{"id":"https://openalex.org/W4238172360","doi":"https://doi.org/10.1145/3366709","title":"I Know What You Did Last Summer","display_name":"I Know What You Did Last Summer","publication_year":2019,"publication_date":"2019-12-17","ids":{"openalex":"https://openalex.org/W4238172360","doi":"https://doi.org/10.1145/3366709"},"language":"en","primary_location":{"id":"doi:10.1145/3366709","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3366709","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3366709","source":{"id":"https://openalex.org/S4210193547","display_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","issn_l":"2476-1249","issn":["2476-1249"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3366709","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013689256","display_name":"Nikita Ivkin","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Nikita Ivkin","raw_affiliation_strings":["Amazon, New York, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon, New York, NY, USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000201729","display_name":"Ran Ben Basat","orcid":"https://orcid.org/0000-0003-0196-9190"},"institutions":[{"id":"https://openalex.org/I136199984","display_name":"Harvard University","ror":"https://ror.org/03vek6s52","country_code":"US","type":"education","lineage":["https://openalex.org/I136199984"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ran Ben Basat","raw_affiliation_strings":["Harvard University, Boston, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harvard University, Boston, MA, USA","institution_ids":["https://openalex.org/I136199984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015818714","display_name":"Zaoxing Liu","orcid":"https://orcid.org/0000-0002-9119-1679"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zaoxing Liu","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004051990","display_name":"Gil Einziger","orcid":"https://orcid.org/0000-0002-6051-608X"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Gil Einziger","raw_affiliation_strings":["Ben Gurion University, Beersheba, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ben Gurion University, Beersheba, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068251891","display_name":"Roy Friedman","orcid":"https://orcid.org/0000-0001-6460-9665"},"institutions":[{"id":"https://openalex.org/I174306211","display_name":"Technion \u2013 Israel Institute of Technology","ror":"https://ror.org/03qryx823","country_code":"IL","type":"education","lineage":["https://openalex.org/I174306211"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Roy Friedman","raw_affiliation_strings":["Technion, Haifa, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technion, Haifa, Israel","institution_ids":["https://openalex.org/I174306211"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053736722","display_name":"Vladimir Braverman","orcid":"https://orcid.org/0000-0001-7709-8753"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vladimir Braverman","raw_affiliation_strings":["Johns Hopkins University, Baltimore, MD, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Johns Hopkins University, Baltimore, MD, USA","institution_ids":["https://openalex.org/I145311948"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5013689256"],"corresponding_institution_ids":["https://openalex.org/I1311688040"],"apc_list":null,"apc_paid":null,"fwci":1.6723,"has_fulltext":true,"cited_by_count":16,"citation_normalized_percentile":{"value":0.86426866,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"3","issue":"3","first_page":"1","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7951016426086426},{"id":"https://openalex.org/keywords/sketch","display_name":"Sketch","score":0.5898517966270447},{"id":"https://openalex.org/keywords/frame","display_name":"Frame (networking)","score":0.5364041924476624},{"id":"https://openalex.org/keywords/relevance","display_name":"Relevance (law)","score":0.5306747555732727},{"id":"https://openalex.org/keywords/raw-data","display_name":"Raw data","score":0.47994616627693176},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.46706539392471313},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.45877087116241455},{"id":"https://openalex.org/keywords/space","display_name":"Space (punctuation)","score":0.44765931367874146},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.34992900490760803},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3245370388031006},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.3225995600223541},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.1941237449645996},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.12092825770378113}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7951016426086426},{"id":"https://openalex.org/C2779231336","wikidata":"https://www.wikidata.org/wiki/Q7534724","display_name":"Sketch","level":2,"score":0.5898517966270447},{"id":"https://openalex.org/C126042441","wikidata":"https://www.wikidata.org/wiki/Q1324888","display_name":"Frame (networking)","level":2,"score":0.5364041924476624},{"id":"https://openalex.org/C158154518","wikidata":"https://www.wikidata.org/wiki/Q7310970","display_name":"Relevance (law)","level":2,"score":0.5306747555732727},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.47994616627693176},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.46706539392471313},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.45877087116241455},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.44765931367874146},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.34992900490760803},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3245370388031006},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.3225995600223541},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.1941237449645996},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.12092825770378113},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3366709","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3366709","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3366709","source":{"id":"https://openalex.org/S4210193547","display_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","issn_l":"2476-1249","issn":["2476-1249"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3366709","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3366709","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3366709","source":{"id":"https://openalex.org/S4210193547","display_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","issn_l":"2476-1249","issn":["2476-1249"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Measurement