{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,2]],"date-time":"2026-04-02T15:59:22Z","timestamp":1775145562161,"version":"3.50.1"},"reference-count":50,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2024,5,1]],"date-time":"2024-05-01T00:00:00Z","timestamp":1714521600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2024,5,1]],"date-time":"2024-05-01T00:00:00Z","timestamp":1714521600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2024,5,1]],"date-time":"2024-05-01T00:00:00Z","timestamp":1714521600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2024,5,1]],"date-time":"2024-05-01T00:00:00Z","timestamp":1714521600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2024,5,1]],"date-time":"2024-05-01T00:00:00Z","timestamp":1714521600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2024,5,1]],"date-time":"2024-05-01T00:00:00Z","timestamp":1714521600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,5,1]],"date-time":"2024-05-01T00:00:00Z","timestamp":1714521600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Networks"],"published-print":{"date-parts":[[2024,5]]},"DOI":"10.1016\/j.comnet.2024.110327","type":"journal-article","created":{"date-parts":[[2024,3,12]],"date-time":"2024-03-12T16:42:49Z","timestamp":1710261769000},"page":"110327","update-policy":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":27,"special_numbering":"C","title":["SYNTROPY: TCP SYN DDoS attack detection for Software Defined Network based on R\u00e9nyi entropy"],"prefix":"10.1016","volume":"244","author":[{"ORCID":"https:\/\/2.zoppoz.workers.dev:443\/https\/orcid.org\/0000-0003-2892-526X","authenticated-orcid":false,"given":"Vaishali A.","family":"Shirsath","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Madhav M.","family":"Chandane","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chhagan","family":"Lal","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mauro","family":"Conti","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"key":"10.1016\/j.comnet.2024.110327_b1","doi-asserted-by":"crossref","first-page":"211","DOI":"10.1016\/j.comnet.2015.07.016","article-title":"Operational, organizational and business challenges for network operators in the context of SDN and NFV","volume":"92","author":"Contreras","year":"2015","journal-title":"Comput. Netw."},{"key":"10.1016\/j.comnet.2024.110327_b2","doi-asserted-by":"crossref","unstructured":"D. Kreutz, F.M. Ramos, P. Verissimo, Towards secure and dependable software-defined networks, in: Proceedings of the Second ACM SIGCOMM Workshop on Hot Topics in Software Defined Networking, 2013, pp. 55\u201360.","DOI":"10.1145\/2491185.2491199"},{"key":"10.1016\/j.comnet.2024.110327_b3","series-title":"2014 IEEE 22nd International Conference on Network Protocols","first-page":"525","article-title":"An OpenFlow-based prototype of SDN-oriented stateful hardware firewalls","author":"Collings","year":"2014"},{"issue":"2","key":"10.1016\/j.comnet.2024.110327_b4","doi-asserted-by":"crossref","first-page":"222","DOI":"10.1109\/TSE.1987.232894","article-title":"An intrusion-detection model","author":"Denning","year":"1987","journal-title":"IEEE Trans. Softw. Eng."},{"issue":"4","key":"10.1016\/j.comnet.2024.110327_b5","doi-asserted-by":"crossref","first-page":"1011","DOI":"10.1109\/SURV.2011.092311.00082","article-title":"Evasion techniques: Sneaking through your intrusion detection\/prevention systems","volume":"14","author":"Cheng","year":"2011","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"10.1016\/j.comnet.2024.110327_b6","series-title":"PAKDD","first-page":"702","article-title":"USAID: Unifying signature-based and anomaly-based intrusion detection.","author":"Li","year":"2005"},{"issue":"8","key":"10.1016\/j.comnet.2024.110327_b7","doi-asserted-by":"crossref","first-page":"613","DOI":"10.1016\/j.cose.2011.08.010","article-title":"Analysis of update delays in signature-based network intrusion detection systems","volume":"30","author":"Gascon","year":"2011","journal-title":"Comput. Secur."},{"key":"10.1016\/j.comnet.2024.110327_b8","series-title":"2014 Federated Conference on Computer Science and Information Systems","first-page":"101","article-title":"Identification of malware activities with rules","author":"Jasiul","year":"2014"},{"key":"10.1016\/j.comnet.2024.110327_b9","doi-asserted-by":"crossref","first-page":"89","DOI":"10.1016\/j.comnet.2015.08.038","article-title":"OPERETTA: An OPEnflow-based remedy to mitigate TCP SYNFLOOD attacks against web servers","volume":"92","author":"Fichera","year":"2015","journal-title":"Comput. Netw."