{"id":"https://openalex.org/W2912257171","doi":"https://doi.org/10.1109/lcn.2018.8638226","title":"An Incremental Approach for Swift OpenFlow Anomaly Detection","display_name":"An Incremental Approach for Swift OpenFlow Anomaly Detection","publication_year":2018,"publication_date":"2018-10-01","ids":{"openalex":"https://openalex.org/W2912257171","doi":"https://doi.org/10.1109/lcn.2018.8638226","mag":"2912257171"},"language":"en","primary_location":{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/lcn.2018.8638226","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false},"type":"article","type_crossref":"proceedings-article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://oda.oslomet.no/oda-xmlui/bitstream/10642/8135/1/An%20Incremental%20Approach%20for%20Swift%20OpenFlow.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011027066","display_name":"Ramtin Aryan","orcid":"https://orcid.org/0000-0002-9392-6704"},"institutions":[{"id":"https://openalex.org/I184531372","display_name":"OsloMet \u2013 Oslo Metropolitan University","ror":"https://ror.org/04q12yn84","country_code":"NO","type":"funder","lineage":["https://openalex.org/I184531372"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Ramtin Aryan","raw_affiliation_strings":["Department of Computer Science, OsloMet\u2013Oslo Metropolitan University, Oslo, Norway"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, OsloMet\u2013Oslo Metropolitan University, Oslo, Norway","institution_ids":["https://openalex.org/I184531372"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032770006","display_name":"Anis Yazidi","orcid":"https://orcid.org/0000-0001-7591-1659"},"institutions":[{"id":"https://openalex.org/I184531372","display_name":"OsloMet \u2013 Oslo Metropolitan University","ror":"https://ror.org/04q12yn84","country_code":"NO","type":"funder","lineage":["https://openalex.org/I184531372"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Anis Yazidi","raw_affiliation_strings":["Department of Computer Science, OsloMet\u2013Oslo Metropolitan University, Oslo, Norway"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, OsloMet\u2013Oslo Metropolitan University, Oslo, Norway","institution_ids":["https://openalex.org/I184531372"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090446312","display_name":"Paal Engelstad","orcid":"https://orcid.org/0009-0000-8371-927X"},"institutions":[{"id":"https://openalex.org/I184531372","display_name":"OsloMet \u2013 Oslo Metropolitan University","ror":"https://ror.org/04q12yn84","country_code":"NO","type":"funder","lineage":["https://openalex.org/I184531372"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Paal Einar Engelstad","raw_affiliation_strings":["Department of Computer Science, OsloMet\u2013Oslo Metropolitan University, Oslo, Norway"],"affiliations":[{"raw_affiliation_string":"Department of Computer Science, OsloMet\u2013Oslo Metropolitan University, Oslo, Norway","institution_ids":["https://openalex.org/I184531372"]}]}],"institution_assertions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.581,"has_fulltext":true,"fulltext_origin":"pdf","cited_by_count":3,"citation_normalized_percentile":{"value":0.374157,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":74,"max":77},"biblio":{"volume":null,"issue":null,"first_page":"502","last_page":"510"},"is_retracted":false,"is_paratext":false,"primary_topic":{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9997,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9997,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9996,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9973,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/openflow","display_name":"OpenFlow","score":0.92518973},{"id":"https://openalex.org/keywords/snapshot","display_name":"Snapshot (computer storage)","score":0.73471254},{"id":"https://openalex.org/keywords/swift","display_name":"Swift","score":0.5127176}],"concepts":[{"id":"https://openalex.org/C192697461","wikidata":"https://www.wikidata.org/wiki/Q4045918","display_name":"OpenFlow","level":3,"score":0.92518973},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.83491015},{"id":"https://openalex.org/C55282118","wikidata":"https://www.wikidata.org/wiki/Q252683","display_name":"Snapshot (computer storage)","level":2,"score":0.73471254},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.61574966},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.57932997},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.56759745},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.52496666},{"id":"https://openalex.org/C116188536","wikidata":"https://www.wikidata.org/wiki/Q17118377","display_name":"Swift","level":2,"score":0.5127176},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.43822235},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4252791},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.39351818},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.33060777},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.23154938},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13180989},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"is_oa":false,"landing_page_url":"https://doi.org/10.1109/lcn.2018.8638226","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false},{"is_oa":true,"landing_page_url":"https://hdl.handle.net/10642/8135","pdf_url":"https://oda.oslomet.no/oda-xmlui/bitstream/10642/8135/1/An%20Incremental%20Approach%20for%20Swift%20OpenFlow.pdf","source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_indexed_in_scopus":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":["University