{"id":"https://openalex.org/W2557327414","doi":"https://doi.org/10.1109/tsp.2016.7760838","title":"Frequency based DDoS attack detection approach using naive Bayes classification","display_name":"Frequency based DDoS attack detection approach using naive Bayes classification","publication_year":2016,"publication_date":"2016-06-01","ids":{"openalex":"https://openalex.org/W2557327414","doi":"https://doi.org/10.1109/tsp.2016.7760838","mag":"2557327414"},"language":"en","primary_location":{"id":"doi:10.1109/tsp.2016.7760838","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsp.2016.7760838","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 39th International Conference on Telecommunications and Signal Processing (TSP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042164046","display_name":"Ramin Fadaei Fouladi","orcid":"https://orcid.org/0000-0003-4142-1293"},"institutions":[{"id":"https://openalex.org/I4405392","display_name":"Bo\u011fazi\u00e7i University","ror":"https://ror.org/03z9tma90","country_code":"TR","type":"education","lineage":["https://openalex.org/I4405392"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Ramin Fadaei Fouladi","raw_affiliation_strings":["Dept. of Electrical and Electronics Engineering, Bo\u011fazi\u00e7i University, Istanbul, Turkey"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Electrical and Electronics Engineering, Bo\u011fazi\u00e7i University, Istanbul, Turkey","institution_ids":["https://openalex.org/I4405392"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000779924","display_name":"Cemil Eren Kayata\u015f","orcid":null},"institutions":[{"id":"https://openalex.org/I4405392","display_name":"Bo\u011fazi\u00e7i University","ror":"https://ror.org/03z9tma90","country_code":"TR","type":"education","lineage":["https://openalex.org/I4405392"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Cemil Eren Kayatas","raw_affiliation_strings":["Dept. of Electrical and Electronics Engineering, Bo\u011fazi\u00e7i University, Istanbul, Turkey"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Electrical and Electronics Engineering, Bo\u011fazi\u00e7i University, Istanbul, Turkey","institution_ids":["https://openalex.org/I4405392"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005997374","display_name":"Emin Anar\u0131m","orcid":"https://orcid.org/0000-0002-3305-7674"},"institutions":[{"id":"https://openalex.org/I4405392","display_name":"Bo\u011fazi\u00e7i University","ror":"https://ror.org/03z9tma90","country_code":"TR","type":"education","lineage":["https://openalex.org/I4405392"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Emin Anarim","raw_affiliation_strings":["Dept. of Electrical and Electronics Engineering, Bo\u011fazi\u00e7i University, Istanbul, Turkey"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Dept. of Electrical and Electronics Engineering, Bo\u011fazi\u00e7i University, Istanbul, Turkey","institution_ids":["https://openalex.org/I4405392"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4405392"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":74,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"104","last_page":"107"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8890368938446045},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7814918756484985},{"id":"https://openalex.org/keywords/naive-bayes-classifier","display_name":"Naive Bayes classifier","score":0.6614378094673157},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.659848153591156},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6223127245903015},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.6015067100524902},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5344250798225403},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5085002183914185},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.47652897238731384},{"id":"https://openalex.org/keywords/ip-address","display_name":"Ip address","score":0.4347912669181824},{"id":"https://openalex.org/keywords/frequency-domain","display_name":"Frequency domain","score":0.42472466826438904},{"id":"https://openalex.org/keywords/trinoo","display_name":"Trinoo","score":0.4197794198989868},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.325961709022522},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3120560646057129},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2739930748939514},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1364229917526245},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.09438192844390869},{"id":"https://openalex.org/keywords/computer-vision","display_name":"Computer vision","score":0.07376641035079956}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8890368938446045},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7814918756484985},{"id":"https://openalex.org/C52001869","wikidata":"https://www.wikidata.org/wiki/Q812530","display_name":"Naive