},{"key":"10.1016\/j.comnet.2024.110327_b10","series-title":"2017 Fifth International Symposium on Computing and Networking","first-page":"522","article-title":"Packet in message based DDoS attack detection in SDN network using OpenFlow","author":"You","year":"2017"},{"key":"10.1016\/j.comnet.2024.110327_b11","doi-asserted-by":"crossref","unstructured":"D. Kotani, Y. Okabe, A packet-in message filtering mechanism for protection of control plane in openflow networks, in: Proceedings of the Tenth ACM\/IEEE Symposium on Architectures for Networking and Communications Systems, 2014, pp. 29\u201340.","DOI":"10.1145\/2658260.2658276"},{"key":"10.1016\/j.comnet.2024.110327_b12","series-title":"2015 45th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks","first-page":"239","article-title":"Floodguard: A dos attack prevention extension in software-defined networks","author":"Wang","year":"2015"},{"key":"10.1016\/j.comnet.2024.110327_b13","series-title":"IEEE INFOCOM 2017-IEEE Conference on Computer Communications","first-page":"1","article-title":"FloodDefender: Protecting data and control plane resources under SDN-aimed DoS attacks","author":"Shang","year":"2017"},{"key":"10.1016\/j.comnet.2024.110327_b14","doi-asserted-by":"crossref","unstructured":"A.A. Aizuddin, M. Atan, M. Norulazmi, M.M. Noor, S. Akimi, Z. Abidin, DNS amplification attack detection and mitigation via sFlow with security-centric SDN, in: Proceedings of the 11th International Conference on Ubiquitous Information Management and Communication, 2017, pp. 1\u20137.","DOI":"10.1145\/3022227.3022230"},{"issue":"6","key":"10.1016\/j.comnet.2024.110327_b15","doi-asserted-by":"crossref","first-page":"3514","DOI":"10.1109\/TNET.2017.2748159","article-title":"Flow wars: Systemizing the attack surface and defenses in software-defined networks","volume":"25","author":"Yoon","year":"2017","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"10.1016\/j.comnet.2024.110327_b16","doi-asserted-by":"crossref","first-page":"138903","DOI":"10.1109\/ACCESS.2021.3118605","article-title":"A critical review on the implementation of static data sampling techniques to detect network attacks","volume":"9","author":"Hajj","year":"2021","journal-title":"IEEE Access"},{"issue":"8","key":"10.1016\/j.comnet.2024.110327_b17","doi-asserted-by":"crossref","first-page":"2296","DOI":"10.1109\/TLA.2018.8528249","article-title":"Towards an efficient ddos detection scheme for software-defined networks","volume":"16","author":"Lima","year":"2018","journal-title":"IEEE Lat. Am. Trans."},{"issue":"10","key":"10.1016\/j.comnet.2024.110327_b18","doi-asserted-by":"crossref","first-page":"2358","DOI":"10.1109\/JSAC.2018.2869997","article-title":"JESS: Joint entropy-based ddos defense scheme in SDN","volume":"36","author":"Kalkan","year":"2018","journal-title":"IEEE J. Sel. Areas Commun."},{"key":"10.1016\/j.comnet.2024.110327_b19","doi-asserted-by":"crossref","unstructured":"G. Nychis, V. Sekar, D.G. Andersen, H. Kim, H. Zhang, An empirical evaluation of entropy-based traffic anomaly detection, in: Proceedings of the 8th ACM SIGCOMM Conference on Internet Measurement, 2008, pp. 151\u2013156.","DOI":"10.1145\/1452520.1452539"},{"issue":"2","key":"10.1016\/j.comnet.2024.110327_b20","doi-asserted-by":"crossref","first-page":"426","DOI":"10.1109\/TIFS.2011.2107320","article-title":"Low-rate DDoS attacks detection and traceback by using new information metrics","volume":"6","author":"Xiang","year":"2011","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.comnet.2024.110327_b21","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2020.114111","article-title":"An entropy empowered hybridized aggregation technique for group recommender systems","volume":"166","author":"Yalcin","year":"2021","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.comnet.2024.110327_b22","series-title":"Val\u00f3sz\u00edn\u00fcs\u00e9gsz\u00e1m\u00edt\u00e1s","author":"R\u00e9nyi","year":"1954"},{"key":"10.1016\/j.comnet.2024.110327_b23","doi-asserted-by":"crossref","unstructured":"S. Shin, V. Yegneswaran, P. Porras, G. Gu, Avant-guard: Scalable and vigilant switch flow management in software-defined networks, in: Proceedings of the 2013 ACM SIGSAC Conference on Computer & Communications Security, 2013, pp. 413\u2013424.","DOI":"10.1145\/2508859.2516684"},{"issue":"2","key":"10.1016\/j.comnet.2024.110327_b24","doi-asserted-by":"crossref","first-page":"1206","DOI":"10.1109\/TNET.2016.2626287","article-title":"Lineswitch: Tackling control plane