and Analysis of Computing Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G161079778","display_name":"CSR: NeTS: Small: In-Network Resource Management for Rack-Scale Computers","funder_award_id":"1813487","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4684323747","display_name":null,"funder_award_id":"1813487, CNS-1700521","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4787189790","display_name":null,"funder_award_id":"N00014-18-1-2364","funder_id":"https://openalex.org/F4320338298","funder_display_name":"Office of Naval Research Global"},{"id":"https://openalex.org/G5425755426","display_name":null,"funder_award_id":"1652257","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6671297155","display_name":null,"funder_award_id":"CAREER","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7143676625","display_name":null,"funder_award_id":"CNS-1700521","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8300720798","display_name":null,"funder_award_id":"1700521","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8417310905","display_name":"NeTS: Large: Collaborative Research: Design Principles for a Future-Proof Internet Control Plane","funder_award_id":"1565343","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8788823717","display_name":null,"funder_award_id":"N00014-18-1-2364","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"},{"id":"https://openalex.org/G8876996369","display_name":null,"funder_award_id":"N00014","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320323051","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982"},{"id":"https://openalex.org/F4320329947","display_name":"Technion Hiroshi Fujiwara Cyber Security Research Center","ror":null},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"},{"id":"https://openalex.org/F4320338298","display_name":"Office of Naval Research Global","ror":"https://ror.org/00rk2pe57"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4238172360.pdf","grobid_xml":"https://content.openalex.org/works/W4238172360.grobid-xml"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W98727202","https://openalex.org/W233671965","https://openalex.org/W934716473","https://openalex.org/W1483965954","https://openalex.org/W1495100589","https://openalex.org/W1956340982","https://openalex.org/W1971731845","https://openalex.org/W1982092405","https://openalex.org/W1997642935","https://openalex.org/W2048968742","https://openalex.org/W2069414131","https://openalex.org/W2098366185","https://openalex.org/W2099657323","https://openalex.org/W2107917944","https://openalex.org/W2112320294","https://openalex.org/W2124646923","https://openalex.org/W2144622427","https://openalex.org/W2146189323","https://openalex.org/W2152489475","https://openalex.org/W2155915275","https://openalex.org/W2291609542","https://openalex.org/W2293755460","https://openalex.org/W2479510968","https://openalex.org/W2487095677","https://openalex.org/W2562649904","https://openalex.org/W2600130231","https://openalex.org/W2737988660","https://openalex.org/W2744693751","https://openalex.org/W2762020989","https://openalex.org/W2963458398","https://openalex.org/W2967106834","https://openalex.org/W2991999319","https://openalex.org/W4237219250","https://openalex.org/W4249702239"],"related_works":["https://openalex.org/W3106945349","https://openalex.org/W3131073374","https://openalex.org/W1584628001","https://openalex.org/W2036641180","https://openalex.org/W2106813246","https://openalex.org/W1998320603","https://openalex.org/W2373884999","https://openalex.org/W2374646538","https://openalex.org/W3043690962","https://openalex.org/W2350613111"],"abstract_inverted_index":{"Modern":[0],"network":[1],"telemetry":[2],"systems":[3],"collect":[4],"and":[5,64,68,92,108],"analyze":[6],"massive":[7],"amounts":[8],"of":[9,30,57,61,96,132],"raw":[10],"data":[11,49],"in":[12],"a":[13,36,133],"space":[14,70],"efficient":[15],"manner.":[16],"These":[17],"require":[18],"advanced":[19],"capabilities":[20],"such":[21,116],"as":[22,59],"drill":[23],"down":[24],"queries":[25],"that":[26,40,114],"allow":[27],"iterative":[28],"refinement":[29],"the":[31,47,54,76,81,93,110,130],"search":[32],"space.":[33],"We":[34],"present":[35],"first":[37],"integral":[38],"solution":[39,113],"(i)":[41],"enables":[42],"multiple":[43],"measurement":[44,82],"tasks":[45],"inside":[46],"same":[48],"structure,":[50],"(ii)":[51],"supports":[52],"specifying":[53],"time":[55,94],"frame":[56,95],"interest":[58],"part":[60],"its":[62],"queries,":[63],"(iii)":[65],"is":[66,109],"sketch-based":[67],"thus":[69],"efficient.":[71],"Namely,":[72],"our":[73,122],"approach":[74,104],"allows":[75],"user":[77],"to":[78],"define":[79],"both":[80],"task":[83],"(e.g.,":[84,98],"heavy":[85],"hitters,":[86],"entropy":[87],"estimation,":[88],"count":[89],"distinct,":[90],"etc.)":[91],"relevance":[97],"5PM-6PM)":[99],"at":[100],"query":[101],"time.":[102],"Our":[103],"provides":[105],"accuracy":[106],"guarantees":[107],"only":[111],"space-efficient":[112],"offers":[115],"capabilities.":[117],"Finally,":[118],"we":[119],"demonstrate":[120],"how":[121],"system":[123],"can":[124],"be":[125],"used":[126],"for":[127],"accurately":[128],"pinpointing":[129],"start":[131],"realistic":[134],"DDoS":[135],"attack.":[136]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":6},{"year":2016,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}