{"id":"https://openalex.org/W2996250107","doi":"https://doi.org/10.1145/3393691.3394193","title":"I Know What You Did Last Summer","display_name":"I Know What You Did Last Summer","publication_year":2020,"publication_date":"2020-06-08","ids":{"openalex":"https://openalex.org/W2996250107","doi":"https://doi.org/10.1145/3393691.3394193","mag":"2996250107"},"language":"en","primary_location":{"id":"doi:10.1145/3393691.3394193","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3393691.3394193","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3393691.3394193","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Abstracts of the 2020 SIGMETRICS/Performance Joint International Conference on Measurement and Modeling of Computer Systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3393691.3394193","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5013689256","display_name":"Nikita Ivkin","orcid":null},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Nikita Ivkin","raw_affiliation_strings":["Amazon, New York, NY, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Amazon, New York, NY, USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000201729","display_name":"Ran Ben Basat","orcid":"https://orcid.org/0000-0003-0196-9190"},"institutions":[{"id":"https://openalex.org/I136199984","display_name":"Harvard University","ror":"https://ror.org/03vek6s52","country_code":"US","type":"education","lineage":["https://openalex.org/I136199984"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ran Ben Basat","raw_affiliation_strings":["Harvard University, Boston, MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Harvard University, Boston, MA, USA","institution_ids":["https://openalex.org/I136199984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015818714","display_name":"Zaoxing Liu","orcid":"https://orcid.org/0000-0002-9119-1679"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zaoxing Liu","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004051990","display_name":"Gil Einziger","orcid":"https://orcid.org/0000-0002-6051-608X"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Gil Einziger","raw_affiliation_strings":["Ben Gurion University, Negev, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ben Gurion University, Negev, Israel","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068251891","display_name":"Roy Friedman","orcid":"https://orcid.org/0000-0001-6460-9665"},"institutions":[{"id":"https://openalex.org/I174306211","display_name":"Technion \u2013 Israel Institute of Technology","ror":"https://ror.org/03qryx823","country_code":"IL","type":"education","lineage":["https://openalex.org/I174306211"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Roy Friedman","raw_affiliation_strings":["Technion, Haifa, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technion, Haifa, Israel","institution_ids":["https://openalex.org/I174306211"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053736722","display_name":"Vladimir Braverman","orcid":"https://orcid.org/0000-0001-7709-8753"},"institutions":[{"id":"https://openalex.org/I145311948","display_name":"Johns Hopkins University","ror":"https://ror.org/00za53h95","country_code":"US","type":"education","lineage":["https://openalex.org/I145311948"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vladimir Braverman","raw_affiliation_strings":["Johns Hopkins University, Baltimore, MD, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Johns Hopkins University, Baltimore, MD, USA","institution_ids":["https://openalex.org/I145311948"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5013689256"],"corresponding_institution_ids":["https://openalex.org/I1311688040"],"apc_list":null,"apc_paid":null,"fwci":1.2949,"has_fulltext":true,"cited_by_count":10,"citation_normalized_percentile":{"value":0.81304098,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"61","last_page":"62"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.459966242313385}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.459966242313385}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3393691.3394193","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3393691.3394193","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3393691.3394193","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Abstracts of the 2020 SIGMETRICS/Performance Joint International Conference on Measurement and Modeling of Computer Systems","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3393691.3394193","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3393691.3394193","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3393691.3394193","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Abstracts