saturation attacks in software-defined networking","volume":"25","author":"Ambrosin","year":"2016","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"10.1016\/j.comnet.2024.110327_b25","series-title":"2015 IEEE 35th International Conference on Distributed Computing Systems Workshops","first-page":"95","article-title":"Selective packet inspection to detect DoS flooding using software defined networking (SDN)","author":"Chin","year":"2015"},{"issue":"2","key":"10.1016\/j.comnet.2024.110327_b26","doi-asserted-by":"crossref","first-page":"487","DOI":"10.1109\/TNSM.2017.2701549","article-title":"Slicots: An sdn-based lightweight countermeasure for tcp syn flooding attacks","volume":"14","author":"Mohammadi","year":"2017","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"10.1016\/j.comnet.2024.110327_b27","doi-asserted-by":"crossref","unstructured":"J. Liu, Y. Lai, S. Zhang, FL-GUARD: A detection and defense system for DDoS attack in SDN, in: Proceedings of the 2017 International Conference on Cryptography, Security and Privacy, 2017, pp. 107\u2013111.","DOI":"10.1145\/3058060.3058074"},{"key":"10.1016\/j.comnet.2024.110327_b28","doi-asserted-by":"crossref","first-page":"30","DOI":"10.1016\/j.procs.2015.04.007","article-title":"DDoS attack detection using fast entropy approach on flow-based network traffic","volume":"50","author":"David","year":"2015","journal-title":"Procedia Comput. Sci."},{"key":"10.1016\/j.comnet.2024.110327_b29","first-page":"310","article-title":"An entropy-based distributed DDoS detection mechanism in software-defined networking","volume":"vol. 1","author":"Wang","year":"2015"},{"issue":"4","key":"10.1016\/j.comnet.2024.110327_b30","doi-asserted-by":"crossref","first-page":"1545","DOI":"10.1109\/TNSM.2018.2861741","article-title":"SAFETY: Early detection and mitigation of TCP SYN flood utilizing entropy in SDN","volume":"15","author":"Kumar","year":"2018","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"10.1016\/j.comnet.2024.110327_b31","doi-asserted-by":"crossref","first-page":"425","DOI":"10.1007\/s13369-017-2414-5","article-title":"DDoS attack detection and mitigation using SDN: methods, practices, and solutions","volume":"42","author":"Bawany","year":"2017","journal-title":"Arab. J. Sci. Eng."},{"issue":"17","key":"10.1016\/j.comnet.2024.110327_b32","doi-asserted-by":"crossref","DOI":"10.1002\/dac.4061","article-title":"SYN-Guard: An effective counter for SYN flooding attack in software-defined networking","volume":"32","author":"Mohammadi","year":"2019","journal-title":"Int. J. Commun. Syst."},{"issue":"1","key":"10.1016\/j.comnet.2024.110327_b33","doi-asserted-by":"crossref","first-page":"745","DOI":"10.1109\/TNSM.2020.3037124","article-title":"AEGIS: Detection and mitigation of TCP SYN flood on SDN controller","volume":"18","author":"Ravi","year":"2020","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"issue":"3","key":"10.1016\/j.comnet.2024.110327_b34","doi-asserted-by":"crossref","first-page":"379","DOI":"10.1002\/j.1538-7305.1948.tb01338.x","article-title":"A mathematical theory of communication","volume":"27","author":"Shannon","year":"1948","journal-title":"Bell Syst. Tech. J."},{"issue":"2","key":"10.1016\/j.comnet.2024.110327_b35","doi-asserted-by":"crossref","first-page":"266","DOI":"10.3390\/e24020266","article-title":"The odyssey of entropy: Cryptography","volume":"24","author":"Zolfaghari","year":"2022","journal-title":"Entropy"},{"issue":"7","key":"10.1016\/j.comnet.2024.110327_b36","doi-asserted-by":"crossref","first-page":"321","DOI":"10.3390\/e19070321","article-title":"Entropy characterization of random network models","volume":"19","author":"Zufiria","year":"2017","journal-title":"Entropy"},{"key":"10.1016\/j.comnet.2024.110327_b37","doi-asserted-by":"crossref","first-page":"479","DOI":"10.1007\/BF01016429","article-title":"Possible generalization of Boltzmann-Gibbs statistics","volume":"52","author":"Tsallis","year":"1988","journal-title":"J. Stat. Phys."},{"issue":"01","key":"10.1016\/j.comnet.2024.110327_b38","doi-asserted-by":"crossref","first-page":"45","DOI":"10.1142\/S0219493701000047","article-title":"Partition-based entropies of deterministic and stochastic maps","volume":"1","author":"Ebeling","year":"2001","journal-title":"Stoch. Dyn."