{"id":"https://openalex.org/W2600267680","doi":"https://doi.org/10.1145/3052973.3053039","title":"WedgeTail","display_name":"WedgeTail","publication_year":2017,"publication_date":"2017-03-31","ids":{"openalex":"https://openalex.org/W2600267680","doi":"https://doi.org/10.1145/3052973.3053039","mag":"2600267680"},"language":"en","primary_location":{"id":"doi:10.1145/3052973.3053039","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3052973.3053039","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"preprint","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1708.05477","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070360947","display_name":"Arash Shaghaghi","orcid":"https://orcid.org/0000-0001-6630-9519"},"institutions":[{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"funder","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]},{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Arash Shaghaghi","raw_affiliation_strings":["The University of New South Wales (UNSW) &amp; Data61, CSIRO, Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"The University of New South Wales (UNSW) &amp; Data61, CSIRO, Sydney, Australia","institution_ids":["https://openalex.org/I31746571","https://openalex.org/I1292875679","https://openalex.org/I42894916"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040251515","display_name":"Mohamed Ali K\u00e2afar","orcid":"https://orcid.org/0000-0003-2714-0276"},"institutions":[{"id":"https://openalex.org/I42894916","display_name":"Data61","ror":"https://ror.org/03q397159","country_code":"AU","type":"other","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I42894916","https://openalex.org/I4387156119"]},{"id":"https://openalex.org/I1292875679","display_name":"Commonwealth Scientific and Industrial Research Organisation","ror":"https://ror.org/03qn8fb07","country_code":"AU","type":"funder","lineage":["https://openalex.org/I1292875679","https://openalex.org/I2801453606","https://openalex.org/I4387156119"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Mohamed Ali Kaafar","raw_affiliation_strings":["Data61, CSIRO, Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"Data61, CSIRO, Sydney, Australia","institution_ids":["https://openalex.org/I42894916","https://openalex.org/I1292875679"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015261020","display_name":"Sanjay Jha","orcid":"https://orcid.org/0000-0002-1844-1520"},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Sanjay Jha","raw_affiliation_strings":["The University of New South Wales (UNSW), Sydney, Australia"],"affiliations":[{"raw_affiliation_string":"The University of New South Wales (UNSW), Sydney, Australia","institution_ids":["https://openalex.org/I31746571"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5070360947"],"corresponding_institution_ids":["https://openalex.org/I1292875679","https://openalex.org/I31746571","https://openalex.org/I42894916"],"apc_list":null,"apc_paid":null,"fwci":5.4738,"has_fulltext":false,"cited_by_count":49,"citation_normalized_percentile":{"value":0.96201109,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"849","last_page":"861"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/packet-forwarding","display_name":"Packet forwarding","score":0.8476325273513794},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8174608945846558},{"id":"https://openalex.org/keywords/forwarding-plane","display_name":"Forwarding plane","score":0.8109089136123657},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.7459331750869751},{"id":"https://openalex.org/keywords/traverse","display_name":"Traverse","score":0.7291991710662842},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.7051534652709961},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.5493582487106323},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.500023365020752},{"id":"https://openalex.org/keywords/frame","display_name":"Frame (networking)","score":0.4531469941139221},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.38896793127059937},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.19855985045433044}],"concepts":[{"id":"https://openalex.org/C120317029","wikidata":"https://www.wikidata.org/wiki/Q874048","display_name":"Packet forwarding","level":3,"score":0.8476325273513794},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8174608945846558},{"id":"https://openalex.org/C10597312","wikidata":"https://www.wikidata.org/wiki/Q5473302","display_name":"Forwarding plane","level":3,"score":0.8109089136123657},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.7459331750869751},{"id":"https://openalex.org/C176809094","wikidata":"https://www.wikidata.org/wiki/Q15401496","display_name":"Traverse","level":2,"score":0.7291991710662842},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.7051534652709961},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.5493582487106323},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.500023365020752},{"id":"https://openalex.org/C126042441","wikidata":"https://www.wikidata.org/wiki/Q1324888","display_name":"Frame (networking)","level":2,"score":0.4531469941139221},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.38896793127059937},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.19855985045433044},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3052973.3053039","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3052973.3053039","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:1708.05477","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1708.05477","pdf_url":"https://arxiv.org/pdf/1708.05477","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1708.05477","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1708.05477","pdf_url":"https://arxiv.org/pdf/1708.05477","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals","score":0.4099999964237213}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":42,"referenced_works":["https://openalex.org/W95608104","https://openalex.org/W158224344","https://openalex.org/W1408671314","https://openalex.org/W1449038650","https://openalex.org/W1675033504","https://openalex.org/W1882012874","https://openalex.org/W1966777556","https://openalex.org/W1975992537","https://openalex.org/W1976698045","https://openalex.org/W2005948381","https://openalex.org/W2011158429","https://openalex.org/W2012580531","https://openalex.org/W2012666594","https://openalex.org/W2026356331","https://openalex.org/W2026741765","https://openalex.org/W2040340473","https://openalex.org/W2045594157","https://openalex.org/W2046466133","https://openalex.org/W2064266822","https://openalex.org/W2067551786","https://openalex.org/W2084915558","https://openalex.org/W2087968523","https://openalex.org/W2099995703","https://openalex.org/W2110324005","https://openalex.org/W2110955486","https://openalex.org/W2115526539","https://openalex.org/W2118404561","https://openalex.org/W2126830184","https://openalex.org/W2147118406","https://openalex.org/W2148662748","https://openalex.org/W2155526624","https://openalex.org/W2156410054","https://openalex.org/W2159396835","https://openalex.org/W2168509479","https://openalex.org/W2275015310","https://openalex.org/W2277140271","https://openalex.org/W2470544054","https://openalex.org/W2471297965","https://openalex.org/W2604258491","https://openalex.org/W4254605472","https://openalex.org/W4255593574","https://openalex.org/W4256352503"],"related_works":["https://openalex.org/W4313172087","https://openalex.org/W4214777079","https://openalex.org/W3122360749","https://openalex.org/W3004383981","https://openalex.org/W2547441564","https://openalex.org/W2064604228","https://openalex.org/W2051935741","https://openalex.org/W4377224402","https://openalex.org/W4243609393","https://openalex.org/W2738801488"],"abstract_inverted_index":{"Networks":[0,19],"are":[1],"vulnerable":[2],"to":[3,14,57,127,174,201],"disruptions":[4],"caused":[5],"by":[6,166],"malicious":[7,137,204],"forwarding":[8,43,65,90,104,119,181,205],"devices.":[9,44],"The":[10],"situation":[11],"is":[12,131],"likely":[13],"worsen":[15],"in":[16,189,221],"Software":[17],"Defined":[18],"(SDNs)":[20],"with":[21,178],"the":[22,33,59,75,81,103,108,214],"incompatibility":[23],"of":[24,28,35,102,113,134,197,219],"existing":[25],"solutions,":[26],"use":[27],"programmable":[29],"soft":[30],"switches":[31],"and":[32,73,110,115,143,169,183,192,199,217],"potential":[34],"bringing":[36],"down":[37],"an":[38,51,95,167],"entire":[39],"network":[40,82],"through":[41],"compromised":[42],"In":[45,157],"this":[46,222],"paper,":[47],"we":[48],"present":[49],"WedgeTail,":[50],"Intrusion":[52],"Prevention":[53],"System":[54],"(IPS)":[55],"designed":[56],"secure":[58],"SDN":[60,176],"data":[61],"plane.":[62],"WedgeTail":[63,106,130,146,188,220],"regards":[64],"devices":[66,91,206],"as":[67,83,124,140],"points":[68],"within":[69,207],"a":[70,148,208],"geometric":[71],"space":[72],"stores":[74],"path":[76],"packets":[77,114,123],"take":[78],"when":[79],"traversing":[80],"trajectories.":[84],"To":[85],"be":[86,171],"efficient,":[87],"it":[88,159,193],"prioritizes":[89],"before":[92],"inspection":[93],"using":[94],"unsupervised":[96],"trajectory-based":[97],"sampling":[98],"mechanism.":[99],"For":[100],"each":[101],"device,":[105],"computes":[107],"expected":[109],"actual":[111],"trajectories":[112],"'hunts'":[116],"for":[117],"any":[118],"device":[120],"not":[121],"processing":[122],"expected.":[125],"Compared":[126],"related":[128],"work,":[129],"also":[132],"capable":[133,196],"distinguishing":[135],"between":[136],"actions":[138],"such":[139],"packet":[141],"drop":[142],"generation.":[144],"Moreover,":[145],"employs":[147],"radically":[149],"different":[150,179],"methodology":[151],"that":[152],"enables":[153],"detecting":[154,198],"threats":[155],"autonomously.":[156],"fact,":[158],"has":[160,194],"no":[161],"reliance":[162],"on":[163,213],"pre-defined":[164],"rules":[165],"administrator":[168],"may":[170],"easily":[172],"imported":[173],"protect":[175],"networks":[177],"setups,":[180],"devices,":[182],"controllers.":[184],"We":[185,211],"have":[186],"evaluated":[187],"simulated":[190],"environments,":[191],"been":[195],"responding":[200],"all":[202],"implanted":[203],"reasonable":[209],"time-frame.":[210],"report":[212],"design,":[215],"implementation,":[216],"evaluation":[218],"manuscript.":[223]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":9},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":10},{"year":2018,"cited_by_count":8},{"year":2017,"cited_by_count":1}],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2017-04-07T00:00:00"}
