{"id":"https://openalex.org/W4410486487","doi":"https://doi.org/10.1145/3717867.3717894","title":"Early Detection of DDoS Attacks via Online Social Networks Analysis","display_name":"Early Detection of DDoS Attacks via Online Social Networks Analysis","publication_year":2025,"publication_date":"2025-05-19","ids":{"openalex":"https://openalex.org/W4410486487","doi":"https://doi.org/10.1145/3717867.3717894"},"language":"en","primary_location":{"id":"doi:10.1145/3717867.3717894","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3717867.3717894","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3717867.3717894","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th ACM Web Science Conference 2025","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3717867.3717894","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049708885","display_name":"Ines Abbes","orcid":"https://orcid.org/0000-0001-6222-979X"},"institutions":[{"id":"https://openalex.org/I4210144839","display_name":"Hamad bin Khalifa University","ror":"https://ror.org/03eyq4y97","country_code":"QA","type":"education","lineage":["https://openalex.org/I4210144839"]}],"countries":["QA"],"is_corresponding":true,"raw_author_name":"Ines Abbes","raw_affiliation_strings":["Hamad Bin Khalifa University, Doha, Qatar"],"raw_orcid":"https://orcid.org/0000-0001-6222-979X","affiliations":[{"raw_affiliation_string":"Hamad Bin Khalifa University, Doha, Qatar","institution_ids":["https://openalex.org/I4210144839"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044988415","display_name":"Maurantonio Caprolu","orcid":"https://orcid.org/0000-0001-8237-0539"},"institutions":[{"id":"https://openalex.org/I71920554","display_name":"King Abdullah University of Science and Technology","ror":"https://ror.org/01q3tbs38","country_code":"SA","type":"education","lineage":["https://openalex.org/I71920554"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Maurantonio Caprolu","raw_affiliation_strings":["King Abdullah University of Science and Technology, Thuwal, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0001-8237-0539","affiliations":[{"raw_affiliation_string":"King Abdullah University of Science and Technology, Thuwal, Saudi Arabia","institution_ids":["https://openalex.org/I71920554"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065932621","display_name":"Roberto Di Pietro","orcid":"https://orcid.org/0000-0003-1909-0336"},"institutions":[{"id":"https://openalex.org/I71920554","display_name":"King Abdullah University of Science and Technology","ror":"https://ror.org/01q3tbs38","country_code":"SA","type":"education","lineage":["https://openalex.org/I71920554"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Roberto Di Pietro","raw_affiliation_strings":["King Abdullah University of Science and Technology, Thuwal, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0003-1909-0336","affiliations":[{"raw_affiliation_string":"King Abdullah University of Science and Technology, Thuwal, Saudi Arabia","institution_ids":["https://openalex.org/I71920554"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5049708885"],"corresponding_institution_ids":["https://openalex.org/I4210144839"],"apc_list":null,"apc_paid":null,"fwci":1.3517,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.81624122,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"11"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7849330902099609},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6695762872695923},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.5528287291526794},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5258135199546814},{"id":"https://openalex.org/keywords/trinoo","display_name":"Trinoo","score":0.46036162972450256},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.39172881841659546},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.22049027681350708},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.1552427113056183}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7849330902099609},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6695762872695923},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.5528287291526794},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5258135199546814},{"id":"https://openalex.org/C43639116","wikidata":"https://www.wikidata.org/wiki/Q7843050","display_name":"Trinoo","level":5,"score":0.46036162972450256},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.39172881841659546},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.22049027681350708},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.1552427113056183}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3717867.3717894","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3717867.3717894","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3717867.3717894","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th