{"id":"https://openalex.org/W7116294817","doi":"https://doi.org/10.1145/3748522.3779832","title":"TinySEED: A Lightweight Transformer Architecture with Channel-Attention for DDoS Detection","display_name":"TinySEED: A Lightweight Transformer Architecture with Channel-Attention for DDoS Detection","publication_year":2026,"publication_date":"2026-03-23","ids":{"openalex":"https://openalex.org/W7116294817","doi":"https://doi.org/10.1145/3748522.3779832"},"language":null,"primary_location":{"id":"doi:10.1145/3748522.3779832","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3748522.3779832","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 41st ACM/SIGAPP Symposium on Applied Computing","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3748522.3779832","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120901193","display_name":"Yinuo Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I90267481","display_name":"Ume\u00e5 University","ror":"https://ror.org/05kb8h459","country_code":"SE","type":"education","lineage":["https://openalex.org/I90267481"]}],"countries":["SE"],"is_corresponding":true,"raw_author_name":"Yinuo Zhang","raw_affiliation_strings":["Department of Computing Science, Ume\u00e5 University, Ume\u00e5, Sweden"],"raw_orcid":"https://orcid.org/0009-0000-4176-630X","affiliations":[{"raw_affiliation_string":"Department of Computing Science, Ume\u00e5 University, Ume\u00e5, Sweden","institution_ids":["https://openalex.org/I90267481"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101615846","display_name":"Zulfiqar Ahmad Khan","orcid":"https://orcid.org/0000-0003-3797-9649"},"institutions":[{"id":"https://openalex.org/I90267481","display_name":"Ume\u00e5 University","ror":"https://ror.org/05kb8h459","country_code":"SE","type":"education","lineage":["https://openalex.org/I90267481"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Zulfiqar A. Khan","raw_affiliation_strings":["Department of Computing Science, Ume\u00e5 University, Ume\u00e5, Sweden"],"raw_orcid":"https://orcid.org/0000-0003-3797-9649","affiliations":[{"raw_affiliation_string":"Department of Computing Science, Ume\u00e5 University, Ume\u00e5, Sweden","institution_ids":["https://openalex.org/I90267481"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068181564","display_name":"Simin Nadjm\u2010Tehrani","orcid":"https://orcid.org/0000-0002-1485-0802"},"institutions":[{"id":"https://openalex.org/I102134673","display_name":"Link\u00f6ping University","ror":"https://ror.org/05ynxx418","country_code":"SE","type":"education","lineage":["https://openalex.org/I102134673"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Simin Nadjm-Tehrani","raw_affiliation_strings":["Dept. of Comp and Info Sc, Link\u00f6ping University, Link\u00f6ping, Sweden"],"raw_orcid":"https://orcid.org/0000-0002-1485-0802","affiliations":[{"raw_affiliation_string":"Dept. of Comp and Info Sc, Link\u00f6ping University, Link\u00f6ping, Sweden","institution_ids":["https://openalex.org/I102134673"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5120884408","display_name":"Monowar Bhuyan","orcid":null},"institutions":[{"id":"https://openalex.org/I90267481","display_name":"Ume\u00e5 University","ror":"https://ror.org/05kb8h459","country_code":"SE","type":"education","lineage":["https://openalex.org/I90267481"]}],"countries":["SE"],"is_corresponding":false,"raw_author_name":"Monowar Bhuyan","raw_affiliation_strings":["Department of Computing Science, Ume\u00e5 University, Ume\u00e5, Sweden"],"raw_orcid":"https://orcid.org/0000-0002-9842-7840","affiliations":[{"raw_affiliation_string":"Department of Computing Science, Ume\u00e5 University, Ume\u00e5, Sweden","institution_ids":["https://openalex.org/I90267481"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5120901193"],"corresponding_institution_ids":["https://openalex.org/I90267481"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.01195819,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"395","last_page":"404"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.857699990272522,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.857699990272522,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.03189999982714653,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.014700000174343586,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8266000151634216},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5045999884605408},{"id":"https://openalex.org/keywords/embedding","display_name":"Embedding","score":0.4729999899864197},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.4722999930381775},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.44670000672340393},