{"id":"https://openalex.org/W2940676611","doi":"https://doi.org/10.23919/ifipnetworking.2018.8696566","title":"Wrinkles in Time: Detecting Internet-wide Events via NTP","display_name":"Wrinkles in Time: Detecting Internet-wide Events via NTP","publication_year":2018,"publication_date":"2018-05-01","ids":{"openalex":"https://openalex.org/W2940676611","doi":"https://doi.org/10.23919/ifipnetworking.2018.8696566","mag":"2940676611"},"language":"en","primary_location":{"id":"doi:10.23919/ifipnetworking.2018.8696566","is_oa":false,"landing_page_url":"https://doi.org/10.23919/ifipnetworking.2018.8696566","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IFIP Networking Conference (IFIP Networking) and Workshops","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073192681","display_name":"Meenakshi Syamkumar","orcid":"https://orcid.org/0000-0002-7925-9183"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Meenakshi Syamkumar","raw_affiliation_strings":["University of Wisconsin-Madison"],"affiliations":[{"raw_affiliation_string":"University of Wisconsin-Madison","institution_ids":["https://openalex.org/I135310074"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005495513","display_name":"Sathiya Kumaran Mani","orcid":"https://orcid.org/0000-0002-2776-6917"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sathiya Kumaran Mani","raw_affiliation_strings":["University of Wisconsin-Madison"],"affiliations":[{"raw_affiliation_string":"University of Wisconsin-Madison","institution_ids":["https://openalex.org/I135310074"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064327280","display_name":"Ramakrishnan Durairajan","orcid":"https://orcid.org/0000-0003-2859-5598"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ramakrishnan Durairajan","raw_affiliation_strings":["University of Oregon"],"affiliations":[{"raw_affiliation_string":"University of Oregon","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043427561","display_name":"Paul Barford","orcid":"https://orcid.org/0000-0001-7874-1819"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Paul Barford","raw_affiliation_strings":["University of Wisconsin-Madison"],"affiliations":[{"raw_affiliation_string":"University of Wisconsin-Madison","institution_ids":["https://openalex.org/I135310074"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077852213","display_name":"Joel Sommers","orcid":"https://orcid.org/0000-0003-4872-6532"},"institutions":[{"id":"https://openalex.org/I39660569","display_name":"Colgate University","ror":"https://ror.org/05d23ve83","country_code":"US","type":"education","lineage":["https://openalex.org/I39660569"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joel Sommers","raw_affiliation_strings":["Colgate University"],"affiliations":[{"raw_affiliation_string":"Colgate University","institution_ids":["https://openalex.org/I39660569"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5073192681"],"corresponding_institution_ids":["https://openalex.org/I135310074"],"apc_list":null,"apc_paid":null,"fwci":0.5536,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":{"value":0.72476935,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"91","last_page":"99"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.7981508374214172},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.7499203085899353},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.736666202545166},{"id":"https://openalex.org/keywords/network-time-protocol","display_name":"Network Time Protocol","score":0.555361270904541},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.536994457244873},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.513127863407135},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.47543954849243164},{"id":"https://openalex.org/keywords/network-management","display_name":"Network management","score":0.4162070155143738},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.41016319394111633},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.32548537850379944},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.2614830732345581},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.24430754780769348},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.17128443717956543},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.1341525912284851}],"concepts":[{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.7981508374214172},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.7499203085899353},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.736666202545166},{"id":"https://openalex.org/C178148046","wikidata":"https://www.wikidata.org/wiki/Q217491","display_name":"Network Time Protocol","level":3,"score":0.555361270904541},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.536994457244873},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.513127863407135},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.47543954849243164},{"id":"https://openalex.org/C129763632","wikidata":"https://www.wikidata.org/wiki/Q1454667","display_name":"Network