{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,8,7]],"date-time":"2025-08-07T20:21:53Z","timestamp":1754598113790,"version":"3.40.3"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030417017"},{"type":"electronic","value":"9783030417024"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-41702-4_12","type":"book-chapter","created":{"date-parts":[[2020,3,2]],"date-time":"2020-03-02T00:02:26Z","timestamp":1583107346000},"page":"185-201","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["CompactFlow: A Hybrid Binary Format for Network Flow Data"],"prefix":"10.1007","author":[{"given":"Michal","family":"Piskozub","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Riccardo","family":"Spolaor","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ivan","family":"Martinovic","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2020,3,2]]},"reference":[{"unstructured":"flowd. https:\/\/code.google.com\/archive\/p\/flowd\/","key":"12_CR1"},{"unstructured":"Flatbuffers (2015). https:\/\/google.github.io\/flatbuffers\/","key":"12_CR2"},{"unstructured":"MariaDB ColumnStore (2017). https:\/\/mariadb.com\/kb\/en\/library\/mariadb-columnstore\/","key":"12_CR3"},{"unstructured":"Argus (1985). https:\/\/qosient.com\/argus\/","key":"12_CR4"},{"doi-asserted-by":"crossref","unstructured":"Chandrasekaran, S., et al.: TelegraphCQ: continuous dataflow processing for an uncertain world. In: Proceedings of of ACM SIGMOD (2003)","key":"12_CR5","DOI":"10.1145\/872757.872857"},{"key":"12_CR6","doi-asserted-by":"publisher","first-page":"406","DOI":"10.1109\/TST.2013.6574679","volume":"18","author":"Z Chen","year":"2013","unstructured":"Chen, Z., et al.: TIFAflow: enhancing traffic archiving system with flow granularity for forensic analysis in network security. Tsinghua Sci. Technol. 18, 406\u2013417 (2013)","journal-title":"Tsinghua Sci. Technol."},{"key":"12_CR7","doi-asserted-by":"publisher","first-page":"100","DOI":"10.1109\/TST.2015.7040519","volume":"20","author":"Z Chen","year":"2015","unstructured":"Chen, Z., et al.: A survey of bitmap index compression algorithms for big data. Tsinghua Sci. Technol. 20, 100\u2013115 (2015)","journal-title":"Tsinghua Sci. Technol."},{"unstructured":"Claise, B., et al.: IPFIX protocol specifications. RFC7011 (2004)","key":"12_CR8"},{"doi-asserted-by":"crossref","unstructured":"Claise, B.: Cisco Systems NetFlow Services Export Version 9. The Internet Society, Technical report (2004)","key":"12_CR9","DOI":"10.17487\/rfc3954"},{"doi-asserted-by":"crossref","unstructured":"Cranor, C., et al.: Gigascope: a stream database for network applications. In: Proceedings of ACM SIGMOD (2003)","key":"12_CR10","DOI":"10.1145\/872757.872838"},{"key":"12_CR11","doi-asserted-by":"publisher","first-page":"73","DOI":"10.1007\/978-3-642-12365-8_6","volume-title":"Traffic Monitoring and Analysis","author":"Luca Deri","year":"2010","unstructured":"Deri, L., et al.: Collection and exploration of large data monitoring sets using bitmap databases. In: Proceedings of TMA (2010)"},{"unstructured":"Desnoyers, P.J., et al.: Hyperion: high volume stream archival for retrospective querying. In: Proceedings of USENIX ATC (2007)","key":"12_CR12"},{"doi-asserted-by":"crossref","unstructured":"Fusco, F., et al.: High speed network traffic analysis with commodity multi-core systems. In: Proceedings of of IMC (2010)","key":"12_CR13","DOI":"10.1145\/1879141.1879169"},{"doi-asserted-by":"crossref","unstructured":"Fusco, F., et al.: NET-FLi: on-the-fly compression, archiving and indexing of streaming network traffic. In: Proceedings of the VLDB Endowment (2010)","key":"12_CR14","DOI":"10.14778\/1920841.1921011"},{"key":"12_CR15","doi-asserted-by":"publisher","first-page":"47","DOI":"10.1145\/2096149.2096156","volume":"42","author":"F Fusco","year":"2012","unstructured":"Fusco, F., et al.: pcapIndex: an index for network packet traces with legacy compatibility. ACM SIGCOMM Comput. Commun. Rev. 42, 47\u201353 (2012)","journal-title":"ACM SIGCOMM Comput. Commun. Rev."