{"id":"https://openalex.org/W2949199409","doi":"https://doi.org/10.1145/3322798.3329255","title":"Automatic Detection of Network Traffic Anomalies and Changes","display_name":"Automatic Detection of Network Traffic Anomalies and Changes","publication_year":2019,"publication_date":"2019-06-17","ids":{"openalex":"https://openalex.org/W2949199409","doi":"https://doi.org/10.1145/3322798.3329255","mag":"2949199409"},"language":"en","primary_location":{"id":"doi:10.1145/3322798.3329255","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3322798.3329255","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3322798.3329255","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Workshop on Systems and Network Telemetry and Analytics","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3322798.3329255","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038594281","display_name":"Astha Syal","orcid":null},"institutions":[{"id":"https://openalex.org/I161203489","display_name":"Youngstown State University","ror":"https://ror.org/038zf2n28","country_code":"US","type":"education","lineage":["https://openalex.org/I161203489"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Astha Syal","raw_affiliation_strings":["Youngstown State University, Youngstown, OH, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Youngstown State University, Youngstown, OH, USA","institution_ids":["https://openalex.org/I161203489"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056799505","display_name":"Alina Lazar","orcid":"https://orcid.org/0000-0002-2096-1541"},"institutions":[{"id":"https://openalex.org/I161203489","display_name":"Youngstown State University","ror":"https://ror.org/038zf2n28","country_code":"US","type":"education","lineage":["https://openalex.org/I161203489"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alina Lazar","raw_affiliation_strings":["Youngstown State University, Youngstown, OH, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Youngstown State University, Youngstown, OH, USA","institution_ids":["https://openalex.org/I161203489"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101877231","display_name":"Jinoh Kim","orcid":"https://orcid.org/0000-0002-9835-1866"},"institutions":[{"id":"https://openalex.org/I206651237","display_name":"Texas A&M University \u2013 Commerce","ror":"https://ror.org/01red3556","country_code":"US","type":"education","lineage":["https://openalex.org/I206651237"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jinoh Kim","raw_affiliation_strings":["Texas A&M University-Commerce, Commerce, TX, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Texas A&M University-Commerce, Commerce, TX, USA","institution_ids":["https://openalex.org/I206651237"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068293431","display_name":"Alex Sim","orcid":"https://orcid.org/0000-0002-6295-1982"},"institutions":[{"id":"https://openalex.org/I148283060","display_name":"Lawrence Berkeley National Laboratory","ror":"https://ror.org/02jbv0t02","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I148283060","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alex Sim","raw_affiliation_strings":["Lawrence Berkeley National Laboratory, Berkeley, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lawrence Berkeley National Laboratory, Berkeley, CA, USA","institution_ids":["https://openalex.org/I148283060"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043129695","display_name":"Kesheng Wu","orcid":"https://orcid.org/0000-0002-6907-3393"},"institutions":[{"id":"https://openalex.org/I148283060","display_name":"Lawrence Berkeley National Laboratory","ror":"https://ror.org/02jbv0t02","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I148283060","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kesheng Wu","raw_affiliation_strings":["Lawrence Berkeley National Laboratory, Berkeley, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lawrence Berkeley National Laboratory, Berkeley, CA, USA","institution_ids":["https://openalex.org/I148283060"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5038594281"],"corresponding_institution_ids":["https://openalex.org/I161203489"],"apc_list":null,"apc_paid":null,"fwci":1.115,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":{"value":0.80019449,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"3","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.828844428062439},{"id":"https://openalex.org/keywords/network-traffic-control","display_name":"Network traffic control","score":0.6487945318222046},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.6110810041427612},{"id":"https://openalex.org/keywords/network-traffic-simulation","display_name":"Network traffic simulation","score":0.5403090119361877},{"id":"https://openalex.org/keywords/traffic-generation-model","display_name":"Traffic generation model","score":0.5218440890312195},{"id":"https://openalex.org/keywords/network-simulation","display_name":"Network simulation","score":0.5012321472167969},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.49708107113838196},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.4864377975463867},{"id":"https://openalex.org/keywords/network-management-station","display_name":"Network