management","level":2,"score":0.4162070155143738},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.41016319394111633},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32548537850379944},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2614830732345581},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.24430754780769348},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.17128443717956543},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.1341525912284851},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C2986737936","wikidata":"https://www.wikidata.org/wiki/Q1058791","display_name":"Time synchronization","level":2,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/ifipnetworking.2018.8696566","is_oa":false,"landing_page_url":"https://doi.org/10.23919/ifipnetworking.2018.8696566","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 IFIP Networking Conference (IFIP Networking) and Workshops","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.6200000047683716,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W812600222","https://openalex.org/W1486339539","https://openalex.org/W1542881316","https://openalex.org/W1606393135","https://openalex.org/W1963821364","https://openalex.org/W1984293894","https://openalex.org/W2013460976","https://openalex.org/W2038858357","https://openalex.org/W2048993342","https://openalex.org/W2053295697","https://openalex.org/W2054834816","https://openalex.org/W2055894834","https://openalex.org/W2058496912","https://openalex.org/W2063016434","https://openalex.org/W2076424788","https://openalex.org/W2114112812","https://openalex.org/W2114839095","https://openalex.org/W2115778844","https://openalex.org/W2118931532","https://openalex.org/W2139524463","https://openalex.org/W2139542924","https://openalex.org/W2140095548","https://openalex.org/W2141487810","https://openalex.org/W2146610201","https://openalex.org/W2153326652","https://openalex.org/W2156531792","https://openalex.org/W2157578436","https://openalex.org/W2158288704","https://openalex.org/W2164210932","https://openalex.org/W2166461404","https://openalex.org/W2290128307","https://openalex.org/W2291500023","https://openalex.org/W2552158386","https://openalex.org/W2784117125","https://openalex.org/W2898546674","https://openalex.org/W2962858428","https://openalex.org/W3009746682","https://openalex.org/W3124370832","https://openalex.org/W3138598418","https://openalex.org/W3161677312","https://openalex.org/W4249749069","https://openalex.org/W6632555927","https://openalex.org/W6668213992"],"related_works":["https://openalex.org/W2610826399","https://openalex.org/W2092530219","https://openalex.org/W4288050326","https://openalex.org/W2388464034","https://openalex.org/W2533125852","https://openalex.org/W2140460949","https://openalex.org/W1561618703","https://openalex.org/W4399688451","https://openalex.org/W2127075975","https://openalex.org/W2159667593"],"abstract_inverted_index":{"Understanding":[0],"the":[1,17,30,67,99],"nature":[2],"and":[3,12,26,33,41,57,63,143,163,170],"characteristics":[4],"of":[5,35,98,153],"Internet":[6,53,113,133],"events":[7,171],"such":[8],"as":[9,16],"route":[10],"changes":[11],"outages":[13,169],"can":[14],"serve":[15],"starting":[18],"point":[19],"for":[20,69,119],"improvements":[21],"in":[22],"network":[23,36,76],"configurations,":[24],"management":[25],"monitoring":[27,186],"practices.":[28],"However,":[29],"scale,":[31],"diversity,":[32],"dynamics":[34],"infrastructure":[37,73],"makes":[38],"event":[39,54],"detection":[40],"analysis":[42,58],"challenging.":[43],"In":[44],"this":[45],"paper,":[46],"we":[47],"describe":[48],"a":[49,61,109,117,151,188],"new":[50,70],"approach":[51,79],"to":[52,131,147],"measurement,":[55],"identification":[56],"that":[59,85,178,191],"provides":[60,187],"broad":[62,110],"detailed":[64],"perspective":[65,111,166,190],"without":[66],"need":[68],"or":[71,74],"dedicated":[72],"additional":[75],"traffic.":[77],"Our":[78],"is":[80,86,96,181],"based":[81],"on":[82,103,112],"analyzing":[83,120],"data":[84,148],"readily":[87],"available":[88],"from":[89,156],"Network":[90],"Time":[91],"Protocol":[92],"(NTP)":[93],"servers.":[94,159],"NTP":[95,106,121,158],"one":[97],"few":[100],"on-by-default":[101],"services":[102],"clients,":[104],"thus":[105],"servers":[107],"have":[108],"behavior.":[114],"We":[115,135,160,176],"develop":[116],"tool":[118],"traces":[122],"called":[123],"Tezzeract,":[124],"which":[125],"applies":[126],"Robust":[127],"Principal":[128],"Components":[129],"Analysis":[130],"detect":[132],"events.":[134],"demonstrate":[136],"Tezzeract's":[137,165],"efficacy":[138],"by":[139,144],"conducting":[140],"controlled":[141],"experiments":[142],"applying":[145],"it":[146],"collected":[149],"over":[150],"period":[152],"3":[154],"months":[155],"19":[157],"also":[161],"compare":[162],"contrast":[164],"with":[167],"reported":[168],"identified":[172],"through":[173],"active":[174],"probing.":[175],"find":[177],"while":[179],"there":[180],"commonality":[182],"across":[183],"methods,":[184],"NTP-based":[185],"unique":[189],"complements":[192],"prior":[193],"methods.":[194]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}