{"id":"https://openalex.org/W2830422015","doi":"https://doi.org/10.1504/ijcnds.2018.10014505","title":"An overview of flow-based anomaly detection","display_name":"An overview of flow-based anomaly detection","publication_year":2018,"publication_date":"2018-01-01","ids":{"openalex":"https://openalex.org/W2830422015","doi":"https://doi.org/10.1504/ijcnds.2018.10014505","mag":"2830422015"},"language":"en","primary_location":{"id":"doi:10.1504/ijcnds.2018.10014505","is_oa":false,"landing_page_url":"https://doi.org/10.1504/ijcnds.2018.10014505","pdf_url":null,"source":{"id":"https://openalex.org/S156554173","display_name":"International Journal of Communication Networks and Distributed Systems","issn_l":"1754-3916","issn":["1754-3916","1754-3924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310317825","host_organization_name":"Inderscience Publishers","host_organization_lineage":["https://openalex.org/P4310317825"],"host_organization_lineage_names":["Inderscience Publishers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Communication Networks and Distributed Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027309682","display_name":"R. K. Singla","orcid":"https://orcid.org/0000-0001-9120-0267"},"institutions":[{"id":"https://openalex.org/I51452335","display_name":"Panjab University","ror":"https://ror.org/04p2sbk06","country_code":"IN","type":"education","lineage":["https://openalex.org/I51452335"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"R.K. Singla","raw_affiliation_strings":["Department of Computer Science and Applications, Panjab University, Chandigarh, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Applications, Panjab University, Chandigarh, India","institution_ids":["https://openalex.org/I51452335"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017352985","display_name":"Ajay Guleria","orcid":"https://orcid.org/0000-0003-0968-7614"},"institutions":[{"id":"https://openalex.org/I51452335","display_name":"Panjab University","ror":"https://ror.org/04p2sbk06","country_code":"IN","type":"education","lineage":["https://openalex.org/I51452335"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Ajay Guleria","raw_affiliation_strings":["Computer Centre, Panjab University, Chandigarh, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Centre, Panjab University, Chandigarh, India","institution_ids":["https://openalex.org/I51452335"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040150895","display_name":"Rohini Sharma","orcid":"https://orcid.org/0000-0002-3388-7619"},"institutions":[{"id":"https://openalex.org/I51452335","display_name":"Panjab University","ror":"https://ror.org/04p2sbk06","country_code":"IN","type":"education","lineage":["https://openalex.org/I51452335"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Rohini Sharma","raw_affiliation_strings":["Department of Computer Science and Applications, Panjab University, Chandigarh, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Applications, Panjab University, Chandigarh, India","institution_ids":["https://openalex.org/I51452335"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I51452335"],"apc_list":null,"apc_paid":null,"fwci":0.5686,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.7028487,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":"21","issue":"2","first_page":"220","last_page":"220"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8665016293525696},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8453423976898193},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.6183677315711975},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.5942893624305725},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.5626407265663147},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5560516119003296},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5392735004425049},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.47287532687187195},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4150148630142212},{"id":"https://openalex.org/keywords/flow-network","display_name":"Flow