management station","score":0.4503180682659149},{"id":"https://openalex.org/keywords/network-performance","display_name":"Network performance","score":0.44134944677352905},{"id":"https://openalex.org/keywords/network-monitoring","display_name":"Network monitoring","score":0.4368259012699127},{"id":"https://openalex.org/keywords/network-congestion","display_name":"Network congestion","score":0.4166754186153412},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3258594274520874},{"id":"https://openalex.org/keywords/network-architecture","display_name":"Network architecture","score":0.31795239448547363}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.828844428062439},{"id":"https://openalex.org/C201100257","wikidata":"https://www.wikidata.org/wiki/Q393287","display_name":"Network traffic control","level":3,"score":0.6487945318222046},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.6110810041427612},{"id":"https://openalex.org/C94168897","wikidata":"https://www.wikidata.org/wiki/Q574324","display_name":"Network traffic simulation","level":4,"score":0.5403090119361877},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.5218440890312195},{"id":"https://openalex.org/C139940560","wikidata":"https://www.wikidata.org/wiki/Q290036","display_name":"Network simulation","level":2,"score":0.5012321472167969},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.49708107113838196},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4864377975463867},{"id":"https://openalex.org/C16986412","wikidata":"https://www.wikidata.org/wiki/Q918419","display_name":"Network management station","level":3,"score":0.4503180682659149},{"id":"https://openalex.org/C203274722","wikidata":"https://www.wikidata.org/wiki/Q7001161","display_name":"Network performance","level":2,"score":0.44134944677352905},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.4368259012699127},{"id":"https://openalex.org/C195563490","wikidata":"https://www.wikidata.org/wiki/Q180368","display_name":"Network congestion","level":3,"score":0.4166754186153412},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3258594274520874},{"id":"https://openalex.org/C193415008","wikidata":"https://www.wikidata.org/wiki/Q639681","display_name":"Network architecture","level":2,"score":0.31795239448547363}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3322798.3329255","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3322798.3329255","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3322798.3329255","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Workshop on Systems and Network Telemetry and Analytics","raw_type":"proceedings-article"},{"id":"pmh:oai:escholarship.org/ark:/13030/qt8759h7wg","is_oa":false,"landing_page_url":"https://escholarship.org/uc/item/8759h7wg","pdf_url":null,"source":{"id":"https://openalex.org/S4306400115","display_name":"eScholarship (California Digital Library)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2801248553","host_organization_name":"California Digital Library","host_organization_lineage":["https://openalex.org/I2801248553"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1145/3322798.3329255","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3322798.3329255","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3322798.3329255","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Workshop on Systems and Network Telemetry and Analytics","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.46000000834465027,"id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G1286236842","display_name":null,"funder_award_id":"-AC02-05CH11231","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G1311044274","display_name":null,"funder_award_id":"DE-AC02-05CH11231","funder_id":"https://openalex.org/F4320337513","funder_display_name":"Workforce Development for Teachers and Scientists"},{"id":"https://openalex.org/G1677143136","display_name":null,"funder_award_id":"05CH11231","funder_id":"https://openalex.org/F4320317220","funder_display_name":"National Energy Research Scientific Computing Center"},{"id":"https://openalex.org/G1799333409","display_name":null,"funder_award_id":"DE-AC02-05CH11231","funder_id":"https://openalex.org/F4320337506","funder_display_name":"Advanced Scientific Computing Research"},{"id":"https://openalex.org/G2503023272","display_name":null,"funder_award_id":"Contract No. DE-AC02-05CH11231","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G3083819904","display_name":null,"funder_award_id":"05CH11231","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G4501827968","display_name":null,"funder_award_id":"AC02-05CH11231","funder_id":"https://openalex.org/F4320332359","funder_display_name":"Office of Science"},{"id":"https://openalex.org/G4565140552","display_name":null,"funder_award_id":"-AC02-05CH11231","funder_id":"https://openalex.org/F4320332359","funder_display_name":"Office of Science"},{"id":"https://openalex.org/G498139845","display_name":null,"funder_award_id":"DE-AC02","funder_id":"https://openalex.org/F4320332359","funder_display_name":"Office of Science"},{"id":"https://openalex.org/G5076365615","display_name":null,"funder_award_id":"AC02-05CH11231","funder_id":"https://openalex.org/F4320317220","funder_display_name":"National