{"id":"https://openalex.org/W7130931930","doi":"https://doi.org/10.31449/inf.v50i8.12249","title":"Information-Theoretic and Algorithmic Thresholds for Network Attack Detection via Spectral and CUSUM Methods","display_name":"Information-Theoretic and Algorithmic Thresholds for Network Attack Detection via Spectral and CUSUM Methods","publication_year":2026,"publication_date":"2026-02-21","ids":{"openalex":"https://openalex.org/W7130931930","doi":"https://doi.org/10.31449/inf.v50i8.12249"},"language":null,"primary_location":{"id":"doi:10.31449/inf.v50i8.12249","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i8.12249","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/12249/6513","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.informatica.si/index.php/informatica/article/download/12249/6513","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093044144","display_name":"Abdulkader Hajjouz","orcid":"https://orcid.org/0000-0002-8256-6790"},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Abdulkader Hajjouz","raw_affiliation_strings":["ITMO University, Faculty of Software Engineering and Computer Technology, St. Petersburg, 191002, Russia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ITMO University, Faculty of Software Engineering and Computer Technology, St. Petersburg, 191002, Russia","institution_ids":["https://openalex.org/I173089394"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5108308953","display_name":"Elena \u0410vksentieva","orcid":null},"institutions":[{"id":"https://openalex.org/I173089394","display_name":"ITMO University","ror":"https://ror.org/04txgxn49","country_code":"RU","type":"education","lineage":["https://openalex.org/I173089394"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Elena Avksentieva","raw_affiliation_strings":["ITMO University, Faculty of Software Engineering and Computer Technology, St. Petersburg, 191002, Russia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ITMO University, Faculty of Software Engineering and Computer Technology, St. Petersburg, 191002, Russia","institution_ids":["https://openalex.org/I173089394"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I173089394"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.17659893,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"50","issue":"8","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.1981000006198883,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.1981000006198883,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.10520000010728836,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11498","display_name":"Security in Wireless Sensor Networks","score":0.09390000253915787,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cusum","display_name":"CUSUM","score":0.6182000041007996},{"id":"https://openalex.org/keywords/bounded-function","display_name":"Bounded function","score":0.5516999959945679},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.45750001072883606},{"id":"https://openalex.org/keywords/complement","display_name":"Complement (music)","score":0.44830000400543213},{"id":"https://openalex.org/keywords/point-process","display_name":"Point process","score":0.44519999623298645},{"id":"https://openalex.org/keywords/upper-and-lower-bounds","display_name":"Upper and lower bounds","score":0.44110000133514404},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.43230000138282776},{"id":"https://openalex.org/keywords/sliding-window-protocol","display_name":"Sliding window protocol","score":0.357699990272522},{"id":"https://openalex.org/keywords/statistic","display_name":"Statistic","score":0.35429999232292175}],"concepts":[{"id":"https://openalex.org/C178518018","wikidata":"https://www.wikidata.org/wiki/Q1024555","display_name":"CUSUM","level":2,"score":0.6182000041007996},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5551999807357788},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.5541999936103821},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.5516999959945679},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.45750001072883606},{"id":"https://openalex.org/C112313634","wikidata":"https://www.wikidata.org/wiki/Q7886648","display_name":"Complement (music)","level":5,"score":0.44830000400543213},{"id":"https://openalex.org/C88871306","wikidata":"https://www.wikidata.org/wiki/Q7208287","display_name":"Point process","level":2,"score":0.44519999623298645},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.44110000133514404},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.43230000138282776},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.392300009727478},{"id":"https://openalex.org/C102392041","wikidata":"https://www.wikidata.org/wiki/Q592860","display_name":"Sliding window protocol","level":3,"score":0.357699990272522},{"id":"https://openalex.org/C89128539","wikidata":"https://www.wikidata.org/wiki/Q1949963","display_name":"Statistic","level":2,"score":0.35429999232292175},{"id":"https://openalex.org/C2780310539","wikidata":"https://www.wikidata.org/wiki/Q12547192","display_name":"Imperfect","level":2,"score":0.34869998693466187},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.3481999933719635},{"id":"https://openalex.org/C19499675","wikidata":"https://www.wikidata.org/wiki/Q232207","display_name":"Monte Carlo