},{"doi-asserted-by":"crossref","unstructured":"Fusco, F., et al.: RasterZip: compressing network monitoring data with support for partial decompression. In: Proceedings of IMC (2012)","key":"12_CR16","DOI":"10.1145\/2398776.2398783"},{"unstructured":"Haag, P.: Watch your Flows with NfSen and NFDUMP (2005)","key":"12_CR17"},{"key":"12_CR18","volume-title":"Data Compression; Techniques and Applications: Hardwareand Software Considerations","author":"G Held","year":"1991","unstructured":"Held, G., Marshall, T.: Data Compression; Techniques and Applications: Hardwareand Software Considerations. Wiley, New York (1991)"},{"doi-asserted-by":"crossref","unstructured":"Hofstede, R., et al.: The network data handling war: MySQL vs. NfDump. In: EUNICE (2010)","key":"12_CR19","DOI":"10.1007\/978-3-642-13971-0_16"},{"key":"12_CR20","first-page":"2037","volume":"16","author":"R Hofstede","year":"2014","unstructured":"Hofstede, R., et al.: Flow monitoring explained: from packet capture to data analysis with NetFlow and IPFIX. IEEE COMST 16, 2037\u20132064 (2014)","journal-title":"IEEE COMST"},{"unstructured":"Lampertand, R.T., et al.: Vermont - a versatile monitoring toolkit for IPFIX and PSAMP. In: IEEE\/IST Workshop MonAM (2006)","key":"12_CR21"},{"unstructured":"Lee, J., et al.: FloSIS: a highly scalable network flow capture system for fast retrieval and storage efficiency. In: Proceedings of USENIX ATC (2015)","key":"12_CR22"},{"unstructured":"Li, X., et al.: Advanced indexing techniques for wide-area network monitoring. In: Proceedings of ICDE (2008)","key":"12_CR23"},{"unstructured":"Lucente, P.: pmacct: steps forward interface counters (2008). http:\/\/www.pmacct.net\/pmacct-stepsforward.pdf","key":"12_CR24"},{"doi-asserted-by":"crossref","unstructured":"Maier, G., et al.: Enriching network security analysis with time travel. ACM SIGCOMM Comput. Commun. Rev. (2008)","key":"12_CR25","DOI":"10.1145\/1402958.1402980"},{"unstructured":"Oberhumer, M.: Lempel\u2013Ziv\u2013Oberhumer data compression (2013)","key":"12_CR26"},{"issue":"3","key":"12_CR27","doi-asserted-by":"publisher","first-page":"151","DOI":"10.1145\/3308897.3308961","volume":"46","author":"M Piskozub","year":"2019","unstructured":"Piskozub, M., et al.: MalAlert: detecting malware in large-scale network traffic using statistical features. SIGMETRICS Perform. Eval. Rev. 46(3), 151\u2013154 (2019)","journal-title":"SIGMETRICS Perform. Eval. Rev."},{"doi-asserted-by":"crossref","unstructured":"Reiss, F., et al.: Enabling real-time querying of live and historical stream data. In: Proceedings of SSBD (2007)","key":"12_CR28","DOI":"10.1109\/SSDBM.2007.34"},{"doi-asserted-by":"crossref","unstructured":"Thomas, M., et al.: SiLK: a tool suite for unsampled network flow analysis at scale. In: Proceedings of IEEE BigData (2014)","key":"12_CR29","DOI":"10.1109\/BigData.Congress.2014.34"},{"key":"12_CR30","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"155","DOI":"10.1007\/978-3-642-30633-4_21","volume-title":"Dependable Networks and Services","author":"P Velan","year":"2012","unstructured":"Velan, P., Krej\u010d\u00ed, R.: Flow information storage assessment using IPFIXcol. In: Sadre, R., Novotn\u00fd, J., \u010celeda, P., Waldburger, M., Stiller, B. (eds.) AIMS 2012. LNCS, vol. 7279, pp. 155\u2013158. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-30633-4_21"},{"key":"12_CR31","first-page":"012053","volume":"180","author":"K Wu","year":"2009","unstructured":"Wu, K., et al.: FastBit: interactively searching massive data. J. Phys. 180, 012053 (2009)","journal-title":"J. Phys."},{"key":"12_CR32","doi-asserted-by":"publisher","first-page":"140","DOI":"10.1016\/j.comnet.2017.06.010","volume":"124","author":"G Xie","year":"2017","unstructured":"Xie, G., et al.: Index-Trie: efficient archival and retrieval of network traffic. Comput. Netw. 124, 140\u2013156 (2017)","journal-title":"Comput. Netw."}],"container-title":["Lecture Notes in Computer Science","Information Security Theory and Practice"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-41702-4_12","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,2]],"date-time":"2024-03-02T01:06:52Z","timestamp":1709341612000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-41702-4_12"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030417017","9783030417024"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-41702-4_12","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"2 March 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"WISTP","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on Information Security Theory and Practice","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Paris","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 December 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"12 December 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"wistp2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.wistp.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"42","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"12","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"29% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.7","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"This content has been made available to all.","name":"free","label":"Free to read"}]}}