{"id":"https://openalex.org/W4403981019","doi":"https://doi.org/10.1145/3646547.3688426","title":"DarkSim: A similarity-based time-series analytic framework for darknet traffic","display_name":"DarkSim: A similarity-based time-series analytic framework for darknet traffic","publication_year":2024,"publication_date":"2024-11-01","ids":{"openalex":"https://openalex.org/W4403981019","doi":"https://doi.org/10.1145/3646547.3688426"},"language":"en","primary_location":{"id":"doi:10.1145/3646547.3688426","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3646547.3688426","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 ACM on Internet Measurement Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055179507","display_name":"Max Gao","orcid":"https://orcid.org/0000-0002-3708-2148"},"institutions":[{"id":"https://openalex.org/I2800935791","display_name":"UC San Diego Health System","ror":"https://ror.org/01kbfgm16","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I2800935791"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Max Gao","raw_affiliation_strings":["CAIDA/UC San Diego, San Diego, CA, USA"],"raw_orcid":"https://orcid.org/0000-0002-3708-2148","affiliations":[{"raw_affiliation_string":"CAIDA/UC San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I2800935791"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084986707","display_name":"Ricky K. P. Mok","orcid":"https://orcid.org/0000-0003-3300-9514"},"institutions":[{"id":"https://openalex.org/I2800935791","display_name":"UC San Diego Health System","ror":"https://ror.org/01kbfgm16","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I2800935791"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ricky Mok","raw_affiliation_strings":["CAIDA/UC San Diego, San Diego, CA, USA"],"raw_orcid":"https://orcid.org/0000-0003-3300-9514","affiliations":[{"raw_affiliation_string":"CAIDA/UC San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I2800935791"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044110819","display_name":"Esteban Carisimo","orcid":"https://orcid.org/0009-0002-1622-2305"},"institutions":[{"id":"https://openalex.org/I111979921","display_name":"Northwestern University","ror":"https://ror.org/000e0be47","country_code":"US","type":"education","lineage":["https://openalex.org/I111979921"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Esteban Carisimo","raw_affiliation_strings":["Northwestern University, Evanston, IL, USA"],"raw_orcid":"https://orcid.org/0009-0002-1622-2305","affiliations":[{"raw_affiliation_string":"Northwestern University, Evanston, IL, USA","institution_ids":["https://openalex.org/I111979921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111132214","display_name":"Eric Li","orcid":"https://orcid.org/0009-0001-0732-2390"},"institutions":[{"id":"https://openalex.org/I2800935791","display_name":"UC San Diego Health System","ror":"https://ror.org/01kbfgm16","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I2800935791"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eric Li","raw_affiliation_strings":["UC San Diego, San Diego, CA, USA"],"raw_orcid":"https://orcid.org/0009-0001-0732-2390","affiliations":[{"raw_affiliation_string":"UC San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I2800935791"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Shubham Kulkarni","orcid":"https://orcid.org/0009-0006-7845-8865"},"institutions":[{"id":"https://openalex.org/I2800935791","display_name":"UC San Diego Health System","ror":"https://ror.org/01kbfgm16","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I2800935791"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shubham Kulkarni","raw_affiliation_strings":["UC San Diego, San Diego, CA, USA"],"raw_orcid":"https://orcid.org/0009-0006-7845-8865","affiliations":[{"raw_affiliation_string":"UC San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I2800935791"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5072282499","display_name":"kc claffy","orcid":"https://orcid.org/0000-0003-4824-3493"},"institutions":[{"id":"https://openalex.org/I2800935791","display_name":"UC San Diego Health System","ror":"https://ror.org/01kbfgm16","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I2800935791"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"kc claffy","raw_affiliation_strings":["CAIDA/UC San Diego, San Diego, CA, USA"],"raw_orcid":"https://orcid.org/0000-0003-4824-3493","affiliations":[{"raw_affiliation_string":"CAIDA/UC San Diego, San Diego, CA, USA","institution_ids":["https://openalex.org/I2800935791"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.8733,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.86968591,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"241","last_page":"258"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12205","display_name":"Time Series Analysis and Forecasting","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.763740062713623},{"id":"https://openalex.org/keywords/series","display_name":"Series (stratigraphy)","score":0.5941815376281738},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.5692204236984253},{"id":"https://openalex.org/keywords/time-series","display_name":"Time