of the 2020 SIGMETRICS/Performance Joint International Conference on Measurement and Modeling of Computer Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3992686306","display_name":null,"funder_award_id":"1813487, CNS-1700521, CNS-1565343, CAREER-1652257","funder_id":"https://openalex.org/F4320315254","funder_display_name":"Innovative Research Group Project of the National Natural Science Foundation of China"},{"id":"https://openalex.org/G7617043676","display_name":null,"funder_award_id":"N00014-18-1-2364","funder_id":"https://openalex.org/F4320338399","funder_display_name":"Office of Academic Research, U.S. Naval Academy"}],"funders":[{"id":"https://openalex.org/F4320315254","display_name":"Innovative Research Group Project of the National Natural Science Foundation of China","ror":null},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"},{"id":"https://openalex.org/F4320338399","display_name":"Office of Academic Research, U.S. Naval Academy","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2996250107.pdf","grobid_xml":"https://content.openalex.org/works/W2996250107.grobid-xml"},"referenced_works_count":46,"referenced_works":["https://openalex.org/W233671965","https://openalex.org/W934716473","https://openalex.org/W1483965954","https://openalex.org/W1493892051","https://openalex.org/W1495100589","https://openalex.org/W1956340982","https://openalex.org/W1965972569","https://openalex.org/W1971731845","https://openalex.org/W1982092405","https://openalex.org/W1997642935","https://openalex.org/W2048968742","https://openalex.org/W2069414131","https://openalex.org/W2080745194","https://openalex.org/W2089797683","https://openalex.org/W2096013126","https://openalex.org/W2098366185","https://openalex.org/W2099657323","https://openalex.org/W2107917944","https://openalex.org/W2112320294","https://openalex.org/W2124646923","https://openalex.org/W2128846062","https://openalex.org/W2144622427","https://openalex.org/W2146189323","https://openalex.org/W2152489475","https://openalex.org/W2155915275","https://openalex.org/W2157827659","https://openalex.org/W2290252992","https://openalex.org/W2291609542","https://openalex.org/W2293755460","https://openalex.org/W2479510968","https://openalex.org/W2487095677","https://openalex.org/W2562649904","https://openalex.org/W2571366332","https://openalex.org/W2737988660","https://openalex.org/W2742439074","https://openalex.org/W2744693751","https://openalex.org/W2792538726","https://openalex.org/W2798838168","https://openalex.org/W2868447023","https://openalex.org/W2895155020","https://openalex.org/W2949194901","https://openalex.org/W2963458398","https://openalex.org/W2963799254","https://openalex.org/W2967106834","https://openalex.org/W2991999319","https://openalex.org/W4238172360"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W2382290278","https://openalex.org/W2478288626","https://openalex.org/W2350741829","https://openalex.org/W2530322880","https://openalex.org/W1596801655"],"abstract_inverted_index":{"Modern":[0],"telemetry":[1],"systems":[2],"require":[3],"advanced":[4],"analytic":[5],"capabilities":[6],"such":[7,114],"as":[8,58],"drill":[9],"down":[10],"queries.":[11],"These":[12],"queries":[13],"can":[14,122],"be":[15,123],"used":[16,124],"to":[17,77,125],"detect":[18],"the":[19,30,35,46,53,75,80,91,108,120,128],"beginning":[20,129],"and":[21,63,67,90,106],"end":[22],"of":[23,56,60,94,130],"a":[24,131],"network":[25],"anomaly":[26],"by":[27],"efficiently":[28],"refining":[29],"search":[31],"space.":[32],"We":[33],"present":[34],"first":[36],"integral":[37],"solution":[38,111],"that":[39,112],"(i)":[40],"enables":[41],"multiple":[42],"measurement":[43,81],"tasks":[44],"inside":[45],"same":[47],"data":[48],"structure,":[49],"(ii)":[50],"supports":[51],"specifying":[52],"time":[54,92],"frame":[55,93],"interest":[57],"part":[59],"its":[61],"queries,":[62],"(iii)":[64],"is":[65,107],"sketch-based":[66],"thus":[68],"space":[69],"efficient.":[70],"Namely,":[71],"our":[72],"approach":[73,102],"allows":[74],"user":[76],"define":[78],"both":[79],"task":[82],"(e.g.,":[83,96],"heavy":[84],"hitters,":[85],"entropy":[86],"estimation,":[87],"cardinality":[88],"estimation)":[89],"relevance":[95],"5PM-6PM)":[97],"at":[98],"query":[99],"time.":[100],"Our":[101],"provides":[103],"accuracy":[104],"guarantees":[105],"only":[109],"space-efficient":[110],"offers":[113],"capabilities.":[115],"Finally,":[116],"we":[117],"demonstrate":[118],"how":[119],"algorithm":[121],"accurately":[126],"pinpoint":[127],"realistic":[132],"DDoS":[133],"attack.":[134]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":6},{"year":2019,"cited_by_count":1}],"updated_date":"2026-04-28T14:05:53.105641","created_date":"2025-10-10T00:00:00"}