{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T03:07:20Z","timestamp":1779073640713,"version":"3.51.4"},"publisher-location":"Cham","reference-count":33,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031976025","type":"print"},{"value":"9783031976032","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,6,28]],"date-time":"2025-06-28T00:00:00Z","timestamp":1751068800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,6,28]],"date-time":"2025-06-28T00:00:00Z","timestamp":1751068800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-031-97603-2_1","type":"book-chapter","created":{"date-parts":[[2025,7,10]],"date-time":"2025-07-10T09:54:53Z","timestamp":1752141293000},"page":"3-15","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Detecting DDoS Attacks in\u00a0Microservice Architectures via\u00a0AI-Based Agents"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2609-6787","authenticated-orcid":false,"given":"Giacomo","family":"Benedetti","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6466-3354","authenticated-orcid":false,"given":"Luca","family":"Caviglione","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2660-1432","authenticated-orcid":false,"given":"Alberto","family":"Falcone","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4199-8199","authenticated-orcid":false,"given":"Massimo","family":"Ficco","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7711-9833","authenticated-orcid":false,"given":"Massimo","family":"Guarascio","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8104-3832","authenticated-orcid":false,"given":"Antonio","family":"Guerriero","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,6,28]]},"reference":[{"key":"1_CR1","doi-asserted-by":"crossref","unstructured":"Bremler-Barr, A., Czeizler, M., Levy, H., Tavori, J.: Exploiting miscoordination of microservices in tandem for effective DDoS attacks. In: IEEE INFOCOM 2024-IEEE Conference on Computer Communications, pp. 231\u2013240. IEEE (2024)","DOI":"10.1109\/INFOCOM52122.2024.10621335"},{"key":"1_CR2","doi-asserted-by":"crossref","unstructured":"Cassagnes, C., Trestioreanu, L., Joly, C., State, R.: The rise of eBPF for non-intrusive performance monitoring. In: NOMS 2020-2020 IEEE\/IFIP Network Operations and Management Symposium, pp.\u00a01\u20137. IEEE (2020)","DOI":"10.1109\/NOMS47738.2020.9110434"},{"key":"1_CR3","doi-asserted-by":"crossref","unstructured":"Castro, J., Laranjeiro, N., Vieira, M.: Detecting dos attacks in microservice applications: approach and case study. In: Proceedings of the 11th Latin-American Symposium on Dependable Computing, pp. 73\u201378 (2022)","DOI":"10.1145\/3569902.3569916"},{"key":"1_CR4","doi-asserted-by":"crossref","unstructured":"De\u00a0Lauretis, L.: From monolithic architecture to microservices architecture. In: 2019 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW), pp. 93\u201396. IEEE (2019)","DOI":"10.1109\/ISSREW.2019.00050"},{"issue":"3","key":"1_CR5","doi-asserted-by":"publisher","first-page":"3392","DOI":"10.1007\/s11227-022-04783-y","volume":"79","author":"M Douiba","year":"2023","unstructured":"Douiba, M., Benkirane, S., Guezzaz, A., Azrour, M.: An improved anomaly detection model for IoT security using decision tree and gradient boosting. J. Supercomput. 79(3), 3392\u20133411 (2023)","journal-title":"J. Supercomput."},{"key":"1_CR6","doi-asserted-by":"crossref","unstructured":"Ficco, M., et al.: A benchmark for DDoS attacks detection in microservice architectures. In: ICNC 2025 (2025)","DOI":"10.1109\/ICNC64010.2025.10994136"},{"key":"1_CR7","doi-asserted-by":"crossref","unstructured":"Flora, J., Antunes, N.: Evaluating intrusion detection for microservice applications: benchmark, dataset, and case studies. J. Syst. Softw. 216, 112142 (2024)","DOI":"10.1016\/j.jss.2024.112142"},{"key":"1_CR8","doi-asserted-by":"crossref","unstructured":"Friedman, J.H.: Stochastic gradient boosting. Comput. Stat. Data Anal. 38(4), 367\u2013378 (2002)","DOI":"10.1016\/S0167-9473(01)00065-2"},{"key":"1_CR9","doi-asserted-by":"crossref","unstructured":"Giamattei, L., et al.: Monitoring tools for DevOps and microservices: a systematic grey literature review. J. Syst. Softw. 208, 111906 (2024)","DOI":"10.1016\/j.jss.2023.111906"},{"key":"1_CR10","doi-asserted-by":"crossref","unstructured":"Haq, M.S., Nguyen, T.D., Tosun, A.