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4401000142097473},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4009999930858612}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8266000151634216},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7253999710083008},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5045999884605408},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.4729999899864197},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.4722999930381775},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.44670000672340393},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4401000142097473},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4009999930858612},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.37549999356269836},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37220001220703125},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3578000068664551},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.353300005197525},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.3449000120162964},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.3440000116825104},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.3343999981880188},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.32249999046325684},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2948000133037567},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2939999997615814},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.28529998660087585},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2782000005245209},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.26260000467300415},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.2624000012874603}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3748522.3779832","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3748522.3779832","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 41st ACM/SIGAPP Symposium on Applied Computing","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3748522.3779832","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3748522.3779832","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 41st ACM/SIGAPP Symposium on Applied Computing","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.6369757652282715,"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Uncovering":[0],"stealthy":[1],"Distributed":[2],"Denial":[3],"of":[4,151],"Service":[5],"(DDoS)":[6],"attacks":[7,79],"at":[8],"the":[9,94,149],"network-edge":[10,171],"remains":[11],"challenging":[12],"due":[13],"to":[14,21,96,159],"increased":[15],"system":[16],"complexity":[17],"and":[18,69,80,102,131,163],"users'":[19],"access":[20],"digital":[22],"services.":[23],"Therefore,":[24],"in":[25,170],"this":[26],"work,":[27],"we":[28,83],"develop":[29],"TinySEED,":[30],"a":[31,43,56,161],"lightweight":[32],"yet":[33],"accurate":[34],"DDoS":[35,78,113,168],"detection":[36,114,137,169],"model":[37,67,95],"based":[38],"on":[39,139],"TinyBERT":[40,47],"that":[41,59,105,121],"integrates":[42],"channel":[44,85,157],"attention":[45,158],"mechanism.":[46],"is":[48],"developed":[49],"via":[50],"knowledge":[51],"distillation":[52,155],"from":[53],"BERT,":[54],"providing":[55],"compact":[57],"backbone":[58],"preserves":[60],"key":[61],"representational":[62],"capacity":[63],"while":[64,141],"significantly":[65],"reducing":[66],"size":[68],"inference":[70,144],"latency.":[71,145],"To":[72],"further":[73],"enhance":[74],"discriminative":[75],"power":[76],"between":[77,100],"benign":[81,101],"traces,":[82],"integrate":[84],"attention,":[86],"which":[87],"adaptively":[88],"re-weights":[89],"embedding":[90],"channels":[91],"(dimensions),":[92],"enabling":[93],"capture":[97],"fine-grained":[98],"distinctions":[99],"malicious":[103],"flows":[104],"are":[106],"often":[107],"overlooked":[108],"by":[109],"distilled":[110],"transformers.":[111],"Extensive":[112],"experiments":[115],"across":[116],"five":[117],"benchmark":[118],"datasets":[119],"demonstrate":[120],"TinySEED":[122,134],"consistently":[123],"outperforms":[124],"conventional":[125],"machine":[126],"learning":[127],"methods,":[128],"neural":[129],"architectures,":[130],"transformer-based":[132],"baselines.":[133],"achieves":[135],"higher":[136],"accuracy":[138],"benchmarks":[140],"maintaining":[142],"low":[143],"These":[146],"findings":[147],"highlight":[148],"effectiveness":[150],"combining":[152],"efficient":[153],"transformer":[154],"with":[156],"achieve":[160],"practical":[162],"robust":[164],"solution":[165],"for":[166],"low-latency":[167],"environments.":[172]},"counts_by_year":[],"updated_date":"2026-06-10T14:10:52.464848","created_date":"2025-12-21T00:00:00"}