{"id":"https://openalex.org/W7155536518","doi":"https://doi.org/10.1145/3767295.3769337","title":"PatternSketch: General and Runtime Reconfigurable Time-series Network Traffic Pattern Detection","display_name":"PatternSketch: General and Runtime Reconfigurable Time-series Network Traffic Pattern Detection","publication_year":2026,"publication_date":"2026-04-24","ids":{"openalex":"https://openalex.org/W7155536518","doi":"https://doi.org/10.1145/3767295.3769337"},"language":null,"primary_location":{"id":"doi:10.1145/3767295.3769337","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3767295.3769337","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 21st European Conference on Computer Systems","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3767295.3769337","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071781461","display_name":"Yang Du","orcid":"https://orcid.org/0000-0003-3012-0778"},"institutions":[{"id":"https://openalex.org/I3923682","display_name":"Soochow University","ror":"https://ror.org/05t8y2r12","country_code":"CN","type":"education","lineage":["https://openalex.org/I3923682"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yang Du","raw_affiliation_strings":["Soochow University, Suzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-3012-0778","affiliations":[{"raw_affiliation_string":"Soochow University, Suzhou, China","institution_ids":["https://openalex.org/I3923682"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134536034","display_name":"Dan Wang","orcid":"https://orcid.org/0009-0001-6572-2894"},"institutions":[{"id":"https://openalex.org/I3923682","display_name":"Soochow University","ror":"https://ror.org/05t8y2r12","country_code":"CN","type":"education","lineage":["https://openalex.org/I3923682"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dan Wang","raw_affiliation_strings":["Soochow University, Suzhou, China"],"raw_orcid":"https://orcid.org/0009-0001-6572-2894","affiliations":[{"raw_affiliation_string":"Soochow University, Suzhou, China","institution_ids":["https://openalex.org/I3923682"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101998852","display_name":"He Huang","orcid":"https://orcid.org/0000-0003-2768-6607"},"institutions":[{"id":"https://openalex.org/I3923682","display_name":"Soochow University","ror":"https://ror.org/05t8y2r12","country_code":"CN","type":"education","lineage":["https://openalex.org/I3923682"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"He Huang","raw_affiliation_strings":["Soochow University, Suzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-2768-6607","affiliations":[{"raw_affiliation_string":"Soochow University, Suzhou, China","institution_ids":["https://openalex.org/I3923682"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100332172","display_name":"Hanwen Zhang","orcid":"https://orcid.org/0000-0001-7568-5647"},"institutions":[{"id":"https://openalex.org/I3923682","display_name":"Soochow University","ror":"https://ror.org/05t8y2r12","country_code":"CN","type":"education","lineage":["https://openalex.org/I3923682"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hanwen Zhang","raw_affiliation_strings":["Soochow University, Suzhou, China"],"raw_orcid":"https://orcid.org/0009-0003-6518-2386","affiliations":[{"raw_affiliation_string":"Soochow University, Suzhou, China","institution_ids":["https://openalex.org/I3923682"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025646850","display_name":"Jianzhi Tang","orcid":"https://orcid.org/0000-0003-3206-6912"},"institutions":[{"id":"https://openalex.org/I3923682","display_name":"Soochow University","ror":"https://ror.org/05t8y2r12","country_code":"CN","type":"education","lineage":["https://openalex.org/I3923682"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianzhi Tang","raw_affiliation_strings":["Soochow University, Suzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-3206-6912","affiliations":[{"raw_affiliation_string":"Soochow University, Suzhou, China","institution_ids":["https://openalex.org/I3923682"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100602821","display_name":"Fu Xiao","orcid":"https://orcid.org/0000-0003-1815-2793"},"institutions":[{"id":"https://openalex.org/I41198531","display_name":"Nanjing University of Posts and Telecommunications","ror":"https://ror.org/043bpky34","country_code":"CN","type":"education","lineage":["https://openalex.org/I41198531"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fu Xiao","raw_affiliation_strings":["Nanjing University of Posts and Telecommunications, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0003-1815-2793","affiliations":[{"raw_affiliation_string":"Nanjing University of Posts and Telecommunications, Nanjing, China","institution_ids":["https://openalex.org/I41198531"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5110363717","display_name":"Sun Y","orcid":null},"institutions":[{"id":"https://openalex.org/I3923682","display_name":"Soochow University","ror":"https://ror.org/05t8y2r12","country_code":"CN","type":"education","lineage":["https://openalex.org/I3923682"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu-E Sun","raw_affiliation_strings":["Soochow University, Suzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-0018-4810","affiliations":[{"raw_affiliation_string":"Soochow University, Suzhou, China","institution_ids":["https://openalex.org/I3923682"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5071781461"],"corresponding_institution_ids":["https://openalex.org/I3923682"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.96283784,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"780","last_page":"800"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.24770000576972961,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.24770000576972961,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.19290000200271606,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.06700000166893005,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.31779998540878296},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.2948000133037567},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.272599995136261},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.257999986410141}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6212000250816345},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.35420000553131104},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3515999913215637},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.31779998540878296},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.2948000133037567},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.272599995136261},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2587999999523163},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.257999986410141},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.2475000023841858},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.24009999632835388}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3767295.3769337","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3767295.3769337","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 