},{"issue":"3","key":"10.1016\/j.comnet.2024.110327_b39","doi-asserted-by":"crossref","first-page":"217","DOI":"10.1016\/j.physleta.2005.01.094","article-title":"A step beyond Tsallis and R\u00e9nyi entropies","volume":"338","author":"Masi","year":"2005","journal-title":"Phys. Lett. A"},{"key":"10.1016\/j.comnet.2024.110327_b40","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2022.108610","article-title":"Population-based self-adaptive Generalised Masi Entropy for image segmentation: A novel representation","volume":"245","author":"Mousavirad","year":"2022","journal-title":"Knowl.-Based Syst."},{"issue":"3","key":"10.1016\/j.comnet.2024.110327_b41","doi-asserted-by":"crossref","first-page":"324","DOI":"10.1109\/TIT.1978.1055890","article-title":"Renyi\u2019s entropy and the probability of error","volume":"24","author":"Ben-Bassat","year":"1978","journal-title":"IEEE Trans. Inform. Theory"},{"key":"10.1016\/j.comnet.2024.110327_b42","article-title":"Estimation of R\u00e9nyi entropy and mutual information based on generalized nearest-neighbor graphs","volume":"23","author":"P\u00e1l","year":"2010","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.comnet.2024.110327_b43","series-title":"International Symposium OnInformation Theory, 2004. ISIT 2004. Proceedings","first-page":"233","article-title":"Smooth R\u00e9nyi entropy and applications","author":"Renner","year":"2004"},{"issue":"1","key":"10.1016\/j.comnet.2024.110327_b44","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1080\/02331888.2010.494730","article-title":"Dynamic cumulative residual Renyi\u2019s entropy","volume":"46","author":"Sunoj","year":"2012","journal-title":"Statistics"},{"key":"10.1016\/j.comnet.2024.110327_b45","series-title":"2015 IEEE 14th International Symposium on Network Computing and Applications","first-page":"134","article-title":"Identification and selection of flow features for accurate traffic classification in SDN","author":"Da Silva","year":"2015"},{"issue":"12","key":"10.1016\/j.comnet.2024.110327_b46","doi-asserted-by":"crossref","first-page":"6127","DOI":"10.3390\/app12126127","article-title":"Renyi joint entropy-based dynamic threshold approach to detect DDoS attacks against SDN controller with various traffic rates","volume":"12","author":"Aladaileh","year":"2022","journal-title":"Appl. Sci."},{"issue":"1","key":"10.1016\/j.comnet.2024.110327_b47","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1038\/s41598-017-13640-5","article-title":"The optimal window size for analysing longitudinal networks","volume":"7","author":"Uddin","year":"2017","journal-title":"Sci. Rep."},{"issue":"4","key":"10.1016\/j.comnet.2024.110327_b48","doi-asserted-by":"crossref","first-page":"2367","DOI":"10.3390\/e17042367","article-title":"An entropy-based network anomaly detection method","volume":"17","author":"Berezi\u0144ski","year":"2015","journal-title":"Entropy"},{"issue":"4","key":"10.1016\/j.comnet.2024.110327_b49","doi-asserted-by":"crossref","first-page":"914","DOI":"10.2307\/3214465","article-title":"Concepts of dispersion in distributions: a comparative note","volume":"23","author":"Hickey","year":"1986","journal-title":"J. Appl. Probab."},{"issue":"1\u20133","key":"10.1016\/j.comnet.2024.110327_b50","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.scitotenv.2004.11.023","article-title":"Background and threshold: critical comparison of methods of determination","volume":"346","author":"Reimann","year":"2005","journal-title":"Sci. Total Environ."}],"container-title":["Computer Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/api.elsevier.com\/content\/article\/PII:S1389128624001592?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/api.elsevier.com\/content\/article\/PII:S1389128624001592?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2024,4,28]],"date-time":"2024-04-28T07:52:16Z","timestamp":1714290736000},"score":1,"resource":{"primary":{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/linkinghub.elsevier.com\/retrieve\/pii\/S1389128624001592"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,5]]},"references-count":50,"alternative-id":["S1389128624001592"],"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.1016\/j.comnet.2024.110327","relation":{},"ISSN":["1389-1286"],"issn-type":[{"value":"1389-1286","type":"print"}],"subject":[],"published":{"date-parts":[[2024,5]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"SYNTROPY: TCP SYN DDoS attack detection for Software Defined Network based on R\u00e9nyi entropy","name":"articletitle","label":"Article Title"},{"value":"Computer Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.1016\/j.comnet.2024.110327","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2024 Elsevier B.V. All rights reserved.","name":"copyright","label":"Copyright"}],"article-number":"110327"}}