{"id":"https://openalex.org/W1988182815","doi":"https://doi.org/10.1145/2398776.2398781","title":"Classifying internet one-way traffic","display_name":"Classifying internet one-way traffic","publication_year":2012,"publication_date":"2012-11-14","ids":{"openalex":"https://openalex.org/W1988182815","doi":"https://doi.org/10.1145/2398776.2398781","mag":"1988182815"},"language":"en","primary_location":{"id":"doi:10.1145/2398776.2398781","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2398776.2398781","pdf_url":"https://dl.acm.org/action/downloadSupplement?doi=10.1145%2F2398776.2398781&file=173.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2012 Internet Measurement Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/action/downloadSupplement?doi=10.1145%2F2398776.2398781&file=173.pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027337773","display_name":"Eduard Glatz","orcid":null},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Eduard Glatz","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080514654","display_name":"Xenofontas Dimitropoulos","orcid":"https://orcid.org/0000-0003-2600-7633"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Xenofontas Dimitropoulos","raw_affiliation_strings":["ETH Zurich, Zurich, Switzerland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Zurich, Zurich, Switzerland","institution_ids":["https://openalex.org/I35440088"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I35440088"],"apc_list":null,"apc_paid":null,"fwci":5.9839,"has_fulltext":true,"cited_by_count":43,"citation_normalized_percentile":{"value":0.97146577,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"37","last_page":"50"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7473239898681641},{"id":"https://openalex.org/keywords/traffic-classification","display_name":"Traffic classification","score":0.6849709153175354},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.6743592619895935},{"id":"https://openalex.org/keywords/internet-traffic","display_name":"Internet traffic","score":0.5872652530670166},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5765910744667053},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.557415246963501},{"id":"https://openalex.org/keywords/traffic-generation-model","display_name":"Traffic generation model","score":0.5104731321334839},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.47235071659088135},{"id":"https://openalex.org/keywords/petabyte","display_name":"Petabyte","score":0.42666637897491455},{"id":"https://openalex.org/keywords/internet-traffic-engineering","display_name":"Internet traffic engineering","score":0.425055593252182},{"id":"https://openalex.org/keywords/traffic-shaping","display_name":"Traffic shaping","score":0.415793240070343},{"id":"https://openalex.org/keywords/web-traffic","display_name":"Web traffic","score":0.4102398157119751},{"id":"https://openalex.org/keywords/network-traffic-control","display_name":"Network traffic control","score":0.3883441388607025},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3277502655982971},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.29833465814590454},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2599208354949951}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7473239898681641},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.6849709153175354},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.6743592619895935},{"id":"https://openalex.org/C63969886","wikidata":"https://www.wikidata.org/wiki/Q3536440","display_name":"Internet traffic","level":3,"score":0.5872652530670166},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5765910744667053},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.557415246963501},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.5104731321334839},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.47235071659088135},{"id":"https://openalex.org/C13600138","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Petabyte","level":3,"score":0.42666637897491455},{"id":"https://openalex.org/C133264484","wikidata":"https://www.wikidata.org/wiki/Q6056085","display_name":"Internet traffic engineering","level":4,"score":0.425055593252182},{"id":"https://openalex.org/C46451311","wikidata":"https://www.wikidata.org/wiki/Q262550","display_name":"Traffic shaping","level":4,"score":0.415793240070343},{"id":"https://openalex.org/C2777672014","wikidata":"https://www.wikidata.org/wiki/Q1172573","display_name":"Web traffic","level":3,"score":0.4102398157119751},{"id":"https://openalex.org/C201100257","wikidata":"https://www.wikidata.org/wiki/Q393287","display_name":"Network traffic control","level":3,"score":0.3883441388607025},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3277502655982971},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.29833465814590454},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2599208354949951},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/2398776.2398781","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2398776.2398781","pdf_url":"https://dl.acm.org/action/downloadSupplement?doi=10.1145%2F2398776.2398781&file=173.