{"id":"https://openalex.org/W2743411104","doi":"https://doi.org/10.1145/3098954.3098992","title":"SONAR","display_name":"SONAR","publication_year":2017,"publication_date":"2017-08-10","ids":{"openalex":"https://openalex.org/W2743411104","doi":"https://doi.org/10.1145/3098954.3098992","mag":"2743411104"},"language":"en","primary_location":{"id":"doi:10.1145/3098954.3098992","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3098954.3098992","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035787660","display_name":"Quentin Le Sceller","orcid":null},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Quentin Le Sceller","raw_affiliation_strings":["Security Research Centre, Concordia University, Montreal, Quebec, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security Research Centre, Concordia University, Montreal, Quebec, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064834866","display_name":"ElMouatez Billah Karbab","orcid":null},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"ElMouatez Billah Karbab","raw_affiliation_strings":["Security Research Centre, Concordia University, Montreal, Quebec, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security Research Centre, Concordia University, Montreal, Quebec, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028605138","display_name":"Mourad Debbabi","orcid":"https://orcid.org/0000-0003-3015-3043"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mourad Debbabi","raw_affiliation_strings":["Security Research Centre, Concordia University, Montreal, Quebec, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Security Research Centre, Concordia University, Montreal, Quebec, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5068447696","display_name":"Farkhund Iqbal","orcid":"https://orcid.org/0000-0001-9081-3598"},"institutions":[{"id":"https://openalex.org/I91044093","display_name":"Zayed University","ror":"https://ror.org/03snqfa66","country_code":"AE","type":"education","lineage":["https://openalex.org/I91044093"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Farkhund Iqbal","raw_affiliation_strings":["College of Technological Innovation, Zayed University, Abu Dhabi, U.A.E"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Technological Innovation, Zayed University, Abu Dhabi, U.A.E","institution_ids":["https://openalex.org/I91044093"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":61,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"11"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8078762292861938},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7363678216934204},{"id":"https://openalex.org/keywords/sonar","display_name":"Sonar","score":0.7101842761039734},{"id":"https://openalex.org/keywords/categorization","display_name":"Categorization","score":0.6566320061683655},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5810307860374451},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.5048114061355591},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5011897087097168},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.47983285784721375},{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.44730210304260254},{"id":"https://openalex.org/keywords/security-domain","display_name":"Security domain","score":0.4326859712600708},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2034984827041626}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8078762292861938},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7363678216934204},{"id":"https://openalex.org/C555745239","wikidata":"https://www.wikidata.org/wiki/Q133220","display_name":"Sonar","level":2,"score":0.7101842761039734},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.6566320061683655},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5810307860374451},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.5048114061355591},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5011897087097168},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.47983285784721375},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.44730210304260254},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.4326859712600708},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2034984827041626},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3098954.3098992","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3098954.3098992","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.6499999761581421,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W11244355","https://openalex.org/W139675679","https://openalex.org/W159497295","https://openalex.org/W371426616","https://openalex.org/W1495920968","https://openalex.org/W1534625513","https