{"id":"https://openalex.org/W2966136285","doi":"https://doi.org/10.25560/66178","title":"Modelling temporal and structural dependencies in computer network traffic with applications in cyber security","display_name":"Modelling temporal and structural dependencies in computer network traffic with applications in cyber security","publication_year":2018,"publication_date":"2018-09-01","ids":{"openalex":"https://openalex.org/W2966136285","doi":"https://doi.org/10.25560/66178","mag":"2966136285"},"language":"en","primary_location":{"id":"pmh:oai:spiral.imperial.ac.uk:10044/1/66178","is_oa":false,"landing_page_url":"http://hdl.handle.net/10044/1/66178","pdf_url":null,"source":{"id":"https://openalex.org/S4306401396","display_name":"Spiral (Imperial College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I47508984","host_organization_name":"Imperial College London","host_organization_lineage":["https://openalex.org/I47508984"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Thesis or dissertation"},"type":"dissertation","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.25560/66178","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008157223","display_name":"Matthew Price-Williams","orcid":null},"institutions":[{"id":"https://openalex.org/I47508984","display_name":"Imperial College London","ror":"https://ror.org/041kmwe10","country_code":"GB","type":"education","lineage":["https://openalex.org/I47508984"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Price-Williams, Matthew","raw_affiliation_strings":["Imperial College London"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Imperial College London","institution_ids":["https://openalex.org/I47508984"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5008157223"],"corresponding_institution_ids":["https://openalex.org/I47508984"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.28799076,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9846000075340271,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9846000075340271,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13983","display_name":"Cybersecurity and Information Systems","score":0.9521999955177307,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9323999881744385,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5359848737716675},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4799904525279999},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.44282451272010803}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5359848737716675},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4799904525279999},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.44282451272010803}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:spiral.imperial.ac.uk:10044/1/66178","is_oa":false,"landing_page_url":"http://hdl.handle.net/10044/1/66178","pdf_url":null,"source":{"id":"https://openalex.org/S4306401396","display_name":"Spiral (Imperial College London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I47508984","host_organization_name":"Imperial College London","host_organization_lineage":["https://openalex.org/I47508984"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Thesis or dissertation"},{"id":"doi:10.25560/66178","is_oa":true,"landing_page_url":"https://doi.org/10.25560/66178","pdf_url":null,"source":{"id":"https://openalex.org/S7407050757","display_name":"Imperial College Research Computing Service Data Repository","issn_l":null,"issn":[],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"},{"id":"mag:2966136285","is_oa":false,"landing_page_url":"https://ethos.bl.uk/OrderDetails.do?uin=uk.bl.ethos.769647","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"doi:10.25560/66178","is_oa":true,"landing_page_url":"https://doi.org/10.25560/66178","pdf_url":null,"source":{"id":"https://openalex.org/S7407050757","display_name":"Imperial College Research Computing Service Data Repository","issn_l":null,"issn":[],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2110897515","https://openalex.org/W2247122847","https://openalex.org/W3134705173","https://openalex.org/W2519394310","https://openalex.org/W2775719062","https://openalex.org/W3129757165","https://openalex.org/W3102457922","https://openalex.org/W1973025928","https://openalex.org/W2025890931","https://openalex.org/W3200372273","https://openalex.org/W3028857202","https://openalex.org/W2114224056","https://openalex.org/W2893583425","https://openalex.org/W642718593","https://openalex.org/W2989010797","https://openalex.org/W2931691460","https://openalex.org/W3202284752","https://openalex.org/W2749071484","https://openalex.org/W2127577941","https://openalex.org/W3016814921"],"abstract_inverted_index":{"Anomaly":[0,23],"detection":[1,21,24,130,416],"for":[2,67,139,188,198,418],"cyber":[3],"security":[4],"defence":[5],"has":[6],"received":[7],"much":[8],"attention":[9],"in":[10,46,60,95,142,165,173,211,273,285,292,316,355,361],"recent":[11],"years,":[12],"providing":[13],"a":[14,47,61,143,184,193,208,229,256,274,311,319,337,374,414,439],"complementary":[15],"approach":[16],"to":[17,69,73,132,179,240,280,289,305,330,405],"traditional":[18],"signature":[19],"based":[20],"systems.":[22],"methods":[25,94],"rely":[26],"on":[27,84,105,120,322],"building":[28,101],"probability":[29],"models":[30,83,104,119,134,236,346],"of":[31,77,135,171,192,203,216,222,228,250,313,347,370,376,427,433],"normal":[32,136,348],"computer":[33,48,78,106,144,209,257,275,338,408],"network":[34,49,86,107,145,204,210,339,349,365,409,421],"behaviour":[35,138,350],"and":[36,53,115,167,264,378],"detecting":[37,110],"deviations":[38],"from":[39,395],"the":[40,74,85,93,121,189,200,219,226,242,247,267,300,314],"model.":[41],"Traffic":[42],"flowing":[43],"between":[44,112,246,269],"nodes":[45],"can":[50],"be":[51,70,177,297],"interpreted":[52,437],"modelled":[54],"as":[55,156,387,424,438],"counting":[56,261],"processes,":[57],"where":[58,353],"events":[59,162,283,288,315,354,394,422],"process":[62,195,323],"indicate":[63,225],"connections":[64],"being":[65],"established":[66],"data":[68],"exchanged.":[71],"Due":[72],"typical":[75],"size":[76],"networks,":[79],"postulating":[80],"full":[81],"joint":[82,118,345],"is":[87,148,196,238,401,436],"often":[88,278,385],"infeasible.":[89],"For":[90,259],"this":[91,96,325],"reason,":[92],"thesis":[97,412],"first":[98,125],"look":[99],"at":[100,168],"independent":[102],"edge-based":[103],"graphs,":[108],"before":[109],"correlation":[111],"different":[113],"edges":[114,272,335],"constructing":[116],"locally":[117],"correlated":[122,334,343],"sub-networks.":[123],"The":[124,381,430],"proposed":[126,197],"method":[127],"uses":[128],"changepoint":[129,415],"techniques":[131],"construct":[133],"connectivity":[137],"each":[140,434],"edge":[141,357],"graph.":[146,340],"This":[147,411],"achieved":[149],"by":[150,398],"identifying":[151,342,419],"key":[152],"user":[153],"features":[154],"such":[155,307],"seasonality":[157],"or":[158],"self-exciting":[159],"behaviour,":[160],"since":[161],"typically":[163],"arise":[164],"bursts":[166],"particular":[169],"times":[170],"day":[172],"patterns":[174,215],"which":[175,442],"may":[176],"peculiar":[178],"that":[180,244],"edge.":[181],"In":[182],"particular,":[183],"flexible,":[185],"nonparametric":[186],"model":[187,221],"excitation":[190],"function":[191],"Wold":[194],"modelling":[199,406],"conditional":[201],"intensities":[202],"edges.":[205,366],"When":[206],"monitoring":[207],"real":[212],"time,":[213],"unusual":[214],"activity":[217,362,400],"against":[218],"intensity":[220],"normality":[223],"could":[224],"presence":[227],"malicious":[230],"actor.":[231],"To":[232],"build":[233],"robust,":[234],"realistic":[235],"it":[237],"important":[239],"understand":[241],"dependencies":[243],"exist":[245],"large":[248],"numbers":[249],"routinely":[251],"interacting":[252,371],"communication":[253],"pathways":[254],"within":[255,336],"network.":[258],"two":[260,270],"processes":[262],"$A$":[263,286,317],"$B$":[265],"denoting":[266],"interactions":[268],"distinct":[271],"network,":[276],"we":[277],"wish":[279],"assess":[281],"whether":[282],"occurring":[284],"trigger":[287],"then":[290,443],"occur":[291],"$B$.":[293],"A":[294],"test":[295,326],"will":[296,327],"introduced":[298],"using":[299],"well-known":[301],"higher":[302],"criticism":[303],"statistic":[304],"detect":[306,331],"dependence":[308],"when":[309],"only":[310],"subset":[312],"exhibit":[318],"triggering":[320],"effect":[321],"$B$;":[324],"allow":[328],"us":[329],"even":[332],"weakly":[333],"After":[341],"sub-networks,":[344],"are":[351],"constructed":[352],"one":[356],"cause":[358],"an":[359,402,445],"increase":[360],"along":[363],"other":[364],"Finally,":[367],"many":[368],"pairs":[369],"computers":[372],"exchange":[373],"mixture":[375],"user-driven":[377,407],"automated":[379,393,420],"events.":[380],"latter":[382],"category":[383],"most":[384],"appears":[386],"periodic":[388,425,447],"polling":[389],"behaviour.":[390,410],"Separating":[391],"these":[392],"those":[396],"caused":[397],"human":[399,440],"essential":[403],"precursor":[404],"presents":[413],"framework":[417],"appearing":[423],"subsequences":[426],"event":[428,432],"times.":[429],"opening":[431],"subsequence":[435],"action,":[441],"generates":[444],"automated,":[446],"process.":[448]},"counts_by_year":[],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}