Bayes classifier","level":3,"score":0.6614378094673157},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.659848153591156},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6223127245903015},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.6015067100524902},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5344250798225403},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5085002183914185},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.47652897238731384},{"id":"https://openalex.org/C2985371682","wikidata":"https://www.wikidata.org/wiki/Q11135","display_name":"Ip address","level":2,"score":0.4347912669181824},{"id":"https://openalex.org/C19118579","wikidata":"https://www.wikidata.org/wiki/Q786423","display_name":"Frequency domain","level":2,"score":0.42472466826438904},{"id":"https://openalex.org/C43639116","wikidata":"https://www.wikidata.org/wiki/Q7843050","display_name":"Trinoo","level":5,"score":0.4197794198989868},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.325961709022522},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3120560646057129},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2739930748939514},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1364229917526245},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.09438192844390869},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.07376641035079956}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tsp.2016.7760838","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsp.2016.7760838","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 39th International Conference on Telecommunications and Signal Processing (TSP)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7400000095367432,"display_name":"Life below water","id":"https://metadata.un.org/sdg/14"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W433644524","https://openalex.org/W1489073918","https://openalex.org/W1540713332","https://openalex.org/W1570481312","https://openalex.org/W2019672983","https://openalex.org/W2028628798","https://openalex.org/W2053796240","https://openalex.org/W2111542531","https://openalex.org/W2121511513","https://openalex.org/W2121638006","https://openalex.org/W2130419530","https://openalex.org/W2133990480","https://openalex.org/W2136990875","https://openalex.org/W2146427815","https://openalex.org/W2149960049","https://openalex.org/W2158296636","https://openalex.org/W2159160833","https://openalex.org/W2162969618","https://openalex.org/W4246524285","https://openalex.org/W6615155006","https://openalex.org/W6629317036"],"related_works":["https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W1968168724","https://openalex.org/W2204131204","https://openalex.org/W4385302085","https://openalex.org/W2754163055","https://openalex.org/W4256682929","https://openalex.org/W4322008378","https://openalex.org/W2383770723","https://openalex.org/W2186749541"],"abstract_inverted_index":{"Being":[0],"available":[1],"for":[2,86],"their":[3,51],"legitimate":[4],"users":[5],"is":[6],"one":[7],"of":[8,12,17,23,40,48,89,105,127],"the":[9,18,29,38],"main":[10,19],"concerns":[11],"web":[13],"service":[14],"servers.":[15],"One":[16],"threats":[20],"to":[21,36,55,73,115],"availability":[22],"servers":[24],"are":[25,66,70],"DDoS":[26,43,63,128],"attacks.":[27],"Flooding":[28],"server":[30],"with":[31,100],"bogus":[32],"packets":[33,69],"which":[34],"leads":[35],"overuse":[37],"sources":[39],"it,":[41],"a":[42,83,96],"attack":[44,64,118,129],"deprives":[45],"authorized":[46],"clients":[47],"benefits":[49],"from":[50,58],"services.":[52],"In":[53,91],"order":[54,114],"disguise":[56],"itself":[57],"intrusion":[59],"detection":[60],"systems,":[61],"sophisticated":[62],"mechanisms":[65],"invented":[67],"whose":[68],"very":[71],"similar":[72],"those":[74],"in":[75,113,132],"normal":[76,120],"traffics.":[77,121],"Frequency":[78],"domain":[79],"analysis":[80,126],"would":[81],"be":[82],"promising":[84],"alternative":[85],"conventional":[87],"methods":[88,104],"detection.":[90],"this":[92],"paper":[93],"we":[94],"provide":[95],"naive":[97],"Bayes":[98],"classifier":[99],"two":[101],"frequency":[102,125],"based":[103],"discrete":[106,110],"Fourier":[107],"transform":[108,112],"and":[109,119],"wavelet":[111],"separate":[116],"between":[117],"It":[122],"founds":[123],"that,":[124],"can":[130],"result":[131],"good":[133],"performance.":[134]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":11},{"year":2020,"cited_by_count":12},{"year":2019,"cited_by_count":12},{"year":2018,"cited_by_count":11},{"year":2017,"cited_by_count":3}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}