ACM Web Science Conference 2025","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3717867.3717894","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3717867.3717894","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3717867.3717894","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th ACM Web Science Conference 2025","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320322320","display_name":"King Abdullah University of Science and Technology","ror":"https://ror.org/01q3tbs38"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4410486487.pdf","grobid_xml":"https://content.openalex.org/works/W4410486487.grobid-xml"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W1496710472","https://openalex.org/W1509894598","https://openalex.org/W2018026534","https://openalex.org/W2123661878","https://openalex.org/W2162969618","https://openalex.org/W2270414365","https://openalex.org/W2464730619","https://openalex.org/W2551928050","https://openalex.org/W2743411104","https://openalex.org/W2805270360","https://openalex.org/W2811404699","https://openalex.org/W2962892082","https://openalex.org/W2963341956","https://openalex.org/W2979826702","https://openalex.org/W3009129067","https://openalex.org/W3146828429","https://openalex.org/W3175375249","https://openalex.org/W4229000316","https://openalex.org/W4238634189","https://openalex.org/W4239053228","https://openalex.org/W4285507209","https://openalex.org/W4313531834","https://openalex.org/W4316039105","https://openalex.org/W4323663595","https://openalex.org/W4367046455","https://openalex.org/W4367046686","https://openalex.org/W4378900947","https://openalex.org/W4386361574","https://openalex.org/W4398186423","https://openalex.org/W4398315625"],"related_works":["https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W1968168724","https://openalex.org/W2204131204","https://openalex.org/W2754163055","https://openalex.org/W4322008378","https://openalex.org/W2383770723","https://openalex.org/W2186749541","https://openalex.org/W2185673024","https://openalex.org/W3026018975"],"abstract_inverted_index":{"Distributed":[0],"Denial":[1],"of":[2,17,41,70,106,205],"Service":[3],"(DDoS)":[4],"attacks":[5,75,177],"pose":[6],"a":[7,107,125,139,159,188,209],"significant":[8],"and":[9,15,28,39,97,145,157,163],"ever-present":[10],"threat":[11],"to":[12,101,114,173,180,212],"the":[13,33,63,68,93,103,203],"availability":[14,87],"stability":[16],"online":[18],"services.Existing":[19],"detection":[20,44,127,217],"techniques":[21,195],"can":[22],"be":[23],"broadly":[24],"classified":[25],"into":[26],"direct":[27,42,215],"indirect":[29,46],"approaches,":[30,47],"based":[31,129],"on":[32,130],"data":[34],"sources":[35],"considered.Despite":[36],"extensive":[37],"research":[38],"development":[40],"DDoS":[43,74,108,176,216],"methods,":[45],"particularly":[48],"those":[49],"involving":[50],"Online":[51],"Social":[52],"Networks":[53],"(OSNs)":[54],"analysis,":[55],"remain":[56],"relatively":[57],"unexplored.In":[58],"this":[59,79,112],"paper,":[60],"we":[61,81,110,123,141],"address":[62],"above":[64],"gap":[65],"by":[66,91],"investigating":[67],"feasibility":[69],"detecting":[71],"early":[72],"stage":[73],"from":[76,134,143,178],"OSN":[77,117],"data.With":[78],"aim,":[80],"first":[82],"study":[83],"how":[84],"users":[85],"report":[86],"problems":[88],"in":[89],"OSNs":[90],"identifying":[92],"most":[94],"prevalent":[95],"terms":[96],"expressions":[98],"consistently":[99],"used":[100],"express":[102],"initial":[104],"indicator":[105],"attack.Then,":[109],"leverage":[111],"knowledge":[113],"efficiently":[115],"process":[116],"messages,":[118],"filtering":[119,150],"out":[120],"irrelevant":[121],"content.Finally,":[122],"introduce":[124],"sophisticated":[126],"model":[128,166,186],"Bidirectional":[131],"Encoder":[132],"Representations":[133],"Transformers":[135],"(BERT),":[136],"fine-tuned":[137],"using":[138],"dataset":[140],"collected":[142],"Twitter":[144],"preprocessed":[146],"via":[147],"our":[148,152,165,185],"innovative":[149],"technique.Notably,":[151],"proposed":[153],"approach":[154],"is":[155],"platform-independent":[156],"offers":[158],"generalizable":[160],"solution.We":[161],"trained":[162],"tested":[164],"with":[167],"over":[168],"1.2":[169],"million":[170],"tweets":[171],"related":[172],"33":[174],"major":[175],"2012":[179],"2023.The":[181],"results":[182,201],"are":[183],"compelling:":[184],"achieved":[187],"0.979":[189],"F1":[190],"score,":[191],"significantly":[192],"outperforming":[193],"existing":[194,214],"that":[196],"do":[197],"not":[198],"exceed":[199],"0.571.These":[200],"demonstrate":[202],"potential":[204],"user-generated":[206],"content":[207],"as":[208],"viable":[210],"support":[211],"complement":[213],"strategies.":[218]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}