752046.1752049","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Third European Workshop on System Security","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.191.524","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.191.524","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.ics.forth.gr/dcs/Activities/papers/discarding.eurosec10.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W74995240","https://openalex.org/W103634144","https://openalex.org/W109802382","https://openalex.org/W1490025813","https://openalex.org/W1516506771","https://openalex.org/W1553177637","https://openalex.org/W1563242287","https://openalex.org/W1674877186","https://openalex.org/W1763270762","https://openalex.org/W1964124216","https://openalex.org/W2083843618","https://openalex.org/W2105045498","https://openalex.org/W2105956753","https://openalex.org/W2119026482","https://openalex.org/W2129700391","https://openalex.org/W2132926044","https://openalex.org/W2137559158","https://openalex.org/W2138351610","https://openalex.org/W2138381338","https://openalex.org/W2143024194","https://openalex.org/W2161480401","https://openalex.org/W2170812753","https://openalex.org/W2914982603","https://openalex.org/W4234061764","https://openalex.org/W4237793107","https://openalex.org/W4285719527","https://openalex.org/W4290757805"],"related_works":["https://openalex.org/W2037047765","https://openalex.org/W2384190786","https://openalex.org/W2077203200","https://openalex.org/W2560298834","https://openalex.org/W2393418578","https://openalex.org/W2171331105","https://openalex.org/W2390263853","https://openalex.org/W4226031521","https://openalex.org/W2367877613","https://openalex.org/W3153939733"],"abstract_inverted_index":{"Under":[0],"conditions":[1,77],"of":[2,14,50,86,119,127,149],"heavy":[3],"traffic":[4,8,114,153],"load":[5],"or":[6],"sudden":[7],"bursts,":[9],"the":[10,30,43,47,51,72,88,96,113,116,125,146],"peak":[11],"processing":[12],"throughput":[13],"network":[15,121],"intrusion":[16],"detection":[17,48,108,147],"systems":[18],"(NIDS)":[19],"may":[20],"not":[21],"be":[22],"sufficient":[23],"for":[24],"inspecting":[25],"all":[26],"monitored":[27],"traffic,":[28],"and":[29,53,78,110,131],"packet":[31,64,89,129,142],"capturing":[32,90],"subsystem":[33,91],"inevitably":[34],"drops":[35],"excess":[36],"arriving":[37,94],"packets":[38,100],"before":[39],"delivering":[40],"them":[41],"to":[42,55,74,105,157],"NIDS.":[44,136],"This":[45],"impedes":[46],"ability":[49],"system":[52],"leads":[54],"missed":[56],"attacks.":[57],"In":[58],"this":[59],"work":[60],"we":[61],"present":[62,124],"selective":[63,128,141],"discarding,":[65],"a":[66],"best":[67],"effort":[68],"approach":[69],"that":[70,101,140,160],"enables":[71],"NIDS":[73,97],"anticipate":[75],"overload":[76],"minimize":[79],"their":[80],"impact":[81],"on":[82,112],"attack":[83],"detection.":[84],"Instead":[85],"letting":[87],"randomly":[92],"drop":[93],"packets,":[95],"proactively":[98],"discards":[99],"are":[102],"less":[103],"likely":[104],"affect":[106],"its":[107,132],"accuracy,":[109],"focuses":[111],"at":[115],"early":[117],"stages":[118],"each":[120],"flow.":[122],"We":[123],"design":[126],"discarding":[130,143],"implementation":[133],"in":[134],"Snort":[135,150],"Our":[137],"experiments":[138],"show":[139],"significantly":[144],"improves":[145],"accuracy":[148],"under":[151],"increased":[152],"load,":[154],"allowing":[155],"it":[156],"detect":[158],"attacks":[159],"would":[161],"have":[162],"otherwise":[163],"been":[164],"missed.":[165]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":8},{"year":2014,"cited_by_count":7},{"year":2013,"cited_by_count":7},{"year":2012,"cited_by_count":4}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}