{"id":"https://openalex.org/W2147283369","doi":"https://doi.org/10.1109/icc.2009.5199270","title":"On the Use of Compression Algorithms for Network Anomaly Detection","display_name":"On the Use of Compression Algorithms for Network Anomaly Detection","publication_year":2009,"publication_date":"2009-06-01","ids":{"openalex":"https://openalex.org/W2147283369","doi":"https://doi.org/10.1109/icc.2009.5199270","mag":"2147283369"},"language":"en","primary_location":{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2009.5199270","pdf_url":null,"source":{"id":"https://openalex.org/S4393917539","display_name":"IEEE International Conference on Communications","issn_l":"1550-3607","issn":["1550-3607"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false},"type":"article","type_crossref":"proceedings-article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079097534","display_name":"Christian Callegari","orcid":"https://orcid.org/0000-0001-7323-8069"},"institutions":[{"id":"https://openalex.org/I108290504","display_name":"University of Pisa","ror":"https://ror.org/03ad39j10","country_code":"IT","type":"education","lineage":["https://openalex.org/I108290504"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"C. Callegari","raw_affiliation_strings":["Dept. of Information Engineering, Univ. of Pisa, Italy"],"affiliations":[{"raw_affiliation_string":"Dept. of Information Engineering, Univ. of Pisa, Italy","institution_ids":["https://openalex.org/I108290504"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021026284","display_name":"Stefano Giordano","orcid":"https://orcid.org/0000-0002-1408-7528"},"institutions":[{"id":"https://openalex.org/I108290504","display_name":"University of Pisa","ror":"https://ror.org/03ad39j10","country_code":"IT","type":"education","lineage":["https://openalex.org/I108290504"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"S. Giordano","raw_affiliation_strings":["Dept. of Information Engineering, Univ. of Pisa, Italy"],"affiliations":[{"raw_affiliation_string":"Dept. of Information Engineering, Univ. of Pisa, Italy","institution_ids":["https://openalex.org/I108290504"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065635344","display_name":"Michele Pagano","orcid":"https://orcid.org/0000-0003-1706-4994"},"institutions":[{"id":"https://openalex.org/I108290504","display_name":"University of Pisa","ror":"https://ror.org/03ad39j10","country_code":"IT","type":"education","lineage":["https://openalex.org/I108290504"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"M. Pagano","raw_affiliation_strings":["Dept. of Information Engineering, Univ. of Pisa, Italy"],"affiliations":[{"raw_affiliation_string":"Dept. of Information Engineering, Univ. of Pisa, Italy","institution_ids":["https://openalex.org/I108290504"]}]}],"institution_assertions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"fulltext_origin":"ngrams","cited_by_count":13,"citation_normalized_percentile":{"value":0.784662,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":85,"max":86},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"primary_topic":{"id":"https://openalex.org/T11269","display_name":"Algorithms and Data Compression","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11269","display_name":"Algorithms and Data Compression","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9976,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9974,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C46900642","wikidata":"https://www.wikidata.org/wiki/Q2647","display_name":"Huffman coding","level":3,"score":0.8642305},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8309666},{"id":"https://openalex.org/C78548338","wikidata":"https://www.wikidata.org/wiki/Q2493","display_name":"Data compression","level":2,"score":0.6015334},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5399163},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.5360062},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5084166},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4986725},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.47449112},{"id":"https://openalex.org/C1769480","wikidata":"https://www.wikidata.org/wiki/Q1345239","display_name":"Entropy encoding","level":3,"score":0.4582166},{"id":"https://openalex.org/C81081738","wikidata":"https://www.wikidata.org/wiki/Q55542","display_name":"Lossless compression","level":3,"score":0.456172},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4493733},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.42112935},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.20385608},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.18003923},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2009.5199270","pdf_url":null,"source":{"id":"https://openalex.org/S4393917539","display_name":"IEEE International Conference on Communications","issn_l":"1550-3607","issn":["1550-3607"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false}],"best_oa_location":null,"sustainable_development_goals":[],"grants":[],"datasets":[],"versions":[],"referenced_works_count":18,"referenced_works":["https://openalex.org/W1542522493","https://openalex.org/W1990653637","https://openalex.org/W1992371956","https://openalex.org/W1995875735","https://openalex.org/W1999427165","https://openalex.org/W2041905826","https://openalex.org/W2048283878","https://openalex.org/W2060108852","https://openalex.org/W2072994259","https://openalex.org/W2107745473","https://openalex.org/W2122962290","https://openalex.org/W2129652681","https://openalex.org/W2137012911","https://openalex.org/W2172259492","https://openalex.org/W22266696","https://openalex.org/W2332237006","https://openalex.org/W2911940095","https://openalex.org/W2993383518"],"related_works":["https://openalex.org/W2906173154","https://openalex.org/W2547564706","https://openalex.org/W2167897635","https://openalex.org/W2167336121","https://openalex.org/W2156106714","https://openalex.org/W2128890367","https://openalex.org/W1762028264","https://openalex.org/W1581737654","https://openalex.org/W1557835754","https://openalex.org/W1557642114"],"abstract_inverted_index":{"In":[0,52,87],"the":[1,5,13,33,37,57,71,81,94,120,123,130,139,142,146,160,163],"last":[2],"few":[3],"years,":[4],"number":[6],"and":[7,111,137,145],"impact":[8],"of":[9,32,39,73,96,162],"security":[10],"attacks":[11],"over":[12,85],"Internet":[14],"have":[15],"been":[16],"continuously":[17],"increasing.":[18],"Since":[19],"it":[20],"seems":[21],"impossible":[22],"to":[23,27,129],"guarantee":[24],"complete":[25],"protection":[26],"a":[28,46,126],"system":[29],"by":[30],"means":[31],"\"classical\"":[34],"prevention":[35],"mechanisms,":[36],"use":[38,72,95],"Intrusion":[40],"Detection":[41],"Systems":[42],"has":[43],"emerged":[44],"as":[45],"key":[47],"element":[48],"in":[49,80,156],"network":[50,64,82],"security.":[51],"this":[53,157],"paper":[54],"we":[55,90,134,148],"address":[56],"problem":[58],"considering":[59],"some":[60],"techniques":[61],"for":[62,77],"detecting":[63,78],"anomalies.":[65],"Our":[66],"approach":[67],"is":[68],"based":[69,101,118],"on":[70,102,119],"different":[74,98],"compression":[75,99,131],"algorithms":[76],"anomalies":[79],"traffic":[83],"running":[84],"TCP.":[86],"more":[88,140],"detail":[89],"take":[91],"into":[92],"account":[93],"three":[97],"algorithms,":[100],"distinct":[103],"approaches,":[104],"namely:":[105],"Huffman":[106],"coding,":[107],"Dynamic":[108],"Markov":[109],"Coding,":[110],"Lempel-Ziv-Welch":[112],"algorithm.":[113],"The":[114,152],"proposed":[115,164],"methods":[116],"are":[117,144],"consideration":[121],"that":[122,133,138],"entropy":[124],"represents":[125],"lower":[127],"bound":[128],"rate":[132],"can":[135,149],"obtain,":[136],"redundant":[141],"data":[143],"better":[147],"compress":[150],"them.":[151],"performance":[153],"analysis,":[154],"presented":[155],"paper,":[158],"demonstrates":[159],"effectiveness":[161],"methods.":[165]},"cited_by_api_url":"https://api.openalex.org/works?filter=cites:W2147283369","counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1}],"updated_date":"2025-01-07T00:40:39.381396","created_date":"2016-06-24"}