{"id":"https://openalex.org/W2745720015","doi":"https://doi.org/10.1145/3123878.3131992","title":"Towards Distributed Threat Intelligence in Real-Time","display_name":"Towards Distributed Threat Intelligence in Real-Time","publication_year":2017,"publication_date":"2017-08-22","ids":{"openalex":"https://openalex.org/W2745720015","doi":"https://doi.org/10.1145/3123878.3131992","mag":"2745720015"},"language":"en","primary_location":{"id":"doi:10.1145/3123878.3131992","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3123878.3131992","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the SIGCOMM Posters and Demos","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055988966","display_name":"Philipp Meyer","orcid":"https://orcid.org/0009-0002-7597-0290"},"institutions":[{"id":"https://openalex.org/I70451448","display_name":"HAW Hamburg","ror":"https://ror.org/00fkqwx76","country_code":"DE","type":"education","lineage":["https://openalex.org/I70451448"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Philipp Meyer","raw_affiliation_strings":["HAW Hamburg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"HAW Hamburg","institution_ids":["https://openalex.org/I70451448"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031272687","display_name":"Raphael Hiesgen","orcid":"https://orcid.org/0000-0002-1676-8108"},"institutions":[{"id":"https://openalex.org/I70451448","display_name":"HAW Hamburg","ror":"https://ror.org/00fkqwx76","country_code":"DE","type":"education","lineage":["https://openalex.org/I70451448"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Raphael Hiesgen","raw_affiliation_strings":["HAW Hamburg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"HAW Hamburg","institution_ids":["https://openalex.org/I70451448"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027677424","display_name":"Thomas C. Schmidt","orcid":"https://orcid.org/0000-0002-0956-7885"},"institutions":[{"id":"https://openalex.org/I70451448","display_name":"HAW Hamburg","ror":"https://ror.org/00fkqwx76","country_code":"DE","type":"education","lineage":["https://openalex.org/I70451448"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Thomas C. Schmidt","raw_affiliation_strings":["HAW Hamburg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"HAW Hamburg","institution_ids":["https://openalex.org/I70451448"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103154417","display_name":"Marcin Nawrocki","orcid":"https://orcid.org/0000-0002-6308-5502"},"institutions":[{"id":"https://openalex.org/I75951250","display_name":"Freie Universit\u00e4t Berlin","ror":"https://ror.org/046ak2485","country_code":"DE","type":"education","lineage":["https://openalex.org/I75951250"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Marcin Nawrocki","raw_affiliation_strings":["FU Berlin"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FU Berlin","institution_ids":["https://openalex.org/I75951250"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5039216100","display_name":"Matthias W\u00e4hlisch","orcid":"https://orcid.org/0000-0002-3825-2807"},"institutions":[{"id":"https://openalex.org/I75951250","display_name":"Freie Universit\u00e4t Berlin","ror":"https://ror.org/046ak2485","country_code":"DE","type":"education","lineage":["https://openalex.org/I75951250"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Matthias W\u00e4hlisch","raw_affiliation_strings":["FU Berlin"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"FU Berlin","institution_ids":["https://openalex.org/I75951250"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.2248,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.38099585,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"76","last_page":"78"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7725884914398193},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.54168301820755},{"id":"https://openalex.org/keywords/data-stream-mining","display_name":"Data stream mining","score":0.5354995727539062},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.38377347588539124},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3671085238456726},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3634943962097168},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.34313857555389404},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.32699865102767944},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.23038128018379211}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7725884914398193},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.54168301820755},{"id":"https://openalex.org/C89198739","wikidata":"https://www.wikidata.org/wiki/Q3079880","display_name":"Data stream mining","level":2,"score":0.5354995727539062},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38377347588539124},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3671085238456726},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3634943962097168},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.34313857555389404},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.32699865102767944},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.23038128018379211}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3123878.3131992","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3123878.3131992","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the SIGCOMM Posters and Demos","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6800000071525574,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G8735212190","display_name":null,"funder_award_id":"16KIS0529","funder_id":"https://openalex.org/F4320321114","funder_display_name":"Bundesministerium f\u00fcr Bildung und Forschung"}],"funders":[{"id":"https://openalex.org/F4320321114","display_name":"Bundesministerium f\u00fcr Bildung und Forschung","ror":"https://ror.org/04pz7b180"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W1516506771","https://openalex.org/W2014316112","https://openalex.org/W2034074225","https://openalex.org/W2096273775","https://openalex.org/W2101194406","https://openalex.org/W2115881704","https://openalex.org/W2159262496","https://openalex.org/W2187805761","https://openalex.org/W2309213158"],"related_works":["https://openalex.org/W807005383","https://openalex.org/W2182399080","https://openalex.org/W1494355008","https://openalex.org/W1501624740","https://openalex.org/W1984941792","https://openalex.org/W2167004500","https://openalex.org/W2369440580","https://openalex.org/W2109863941","https://openalex.org/W2106570241","https://openalex.org/W3144654663"],"abstract_inverted_index":{"In":[0],"this":[1],"demo,":[2],"we":[3],"address":[4],"the":[5,11,43,73],"problem":[6],"of":[7,18],"detecting":[8],"anomalies":[9],"on":[10,42],"Internet":[12],"backbone":[13],"in":[14],"near":[15],"real-time.":[16],"Many":[17],"today's":[19],"incidents":[20],"may":[21],"only":[22],"become":[23],"visible":[24],"from":[25,56],"inspecting":[26],"multiple":[27,33,63],"data":[28,54,74],"sources":[29],"and":[30,59,65],"by":[31],"considering":[32],"vantage":[34],"points":[35],"simultaneously.":[36],"We":[37],"present":[38],"a":[39],"setup":[40],"based":[41],"distributed":[44],"forensic":[45],"platform":[46],"VAST":[47],"that":[48],"was":[49],"extended":[50],"to":[51,77],"import":[52],"various":[53],"streams":[55],"passive":[57],"measurements":[58],"incident":[60],"reporting":[61],"at":[62],"locations,":[64],"perform":[66],"an":[67],"effective":[68],"correlation":[69],"analysis":[70],"shortly":[71],"after":[72],"becomes":[75],"exposed":[76],"our":[78],"queries.":[79]},"counts_by_year":[{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
