{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T05:29:39Z","timestamp":1781587779453,"version":"3.54.5"},"reference-count":46,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2022,3,16]],"date-time":"2022-03-16T00:00:00Z","timestamp":1647388800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2022,3,16]],"date-time":"2022-03-16T00:00:00Z","timestamp":1647388800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2022,8]]},"DOI":"10.1007\/s10207-022-00584-9","type":"journal-article","created":{"date-parts":[[2022,3,16]],"date-time":"2022-03-16T17:04:35Z","timestamp":1647450275000},"page":"799-812","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["ThunderSecure: deploying real-time intrusion detection for 100G research networks by leveraging stream-based features and one-class classification network"],"prefix":"10.1007","volume":"21","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-3570-4142","authenticated-orcid":false,"given":"Qian","family":"Gong","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Phil","family":"DeMar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mine","family":"Altunay","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,3,16]]},"reference":[{"issue":"2","key":"584_CR1","doi-asserted-by":"publisher","first-page":"2041","DOI":"10.1109\/COMST.2018.2876086","volume":"21","author":"J Crichigno","year":"2018","unstructured":"Crichigno, J., Bou-Harb, E., Ghani, N.: A comprehensive tutorial on science DMZ. IEEE Commun. Surv. Tutor. 21(2), 2041\u20132078 (2018)","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"584_CR2","doi-asserted-by":"crossref","unstructured":"Nagendra, V. et al.: Coordinated dataflow protection for ultra-high bandwidth science networks. In: Proceedings of the 35th Annual Computer Security Applications Conference (2019)","DOI":"10.1145\/3359789.3359843"},{"key":"584_CR3","doi-asserted-by":"crossref","unstructured":"Tang, T.A. et al.: Deep learning approach for network intrusion detection in software defined networking. In: 2016 International Conference on Wireless Networks and Mobile Communications (WINCOM). IEEE (2016)","DOI":"10.1109\/WINCOM.2016.7777224"},{"key":"584_CR4","doi-asserted-by":"crossref","unstructured":"Giannakou, A., Gunter, D., Peisert, S.: Flowzilla: A Methodology for Detecting Data Transfer Anomalies in Research Networks, pp. 1\u20139. IEEE (2018)","DOI":"10.1109\/INDIS.2018.00004"},{"key":"584_CR5","doi-asserted-by":"crossref","unstructured":"Sommer, R., Paxson, V.: Outside the closed world: on using machine learning for network intrusion detection. In: 2010 IEEE Symposium on Security and Privacy. IEEE (2010)","DOI":"10.1109\/SP.2010.25"},{"key":"584_CR6","doi-asserted-by":"crossref","unstructured":"Abt, S., Baier, H.: Are we missing labels? A study of the availability of ground-truth in network security research. In: 2014 Third International Workshop on Building Analysis Datasets and Gathering Experience Returns for Security (BADGERS). IEEE (2014)","DOI":"10.1109\/BADGERS.2014.11"},{"issue":"9","key":"584_CR7","doi-asserted-by":"publisher","first-page":"72","DOI":"10.1145\/3096742","volume":"60","author":"S Peisert","year":"2017","unstructured":"Peisert, S.: Security in high-performance computing environments. Commun. ACM 60(9), 72\u201380 (2017)","journal-title":"Commun. ACM"},{"key":"584_CR8","unstructured":"Intel, D. P. D. K.: Data plane development kit. (2014)"},{"key":"584_CR9","unstructured":"Makhzani, A. et al.: Adversarial autoencoders. arXiv preprint arXiv:1511.05644 (2015)"},{"key":"584_CR10","unstructured":"Zong, B. et al.: Deep autoencoding gaussian mixture model for unsupervised anomaly detection. In: International Conference on Learning Representations. (2018)"},{"key":"584_CR11","doi-asserted-by":"crossref","unstructured":"Terzi, D.S., Terzi, R., Sagiroglu, S.: Big data analytics for network anomaly detection from netflow data. In: 2017 International Conference on Computer Science and Engineering (UBMK). IEEE (2017)","DOI":"10.1109\/UBMK.2017.8093473"},{"key":"584_CR12","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.jnca.2015.11.024","volume":"64","author":"G Fernandes Jr","year":"2016","unstructured":"Fernandes, G., Jr., et al.: Network anomaly detection using IP flows with principal component analysis and ant colony optimization. J. Netw. Comput. Appl. 64, 1\u201311 (2016)","journal-title":"J. Netw. Comput. Appl."