{"id":"https://openalex.org/W2967544255","doi":"https://doi.org/10.1145/3339252.3339265","title":"Behavior-Aware Network Segmentation using IP Flows","display_name":"Behavior-Aware Network Segmentation using IP Flows","publication_year":2019,"publication_date":"2019-08-09","ids":{"openalex":"https://openalex.org/W2967544255","doi":"https://doi.org/10.1145/3339252.3339265","mag":"2967544255"},"language":"en","primary_location":{"id":"doi:10.1145/3339252.3339265","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3339252.3339265","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 14th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://is.muni.cz/repo/1550656","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072510501","display_name":"Juraj Smeriga","orcid":null},"institutions":[{"id":"https://openalex.org/I21449261","display_name":"Masaryk University","ror":"https://ror.org/02j46qs45","country_code":"CZ","type":"education","lineage":["https://openalex.org/I21449261"]},{"id":"https://openalex.org/I4210155092","display_name":"Czech Academy of Sciences, Institute of Computer Science","ror":"https://ror.org/0496n6574","country_code":"CZ","type":"facility","lineage":["https://openalex.org/I202391551","https://openalex.org/I4210155092"]}],"countries":["CZ"],"is_corresponding":true,"raw_author_name":"Juraj Smeriga","raw_affiliation_strings":["Institute of Computer Science, Masaryk University, Brno, Czech Republic"],"affiliations":[{"raw_affiliation_string":"Institute of Computer Science, Masaryk University, Brno, Czech Republic","institution_ids":["https://openalex.org/I21449261","https://openalex.org/I4210155092"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083997788","display_name":"Tom\u00e1\u0161 Jirs\u00edk","orcid":"https://orcid.org/0000-0002-6180-1069"},"institutions":[{"id":"https://openalex.org/I4210155092","display_name":"Czech Academy of Sciences, Institute of Computer Science","ror":"https://ror.org/0496n6574","country_code":"CZ","type":"facility","lineage":["https://openalex.org/I202391551","https://openalex.org/I4210155092"]},{"id":"https://openalex.org/I21449261","display_name":"Masaryk University","ror":"https://ror.org/02j46qs45","country_code":"CZ","type":"education","lineage":["https://openalex.org/I21449261"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Tomas Jirsik","raw_affiliation_strings":["Institute of Computer Science, Masaryk University, Brno, Czech Republic"],"affiliations":[{"raw_affiliation_string":"Institute of Computer Science, Masaryk University, Brno, Czech Republic","institution_ids":["https://openalex.org/I21449261","https://openalex.org/I4210155092"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5072510501"],"corresponding_institution_ids":["https://openalex.org/I21449261","https://openalex.org/I4210155092"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.0879886,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8385669589042664},{"id":"https://openalex.org/keywords/segmentation","display_name":"Segmentation","score":0.7873367071151733},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.7239153981208801},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.6797178983688354},{"id":"https://openalex.org/keywords/market-segmentation","display_name":"Market segmentation","score":0.6727773547172546},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5826206803321838},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5481200814247131},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5331277847290039},{"id":"https://openalex.org/keywords/visibility","display_name":"Visibility","score":0.5117740035057068},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4726656675338745},{"id":"https://openalex.org/keywords/complex-network","display_name":"Complex network","score":0.44957080483436584},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4409267008304596},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.430935800075531}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8385669589042664},{"id":"https://openalex.org/C89600930","wikidata":"https://www.wikidata.org/wiki/Q1423946","display_name":"Segmentation","level":2,"score":0.7873367071151733},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.7239153981208801},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.6797178983688354},{"id":"https://openalex.org/C125308379","wikidata":"https://www.wikidata.org/wiki/Q363057","display_name":"Market segmentation","level":2,"score":0.6727773547172546},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5826206803321838},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5481200814247131},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5331277847290039},{"id":"https://openalex.org/C123403432","wikidata":"https://www.wikidata.org/wiki/Q654068","display_name":"Visibility","level":2,"score":0.5117740035057068},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4726656675338745},{"id":"https://openalex.org/C34947359","wikidata":"https://www.wikidata.org/wiki/Q665189","display_name":"Complex