{"id":"https://openalex.org/W2886398423","doi":"https://doi.org/10.1186/s13635-018-0081-z","title":"HADEC: Hadoop-based live DDoS detection framework","display_name":"HADEC: Hadoop-based live DDoS detection framework","publication_year":2018,"publication_date":"2018-07-31","ids":{"openalex":"https://openalex.org/W2886398423","doi":"https://doi.org/10.1186/s13635-018-0081-z","mag":"2886398423"},"language":"en","primary_location":{"id":"doi:10.1186/s13635-018-0081-z","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-018-0081-z","pdf_url":"https://jis-eurasipjournals.springeropen.com/track/pdf/10.1186/s13635-018-0081-z","source":{"id":"https://openalex.org/S4210195102","display_name":"EURASIP Journal on Information Security","issn_l":"2510-523X","issn":["2510-523X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EURASIP Journal on Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://jis-eurasipjournals.springeropen.com/track/pdf/10.1186/s13635-018-0081-z","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005835956","display_name":"Sufian Hameed","orcid":"https://orcid.org/0000-0003-4683-1988"},"institutions":[{"id":"https://openalex.org/I201384688","display_name":"National University of Computer and Emerging Sciences","ror":"https://ror.org/003eyb898","country_code":"PK","type":"education","lineage":["https://openalex.org/I201384688"]}],"countries":["PK"],"is_corresponding":true,"raw_author_name":"Sufian Hameed","raw_affiliation_strings":["IT Security Labs, National University of Computer and Emerging Sciences (NUCES), Karachi, Pakistan"],"raw_orcid":"https://orcid.org/0000-0003-4683-1988","affiliations":[{"raw_affiliation_string":"IT Security Labs, National University of Computer and Emerging Sciences (NUCES), Karachi, Pakistan","institution_ids":["https://openalex.org/I201384688"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101749322","display_name":"Usman Ali","orcid":"https://orcid.org/0000-0002-2039-1630"},"institutions":[{"id":"https://openalex.org/I201384688","display_name":"National University of Computer and Emerging Sciences","ror":"https://ror.org/003eyb898","country_code":"PK","type":"education","lineage":["https://openalex.org/I201384688"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Usman Ali","raw_affiliation_strings":["IT Security Labs, National University of Computer and Emerging Sciences (NUCES), Karachi, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IT Security Labs, National University of Computer and Emerging Sciences (NUCES), Karachi, Pakistan","institution_ids":["https://openalex.org/I201384688"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5005835956"],"corresponding_institution_ids":["https://openalex.org/I201384688"],"apc_list":{"value":660,"currency":"GBP","value_usd":809},"apc_paid":{"value":660,"currency":"GBP","value_usd":809},"fwci":5.3332,"has_fulltext":true,"cited_by_count":47,"citation_normalized_percentile":{"value":0.95983918,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"2018","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.9523459672927856},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8622357845306396},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.8014671802520752},{"id":"https://openalex.org/keywords/trinoo","display_name":"Trinoo","score":0.7195514440536499},{"id":"https://openalex.org/keywords/internet-control-message-protocol","display_name":"Internet Control Message Protocol","score":0.7152315378189087},{"id":"https://openalex.org/keywords/flooding","display_name":"Flooding (psychology)","score":0.6897445321083069},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.6704038977622986},{"id":"https://openalex.org/keywords/volume","display_name":"Volume (thermodynamics)","score":0.5290265083312988},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5287933945655823},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5096805095672607},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.21361130475997925},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.17815828323364258},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.12619751691818237}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.9523459672927856},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8622357845306396},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.8014671802520752},{"id":"https://openalex.org/C43639116","wikidata":"https://www.wikidata.org/wiki/Q7843050","display_name":"Trinoo","level":5,"score":0.7195514440536499},{"id":"https://openalex.org/C195219913","wikidata":"https://www.wikidata.org/wiki/Q13162","display_name":"Internet Control Message Protocol","level":3,"score":0.7152315378189087},{"id":"https://openalex.org/C186594467","wikidata":"https://www.wikidata.org/wiki/Q1429176","display_name":"Flooding (psychology)","level":2,"score":0.6897445321083069},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.6704038977622986},{"id":"https://openalex.org/C20556612","wikidata":"https://www.wikidata.org/wiki/Q4469374","display_name":"Volume (thermodynamics)","level":2,"score":0.5290265083312988},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5287933945655823},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5096805095672607},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.21361130475997925},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.17815828323364258},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.12619751691818237},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s13635-018-0081-z","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-018-0081-z","pdf_url":"https://jis-eurasipjournals.springeropen.com/track/pdf/10.1186/s13635-018-0081-z","source":{"id":"https://openalex.org/S4210195102","display_name":"EURASIP Journal on Information Security","issn_l":"2510-523X","issn":["2510-523X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EURASIP Journal on Information Security","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:8b5ac03510a54914b2d7905471a3a147","is_oa":false,"landing_page_url":"https://doaj.org/article/8b5ac03510a54914b2d7905471a3a147","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"EURASIP Journal on Information Security, Vol 2018, Iss 1, Pp 1-19 (2018)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s13635-018-0081-z","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-018-0081-z","pdf_url":"https://jis-eurasipjournals.springeropen.com/track/pdf/10.1186/s13635-018-0081-z","source":{"id":"https://openalex.org/S4210195102","display_name":"EURASIP Journal on Information Security","issn_l":"2510-523X","issn":["2510-523X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EURASIP Journal on Information Security","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/11","score":0.5799999833106995,"display_name":"Sustainable cities and communities"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320331552","display_name":"National University of Computer and Emerging Sciences","ror":"https://ror.org/003eyb898"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2886398423.pdf","grobid_xml":"https://content.openalex.org/works/W2886398423.grobid-xml"},"referenced_works_count":28,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W297149609","https://openalex.org/W1516506771","https://openalex.org/W1674877186","https://openalex.org/W1912779191","https://openalex.org/W2030650827","https://openalex.org/W2078799390","https://openalex.org/W2087853663","https://openalex.org/W2091639747","https://openalex.org/W2106655090","https://openalex.org/W2111542531","https://openalex.org/W2124808847","https://openalex.org/W2125513999","https://openalex.org/W2134598092","https://openalex.org/W2136262545","https://openalex.org/W2136371656","https://openalex.org/W2155141181","https://openalex.org/W2162133150","https://openalex.org/W2162969618","https://openalex.org/W2278600692","https://openalex.org/W2314185362","https://openalex.org/W2545374358","https://openalex.org/W2609985474","https://openalex.org/W2733765803","https://openalex.org/W2791066471","https://openalex.org/W3103913393","https://openalex.org/W3138887713","https://openalex.org/W3160814718"],"related_works":["https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W1968168724","https://openalex.org/W2204131204","https://openalex.org/W2921433547","https://openalex.org/W4385302085","https://openalex.org/W2754163055","https://openalex.org/W4322008378","https://openalex.org/W2383770723","https://openalex.org/W2162830356"],"abstract_inverted_index":{"Distributed":[0],"denial":[1],"of":[2,9,17,29,42,48,72,80,114,143,156,177],"service":[3],"(DDoS)":[4],"flooding":[5,61,115,132],"attacks":[6,24,62,116,133,182],"are":[7,84],"one":[8],"the":[10,15,37,60,65,69,77,154,169],"main":[11],"methods":[12],"to":[13,86,110,152,185],"destroy":[14],"availability":[16],"critical":[18],"online":[19],"services":[20],"today.":[21],"These":[22],"DDoS":[23,73,81,107,126,161,181],"cannot":[25],"be":[26],"prevented":[27],"ahead":[28],"time,":[30],"and":[31,44,75,94,120,138,145,179],"once":[32],"in":[33,58,92,140,183],"place,":[34],"they":[35],"overwhelm":[36],"victim":[38],"with":[39,88],"huge":[40,89],"volume":[41,74,91],"traffic":[43],"render":[45],"it":[46,54],"incapable":[47],"performing":[49],"normal":[50],"communication":[51],"or":[52],"crashes":[53],"completely.":[55],"Any":[56],"delays":[57],"detecting":[59,180],"completely":[63],"halts":[64],"network":[66],"services.":[67],"With":[68],"rapid":[70],"increase":[71],"frequency,":[76],"new":[78],"generation":[79],"detection":[82,108,127,162],"mechanisms":[83],"needed":[85],"deal":[87],"attack":[90],"reasonable":[93],"affordable":[95],"response":[96],"time.":[97,187],"In":[98],"this":[99],"paper,":[100],"we":[101,171],"propose":[102],"HADEC,":[103],"a":[104,124,150],"Hadoop-based":[105],"live":[106,160],"framework":[109,158],"tackle":[111],"efficient":[112],"analysis":[113],"by":[117],"harnessing":[118],"MapReduce":[119],"HDFS.":[121],"We":[122,148],"implemented":[123],"counter-based":[125],"algorithm":[128],"for":[129,159],"four":[130],"major":[131],"(TCP-SYN,":[134],"HTTP":[135],"GET,":[136],"UDP,":[137],"ICMP)":[139],"MapReduce,":[141],"consisting":[142],"map":[144],"reduce":[146],"functions.":[147],"deployed":[149],"testbed":[151],"evaluate":[153],"performance":[155],"HADEC":[157,174],"on":[163,168],"low-end":[164],"commodity":[165],"hardware.":[166],"Based":[167],"experiment,":[170],"showed":[172],"that":[173],"is":[175],"capable":[176],"processing":[178],"near":[184],"real":[186]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":11},{"year":2020,"cited_by_count":11},{"year":2019,"cited_by_count":5}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2025-10-10T00:00:00"}