{"id":"https://openalex.org/W1993122635","doi":"https://doi.org/10.1109/icc.2012.6364010","title":"On using multiple classifier systems for Session Initiation Protocol (SIP) anomaly detection","display_name":"On using multiple classifier systems for Session Initiation Protocol (SIP) anomaly detection","publication_year":2012,"publication_date":"2012-06-01","ids":{"openalex":"https://openalex.org/W1993122635","doi":"https://doi.org/10.1109/icc.2012.6364010","mag":"1993122635"},"language":"en","primary_location":{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2012.6364010","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false},"type":"article","type_crossref":"proceedings-article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5091768520","display_name":"Anil Mehta","orcid":"https://orcid.org/0000-0002-9867-151X"},"institutions":[],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anil Mehta","raw_affiliation_strings":["southern illinois university"],"affiliations":[{"raw_affiliation_string":"southern illinois university","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031324288","display_name":"Neda Hantehzadeh","orcid":null},"institutions":[],"countries":["US"],"is_corresponding":false,"raw_author_name":"Neda Hantehzadeh","raw_affiliation_strings":["southern illinois university"],"affiliations":[{"raw_affiliation_string":"southern illinois university","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5067975955","display_name":"Vijay K. Gurbani","orcid":"https://orcid.org/0000-0002-9386-1533"},"institutions":[{"id":"https://openalex.org/I1322087612","display_name":"Alcatel Lucent (Germany)","ror":"https://ror.org/00c5mwp75","country_code":"DE","type":"company","lineage":["https://openalex.org/I1322087612"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Vijay K. Gurbani","raw_affiliation_strings":["Bell Labs, Alcatel-Lucent"],"affiliations":[{"raw_affiliation_string":"Bell Labs, Alcatel-Lucent","institution_ids":["https://openalex.org/I1322087612"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101435406","display_name":"Tin Kam Ho","orcid":"https://orcid.org/0000-0001-9635-1769"},"institutions":[{"id":"https://openalex.org/I1322087612","display_name":"Alcatel Lucent (Germany)","ror":"https://ror.org/00c5mwp75","country_code":"DE","type":"company","lineage":["https://openalex.org/I1322087612"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tin Kam Ho","raw_affiliation_strings":["Bell Labs, Alcatel-Lucent"],"affiliations":[{"raw_affiliation_string":"Bell Labs, Alcatel-Lucent","institution_ids":["https://openalex.org/I1322087612"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076242626","display_name":"Flavia Sander","orcid":null},"institutions":[{"id":"https://openalex.org/I18860807","display_name":"Wittenberg University","ror":"https://ror.org/04a23br85","country_code":"US","type":"education","lineage":["https://openalex.org/I18860807"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Flavia Sander","raw_affiliation_strings":["Wittenberg University ,"],"affiliations":[{"raw_affiliation_string":"Wittenberg University ,","institution_ids":["https://openalex.org/I18860807"]}]}],"institution_assertions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"fulltext_origin":"ngrams","cited_by_count":6,"citation_normalized_percentile":{"value":0.702711,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":81,"max":82},"biblio":{"volume":"16","issue":null,"first_page":"1101","last_page":"1106"},"is_retracted":false,"is_paratext":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9999,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9999,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9989,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9973,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8521585},{"id":"https://openalex.org/C41878487","wikidata":"https://www.wikidata.org/wiki/Q191018","display_name":"Session Initiation Protocol","level":3,"score":0.77115417},{"id":"https://openalex.org/C186644900","wikidata":"https://www.wikidata.org/wiki/Q194152","display_name":"Parsing","level":2,"score":0.633809},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5796409},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5721866},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48267344},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.4747325},{"id":"https://openalex.org/C120174047","wikidata":"https://www.wikidata.org/wiki/Q847073","display_name":"Euclidean