{"id":"https://openalex.org/W1927153363","doi":"https://doi.org/10.1145/2740908.2745399","title":"Temporal Multi-View Inconsistency Detection for Network Traffic Analysis","display_name":"Temporal Multi-View Inconsistency Detection for Network Traffic Analysis","publication_year":2015,"publication_date":"2015-05-18","ids":{"openalex":"https://openalex.org/W1927153363","doi":"https://doi.org/10.1145/2740908.2745399","mag":"1927153363"},"language":"en","primary_location":{"id":"doi:10.1145/2740908.2745399","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2740908.2745399","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 24th International Conference on World Wide Web","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069886022","display_name":"Houping Xiao","orcid":"https://orcid.org/0000-0002-6981-8842"},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Houping Xiao","raw_affiliation_strings":["SUNY at Buffalo, Buffalo, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SUNY at Buffalo, Buffalo, NY, USA","institution_ids":["https://openalex.org/I63190737"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100781385","display_name":"Jing Gao","orcid":"https://orcid.org/0000-0001-5099-6991"},"institutions":[{"id":"https://openalex.org/I63190737","display_name":"University at Buffalo, State University of New York","ror":"https://ror.org/01y64my43","country_code":"US","type":"education","lineage":["https://openalex.org/I63190737"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jing Gao","raw_affiliation_strings":["SUNY at Buffalo, Buffalo, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SUNY at Buffalo, Buffalo, NY, USA","institution_ids":["https://openalex.org/I63190737"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056925015","display_name":"Deepak S. Turaga","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Deepak S. Turaga","raw_affiliation_strings":["IBM T.J. Watson Research Center, Yorktown, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM T.J. Watson Research Center, Yorktown, NY, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102951262","display_name":"Long Vu","orcid":"https://orcid.org/0000-0003-2362-2032"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Long H. Vu","raw_affiliation_strings":["IBM T.J. Watson Research Center, Yorktown, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM T.J. Watson Research Center, Yorktown, NY, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069833586","display_name":"Alain Biem","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alain Biem","raw_affiliation_strings":["IBM T.J. Watson Research Center, Yorktown, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IBM T.J. Watson Research Center, Yorktown, NY, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.1559,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.92265377,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"455","last_page":"465"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7561270594596863},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7192699909210205},{"id":"https://openalex.org/keywords/subspace-topology","display_name":"Subspace topology","score":0.6576586365699768},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.6476478576660156},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5450974702835083},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5340171456336975},{"id":"https://openalex.org/keywords/tensor","display_name":"Tensor (intrinsic definition)","score":0.5091583132743835},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3354252576828003},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.305728554725647},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2580728232860565}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7561270594596863},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7192699909210205},{"id":"https://openalex.org/C32834561","wikidata":"https://www.wikidata.org/wiki/Q660730","display_name":"Subspace topology","level":2,"score":0.6576586365699768},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.6476478576660156},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5450974702835083},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5340171456336975},{"id":"https://openalex.org/C155281189","wikidata":"https://www.wikidata.org/wiki/Q3518150","display_name":"Tensor (intrinsic