{"id":"https://openalex.org/W2602876175","doi":"https://doi.org/10.1145/3017680.3022454","title":"Raising Flags","display_name":"Raising Flags","publication_year":2017,"publication_date":"2017-03-08","ids":{"openalex":"https://openalex.org/W2602876175","doi":"https://doi.org/10.1145/3017680.3022454","mag":"2602876175"},"language":"en","primary_location":{"id":"doi:10.1145/3017680.3022454","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3017680.3022454","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM SIGCSE Technical Symposium on Computer Science Education","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085548279","display_name":"Josephine K. Chow","orcid":null},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Josephine K. Chow","raw_affiliation_strings":["University of Maryland, College Park, College Park, MD, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Maryland, College Park, College Park, MD, USA","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100341799","display_name":"Xiangyang Li","orcid":"https://orcid.org/0000-0002-3944-4704"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xiangyang Li","raw_affiliation_strings":["Johns Hopkins University, Baltimore, MD, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Johns Hopkins University, Baltimore, MD, USA","institution_ids":["https://openalex.org/I145311948"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041245378","display_name":"Xenia Mountrouidou","orcid":null},"institutions":[{"id":"https://openalex.org/I204593131","display_name":"College of Charleston","ror":"https://ror.org/00390t168","country_code":"US","type":"education","lineage":["https://openalex.org/I204593131"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xenia Mountrouidou","raw_affiliation_strings":["College of Charleston, Charleston, SC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Charleston, Charleston, SC, USA","institution_ids":["https://openalex.org/I204593131"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.4131,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.70753499,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"759","last_page":"760"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7340733408927917},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6393921971321106},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5954766869544983},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.5700176954269409},{"id":"https://openalex.org/keywords/transmission-control-protocol","display_name":"Transmission Control Protocol","score":0.5001485347747803},{"id":"https://openalex.org/keywords/header","display_name":"Header","score":0.49163752794265747},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3559688329696655}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7340733408927917},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6393921971321106},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5954766869544983},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.5700176954269409},{"id":"https://openalex.org/C33588617","wikidata":"https://www.wikidata.org/wiki/Q8803","display_name":"Transmission Control Protocol","level":3,"score":0.5001485347747803},{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.49163752794265747},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3559688329696655}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3017680.3022454","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3017680.3022454","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM SIGCSE Technical Symposium on Computer Science Education","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3752758178","display_name":"IUSE: Collaborative Project: Engaged Student Learning: Design and Development, Level I: Broadening the Path to the STEM Profession Through Cybersecurity Learning","funder_award_id":"1525485","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320322725","display_name":"China Scholarship Council","ror":"https://ror.org/04atp4p48"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":2,"referenced_works":["https://openalex.org/W2120467192","https://openalex.org/W2247585390"],"related_works":["https://openalex.org/W2171597999","https://openalex.org/W2189136227","https://openalex.org/W1866537546","https://openalex.org/W630850086","https://openalex.org/W3200508093","https://openalex.org/W4372053344","https://openalex.org/W3193978431","https://openalex.org/W2988433590","https://openalex.org/W2891706772","https://openalex.org/W2144804944"],"abstract_inverted_index":{"Messages":[0],"through":[1],"covert":[2],"channels":[3],"may":[4],"contain":[5],"valuable":[6],"information":[7],"either":[8],"in":[9,23,47,74,140,154],"clear":[10,129],"text":[11,130],"or":[12],"encrypted.":[13],"This":[14],"study":[15,114],"focuses":[16],"on":[17],"a":[18,52,135],"Covert":[19],"Storage":[20],"Channels":[21],"(CSC)":[22],"TCP/IP":[24],"network":[25,75],"packets":[26,150],"that":[27,171],"uses":[28,40,115],"the":[29,45,48,69,87,97,107,110,149,156,172,178],"6-bit":[30],"TCP":[31,49,56,70,157],"flag":[32,71,158],"header":[33],"to":[34,43,105,147,151,176,182],"transmit":[35],"messages":[36,125],"between":[37,100],"accomplices.":[38],"It":[39],"relative":[41,98],"entropy":[42,99],"characterize":[44],"irregularities":[46],"flags.":[50],"First":[51],"normal":[53,94,184],"profile":[54,95],"of":[55,64,86,109,134,137],"flags":[57],"is":[58,77,96,174],"represented":[59],"by":[60,163],"their":[61],"frequency":[62,72],"distribution":[63,73],"regular":[65,117],"traffic":[66,76,89,118,187],"packets.":[67],"Then":[68],"computed":[78],"for":[79,127],"each":[80],"unique":[81],"IP":[82],"pair.":[83],"The":[84,160],"distance":[85],"testing":[88],"data":[90,119],"set":[91],"from":[92],"this":[93,113],"these":[101],"two":[102],"distributions.":[103],"Moreover,":[104],"evaluate":[106],"performance":[108],"proposed":[111],"method":[112,173],"real":[116],"sets":[120],"as":[121,123],"well":[122],"CSC":[124,186],"generated":[126],"both":[128],"and":[131,185],"encrypted":[132],"forms":[133],"list":[136],"keywords":[138],"common":[139],"Unix":[141],"systems.":[142],"Different":[143],"approaches":[144],"are":[145],"used":[146],"choose":[148,177],"be":[152],"included":[153],"extracting":[155],"frequencies.":[159],"experimentation":[161],"results":[162],"Receiver":[164],"Operating":[165],"Characteristic":[166],"(ROC)":[167],"curves":[168],"have":[169],"shown":[170],"promising":[175],"best":[179],"control":[180],"threshold":[181],"differentiate":[183],"packet":[188],"streams.":[189]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2022,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1}],"updated_date":"2026-06-22T08:00:12.763002","created_date":"2017-04-07T00:00:00"}