{"id":"https://openalex.org/W3093697207","doi":"https://doi.org/10.1145/3419394.3423650","title":"A Haystack Full of Needles","display_name":"A Haystack Full of Needles","publication_year":2020,"publication_date":"2020-10-22","ids":{"openalex":"https://openalex.org/W3093697207","doi":"https://doi.org/10.1145/3419394.3423650","mag":"3093697207"},"language":"en","primary_location":{"id":"doi:10.1145/3419394.3423650","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3419394.3423650","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3419394.3423650","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Internet Measurement Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3419394.3423650","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5062640874","display_name":"Said Jawad Saidi","orcid":"https://orcid.org/0000-0002-8846-8905"},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Said Jawad Saidi","raw_affiliation_strings":["Max Planck Institute for Informatics"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Max Planck Institute for Informatics","institution_ids":["https://openalex.org/I4210109712"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055748512","display_name":"Anna Maria Mandalari","orcid":"https://orcid.org/0000-0002-6715-101X"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Anna Maria Mandalari","raw_affiliation_strings":["Imperial College London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Imperial College London","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036852747","display_name":"Roman Kolcun","orcid":null},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Roman Kolcun","raw_affiliation_strings":["Imperial College London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Imperial College London","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043326652","display_name":"Hamed Haddadi","orcid":"https://orcid.org/0000-0002-5895-8903"},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Hamed Haddadi","raw_affiliation_strings":["Imperial College London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Imperial College London","institution_ids":["https://openalex.org/I47508984"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051009174","display_name":"Daniel J. Dubois","orcid":"https://orcid.org/0000-0002-8115-898X"},"institutions":[{"id":"https://openalex.org/I87182695","display_name":"Universidad del Noreste","ror":"https://ror.org/02ahky613","country_code":"MX","type":"education","lineage":["https://openalex.org/I87182695"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Daniel J. Dubois","raw_affiliation_strings":["Northeastern University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northeastern University","institution_ids":["https://openalex.org/I87182695"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073676654","display_name":"David Choffnes","orcid":"https://orcid.org/0000-0001-7825-7226"},"institutions":[{"id":"https://openalex.org/I87182695","display_name":"Universidad del Noreste","ror":"https://ror.org/02ahky613","country_code":"MX","type":"education","lineage":["https://openalex.org/I87182695"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"David Choffnes","raw_affiliation_strings":["Northeastern University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Northeastern University","institution_ids":["https://openalex.org/I87182695"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005247877","display_name":"Georgios Smaragdakis","orcid":"https://orcid.org/0000-0002-4127-3617"},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]},{"id":"https://openalex.org/I4577782","display_name":"Technische Universit\u00e4t Berlin","ror":"https://ror.org/03v4gjf40","country_code":"DE","type":"education","lineage":["https://openalex.org/I4577782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Georgios Smaragdakis","raw_affiliation_strings":["TU Berlin Max Planck Institute for Informatics"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"TU Berlin Max Planck Institute for Informatics","institution_ids":["https://openalex.org/I4210109712","https://openalex.org/I4577782"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027274731","display_name":"Anja Feldmann","orcid":"https://orcid.org/0000-0002-5530-6993"},"institutions":[{"id":"https://openalex.org/I4210109712","display_name":"Max Planck Institute for Informatics","ror":"https://ror.org/01w19ak89","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210109712"]},{"id":"https://openalex.org/I91712215","display_name":"Saarland University","ror":"https://ror.org/01jdpyv68","country_code":"DE","type":"education","lineage":["https://openalex.org/I91712215"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Anja Feldmann","raw_affiliation_strings":["Max Planck Institute for Informatics/Saarland University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Max Planck Institute for Informatics/Saarland University","institution_ids":["https://openalex.org/I4210109712","https://openalex.org/I91712215"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":64,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"87","last_page":"100"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/haystack","display_name":"Haystack","score":0.9397444128990173},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7013206481933594},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.6286048889160156},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.5912132859230042},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5887171030044556},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5371452569961548},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5174399018287659},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.5069973468780518},{"id":"https://openalex.org/keywords/trace","display_name":"TRACE (psycholinguistics)","score":0.5011436939239502},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.47578680515289307},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3898726999759674},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.08264622092247009}],"concepts":[{"id":"https://openalex.org/C13424479","wikidata":"https://www.wikidata.org/wiki/Q5687237","display_name":"Haystack","level":2,"score":0.9397444128990173},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7013206481933594},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.6286048889160156},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5912132859230042},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5887171030044556},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5371452569961548},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5174399018287659},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.5069973468780518},{"id":"https://openalex.org/C75291252","wikidata":"https://www.wikidata.org/wiki/Q1315756","display_name":"TRACE (psycholinguistics)","level":2,"score":0.5011436939239502},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.47578680515289307},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3898726999759674},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.08264622092247009},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3419394.3423650","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3419394.3423650","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3419394.3423650","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Internet Measurement Conference","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3419394.3423650","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3419394.3423650","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3419394.3423650","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM Internet Measurement Conference","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.4000000059604645,"id":"https://metadata.un.org/sdg/9"}],"awards":[{"id":"https://openalex.org/G1071269414","display_name":"CNS Core: Small: BehavIoT: Modeling and Controlling Internet of Things Behavior Using Netowork-Inferred State Machines","funder_award_id":"1909020","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G1117074214","display_name":"Databox: Privacy-Aware Infrastructure for Managing Personal Data","funder_award_id":"EP/N028260/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G1396068024","display_name":null,"funder_award_id":"EP/N028260/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G2040516702","display_name":"DADA","funder_award_id":"EP/R03351X/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G469275217","display_name":null,"funder_award_id":"EP/R03351X/1, EP/N028260/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G5557881737","display_name":null,"funder_award_id":"ERC-StG-679158","funder_id":"https://openalex.org/F4320338352","funder_display_name":"FP7 Ideas: European Research Council"},{"id":"https://openalex.org/G6287572005","display_name":null,"funder_award_id":"CNS-1909020","funder_id":"https://openalex.org/F4320322898","funder_display_name":"Shota Rustaveli National Science Foundation"},{"id":"https://openalex.org/G8482580346","display_name":null,"funder_award_id":"EP/R03351X/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320322898","display_name":"Shota Rustaveli National Science Foundation","ror":"https://ror.org/00xc87681"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"},{"id":"https://openalex.org/F4320338352","display_name":"FP7 Ideas: European Research Council","ror":"https://ror.org/0472cxd90"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3093697207.pdf","grobid_xml":"https://content.openalex.org/works/W3093697207.grobid-xml"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W1979264387","https://openalex.org/W2001637908","https://openalex.org/W2062082809","https://openalex.org/W2114398364","https://openalex.org/W2350778671","https://openalex.org/W2485229854","https://openalex.org/W2620213176","https://openalex.org/W2748868501","https://openalex.org/W2811263310","https://openalex.org/W2888505697","https://openalex.org/W2901016790","https://openalex.org/W2902322559","https://openalex.org/W2921669466","https://openalex.org/W2923481942","https://openalex.org/W2941622703","https://openalex.org/W2964344666","https://openalex.org/W2968383486","https://openalex.org/W2974043855","https://openalex.org/W2980730236","https://openalex.org/W2990242243","https://openalex.org/W3003127705","https://openalex.org/W3005645561","https://openalex.org/W3011828695","https://openalex.org/W3016412651","https://openalex.org/W3034480370","https://openalex.org/W3046256519","https://openalex.org/W3046538157","https://openalex.org/W3082482205","https://openalex.org/W3096391524","https://openalex.org/W3100966310","https://openalex.org/W6743493502","https://openalex.org/W6781398666","https://openalex.org/W6906637684"],"related_works":["https://openalex.org/W4253878822","https://openalex.org/W3030221677","https://openalex.org/W1965563707","https://openalex.org/W4210692028","https://openalex.org/W1736550718","https://openalex.org/W2808729870","https://openalex.org/W2479343091","https://openalex.org/W2278064783","https://openalex.org/W3174858427","https://openalex.org/W1972480475"],"abstract_inverted_index":{"Consumer":[0],"Internet":[1,79],"of":[2,111],"Things":[3],"(IoT)":[4],"devices":[5,57,106],"are":[6,58],"extremely":[7],"popular,":[8],"providing":[9],"users":[10],"with":[11,26,32,113],"rich":[12],"and":[13,29,98,101],"diverse":[14],"functionalities,":[15],"from":[16,104],"voice":[17],"assistants":[18],"to":[19,48,53,96],"home":[20],"appliances.":[21],"These":[22],"functionalities":[23],"often":[24],"come":[25],"significant":[27],"privacy":[28],"security":[30],"risks,":[31],"notable":[33],"recent":[34],"large-scale":[35],"coordinated":[36],"global":[37],"attacks":[38],"disrupting":[39],"large":[40],"service":[41,80],"providers.":[42],"Thus,":[43],"an":[44,94],"important":[45],"first":[46],"step":[47],"address":[49],"these":[50],"risks":[51],"is":[52,71,91],"know":[54],"what":[55],"IoT":[56,105],"where":[59],"in":[60],"a":[61,68],"network.":[62],"While":[63],"some":[64],"limited":[65],"solutions":[66],"exist,":[67],"key":[69],"question":[70],"whether":[72],"device":[73],"discovery":[74],"can":[75],"be":[76],"done":[77],"by":[78,108],"providers":[81],"that":[82],"only":[83],"see":[84],"sampled":[85,114],"flow":[86],"statistics.":[87],"In":[88],"particular,":[89],"it":[90],"challenging":[92],"for":[93],"ISP":[95],"efficiently":[97],"effectively":[99],"track":[100],"trace":[102],"activity":[103],"deployed":[107],"its":[109],"millions":[110],"subscribers---all":[112],"network":[115],"data.":[116]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":11},{"year":2022,"cited_by_count":10},{"year":2021,"cited_by_count":14},{"year":2020,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}