21st European Conference on Computer Systems","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3767295.3769337","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3767295.3769337","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 21st European Conference on Computer Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1116544975","display_name":null,"funder_award_id":"62332013","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1832054109","display_name":null,"funder_award_id":"62202322","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3864712285","display_name":null,"funder_award_id":"62502332","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7131776892","display_name":null,"funder_award_id":"62572337","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":59,"referenced_works":["https://openalex.org/W1994926493","https://openalex.org/W2012549717","https://openalex.org/W2071989194","https://openalex.org/W2080234606","https://openalex.org/W2138326128","https://openalex.org/W2154267842","https://openalex.org/W2155746806","https://openalex.org/W2159279524","https://openalex.org/W2159575389","https://openalex.org/W2337150356","https://openalex.org/W2479510968","https://openalex.org/W2487095677","https://openalex.org/W2530137915","https://openalex.org/W2562676961","https://openalex.org/W2585321824","https://openalex.org/W2795530455","https://openalex.org/W2808923818","https://openalex.org/W2834288129","https://openalex.org/W2864823780","https://openalex.org/W2910711617","https://openalex.org/W2969998124","https://openalex.org/W3016354376","https://openalex.org/W3031847392","https://openalex.org/W3046351827","https://openalex.org/W3108496275","https://openalex.org/W3163459029","https://openalex.org/W3169567991","https://openalex.org/W3175189084","https://openalex.org/W3189127798","https://openalex.org/W4211131942","https://openalex.org/W4283213280","https://openalex.org/W4289533821","https://openalex.org/W4290991708","https://openalex.org/W4292262069","https://openalex.org/W4312311177","https://openalex.org/W4312633946","https://openalex.org/W4312797924","https://openalex.org/W4313594020","https://openalex.org/W4319865713","https://openalex.org/W4367666238","https://openalex.org/W4376464605","https://openalex.org/W4376607999","https://openalex.org/W4380433205","https://openalex.org/W4380551808","https://openalex.org/W4384304134","https://openalex.org/W4385270163","https://openalex.org/W4385329419","https://openalex.org/W4385679864","https://openalex.org/W4386702598","https://openalex.org/W4388620448","https://openalex.org/W4399039119","https://openalex.org/W4401176463","https://openalex.org/W4401176697","https://openalex.org/W4401508482","https://openalex.org/W4401508668","https://openalex.org/W4402896858","https://openalex.org/W4402897070","https://openalex.org/W4403123209","https://openalex.org/W4406658594"],"related_works":[],"abstract_inverted_index":{"Network":[0],"traffic":[1,11],"measurement":[2,21],"is":[3,46],"indispensable":[4],"for":[5,43],"many":[6],"network":[7],"management":[8],"tasks.":[9],"Time-series":[10],"pattern":[12,45,70,90],"detection":[13,71,79,91],"extends":[14],"the":[15,78,89,97,105,115,167],"benefits":[16],"of":[17,80,108,141,143,170,194],"traditional":[18],"single-period":[19],"flow":[20,25],"by":[22],"revealing":[23],"dynamic":[24],"behaviors,":[26],"but":[27],"also":[28],"yields":[29],"higher":[30],"complexity.":[31],"When":[32],"multiple":[33,134],"patterns":[34,82,110,135,182],"must":[35],"be":[36],"monitored":[37],"simultaneously,":[38],"building":[39],"a":[40,73,84],"separate":[41],"sketch":[42],"each":[44],"prohibitive":[47],"since":[48],"programmable":[49],"switches":[50],"typically":[51],"allow":[52],"only":[53,139],"one":[54],"resource-intensive":[55],"sketch.":[56,75],"In":[57],"this":[58],"paper,":[59],"we":[60],"propose":[61],"PatternSketch,":[62],"which":[63],"enables":[64],"general":[65],"and":[66,87,150,185],"dynamically":[67],"reconfigurable":[68],"time-series":[69,181],"within":[72],"single":[74],"PatternSketch":[76,127,171],"unifies":[77],"diverse":[81],"with":[83,189],"Pattern":[85],"Automaton":[86],"decomposes":[88],"process":[92],"into":[93],"two":[94],"phases":[95],"in":[96],"data":[98],"plane,":[99],"while":[100,137,177],"allowing":[101],"operators":[102],"to":[103,155],"reconfigure":[104],"active":[106],"set":[107],"monitoring":[109],"at":[111,130],"runtime":[112],"without":[113],"taking":[114],"switch":[116,124],"offline.":[117],"Our":[118],"implementation":[119],"on":[120,161],"an":[121],"Intel":[122],"Tofino":[123],"demonstrates":[125],"that":[126,166],"can":[128],"operate":[129],"line":[131],"rate,":[132],"detecting":[133,179],"concurrently":[136],"using":[138],"tens":[140],"kilobytes":[142],"SRAM.":[144],"This":[145],"significantly":[146],"reduces":[147],"both":[148],"computational":[149],"storage":[151],"resource":[152],"consumption":[153],"compared":[154],"deploying":[156],"multiple,":[157],"pattern-specific":[158],"sketches.":[159],"Evaluations":[160],"four":[162],"real-world":[163],"datasets":[164],"show":[165],"hardware":[168],"version":[169],"maintains":[172],"over":[173],"90%":[174],"F1":[175],"scores":[176],"simultaneously":[178],"six":[180],"(three":[183],"representative":[184],"three":[186],"newly":[187],"proposed)":[188],"as":[190,192],"little":[191],"200KB":[193],"memory.":[195]},"counts_by_year":[],"updated_date":"2026-04-29T09:16:38.111599","created_date":"2026-04-25T00:00:00"}