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2012 Internet Measurement Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.696.9034","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.696.9034","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.csg.ethz.ch/people/dimitroc/papers/oneway-imc12.pdf","raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/2398776.2398781","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2398776.2398781","pdf_url":"https://dl.acm.org/action/downloadSupplement?doi=10.1145%2F2398776.2398781&file=173.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2012 Internet Measurement Conference","raw_type":"proceedings-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.41999998688697815,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W1988182815.pdf","grobid_xml":"https://content.openalex.org/works/W1988182815.grobid-xml"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W148447563","https://openalex.org/W177792351","https://openalex.org/W1531611685","https://openalex.org/W1563061804","https://openalex.org/W1698314624","https://openalex.org/W1744212210","https://openalex.org/W1811828243","https://openalex.org/W2000497232","https://openalex.org/W2003793121","https://openalex.org/W2009250465","https://openalex.org/W2011628134","https://openalex.org/W2016736445","https://openalex.org/W2030697026","https://openalex.org/W2031006315","https://openalex.org/W2069222612","https://openalex.org/W2095349709","https://openalex.org/W2096030967","https://openalex.org/W2096248434","https://openalex.org/W2109318926","https://openalex.org/W2117226155","https://openalex.org/W2122226347","https://openalex.org/W2127084909","https://openalex.org/W2130696417","https://openalex.org/W2139542924","https://openalex.org/W2144098589","https://openalex.org/W2144762303","https://openalex.org/W2147029177","https://openalex.org/W2158060559","https://openalex.org/W2162695692","https://openalex.org/W2162877415","https://openalex.org/W2167777553","https://openalex.org/W2251322477","https://openalex.org/W2911834949","https://openalex.org/W4247909786","https://openalex.org/W4313784310","https://openalex.org/W6603592895","https://openalex.org/W6606041630","https://openalex.org/W6638037704","https://openalex.org/W6647328697","https://openalex.org/W6691504563"],"related_works":["https://openalex.org/W2127561666","https://openalex.org/W3163756987","https://openalex.org/W2002288953","https://openalex.org/W2125510568","https://openalex.org/W2148642667","https://openalex.org/W2011168308","https://openalex.org/W3167272834","https://openalex.org/W2949949254","https://openalex.org/W3010864567","https://openalex.org/W1879669377"],"abstract_inverted_index":{"Internet":[0,10,230],"background":[1],"radiation":[2],"(IBR)":[3],"is":[4,14,88,114,235],"a":[5,89,139,149,182,192,225],"very":[6,193],"interesting":[7,62,185,252,268],"piece":[8],"of":[9,17,55,60,64,72,83,146,159,168,184,201,205,218,221,239,246,249,254,267,275],"traffic":[11,27,47,65,95,101,119,147,170,190,231,248],"as":[12,69,71],"it":[13,75,136,212],"the":[15,52,81,157,165,202,208,219,244,250,265,273],"result":[16],"attacks":[18],"and":[19,79,109,176,199,260],"misconfigurations.":[20],"Previous":[21],"work":[22],"has":[23],"primarily":[24],"analyzed":[25],"IBR":[26,118,234],"to":[28,103,137,153,207],"large":[29,150,194],"unused":[30],"IP":[31],"address":[32],"blocks":[33],"called":[34],"network":[35,152,259,274],"telescopes.":[36],"In":[37,178],"this":[38,61],"work,":[39],"we":[40,134,180,242,270],"build":[41],"new":[42,226],"techniques":[43],"for":[44,77,92,116,215,229,257],"monitoring":[45,117,258],"one-way":[46,94,100,160,169,189,247],"in":[48,120,232,237,272],"live":[49,67,121],"networks":[50,68,122],"with":[51],"main":[53,166],"goals":[54],"1)":[56],"expanding":[57],"our":[58,132,276],"understanding":[59],"type":[63],"towards":[66],"well":[70],"2)":[73],"making":[74],"useful":[76,97],"detecting":[78],"analyzing":[80,264],"impact":[82,266],"outages.":[84,177],"Our":[85,111],"first":[86],"contribution":[87],"classification":[90,112],"scheme":[91,113],"dissecting":[93],"into":[96,156],"classes,":[98],"including":[99,187],"due":[102],"unreachable":[104,255],"services,":[105],"scanning,":[106,173],"peer-to-peer":[107,174],"applications,":[108,175],"backscatter.":[110],"helpful":[115],"solely":[123],"based":[124],"on":[125],"flow":[126],"level":[127],"data.":[128],"After":[129],"thoroughly":[130],"validating":[131],"classifier,":[133],"use":[135],"analyze":[138],"massive":[140],"data-set":[141],"that":[142,164,188],"covers":[143],"7.41":[144],"petabytes":[145],"from":[148],"backbone":[151],"shed":[154],"light":[155],"composition":[158],"traffic.":[161],"We":[162],"find":[163],"sources":[167],"are":[171],"malicious":[172],"addition,":[179],"report":[181],"number":[183,204,220],"observations":[186],"makes":[191],"fraction,":[195],"i.e.,":[196],"between":[197],"34%":[198],"67%,":[200],"total":[203],"flows":[206],"monitored":[209],"network,":[210],"although":[211],"only":[213,216],"accounts":[214],"3.4%":[217],"packets,":[222],"which":[223,233],"suggests":[224],"conceptual":[227],"model":[228],"dominant":[236],"terms":[238],"flows.":[240],"Finally,":[241],"demonstrate":[243],"utility":[245],"particularly":[251],"class":[253],"services":[256],"service":[261],"outages":[262],"by":[263],"events":[269],"detected":[271],"university.":[277]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":7},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":11},{"year":2014,"cited_by_count":4},{"year":2013,"cited_by_count":8}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}