network","level":2,"score":0.44957080483436584},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4409267008304596},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.430935800075531},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3339252.3339265","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3339252.3339265","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 14th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},{"id":"pmh:oai:is.muni.cz:1550656","is_oa":true,"landing_page_url":"https://is.muni.cz/repo/1550656","pdf_url":null,"source":{"id":"https://openalex.org/S4306400102","display_name":"Ve\u0159ejn\u00e9 slu\u017eby Informa\u010dn\u00edho syst\u00e9mu (Masarykiana Brunensis Universitas)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the 14th International Conference on Availability, Reliability and Security","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:is.muni.cz:1550656","is_oa":true,"landing_page_url":"https://is.muni.cz/repo/1550656","pdf_url":null,"source":{"id":"https://openalex.org/S4306400102","display_name":"Ve\u0159ejn\u00e9 slu\u017eby Informa\u010dn\u00edho syst\u00e9mu (Masarykiana Brunensis Universitas)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the 14th International Conference on Availability, Reliability and Security","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W1524496078","https://openalex.org/W1552402227","https://openalex.org/W1673310716","https://openalex.org/W1987971958","https://openalex.org/W2033403400","https://openalex.org/W2053550965","https://openalex.org/W2073459066","https://openalex.org/W2075058279","https://openalex.org/W2091921805","https://openalex.org/W2096118443","https://openalex.org/W2101492723","https://openalex.org/W2109302530","https://openalex.org/W2119821739","https://openalex.org/W2122111042","https://openalex.org/W2122226347","https://openalex.org/W2127218421","https://openalex.org/W2342408547","https://openalex.org/W2520801201","https://openalex.org/W2740924709","https://openalex.org/W2765961677","https://openalex.org/W2902865444","https://openalex.org/W2907081782","https://openalex.org/W3105265400","https://openalex.org/W3150719513"],"related_works":["https://openalex.org/W2592395359","https://openalex.org/W2535231171","https://openalex.org/W2045342254","https://openalex.org/W1501331687","https://openalex.org/W2326647871","https://openalex.org/W4205247302","https://openalex.org/W2468652214","https://openalex.org/W2501551404","https://openalex.org/W2130144716","https://openalex.org/W1504527458"],"abstract_inverted_index":{"Network":[0],"segmentation":[1,17,65,132],"is":[2,160],"a":[3,82,98,153],"powerful":[4],"tool":[5],"for":[6,92,187],"network":[7,16,37,50,64,131,170],"defense.":[8],"In":[9,54],"contemporary":[10],"complex,":[11],"dynamic,":[12],"and":[13,35,69,183],"multilayer":[14],"networks,":[15],"suffers":[18],"from":[19,120],"lack":[20],"of":[21,42,49,61,89,94,130,135,147],"visibility":[22],"into":[23],"processes":[24],"in":[25,30,81,97],"the":[26,40,43,46,59,62,87,103,121,126,145,180],"network,":[27],"which":[28],"results":[29],"less":[31],"strict":[32],"segment":[33,122,171],"definition":[34],"loosen":[36],"security.":[38],"Moreover,":[39,177],"dynamics":[41],"networks":[44],"makes":[45],"manual":[47],"identification":[48,93],"segments":[51,78,96],"nearly":[52],"impossible.":[53],"this":[55],"paper,":[56],"we":[57,124,178],"inspect":[58],"possibilities":[60],"behavior-aware":[63],"using":[66],"IP":[67],"flows":[68],"machine":[70],"learning":[71],"approaches":[72],"that":[73,102,111,158],"would":[74],"enable":[75],"to":[76,139,162,167,174],"identify":[77,107],"automatically,":[79],"even":[80],"complex":[83],"network.":[84,99],"We":[85,100,143,156],"evaluate":[86,144],"suitability":[88],"clustering":[90,104],"algorithms":[91,105],"behavior-consistent":[95,109],"show":[101,157],"can":[106],"relevant":[108],"clusters":[110],"overlap":[112],"with":[113,172],"those":[114],"identified":[115],"manually":[116],"by":[117],"experts.":[118],"Apart":[119],"identification,":[123],"investigate":[125],"other":[127],"essential":[128],"task":[129],"process:":[133],"assignment":[134],"an":[136,140,164,168],"unknown":[137,165],"host":[138,166],"existing":[141],"segment.":[142],"performance":[146],"four":[148],"different":[149],"classification":[150],"mechanisms":[151],"on":[152],"real-world":[154],"dataset.":[155],"it":[159],"possible":[161],"assign":[163],"appropriate":[169],"up":[173],"92%":[175],"precision.":[176],"release":[179],"whole":[181],"dataset":[182],"experiment":[184],"steps":[185],"available":[186],"public":[188],"use.":[189]},"counts_by_year":[{"year":2023,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}