{"id":"https://openalex.org/W2263741877","doi":"https://doi.org/10.1145/2897795.2897806","title":"GraphPrints","display_name":"GraphPrints","publication_year":2016,"publication_date":"2016-04-05","ids":{"openalex":"https://openalex.org/W2263741877","doi":"https://doi.org/10.1145/2897795.2897806","mag":"2263741877"},"language":"en","primary_location":{"id":"doi:10.1145/2897795.2897806","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2897795.2897806","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 11th Annual Cyber and Information Security Research Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017373325","display_name":"Christopher R. Harshaw","orcid":null},"institutions":[{"id":"https://openalex.org/I74775410","display_name":"Rice University","ror":"https://ror.org/008zs3103","country_code":"US","type":"education","lineage":["https://openalex.org/I74775410"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Christopher R. Harshaw","raw_affiliation_strings":["Oak Ridge Institute for Science & Education, Oak Ridge, TN 37831 & Rice University Houston, TX 77005"],"affiliations":[{"raw_affiliation_string":"Oak Ridge Institute for Science & Education, Oak Ridge, TN 37831 & Rice University Houston, TX 77005","institution_ids":["https://openalex.org/I74775410"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012446017","display_name":"Robert A. Bridges","orcid":"https://orcid.org/0000-0001-7962-6329"},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert A. Bridges","raw_affiliation_strings":["Computational Sciences and Engineering Division, Oak Ridge National Laboratory, Oak Ridge, TN 37831"],"affiliations":[{"raw_affiliation_string":"Computational Sciences and Engineering Division, Oak Ridge National Laboratory, Oak Ridge, TN 37831","institution_ids":["https://openalex.org/I1289243028"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023093422","display_name":"Michael D. Iannacone","orcid":"https://orcid.org/0000-0003-3081-4761"},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael D. Iannacone","raw_affiliation_strings":["Computational Sciences and Engineering Division, Oak Ridge National Laboratory, Oak Ridge, TN 37831"],"affiliations":[{"raw_affiliation_string":"Computational Sciences and Engineering Division, Oak Ridge National Laboratory, Oak Ridge, TN 37831","institution_ids":["https://openalex.org/I1289243028"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007331165","display_name":"Joel W. Reed","orcid":"https://orcid.org/0000-0002-5558-8425"},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joel W. Reed","raw_affiliation_strings":["Computational Sciences and Engineering Division, Oak Ridge National Laboratory, Oak Ridge, TN 37831"],"affiliations":[{"raw_affiliation_string":"Computational Sciences and Engineering Division, Oak Ridge National Laboratory, Oak Ridge, TN 37831","institution_ids":["https://openalex.org/I1289243028"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003251468","display_name":"John R. Goodall","orcid":"https://orcid.org/0000-0001-6810-4517"},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John R. Goodall","raw_affiliation_strings":["Computational Sciences and Engineering Division, Oak Ridge National Laboratory, Oak Ridge, TN 37831"],"affiliations":[{"raw_affiliation_string":"Computational Sciences and Engineering Division, Oak Ridge National Laboratory, Oak Ridge, TN 37831","institution_ids":["https://openalex.org/I1289243028"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5017373325"],"corresponding_institution_ids":["https://openalex.org/I74775410"],"apc_list":null,"apc_paid":null,"fwci":3.7568,"has_fulltext":false,"cited_by_count":36,"citation_normalized_percentile":{"value":0.93421701,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"4"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9912999868392944,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9876000285148621,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7277791500091553},{"id":"https://openalex.org/keywords/outlier","display_name":"Outlier","score":0.6905892491340637},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6121382713317871},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5571566820144653},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5429099202156067},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.518751859664917},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.4994971752166748},{"id":"https://openalex.org/keywords/interval","display_name":"Interval (graph theory)","score":0.44089871644973755},{"id":"https://openalex.org/keywords/network-topology","display_name":"Network topology","score":0.4158189594745636},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3196033835411072},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.26265841722488403},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.23871776461601257},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1572296917438507},{"id":"https://openalex.org/keywords/combinatorics","display_name":"Combinatorics","score":0.12220540642738342}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7277791500091553},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.6905892491340637},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6121382713317871},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5571566820144653},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5429099202156067},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.518751859664917},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.4994971752166748},{"id":"https://openalex.org/C2778067643","wikidata":"https://www.wikidata.org/wiki/Q166507","display_name":"Interval (graph theory)","level":2,"score":0.44089871644973755},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.4158189594745636},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3196033835411072},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.26265841722488403},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.23871776461601257},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1572296917438507},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.12220540642738342},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2897795.2897806","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2897795.2897806","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 11th Annual Cyber and Information Security Research Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5218260690","display_name":null,"funder_award_id":"2009-ST-061-CI0001","funder_id":"https://openalex.org/F4320306110","funder_display_name":"U.S. Department of Homeland Security"}],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320306110","display_name":"U.S. Department of Homeland Security","ror":"https://ror.org/00jyr0d86"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W101836494","https://openalex.org/W1961165281","https://openalex.org/W1980262437","https://openalex.org/W2047440076","https://openalex.org/W2071949631","https://openalex.org/W2112262143","https://openalex.org/W2148762636","https://openalex.org/W2153624566","https://openalex.org/W2997591727"],"related_works":["https://openalex.org/W2499612753","https://openalex.org/W3111802945","https://openalex.org/W2806741695","https://openalex.org/W2946096271","https://openalex.org/W2295423552","https://openalex.org/W1598471830","https://openalex.org/W3107369729","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160"],"abstract_inverted_index":{"This":[0],"paper":[1],"introduces":[2],"a":[3,29],"novel":[4],"graph-analytic":[5],"approach":[6],"for":[7],"detecting":[8],"anomalies":[9],"in":[10],"network":[11,73],"flow":[12],"data":[13,74],"called":[14],"GraphPrints.":[15],"Building":[16],"on":[17,44,71],"foundational":[18],"network-mining":[19],"techniques,":[20],"our":[21],"method":[22],"represents":[23],"time":[24],"slices":[25],"of":[26,47,52,67],"traffic":[27,53],"as":[28],"graph,":[30],"then":[31],"counts":[32],"graphlets---small":[33],"induced":[34],"subgraphs":[35],"that":[36],"describe":[37],"local":[38],"topology.":[39],"By":[40],"performing":[41],"outlier":[42],"detection":[43],"the":[45,88,94],"sequence":[46],"graphlet":[48],"counts,":[49],"anomalous":[50],"intervals":[51],"are":[54,63],"identified,":[55],"and":[56,91],"furthermore,":[57],"individual":[58],"IPs":[59],"experiencing":[60],"abnormal":[61],"behavior":[62],"singled-out.":[64],"Initial":[65],"testing":[66],"GraphPrints":[68],"is":[69],"performed":[70],"real":[72],"with":[75,96],"an":[76],"implanted":[77],"anomaly.":[78],"Evaluation":[79],"shows":[80],"false":[81],"positive":[82,99],"rates":[83,100],"bounded":[84],"by":[85],"2.84%":[86],"at":[87,93,101],"time-interval":[89],"level,":[90],"0.05%":[92],"IP-level":[95],"100%":[97],"true":[98],"both.":[102]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":6},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2016-06-24T00:00:00"}