},{"key":"584_CR13","doi-asserted-by":"crossref","unstructured":"Singh Panwar, S., Raiwani, Y.P., Panwar, L.S.: Evaluation of network intrusion detection with features selection and machine learning algorithms on CICIDS-2017 dataset. In: International Conference on Advances in Engineering Science Management & Technology (ICAESMT)-2019, Uttaranchal University, Dehradun, India. (2019)","DOI":"10.2139\/ssrn.3394103"},{"issue":"1","key":"584_CR14","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s40537-019-0248-6","volume":"6","author":"K Al Jallad","year":"2019","unstructured":"Al Jallad, K., Aljnidi, M., Desouki, M.S.: Big data analysis and distributed deep learning for next-generation intrusion detection system optimization. J. Big Data 6(1), 1\u201318 (2019)","journal-title":"J. Big Data"},{"key":"584_CR15","unstructured":"CERN Accelerating Science. Storage: what data to record. https:\/\/home.cern\/science\/computing\/storage. Accessed 18 Aug 2021"},{"key":"584_CR16","doi-asserted-by":"crossref","unstructured":"Li, H. et al.: Towards efficient traffic monitoring for science DMZ with side-channel based traffic winnowing. In: Proceedings of the 2018 ACM International Workshop on Security in Software Defined Networks & Network Function Virtualization. (2018)","DOI":"10.1145\/3180465.3180474"},{"key":"584_CR17","doi-asserted-by":"crossref","unstructured":"Nagendra, V., Yegneswaran, V., Porras, P.: Securing ultra-high-bandwidth science DMZ networks with coordinated situational awareness. In: Proceedings of the 16th ACM Workshop on Hot Topics in Networks. (2017)","DOI":"10.1145\/3152434.3152460"},{"key":"584_CR18","doi-asserted-by":"crossref","unstructured":"Essid, M., Jemili, F., Korbaa, O.: Distributed architecture of snort IDS in cloud environment. In: International Conference on Intelligent Systems Design and Applications. Springer, Cham (2019)","DOI":"10.1007\/978-3-030-49342-4_10"},{"key":"584_CR19","unstructured":"Stoffer, V., Sharma, A., Krous, J.: 100g Intrusion Detection. Lawrence Berkeley National Laboratory (LBL) (2015)"},{"key":"584_CR20","doi-asserted-by":"crossref","unstructured":"Chard, K., Foster, I., Tuecke, S.: Globus: research data management as service and platform. In: Proceedings of the Practice and Experience in Advanced Research Computing 2017 on Sustainability, Success and Impact, pp. 1\u20135 (2017)","DOI":"10.1145\/3093338.3093367"},{"key":"584_CR21","doi-asserted-by":"crossref","unstructured":"Lippmann, R.P. et al.: Evaluating intrusion detection systems: the 1998 DARPA off-line intrusion detection evaluation. In: Proceedings DARPA Information Survivability Conference and Exposition. DISCEX\u201900, vol. 2. IEEE (2000)","DOI":"10.1109\/DISCEX.2000.821506"},{"key":"584_CR22","first-page":"108","volume":"1","author":"I Sharafaldin","year":"2018","unstructured":"Sharafaldin, I., Lashkari, A.H., Ghorbani, A.A.: Toward generating a new intrusion detection dataset and intrusion traffic characterization. ICISSp 1, 108\u2013116 (2018)","journal-title":"ICISSp"},{"key":"584_CR23","doi-asserted-by":"crossref","unstructured":"Moustafa, N., Slay, J.: UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). In: 2015 Military Communications and Information Systems Conference (MilCIS). IEEE (2015)","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"584_CR24","unstructured":"Amer, M., Goldstein, M.: Nearest-neighbor and clustering based anomaly detection algorithms for rapidminer. In: Proceedings of the 3rd RapidMiner Community Meeting and Conference (RCOMM 2012). (2012)"},{"key":"584_CR25","unstructured":"Qin, X. et al.: Scalable Kernel Density Estimation-Based Local Outlier Detection over Large Data Streams. EDBT (2019)"},{"key":"584_CR26","unstructured":"Ruff, L. et al.: Deep one-class classification. In: International Conference on Machine Learning. PMLR (2018)"},{"key":"584_CR27","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1016\/j.patcog.2016.03.028","volume":"58","author":"SM Erfani","year":"2016","unstructured":"Erfani, S.M., et al.: High-dimensional and large-scale anomaly detection using a linear one-class SVM with deep learning. Pattern Recognit. 58, 121\u2013134 (2016)","journal-title":"Pattern Recognit."