distance","level":2,"score":0.44487187},{"id":"https://openalex.org/C158955206","wikidata":"https://www.wikidata.org/wiki/Q83058","display_name":"Spamming","level":3,"score":0.4426744},{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.42686257},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4207439},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3537203},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.23449773},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.20440719},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.12362522},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.10223135},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.082968354}],"mesh":[],"locations_count":1,"locations":[{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2012.6364010","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.48,"id":"https://metadata.un.org/sdg/4","display_name":"Quality education"}],"grants":[],"datasets":[],"versions":[],"referenced_works_count":29,"referenced_works":["https://openalex.org/W1484711773","https://openalex.org/W1519361431","https://openalex.org/W1570448133","https://openalex.org/W1598245429","https://openalex.org/W1864928074","https://openalex.org/W1971711496","https://openalex.org/W1974687023","https://openalex.org/W1988909165","https://openalex.org/W1989121667","https://openalex.org/W1998965451","https://openalex.org/W2039390926","https://openalex.org/W2055057770","https://openalex.org/W2057164946","https://openalex.org/W2089531162","https://openalex.org/W2097725665","https://openalex.org/W2101154521","https://openalex.org/W2102734279","https://openalex.org/W2110353842","https://openalex.org/W2114041037","https://openalex.org/W2117348815","https://openalex.org/W2133725801","https://openalex.org/W2141950720","https://openalex.org/W2152063140","https://openalex.org/W2158275940","https://openalex.org/W2160598920","https://openalex.org/W27913666","https://openalex.org/W2966207845","https://openalex.org/W3216912485","https://openalex.org/W4242138061"],"related_works":["https://openalex.org/W637393809","https://openalex.org/W3139094847","https://openalex.org/W3126526144","https://openalex.org/W3021299372","https://openalex.org/W2808742736","https://openalex.org/W2346278349","https://openalex.org/W2286465138","https://openalex.org/W2184211279","https://openalex.org/W1987732684","https://openalex.org/W1526983901"],"abstract_inverted_index":{"The":[0,86],"Session":[1],"Initiation":[2],"Protocol":[3],"(SIP)":[4],"is":[5,17,22,53,61,82],"an":[6,46],"important":[7],"multimedia":[8],"session":[9],"establishment":[10],"protocol":[11],"used":[12,118],"on":[13,70,96,193],"the":[14,28,33,176,194],"Internet.":[15],"It":[16],"a":[18,37,80,138,162],"text-based":[19],"protocol,":[20],"which":[21],"complex":[23],"to":[24,27,55,77,124,152],"parse":[25],"due":[26],"wide":[29],"variability":[30],"in":[31],"representing":[32],"information":[34],"elements.":[35],"Building":[36],"parser":[38,51],"for":[39,119,185,199],"SIP":[40,128,132,143,156,187],"may":[41],"appear":[42],"straight-forward;":[43],"however,":[44],"writing":[45],"efficient,":[47],"robust,":[48],"and":[49,115],"scalable":[50],"that":[52,111,134,161,184],"immune":[54],"low-effort":[56],"attacks":[57],"using":[58,148],"malformed":[59,126,154],"messages":[60,129,133,177],"surprisingly":[62],"difficult.":[63],"To":[64],"mitigate":[65],"this,":[66],"self-learning":[67,120],"systems":[68,151],"based":[69,192],"Euclidean":[71,112],"distance":[72],"classifiers":[73,114,117],"have":[74],"been":[75],"proposed":[76],"determine":[78],"whether":[79],"message":[81],"well-formed":[83],"or":[84],"not.":[85],"efficacy":[87],"of":[88,175],"such":[89],"machine":[90],"learning":[91],"algorithms":[92],"must":[93],"be":[94,103],"studied":[95],"varied":[97],"data":[98],"sets":[99],"before":[100],"they":[101],"can":[102],"successfully":[104],"used.":[105],"Our":[106,158],"previous":[107],"work":[108],"has":[109],"shown":[110],"distance-based":[113],"standard":[116],"problems":[121],"are":[122,197],"unable":[123],"detect":[125,153],"self-similar":[127,155,186],"(i.e.,":[130],"invalid":[131],"differ":[135],"by":[136],"only":[137],"few":[139],"bytes":[140],"from":[141],"normal":[142],"messages).":[144],"This":[145],"paper":[146],"proposes":[147],"multiple":[149,165],"classifier":[150,166],"messages.":[157],"results":[159],"show":[160,183],"judiciously":[163],"constructed":[164],"system":[167],"yields":[168],"classification":[169,201],"performance":[170],"as":[171,173],"high":[172],"97.56%":[174],"being":[178],"classified":[179],"correctly.":[180],"We":[181],"further":[182],"messages,":[188],"feature":[189],"reduction":[190],"measures":[191],"first":[195],"moment":[196],"insufficient":[198],"improving":[200],"accuracy.":[202]},"abstract_inverted_index_v3":null,"cited_by_api_url":"https://api.openalex.org/works?filter=cites:W1993122635","counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1}],"updated_date":"2025-04-21T14:46:34.624641","created_date":"2016-06-24"}