of Oslo"],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true},{"is_oa":true,"landing_page_url":"http://hdl.handle.net/10852/76908","pdf_url":"https://www.duo.uio.no/bitstream/10852/76908/1/An%2bIncremental%2bApproach%2bfor%2bSwift%2bOpenFlow.pdf","source":{"id":"https://openalex.org/S4306401717","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_indexed_in_scopus":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":["University of Oslo"],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false}],"best_oa_location":{"is_oa":true,"landing_page_url":"https://hdl.handle.net/10642/8135","pdf_url":"https://oda.oslomet.no/oda-xmlui/bitstream/10642/8135/1/An%20Incremental%20Approach%20for%20Swift%20OpenFlow.pdf","source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_indexed_in_scopus":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":["University of Oslo"],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true},"sustainable_development_goals":[{"score":0.47,"display_name":"Partnerships for the goals","id":"https://metadata.un.org/sdg/17"}],"grants":[],"datasets":[],"versions":[],"referenced_works_count":15,"referenced_works":["https://openalex.org/W158224344","https://openalex.org/W1675033504","https://openalex.org/W1903979221","https://openalex.org/W1972121713","https://openalex.org/W2023665096","https://openalex.org/W2115526539","https://openalex.org/W2124708739","https://openalex.org/W2138556012","https://openalex.org/W2139751271","https://openalex.org/W2140073547","https://openalex.org/W2186961980","https://openalex.org/W2605191571","https://openalex.org/W2771021476","https://openalex.org/W40144721","https://openalex.org/W4254605472"],"related_works":["https://openalex.org/W4283067488","https://openalex.org/W3157439123","https://openalex.org/W3133679066","https://openalex.org/W2792073542","https://openalex.org/W2781677913","https://openalex.org/W2391167130","https://openalex.org/W2133019913","https://openalex.org/W2092071486","https://openalex.org/W1646764293","https://openalex.org/W1583113493"],"abstract_inverted_index":{"Software":[0],"Defined":[1],"Networking":[2],"(SDN)":[3],"is":[4,48,114,146,151,205],"designed":[5],"for":[6,22,80,130,185],"dynamic":[7],"policy":[8,113,124,144,162],"update":[9,150],"where":[10],"frequent":[11,56],"changes":[12,57,193],"are":[13,103,156],"pushed":[14],"to":[15,58,134,180,217],"the":[16,33,36,42,45,53,59,96,100,111,123,128,140,143,149,161,167,172,182,186,202,209],"forwarding":[17,195],"devices.":[18,196],"Different":[19],"offline":[20],"approaches":[21],"detecting":[23,81],"misconfiguration":[24],"anomalies":[25,83],"in":[26,41,52,64,84,95,117,166,171,194,221],"SDN":[27,97],"by":[28,148],"taking":[29],"a":[30,69,106,118,214],"snapshot":[31],"of":[32,35,55,72,122,142,188],"state":[34],"network":[37],"have":[38],"been":[39],"developed":[40],"literature.":[43],"However,":[44],"detection":[46,183],"process":[47],"time-consuming":[49],"and":[50,138],"unfeasible":[51],"case":[54,187],"OpenFlow":[60,101],"tables":[61,102],"as":[62],"well":[63],"big":[65],"size":[66],"networks":[67],"containing":[68],"large":[70],"number":[71],"rules.":[73],"This":[74],"paper":[75],"presents":[76],"an":[77,85],"incremental":[78,131,203],"method":[79,133,204],"potential":[82],"online":[86],"manner,":[87],"i.e.,":[88],"after":[89],"one":[90],"or":[91,170,190],"multiple":[92,191],"simultaneous":[93,192],"updates":[94],"policy.":[98],"Whenever":[99],"dynamically":[104],"changed,":[105],"static":[107,210],"approach":[108],"that":[109,120,145,201],"rechecks":[110],"whole":[112],"unnecessarily":[115],"redundant":[116],"sense":[119],"most":[121],"remains":[125],"intact.":[126],"Hence":[127],"need":[129],"verification":[132],"reduce":[135],"this":[136],"overhead,":[137],"only":[139],"subset":[141],"affected":[147],"checked.":[152],"Two":[153],"different":[154],"solutions":[155],"proposed":[157],"based":[158],"on":[159],"whether":[160],"modifications":[163],"take":[164],"place":[165],"ingress":[168],"switches":[169],"middle":[173],"switches.":[174],"We":[175],"provide":[176],"some":[177,222],"comprehensive":[178],"experiments":[179],"demonstrate":[181],"performance":[184],"single":[189],"The":[197],"experiment":[198],"results":[199],"show":[200],"drastically":[206],"faster":[207],"than":[208],"parallel":[211],"approach,":[212],"with":[213],"factor":[215],"up":[216],"about":[218],"450":[219],"times":[220],"cases.":[223]},"abstract_inverted_index_v3":null,"cited_by_api_url":"https://api.openalex.org/works?filter=cites:W2912257171","counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":2}],"updated_date":"2025-03-19T10:11:15.575505","created_date":"2019-02-21"}