{"id":"https://openalex.org/W2963589308","doi":"https://doi.org/10.1145/3321408.3326654","title":"Abnormal traffic detection of IoT terminals based on Bloom filter","display_name":"Abnormal traffic detection of IoT terminals based on Bloom filter","publication_year":2019,"publication_date":"2019-05-17","ids":{"openalex":"https://openalex.org/W2963589308","doi":"https://doi.org/10.1145/3321408.3326654","mag":"2963589308"},"language":"en","primary_location":{"id":"doi:10.1145/3321408.3326654","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3321408.3326654","pdf_url":null,"source":{"id":"https://openalex.org/S4306523950","display_name":"Proceedings of the ACM Turing Celebration Conference - China","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Turing Celebration Conference - China","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088446500","display_name":"Fengjie Deng","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fengjie Deng","raw_affiliation_strings":["School of Cyber Science and Engineering Southeast University, Jiangsu, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering Southeast University, Jiangsu, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081876978","display_name":"Yubo Song","orcid":"https://orcid.org/0000-0002-1347-6126"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yubo Song","raw_affiliation_strings":["School of Cyber Science and Engineering Southeast University, Jiangsu, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering Southeast University, Jiangsu, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075678549","display_name":"Aiqun Hu","orcid":"https://orcid.org/0000-0002-0398-4899"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Aiqun Hu","raw_affiliation_strings":["School of Cyber Science and Engineering Southeast University, Jiangsu, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering Southeast University, Jiangsu, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021173010","display_name":"Min Fan","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Min Fan","raw_affiliation_strings":["School of Cyber Science and Engineering Southeast University, Jiangsu, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering Southeast University, Jiangsu, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5062626927","display_name":"Yu Jiang","orcid":"https://orcid.org/0000-0001-8254-6792"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Jiang","raw_affiliation_strings":["School of Cyber Science and Engineering Southeast University, Jiangsu, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyber Science and Engineering Southeast University, Jiangsu, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I76569877"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/bloom-filter","display_name":"Bloom filter","score":0.7413007020950317},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7353885769844055},{"id":"https://openalex.org/keywords/abnormality","display_name":"Abnormality","score":0.6866803765296936},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6556094884872437},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.611829400062561},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5576761364936829},{"id":"https://openalex.org/keywords/flooding","display_name":"Flooding (psychology)","score":0.5340512990951538},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.531796395778656},{"id":"https://openalex.org/keywords/airfield-traffic-pattern","display_name":"Airfield traffic pattern","score":0.48530954122543335},{"id":"https://openalex.org/keywords/port","display_name":"Port (circuit theory)","score":0.468230664730072},{"id":"https://openalex.org/keywords/filter","display_name":"Filter (signal processing)","score":0.4645969569683075},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.21237733960151672},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.11633273959159851},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.11111599206924438}],"concepts":[{"id":"https://openalex.org/C147224247","wikidata":"https://www.wikidata.org/wiki/Q885373","display_name":"Bloom filter","level":2,"score":0.7413007020950317},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7353885769844055},{"id":"https://openalex.org/C50965678","wikidata":"https://www.wikidata.org/wiki/Q2724302","display_name":"Abnormality","level":2,"score":0.6866803765296936},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6556094884872437},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.611829400062561},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5576761364936829},{"id":"https://openalex.org/C186594467","wikidata":"https://www.wikidata.org/wiki/Q1429176","display_name":"Flooding (psychology)","level":2,"score":0.5340512990951538},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.531796395778656},{"id":"https://openalex.org/C204673680","wikidata":"https://www.wikidata.org/wiki/Q1628107","display_name":"Airfield traffic pattern","level":2,"score":0.48530954122543335},{"id":"https://openalex.org/C32802771","wikidata":"https://www.wikidata.org/wiki/Q2443617","display_name":"Port (circuit theory)","level":2,"score":0.468230664730072},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.4645969569683075},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.21237733960151672},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11633273959159851},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.11111599206924438},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3321408.3326654","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3321408.3326654","pdf_url":null,"source":{"id":"https://openalex.org/S4306523950","display_name":"Proceedings of the ACM Turing Celebration Conference - China","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Turing Celebration Conference - China","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W2009090493","https://openalex.org/W2015418949","https://openalex.org/W2023721289","https://openalex.org/W2032233621","https://openalex.org/W2091722306","https://openalex.org/W2121511513","https://openalex.org/W2150847526","https://openalex.org/W2167296824","https://openalex.org/W2172362434","https://openalex.org/W2489766808","https://openalex.org/W2554661735","https://openalex.org/W2555471375","https://openalex.org/W2573080301","https://openalex.org/W2582533918","https://openalex.org/W2586432806","https://openalex.org/W2586630065","https://openalex.org/W2592985394","https://openalex.org/W2753429870","https://openalex.org/W2762715230","https://openalex.org/W2767188092","https://openalex.org/W2771178890","https://openalex.org/W2789867400","https://openalex.org/W2790567455","https://openalex.org/W2791069031","https://openalex.org/W2794517996","https://openalex.org/W2963048283","https://openalex.org/W2963344707","https://openalex.org/W3017580336","https://openalex.org/W3125669974","https://openalex.org/W6785825761"],"related_works":["https://openalex.org/W2086572746","https://openalex.org/W2157216338","https://openalex.org/W121740227","https://openalex.org/W2135966669","https://openalex.org/W2732769800","https://openalex.org/W3082379938","https://openalex.org/W2594143027","https://openalex.org/W2924589531","https://openalex.org/W3142979882","https://openalex.org/W2188863118"],"abstract_inverted_index":{"As":[0],"the":[1,6,9,31,39,93,118,122,131,167,170,177,197],"size":[2],"and":[3,82,192],"speed":[4],"of":[5,11,33,38,76,133,141,146,152],"network":[7,42],"increase,":[8],"discovery":[10],"abnormal":[12,53,77,172,200],"traffic":[13,26,54,78,81,108,173,191],"becomes":[14],"more":[15],"difficult.":[16],"It":[17],"is":[18,105,127,185],"not":[19],"only":[20],"necessary":[21],"to":[22,29,129],"accurately":[23,65],"detect":[24],"real-time":[25,63],"but":[27],"also":[28],"determine":[30],"type":[32,140],"abnormality.":[34],"Therefore,":[35],"in":[36,138,176],"view":[37],"requirement":[40],"for":[41,143,189],"anomaly":[43],"discovery,":[44],"this":[45,99],"paper":[46,168],"proposes":[47],"a":[48,144,149,163],"Bloom":[49,124],"Filter":[50,125],"(BF)":[51],"based":[52],"detection":[55,174],"framework.":[56],"This":[57,70],"framework":[58,94,175],"could":[59,95,114],"retrieve":[60,96],"information":[61],"from":[62],"data":[64],"under":[66],"low":[67],"time":[68],"complexity.":[69],"article":[71],"mainly":[72],"analyzes":[73,169],"two":[74,199],"kinds":[75],"(port":[79],"scanning":[80,88],"TCP":[83,119],"flooding":[84,120],"traffic).":[85],"For":[86,117],"port":[87],"traffic,":[89,121],"with":[90,135,154],"BF":[91],"structure":[92],"what":[97],"ports":[98],"stream":[100,142],"has":[101,157,162],"accessed.":[102],"If":[103,148],"there":[104,184],"too":[106],"much":[107],"on":[109],"different":[110],"ports,":[111],"an":[112,160],"abnormality":[113,161],"be":[115],"determined.":[116],"Count":[123],"(CBF)":[126],"used":[128],"count":[130],"number":[132],"packets":[134,153],"similar":[136,155],"length":[137,156],"each":[139],"period":[145],"time.":[147],"higher":[150],"proportion":[151],"been":[158],"detected,":[159],"strong":[164],"probability.":[165],"Finally,":[166],"proposed":[171],"real":[178],"environment.":[179],"The":[180],"experiment":[181],"finds":[182],"that":[183],"less":[186],"false":[187],"positive":[188],"normal":[190],"it":[193],"can":[194],"correctly":[195],"identify":[196],"above":[198],"traffic.":[201]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}