network","score":0.41234272718429565},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3955037295818329},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.16294831037521362}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8665016293525696},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8453423976898193},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.6183677315711975},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.5942893624305725},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.5626407265663147},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5560516119003296},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5392735004425049},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.47287532687187195},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4150148630142212},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.41234272718429565},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3955037295818329},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.16294831037521362},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1504/ijcnds.2018.10014505","is_oa":false,"landing_page_url":"https://doi.org/10.1504/ijcnds.2018.10014505","pdf_url":null,"source":{"id":"https://openalex.org/S156554173","display_name":"International Journal of Communication Networks and Distributed Systems","issn_l":"1754-3916","issn":["1754-3916","1754-3924"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310317825","host_organization_name":"Inderscience Publishers","host_organization_lineage":["https://openalex.org/P4310317825"],"host_organization_lineage_names":["Inderscience Publishers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Communication Networks and Distributed Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":51,"referenced_works":["https://openalex.org/W7191366","https://openalex.org/W285122196","https://openalex.org/W1588018534","https://openalex.org/W1600438614","https://openalex.org/W1604400617","https://openalex.org/W1944367927","https://openalex.org/W1965559657","https://openalex.org/W1976079053","https://openalex.org/W1978502884","https://openalex.org/W1983488804","https://openalex.org/W1989714227","https://openalex.org/W1993467749","https://openalex.org/W1996639403","https://openalex.org/W1999396740","https://openalex.org/W2012608311","https://openalex.org/W2012840153","https://openalex.org/W2019669975","https://openalex.org/W2022345511","https://openalex.org/W2023721289","https://openalex.org/W2025471745","https://openalex.org/W2029979651","https://openalex.org/W2035497590","https://openalex.org/W2045517003","https://openalex.org/W2053550965","https://openalex.org/W2058027465","https://openalex.org/W2062013297","https://openalex.org/W2065494076","https://openalex.org/W2075836477","https://openalex.org/W2088674765","https://openalex.org/W2106925553","https://openalex.org/W2127084909","https://openalex.org/W2128824222","https://openalex.org/W2130613448","https://openalex.org/W2150847526","https://openalex.org/W2152426255","https://openalex.org/W2152800262","https://openalex.org/W2156538189","https://openalex.org/W2156916299","https://openalex.org/W2163950614","https://openalex.org/W2171331105","https://openalex.org/W2266096763","https://openalex.org/W2284033649","https://openalex.org/W2295102560","https://openalex.org/W2319397307","https://openalex.org/W2487868906","https://openalex.org/W2521375271","https://openalex.org/W2522714599","https://openalex.org/W2547864817","https://openalex.org/W2558815024","https://openalex.org/W2592212663","https://openalex.org/W3214373139"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3030345572"],"abstract_inverted_index":{"Intrusions":[0],"in":[1,17,96],"computer":[2,97],"networks":[3,29],"are":[4,52,77,102,126],"handled":[5],"using":[6,60],"misuse":[7],"or":[8],"anomaly-based":[9],"solutions.":[10],"Deep":[11],"packet":[12],"inspection":[13],"is":[14,69,85],"generally":[15],"incorporated":[16],"solutions":[18],"for":[19,93],"better":[20],"detection":[21,42,50,68,95],"and":[22,39,63,80,88,114,123],"mitigation":[23],"but":[24],"with":[25,57],"the":[26,70,73,117,119],"growth":[27],"of":[28,72],"at":[30],"exponential":[31],"speed,":[32],"it":[33],"has":[34],"become":[35],"an":[36],"expensive":[37],"solution":[38],"makes":[40],"real-time":[41],"difficult.":[43],"In":[44],"this":[45],"paper,":[46],"network":[47,61],"flows-based":[48],"anomaly":[49,67,94],"techniques":[51,87,100],"reviewed.":[53,81],"The":[54,82,99],"review":[55],"starts":[56],"motivation":[58],"behind":[59],"flows":[62],"justifies":[64],"why":[65],"flow-based":[66],"need":[71],"hour.":[74],"Flow-based":[75],"datasets":[76],"also":[78],"investigated":[79],"main":[83],"focus":[84],"on":[86],"methodologies":[89],"used":[90],"by":[91],"researchers":[92],"networks.":[98],"reviewed":[101],"categorised":[103],"into":[104],"five":[105],"classes:":[106],"statistical,":[107],"machine":[108],"learning,":[109],"clustering,":[110],"frequent":[111],"pattern":[112],"mining":[113],"agent-based.":[115],"At":[116],"end":[118],"core":[120],"research":[121],"problems":[122],"open":[124],"challenges":[125],"discussed.":[127]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2018,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}