series","score":0.44926026463508606},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4140605628490448},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.27570104598999023},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.18874487280845642}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.763740062713623},{"id":"https://openalex.org/C143724316","wikidata":"https://www.wikidata.org/wiki/Q312468","display_name":"Series (stratigraphy)","level":2,"score":0.5941815376281738},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.5692204236984253},{"id":"https://openalex.org/C151406439","wikidata":"https://www.wikidata.org/wiki/Q186588","display_name":"Time series","level":2,"score":0.44926026463508606},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4140605628490448},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.27570104598999023},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.18874487280845642},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3646547.3688426","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3646547.3688426","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2024 ACM on Internet Measurement Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1496765670","display_name":null,"funder_award_id":"OAC-2319959, OAC- 2131987, CNS-212039","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W69685990","https://openalex.org/W1965761857","https://openalex.org/W1988546288","https://openalex.org/W1989898472","https://openalex.org/W2027066766","https://openalex.org/W2028521711","https://openalex.org/W2032938251","https://openalex.org/W2053550965","https://openalex.org/W2081357650","https://openalex.org/W2098759488","https://openalex.org/W2099302229","https://openalex.org/W2101721819","https://openalex.org/W2128160875","https://openalex.org/W2137089646","https://openalex.org/W2152436591","https://openalex.org/W2198302135","https://openalex.org/W2237307454","https://openalex.org/W2401782741","https://openalex.org/W2516815969","https://openalex.org/W2598527303","https://openalex.org/W2700341059","https://openalex.org/W2743785144","https://openalex.org/W2745281314","https://openalex.org/W2768883253","https://openalex.org/W2771641736","https://openalex.org/W2775899375","https://openalex.org/W2792071264","https://openalex.org/W2892416982","https://openalex.org/W3071636952","https://openalex.org/W3087697243","https://openalex.org/W3100479002","https://openalex.org/W3194927259","https://openalex.org/W3211167919","https://openalex.org/W3215290469","https://openalex.org/W4207005940","https://openalex.org/W4307020343","https://openalex.org/W4307020404","https://openalex.org/W4312739050","https://openalex.org/W4324125091"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W2119012848","https://openalex.org/W2622688551","https://openalex.org/W1550175370","https://openalex.org/W1990205660"],"abstract_inverted_index":{"Network":[0,115],"Telescopes,":[1],"often":[2],"referred":[3],"to":[4,21,45,68,132,139,158,205],"as":[5,28],"darknets,":[6],"capture":[7],"unsolicited":[8],"traffic":[9,48,89],"directed":[10],"toward":[11],"advertised":[12],"but":[13],"unused":[14],"IP":[15],"spaces,":[16],"enabling":[17,92],"researchers":[18],"and":[19,33,127,145,177,182,194],"operators":[20],"monitor":[22],"malicious,":[23],"Internet-wide":[24],"network":[25,77,206],"phenomena":[26],"such":[27],"vulnerability":[29],"scanning,":[30],"botnet":[31],"propagation,":[32],"DoS":[34],"backscatter.":[35],"Detecting":[36],"these":[37],"events,":[38],"however,":[39],"has":[40],"become":[41],"increasingly":[42],"challenging":[43],"due":[44],"the":[46,72,106,113,151],"growing":[47],"volumes":[49],"that":[50,63,186],"telescopes":[51],"receive.":[52],"To":[53],"address":[54],"this,":[55],"we":[56],"introduce":[57],"DarkSim,":[58],"a":[59,192,202],"novel":[60],"analytic":[61],"framework":[62,98,197],"utilizes":[64],"Dynamic":[65],"Time":[66],"Warping":[67],"measure":[69],"similarities":[70],"within":[71],"high-dimensional":[73],"time":[74],"series":[75],"of":[76,130,134,142,148],"traffic.":[78],"DarkSim":[79,123,190],"combines":[80],"traditional":[81],"raw":[82],"packet":[83],"processing":[84],"with":[85,150],"statistical":[86],"approaches,":[87],"identifying":[88],"anomalies":[90],"while":[91],"rapid":[93],"time-to-insight.":[94],"We":[95,153],"evaluate":[96],"our":[97,119,164],"against":[99],"DarkGLASSO,":[100],"an":[101,128,168],"existing":[102],"method":[103],"based":[104],"on":[105,118],"Graphical":[107],"LASSO":[108],"algorithm,":[109],"using":[110],"data":[111],"from":[112],"UCSD":[114],"Telescope.":[116],"Based":[117],"manually":[120],"classified":[121],"detections,":[122],"showcased":[124],"perfect":[125],"precision":[126,144],"overlap":[129,147],"up":[131],"91%":[133],"DarkGLASSO's":[135,140],"detections":[136],"in":[137,163,170,180],"contrast":[138],"maximum":[141],"73.3%":[143],"detection":[146],"37.5%":[149],"former.":[152],"further":[154],"demonstrate":[155],"DarkSim's":[156],"capability":[157],"detect":[159],"two":[160],"real-world":[161],"events":[162],"case":[165],"studies:":[166],"(1)":[167],"increase":[169],"scanning":[171,184],"activities":[172],"surrounding":[173],"CVE":[174],"public":[175],"disclosures,":[176],"(2)":[178],"shifts":[179],"country-":[181],"network-level":[183],"patterns":[185],"indicate":[187],"aggressive":[188],"scanning.":[189],"provides":[191],"detailed":[193],"interpretable":[195],"analysis":[196],"for":[198],"time-series":[199],"anomalies,":[200],"representing":[201],"new":[203],"contribution":[204],"security":[207],"analytics.":[208]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}