\u015e., Vollmer, F., Korkmaz, T., Sadeghi, A.R.: SoK: a comprehensive analysis and evaluation of docker container attack and defense mechanisms. In: 2024 IEEE Symposium on Security and Privacy (SP), pp. 4573\u20134590. IEEE (2024)","DOI":"10.1109\/SP54263.2024.00268"},{"key":"1_CR11","unstructured":"Jayalath, R.K., Ahmad, H., Goel, D., Syed, M.S., Ullah, F.: Microservice vulnerability analysis: a literature review with empirical insights. IEEE Access (2024)"},{"issue":"3","key":"1_CR12","doi-asserted-by":"publisher","first-page":"674","DOI":"10.1109\/TPDS.2020.3029088","volume":"32","author":"RR Karn","year":"2020","unstructured":"Karn, R.R., Kudva, P., Huang, H., Suneja, S., Elfadel, I.M.: Cryptomining detection in container clouds using system calls and explainable machine learning. IEEE Trans. Parallel Distrib. Syst. 32(3), 674\u2013691 (2020)","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"1_CR13","doi-asserted-by":"crossref","unstructured":"Kim, Y., Park, C., Hong, D.: A robust framework for comprehensive container image vulnerability assessment. IEEE Access (2025)","DOI":"10.1109\/ACCESS.2025.3545124"},{"issue":"9","key":"1_CR14","doi-asserted-by":"publisher","first-page":"1011","DOI":"10.1038\/nbt0908-1011","volume":"26","author":"C Kingsford","year":"2008","unstructured":"Kingsford, C., Salzberg, S.L.: What are decision trees? Nat. Biotechnol. 26(9), 1011\u20131013 (2008)","journal-title":"Nat. Biotechnol."},{"key":"1_CR15","doi-asserted-by":"crossref","unstructured":"Kommula, A., Hu, Y.H.F., Hoppa, M.A., Olatunbosun, S.: Machine learning techniques to enhance container network security. In: 2020 International Conference on Computational Science and Computational Intelligence (CSCI), pp. 622\u2013627. IEEE (2020)","DOI":"10.1109\/CSCI51800.2020.00110"},{"key":"1_CR16","doi-asserted-by":"crossref","unstructured":"Lepp\u00e4nen, T., Honkaranta, A., Costin, A.: Trends for the DevOps security. A systematic literature review. In: International Symposium on Business Modeling and Software Design, pp. 200\u2013217. Springer (2022)","DOI":"10.1007\/978-3-031-11510-3_12"},{"key":"1_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"246","DOI":"10.1007\/978-3-642-34062-8_32","volume-title":"Information Computing and Applications","author":"Y Liu","year":"2012","unstructured":"Liu, Y., Wang, Y., Zhang, J.: New machine learning algorithm: random forest. In: Liu, B., Ma, M., Chang, J. (eds.) ICICA 2012. LNCS, vol. 7473, pp. 246\u2013252. Springer, Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-34062-8_32"},{"key":"1_CR18","unstructured":"Marimuthu, S.: Detecting application layer DDoS attacks among microservices using spatio-temporal graph convolution networks. Ph.D. thesis, California State University, Northridge (2023)"},{"issue":"1","key":"1_CR19","doi-asserted-by":"publisher","first-page":"133","DOI":"10.1109\/TNSM.2021.3055676","volume":"18","author":"S Miano","year":"2021","unstructured":"Miano, S., Risso, F., Bernal, M.V., Bertrone, M., Lu, Y.: A framework for eBPF-based network functions in an era of microservices. IEEE Trans. Netw. Serv. Manage. 18(1), 133\u2013151 (2021)","journal-title":"IEEE Trans. Netw. Serv. Manage."},{"key":"1_CR20","unstructured":"Pedregosa, F., et\u00a0al.: Scikit-learn: machine learning in Python. J. Mach. Learn. Res. 12, 2825\u20132830 (2011)"},{"key":"1_CR21","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102200","volume":"103","author":"A Pereira-Vale","year":"2021","unstructured":"Pereira-Vale, A., Fernandez, E.B., Monge, R., Astudillo, H., M\u00e1rquez, G.: Security in microservice-based systems: a multivocal literature review. Comput. Secur. 103, 102200 (2021)","journal-title":"Comput. Secur."},{"key":"1_CR22","doi-asserted-by":"publisher","first-page":"155859","DOI":"10.1109\/ACCESS.2020.3019330","volume":"8","author":"JA Perez-Diaz","year":"2020","unstructured":"Perez-Diaz, J.A., Valdovinos, I.A., Choo, K., Zhu, D.: A flexible SDN-based architecture for identifying and mitigating low-rate DDoS attacks using machine learning. IEEE Access 8, 155859\u2013155872 (2020)","journal-title":"IEEE Access"},{"issue":"2","key":"1_CR23","doi-asserted-by":"publisher","first-page":"1883","DOI":"10.4249\/scholarpedia.1883","volume":"4","author":"LE Peterson","year":"2009","unstructured":"Peterson, L.E.: K-nearest neighbor. Scholarpedia 4(2), 1883 (2009)","journal-title":"Scholarpedia"},{"key":"1_CR24","doi-asserted-by":"publisher","unstructured":"Primartha, R., Tama, B.A.: Anomaly detection using random forest: a performance revisited. In: 2017 International Conference on Data and Software Engineering (ICoDSE), pp.