2018
DOI: 10.1007/978-3-319-73198-8_20
|View full text |Cite
|
Sign up to set email alerts
|

Discovering Patterns of Interest in IP Traffic Using Cliques in Bipartite Link Streams

Abstract: Studying IP traffic is crucial for many applications. We focus here on the detection of (structurally and temporally) dense sequences of interactions, that may indicate botnets or coordinated network scans. More precisely, we model a MAWI capture of IP traffic as a link streams, i.e. a sequence of interactions (t1, t2, u, v) meaning that devices u and v exchanged packets from time t1 to time t2. This traffic is captured on a single router and so has a bipartite structure: links occur only between nodes in two … Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...
1
1
1
1

Citation Types

0
17
0

Year Published

2018
2018
2023
2023

Publication Types

Select...
4
3

Relationship

5
2

Authors

Journals

citations
Cited by 13 publications
(17 citation statements)
references
References 14 publications
0
17
0
Order By: Relevance
“…A maximum ∆-clique enumeration is designed and evaluated using real-world data. The aforementioned framework is exploited in [97] for discovering patterns of interest in IP traffic using cliques in bipartite link streams.…”
Section: E Special Algorithms For the Clique Problemmentioning
confidence: 99%
“…A maximum ∆-clique enumeration is designed and evaluated using real-world data. The aforementioned framework is exploited in [97] for discovering patterns of interest in IP traffic using cliques in bipartite link streams.…”
Section: E Special Algorithms For the Clique Problemmentioning
confidence: 99%
“…Transitivity is usually extended to bipartite graphs [43,27,38] by considering the set N of quadruplets of nodes (a, b, c, d) such that ab, bc and cd are in E and the set ⊲⊳ of such quadruplets with in addition ad in E. Then, the transitivity is tr(G) = |⊲⊳| |N| . Like above, [38] also propose to consider the fraction of all quintuplets (a, b, c, d, e) of distinct nodes with ab, bc, cd, de in E such that there exists an other node f with af and ef in E. Bipartite stream graphs naturally model many situations, like for instance presence of people in rooms or other kinds of locations, purchases of products by clients, access to on-line services, bus presence at stations [15], traffic between a set of computers and the rest of the internet [48], or contribution of people to projects, such as software.…”
Section: Bipartite Stream Graphsmentioning
confidence: 99%
“…Plus, some cliques (like stars) do not capture relevant information for recommendation. We then use the methodology described in [25] to sample maximal balanced bipartite cliques, i.e. cliques involving approximately the same number of users and items.…”
Section: Graph and Link Stream Featuresmentioning
confidence: 99%