Energy Research Scientific Computing Center"},{"id":"https://openalex.org/G5296923526","display_name":null,"funder_award_id":"Contract No. DE-AC02-05CH11231","funder_id":"https://openalex.org/F4320317220","funder_display_name":"National Energy Research Scientific Computing Center"},{"id":"https://openalex.org/G5375843722","display_name":null,"funder_award_id":"Contract No. DE-AC02-05CH11231","funder_id":"https://openalex.org/F4320337506","funder_display_name":"Advanced Scientific Computing Research"},{"id":"https://openalex.org/G6348972864","display_name":null,"funder_award_id":"AC02-05CH11231","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G6558272803","display_name":null,"funder_award_id":"DE-AC02","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"},{"id":"https://openalex.org/G7672463193","display_name":null,"funder_award_id":"No. DE-AC02-05CH11231","funder_id":"https://openalex.org/F4320332359","funder_display_name":"Office of Science"},{"id":"https://openalex.org/G805243471","display_name":null,"funder_award_id":"Contract No. DE-AC02-05CH11231","funder_id":"https://openalex.org/F4320332359","funder_display_name":"Office of Science"},{"id":"https://openalex.org/G969889393","display_name":null,"funder_award_id":"DE-AC02-","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"}],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320317220","display_name":"National Energy Research Scientific Computing Center","ror":"https://ror.org/05v3mvq14"},{"id":"https://openalex.org/F4320332359","display_name":"Office of Science","ror":"https://ror.org/00mmn6b08"},{"id":"https://openalex.org/F4320337506","display_name":"Advanced Scientific Computing Research","ror":"https://ror.org/0012c7r22"},{"id":"https://openalex.org/F4320337513","display_name":"Workforce Development for Teachers and Scientists","ror":"https://ror.org/05msy3529"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2949199409.pdf","grobid_xml":"https://content.openalex.org/works/W2949199409.grobid-xml"},"referenced_works_count":21,"referenced_works":["https://openalex.org/W1988975763","https://openalex.org/W2055034929","https://openalex.org/W2118585731","https://openalex.org/W2137273017","https://openalex.org/W2137632784","https://openalex.org/W2326059556","https://openalex.org/W2484813563","https://openalex.org/W2566871274","https://openalex.org/W2597863454","https://openalex.org/W2599146636","https://openalex.org/W2755547341","https://openalex.org/W2759910885","https://openalex.org/W2786672974","https://openalex.org/W2799358885","https://openalex.org/W2809684781","https://openalex.org/W2884346564","https://openalex.org/W2884707029","https://openalex.org/W2889326414","https://openalex.org/W2912933002","https://openalex.org/W2917440171","https://openalex.org/W3001645704"],"related_works":["https://openalex.org/W4242927786","https://openalex.org/W2794948597","https://openalex.org/W3183170394","https://openalex.org/W2061862347","https://openalex.org/W2362416893","https://openalex.org/W2612238703","https://openalex.org/W1994698836","https://openalex.org/W2140139251","https://openalex.org/W1672309642","https://openalex.org/W2393682086"],"abstract_inverted_index":{"Accurately":[0],"predicting":[1],"network":[2,16,20,30,37,50,101,110,158,164],"behavior":[3],"is":[4,23,145],"beneficial":[5],"for":[6],"TCP":[7,72],"congestion":[8],"control,":[9],"and":[10,18,39,60,116],"can":[11],"help":[12],"improve":[13],"routing,":[14],"allocating":[15],"resources,":[17],"optimizing":[19],"designs.This":[21],"task":[22],"challenging":[24],"because":[25],"many":[26,45],"factors":[27],"could":[28],"affect":[29],"traffic,":[31],"such":[32,52],"as":[33,53],"the":[34,49,54,89,92,109,125],"number":[35,55],"of":[36,56,70,91,120,155],"sessions":[38],"synthetic":[40],"reordering.":[41],"There":[42],"are":[43],"also":[44],"ways":[46],"to":[47,97,123,147,150],"measure":[48],"state,":[51],"retransmissions":[57],"per":[58],"flow":[59,73],"packet":[61],"duplication.":[62],"For":[63],"this":[64],"work,":[65],"we":[66,95],"use":[67],"a":[68,77,118],"set":[69],"passive":[71],"measurements":[74],"collected":[75,138],"at":[76],"major":[78],"computer":[79,93],"center":[80],"on":[81,134],"multiple":[82],"data":[83],"transfer":[84],"nodes":[85],"(DTN).":[86],"To":[87],"assist":[88],"operations":[90],"network,":[94],"propose":[96],"detect":[98,152],"abnormally":[99],"slow":[100,126],"transfers":[102],"in":[103],"real-time.":[104],"The":[105,142],"proposed":[106,143],"system":[107],"breaks":[108],"monitoring":[111],"logs":[112],"into":[113],"fixed-size":[114],"chunks":[115],"employs":[117],"state":[119],"art":[121],"classifier":[122],"identify":[124],"time":[127],"windows.":[128],"This":[129],"method":[130,144],"will":[131],"be":[132],"validated":[133],"real":[135],"large":[136,153],"datasets":[137],"from":[139,163],"several":[140],"DTNs.":[141],"able":[146],"generate":[148],"models":[149],"quickly":[151],"intervals":[154],"low":[156],"performing":[157],"transfers,":[159],"which":[160],"require":[161],"attention":[162],"engineers.":[165]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1}],"updated_date":"2026-05-14T08:36:36.166977","created_date":"2025-10-10T00:00:00"}