://openalex.org/W1736726159","https://openalex.org/W1977931290","https://openalex.org/W1998032016","https://openalex.org/W1998224037","https://openalex.org/W2012446724","https://openalex.org/W2012833704","https://openalex.org/W2018165284","https://openalex.org/W2052635433","https://openalex.org/W2062088920","https://openalex.org/W2101196063","https://openalex.org/W2118480788","https://openalex.org/W2124499489","https://openalex.org/W2139997979","https://openalex.org/W2140427797","https://openalex.org/W2160654919","https://openalex.org/W2167842235","https://openalex.org/W2250539671","https://openalex.org/W2270414365","https://openalex.org/W2293159451","https://openalex.org/W2404243041","https://openalex.org/W2481151430","https://openalex.org/W2620856291","https://openalex.org/W2950133940","https://openalex.org/W4212774754","https://openalex.org/W4242582838","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W2789663798","https://openalex.org/W2375896275","https://openalex.org/W2166943775","https://openalex.org/W2775236000","https://openalex.org/W2158007046","https://openalex.org/W2151915331","https://openalex.org/W2071426633","https://openalex.org/W2349754162","https://openalex.org/W1903420481","https://openalex.org/W1522996108"],"abstract_inverted_index":{"Everyday,":[0],"security":[1,8,51,69,95,157,174,250,266,273,281],"experts":[2,308],"face":[3],"a":[4,45,118,170,177,224,240],"growing":[5],"number":[6,61],"of":[7,48,62,77,121,129,172,179,184,215,230,237,242,305],"events":[9,52,158,175,185,268,306],"that":[10,116,150,186,307],"affecting":[11],"people":[12],"well-being,":[13],"their":[14,54,284],"information":[15,78,123,136],"systems":[16],"and":[17,27,36,53,71,83,154,176,259,263,275,291],"sometimes":[18],"the":[19,31,49,59,85,93,130,163,213,220,235,252,272],"critical":[20],"infrastructure.":[21],"The":[22],"sooner":[23],"they":[24,33,41,100],"can":[25,34,65,137,151],"detect":[26],"understand":[28],"these":[29,110,198],"threats,":[30,232],"more":[32],"mitigate":[35],"forensically":[37],"investigate":[38],"them.":[39],"Therefore,":[40],"need":[42],"to":[43,73,108,189,193,211,248],"have":[44],"situation":[46],"awareness":[47],"existing":[50],"possible":[55],"effects.":[56],"However,":[57,127],"given":[58],"large":[60],"events,":[63],"it":[64,201,276],"be":[66,138],"difficult":[67],"for":[68,301],"analysts":[70],"researchers":[72],"handle":[74],"this":[75,103,141],"flow":[76],"in":[79,88,159,191,219,251],"an":[80,146],"adequate":[81],"manner":[82],"answer":[84,109],"following":[86],"questions":[87],"near-real":[89,160],"time:":[90],"what":[91],"are":[92,309],"current":[94],"events?":[96],"How":[97],"long":[98],"do":[99],"last?":[101],"In":[102],"paper,":[104],"we":[105,143,187,233,296],"will":[106],"try":[107],"issues":[111],"by":[112,293],"leveraging":[113],"social":[114],"networks":[115],"contain":[117],"massive":[119],"amount":[120],"valuable":[122],"on":[124,169,239,271],"many":[125],"topics.":[126],"because":[128],"very":[131],"high":[132],"volume,":[133],"extracting":[134],"meaningful":[135],"challenging.":[139],"For":[140],"reason,":[142],"propose":[144],"SONAR:":[145],"automatic,":[147],"self-learned":[148],"framework":[149,300],"detect,":[152,261],"geolocate":[153],"categorize":[155,262],"cyber":[156,173,231,249,265],"time":[161],"over":[162],"Twitter":[164],"stream.":[165],"SONAR":[166,238,256,287,299],"is":[167,288],"based":[168],"taxonomy":[171,226],"set":[178],"seed":[180,199],"keywords":[181,206],"describing":[182,227],"type":[183,229,304],"want":[188],"follow":[190],"order":[192],"start":[194],"detecting":[195],"events.":[196],"Using":[197,223],"keywords,":[200],"automatically":[202,278],"discovers":[203],"new":[204,280],"relevant":[205],"such":[207],"as":[208],"malware":[209],"names":[210],"enhance":[212],"range":[214],"detection":[216],"while":[217],"staying":[218],"same":[221],"domain.":[222],"custom":[225],"all":[228],"demonstrate":[234],"capabilities":[236],"dataset":[241],"approximately":[243],"47.8":[244],"million":[245],"tweets":[246],"related":[247,267],"last":[253],"9":[254],"months.":[255],"could":[257,277,297],"efficiently":[258],"effectively":[260],"monitor":[264],"before":[269],"getting":[270],"news,":[274],"discover":[279],"terminologies":[282],"with":[283],"event.":[285],"Additionally,":[286],"highly":[289],"scalable":[290],"customizable":[292],"design;":[294],"therefore":[295],"adapt":[298],"virtually":[302],"any":[303],"interested":[310],"in.":[311]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":10},{"year":2020,"cited_by_count":12},{"year":2019,"cited_by_count":8},{"year":2018,"cited_by_count":4}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2017-08-17T00:00:00"}