definition)","level":2,"score":0.5091583132743835},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3354252576828003},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.305728554725647},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2580728232860565},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2740908.2745399","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2740908.2745399","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 24th International Conference on World Wide Web","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W14760367","https://openalex.org/W67287500","https://openalex.org/W183401690","https://openalex.org/W1500188831","https://openalex.org/W1800461055","https://openalex.org/W1965606617","https://openalex.org/W1975970972","https://openalex.org/W1989760128","https://openalex.org/W2004086221","https://openalex.org/W2009755639","https://openalex.org/W2020367605","https://openalex.org/W2023940283","https://openalex.org/W2024165284","https://openalex.org/W2050439513","https://openalex.org/W2052530028","https://openalex.org/W2065494076","https://openalex.org/W2072918779","https://openalex.org/W2077071943","https://openalex.org/W2082600559","https://openalex.org/W2082938293","https://openalex.org/W2099086552","https://openalex.org/W2104837959","https://openalex.org/W2113061123","https://openalex.org/W2122646361","https://openalex.org/W2130170723","https://openalex.org/W2144182447","https://openalex.org/W2144920235","https://openalex.org/W2154579873","https://openalex.org/W2155987510","https://openalex.org/W2295268030","https://openalex.org/W2402513501","https://openalex.org/W2407529013","https://openalex.org/W4254182148"],"related_works":["https://openalex.org/W1980381208","https://openalex.org/W2092530219","https://openalex.org/W2364594919","https://openalex.org/W2388464034","https://openalex.org/W2533125852","https://openalex.org/W2140460949","https://openalex.org/W2167092671","https://openalex.org/W2105580438","https://openalex.org/W2057435755","https://openalex.org/W2890370013"],"abstract_inverted_index":{"In":[0],"this":[1,54],"paper,":[2],"we":[3,56,81],"investigate":[4],"the":[5,24,74,88,113,126,140,147,150,229],"problem":[6],"of":[7,19,29,149,164,177,197,205],"identifying":[8],"inconsistent":[9,42,195,236],"hosts":[10,30,39,166,234],"in":[11,66],"large-scale":[12],"enterprise":[13,161,224],"networks":[14],"by":[15,72],"mining":[16],"multiple":[17,35,67,165],"views":[18,68],"temporal":[20],"data":[21,90,220],"collected":[22,221],"from":[23,76,142,222],"networks.":[25],"The":[26,194],"time-varying":[27,120,175],"behavior":[28,43,121,196,237],"is":[31,133,200],"typically":[32],"consistent":[33],"across":[34,122,179],"views,":[36],"and":[37,69,91,170,226],"thus":[38],"that":[40,61,138,228,238],"exhibit":[41],"are":[44,239],"possible":[45],"anomalous":[46],"points":[47],"to":[48,111,189,241],"be":[49],"further":[50],"investigated.":[51],"To":[52],"achieve":[53],"goal,":[55],"develop":[57,104],"an":[58,130],"effective":[59],"approach":[60,152],"extracts":[62],"common":[63,78,119,143],"patterns":[64],"hidden":[65],"detects":[70],"inconsistency":[71,131],"measuring":[73],"deviation":[75,141],"these":[77],"patterns.":[79],"Specifically,":[80],"first":[82],"apply":[83],"various":[84,192],"anomaly":[85,157],"detectors":[86],"on":[87,125,153,218],"raw":[89],"form":[92],"a":[93,105,174,198,202],"three-way":[94],"tensor":[95,108,115,128],"(host,":[96],"time,":[97],"detector)":[98],"for":[99,135],"each":[100,136,171],"view.":[101],"We":[102,145,215],"then":[103],"joint":[106],"probabilistic":[107],"factorization":[109],"method":[110,231],"derive":[112],"latent":[114],"subspace,":[116,129],"which":[117],"captures":[118],"views.":[123],"Based":[124],"extracted":[127],"score":[132],"calculated":[134],"host":[137,172,199],"measures":[139],"behavior.":[144],"demonstrate":[146,227],"effectiveness":[148],"proposed":[151,230],"two":[154],"enterprise-wide":[155],"network-based":[156],"detection":[158],"tasks.":[159],"An":[160],"network":[162,180],"consists":[163],"(servers,":[167],"desktops,":[168],"laptops)":[169],"sends/receives":[173],"number":[176],"bytes":[178],"protocols":[181],"(e.g.,TCP,":[182],"UDP,":[183],"ICMP)":[184],"or":[185,212],"send":[186],"URL":[187],"requests":[188],"DNS":[190],"under":[191],"categories.":[193],"often":[201],"leading":[203],"indicator":[204],"potential":[206],"issues":[207],"(e.g.,":[208],"instability,":[209],"malicious":[210],"behavior,":[211],"hardware":[213],"malfunction).":[214],"perform":[216],"experiments":[217],"real-world":[219],"IBM":[223],"networks,":[225],"can":[232],"find":[233],"with":[235],"important":[240],"cybersecurity":[242],"applications.":[243]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}