method","level":2,"score":0.33739998936653137},{"id":"https://openalex.org/C100906024","wikidata":"https://www.wikidata.org/wiki/Q205692","display_name":"Poisson distribution","level":2,"score":0.3025999963283539},{"id":"https://openalex.org/C169857963","wikidata":"https://www.wikidata.org/wiki/Q1461038","display_name":"Test statistic","level":3,"score":0.2969000041484833},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.28760001063346863},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.2870999872684479},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.2815000116825104},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.2793000042438507},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.2791000008583069},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.26919999718666077},{"id":"https://openalex.org/C87007009","wikidata":"https://www.wikidata.org/wiki/Q210832","display_name":"Statistical hypothesis testing","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C55689738","wikidata":"https://www.wikidata.org/wiki/Q15963867","display_name":"Discrete time and continuous time","level":2,"score":0.26570001244544983},{"id":"https://openalex.org/C311688","wikidata":"https://www.wikidata.org/wiki/Q2393193","display_name":"Time complexity","level":2,"score":0.26170000433921814},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.2535000145435333},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.25119999051094055}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.31449/inf.v50i8.12249","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i8.12249","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/12249/6513","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.31449/inf.v50i8.12249","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i8.12249","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/12249/6513","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7130931930.pdf","grobid_xml":"https://content.openalex.org/works/W7130931930.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"We":[0,153,225],"develop":[1],"a":[2,17,26,32,98,124,130,137,172,213],"unified":[3],"theory":[4],"for":[5,85,168,176],"the":[6,67,70,74,107,114,202,222],"detectability":[7,110],"of":[8,126],"network-borne":[9],"attacks":[10],"under":[11,229],"two":[12],"canonical":[13],"observation":[14],"models:":[15],"(i)":[16],"static":[18,68,169],"graph":[19],"drawn":[20],"from":[21],"an":[22],"Erd\u0151s\u2013R\u00e9nyi":[23,191],"background":[24],"with":[25,157,181,193],"planted":[27,194],"anomalous":[28],"community,":[29],"and":[30,56,97,160,171,184,197,216,233,236],"(ii)":[31],"temporal":[33,108,177],"interaction":[34],"network":[35],"modeled":[36],"by":[37,113,120],"multivariate":[38],"point":[39],"processes":[40],"(Poisson":[41],"or":[42],"Hawkes).":[43],"Our":[44],"main":[45],"contribution":[46],"is":[47,64,73,89,111],"to":[48,51,244],"match,":[49],"up":[50],"universal":[52],"constants,":[53],"information-theoretic":[54],"lower":[55],"upper":[57],"bounds":[58],"that":[59],"govern":[60],"when":[61,91],"reliable":[62],"testing":[63],"possible.":[65],"In":[66,106],"case,":[69,109],"core":[71],"quantity":[72],"accumulated":[75],"edgewise":[76],"signal":[77],"k\u00b2\u00b7\u03c7\u00b2(Bern(p+\u0394)":[78],"\u2016":[79],"Bern(p)),":[80],"where":[81],"\u03c7\u00b2":[82],"\u2248":[83,146],"\u0394\u00b2/[p(1\u2212p)]":[84],"small":[86],"\u0394;":[87],"detection":[88,206,218],"impossible":[90],"this":[92],"falls":[93],"below":[94],"c\u00b7log":[95],"n,":[96],"non-backtracking":[99,165],"spectral":[100,166],"statistic":[101],"succeeds":[102],"above":[103],"C\u00b7log":[104],"n.":[105],"controlled":[112],"Kullback\u2013Leibler":[115],"information":[116],"rate":[117],"I":[118,133],"contributed":[119],"internal":[121],"edges":[122],"over":[123],"window":[125],"length":[127],"T,":[128],"yielding":[129],"threshold":[131],"T":[132],"\u2273":[134],"log":[135],"n;":[136],"likelihood-based":[138],"cumulative-sum":[139],"(CUSUM)":[140],"test":[141],"achieves":[142],"first-order":[143],"optimal":[144],"delay":[145],"|log":[147],"\u03b1|/I":[148],"at":[149],"false-alarm":[150],"level":[151],"\u03b1.":[152],"complement":[154],"these":[155,239],"limits":[156],"concrete":[158],"algorithms":[159],"simple":[161],"experiments.":[162],"A":[163],"pruning-based":[164],"detector":[167],"graphs":[170,192],"sparsity-aware":[173],"CUSUM":[174],"procedure":[175],"streams":[178,200],"are":[179],"given":[180],"near-linear":[182],"time":[183],"memory":[185],"complexity.":[186],"Monte":[187],"Carlo":[188],"simulations":[189],"on":[190,198],"dense":[195],"subgraphs":[196],"Poisson":[199],"illustrate":[201],"predicted":[203],"phase":[204],"transitions:":[205],"power":[207],"increases":[208],"as":[209],"k\u00b2\u00b7\u03c7\u00b2/log":[210],"n":[211],"crosses":[212],"constant-level":[214],"boundary,":[215],"empirical":[217],"delays":[219],"closely":[220],"track":[221],"log(ARL)/I":[223],"prediction.":[224],"also":[226],"discuss":[227],"robustness":[228],"bounded":[230],"edge":[231],"perturbations":[232],"mild":[234],"misspecification,":[235],"show":[237],"how":[238],"thresholds":[240],"can":[241],"be":[242],"used":[243],"dimension":[245],"practical":[246],"security":[247],"monitoring":[248],"systems.":[249]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-02-23T00:00:00"}