\u00a01\u20136 (2017). https:\/\/doi.org\/10.1109\/ICODSE.2017.8285847","DOI":"10.1109\/ICODSE.2017.8285847"},{"key":"1_CR25","doi-asserted-by":"publisher","first-page":"96","DOI":"10.1016\/j.future.2020.04.032","volume":"111","author":"J Saenger","year":"2020","unstructured":"Saenger, J., Mazurczyk, W., Keller, J., Caviglione, L.: VoIP network covert channels to enhance privacy and information sharing. Futur. Gener. Comput. Syst. 111, 96\u2013106 (2020)","journal-title":"Futur. Gener. Comput. Syst."},{"issue":"5","key":"1_CR26","doi-asserted-by":"publisher","first-page":"16","DOI":"10.1109\/MCC.2016.109","volume":"3","author":"A Singleton","year":"2016","unstructured":"Singleton, A.: The economics of microservices. IEEE Cloud Comput. 3(5), 16\u201320 (2016)","journal-title":"IEEE Cloud Comput."},{"key":"1_CR27","doi-asserted-by":"crossref","unstructured":"Steidl, M., Leitner, M., Urbanke, P., Gattringer, M., Felderer, M., Ristov, S.: Understanding microservice runtime monitoring data for anomaly detection with structural equation modeling. In: International Conference on Product-Focused Software Process Improvement, pp. 404\u2013413. Springer (2024)","DOI":"10.1007\/978-3-031-78386-9_31"},{"issue":"5","key":"1_CR28","volume":"1","author":"CW Tien","year":"2019","unstructured":"Tien, C.W., Huang, T.Y., Tien, C.W., Huang, T.C., Kuo, S.Y.: KubAnomaly: anomaly detection for the docker orchestration platform with neural network approaches. Eng. Rep. 1(5), e12080 (2019)","journal-title":"Eng. Rep."},{"key":"1_CR29","doi-asserted-by":"crossref","unstructured":"VS, D.P., Sethuraman, S.C., Khan, M.K.: Container security: precaution levels, mitigation strategies, and research perspectives. Comput. Secur. 135, 103490 (2023)","DOI":"10.1016\/j.cose.2023.103490"},{"key":"1_CR30","doi-asserted-by":"publisher","unstructured":"Ying, S., et al.: An improved KNN-based efficient log anomaly detection method with automatically labeled samples. ACM Trans. Knowl. Discov. Data 15(3) (2021). https:\/\/doi.org\/10.1145\/3441448","DOI":"10.1145\/3441448"},{"key":"1_CR31","doi-asserted-by":"crossref","unstructured":"Zhou, X., et al.: Benchmarking microservice systems for software engineering research. In: Proceedings of the 40th International Conference on Software Engineering: Companion Proceedings, pp. 323\u2013324 (2018)","DOI":"10.1145\/3183440.3194991"},{"key":"1_CR32","doi-asserted-by":"crossref","unstructured":"Zuppelli, M., Guarascio, M., Caviglione, L., Liguori, A.: No country for leaking containers: detecting exfiltration of secrets through AI and Syscalls. In: Proceedings of the 19th International Conference on Availability, Reliability and Security, pp.\u00a01\u20138 (2024)","DOI":"10.1145\/3664476.3670884"},{"issue":"3","key":"1_CR33","doi-asserted-by":"publisher","first-page":"2282","DOI":"10.1109\/TNSM.2022.3176752","volume":"19","author":"M Zuppelli","year":"2022","unstructured":"Zuppelli, M., Repetto, M., Schaffhauser, A., Mazurczyk, W., Caviglione, L.: Code layering for the detection of network covert channels in agentless systems. IEEE Trans. Netw. Serv. Manage. 19(3), 2282\u20132294 (2022)","journal-title":"IEEE Trans. Netw. Serv. Manage."}],"container-title":["Lecture Notes in Computer Science","Computational Science and Its Applications \u2013 ICCSA 2025 Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-97603-2_1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T02:34:39Z","timestamp":1779071679000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-97603-2_1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,28]]},"ISBN":["9783031976025","9783031976032"],"references-count":33,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-97603-2_1","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,6,28]]},"assertion":[{"value":"28 June 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICCSA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Computational Science and Its Applications","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Istanbul","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"T\u00fcrkiye","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 June 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"3 July 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iccsa2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/iccsa.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}