},{"key":"584_CR28","unstructured":"Chalapathy, R., Menon, A.K., Chawla, S.: Anomaly detection using one-class neural networks. arXiv preprint arXiv:1802.06360 (2018)"},{"key":"584_CR29","doi-asserted-by":"crossref","unstructured":"Kimura, D. et al.: Adversarial discriminative attention for robust anomaly detection. In: Proceedings of the IEEE\/CVF Winter Conference on Applications of Computer Vision. (2020)","DOI":"10.1109\/WACV45572.2020.9093428"},{"key":"584_CR30","doi-asserted-by":"crossref","unstructured":"Zhou, C., Paffenroth, R.C.: Anomaly detection with robust deep autoencoders. In: Proceedings of the 23rd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining. (2017)","DOI":"10.1145\/3097983.3098052"},{"issue":"1","key":"584_CR31","first-page":"1","volume":"2","author":"J An","year":"2015","unstructured":"An, J., Cho, S.: Variational autoencoder based anomaly detection using reconstruction probability. Special Lect. IE 2(1), 1\u201318 (2015)","journal-title":"Special Lect. IE"},{"key":"584_CR32","doi-asserted-by":"crossref","unstructured":"Akcay, S., Atapour-Abarghouei, A., Breckon, T.P.: Ganomaly: semi-supervised anomaly detection via adversarial training. In: Asian Conference on Computer Vision. Springer, Cham (2018)","DOI":"10.1007\/978-3-030-20893-6_39"},{"key":"584_CR33","unstructured":"Vu, H.S. et al.: Anomaly detection with adversarial dual autoencoders. arXiv preprint arXiv:1902.06924 (2019)"},{"key":"584_CR34","doi-asserted-by":"crossref","unstructured":"Beggel, L., Pfeiffer, M., Bischl, B.: Robust anomaly detection in images using adversarial autoencoders. arXiv preprint arXiv:1901.06355 (2019)","DOI":"10.1007\/978-3-030-46150-8_13"},{"key":"584_CR35","doi-asserted-by":"crossref","unstructured":"Kathareios, G. et al.: Catch it if you can: Real-time network anomaly detection with low false alarm rates. In: 2017 16th IEEE International Conference on Machine Learning and Applications (ICMLA). IEEE (2017)","DOI":"10.1109\/ICMLA.2017.00-36"},{"key":"584_CR36","doi-asserted-by":"crossref","unstructured":"Mirsky, Y. et al.: Kitsune: an ensemble of autoencoders for online network intrusion detection. arXiv preprint arXiv:1802.09089 (2018)","DOI":"10.14722\/ndss.2018.23204"},{"issue":"7","key":"584_CR37","doi-asserted-by":"publisher","first-page":"3081","DOI":"10.1109\/TCYB.2019.2940940","volume":"50","author":"R Coulter","year":"2019","unstructured":"Coulter, R., et al.: Data-driven cyber security in perspective-intelligent traffic analysis. IEEE Trans. Cybern. 50(7), 3081\u20133093 (2019)","journal-title":"IEEE Trans. Cybern."},{"key":"584_CR38","doi-asserted-by":"crossref","unstructured":"Bobyshev, A., DeMar, P.: The US-CMS Tier-1 center network evolving toward 100 Gbps. In: Journal of Physics: Conference Series, vol. 331. no. 1. IOP Publishing (2011)","DOI":"10.1088\/1742-6596\/331\/1\/012001"},{"key":"584_CR39","unstructured":"Intel, D. P. D. K.: Validation Team. (2018). DPDK Intel NIC Performance Report Release 18.02"},{"key":"584_CR40","doi-asserted-by":"crossref","unstructured":"Emmerich, P. et al.: Flowscope: efficient packet capture and storage in 100 Gbit\/s networks. In: 2017 IFIP Networking Conference (IFIP Networking) and Workshops. IEEE (2017)","DOI":"10.23919\/IFIPNetworking.2017.8264852"},{"key":"584_CR41","doi-asserted-by":"crossref","unstructured":"Gong, Q., Wu, W., Ferm, P.D.: GoldenEye: stream-based network packet inspection using GPUs. In: 2018 IEEE 43rd Conference on Local Computer Networks (LCN). IEEE (2018)","DOI":"10.1109\/LCN.2018.8638115"},{"key":"584_CR42","unstructured":"Thrun, S., Saul, L.K., Sch\u00f6lkopf, B. (eds.): Advances in Neural Information Processing Systems 16: Proceedings of the 2003 Conference, vol. 16. MIT Press (2004)"},{"key":"584_CR43","unstructured":"Metz, L. et al.: Unrolled generative adversarial networks. arXiv preprint arXiv:1611.02163 (2016)"},{"key":"584_CR44","unstructured":"Xiang, S., Li, H.: On the effects of batch and weight normalization in generative adversarial networks. arXiv preprint arXiv:1704.03971 (2017)"},{"key":"584_CR45","doi-asserted-by":"crossref","unstructured":"Ketkar, N.: Introduction to keras. In: Spahr, W., Green, T., John, C.S., Moodie, M., Vincent, A., Moolayail, J., Mehta, P., Shmailo, L. (eds.) Deep Learning with Python, pp. 97\u2013111. Apress, Berkeley (2017)","DOI":"10.1007\/978-1-4842-2766-4_7"},{"key":"584_CR46","doi-asserted-by":"publisher","first-page":"107161","DOI":"10.1109\/ACCESS.2019.2933491","volume":"7","author":"S Miano","year":"2019","unstructured":"Miano, S., et al.: Introducing SmartNICs in server-based data plane processing: the DDoS mitigation use case. IEEE Access 7, 107161\u2013107170 (2019)","journal-title":"IEEE Access"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-022-00584-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-022-00584-9\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-022-00584-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,20]],"date-time":"2024-09-20T11:37:58Z","timestamp":1726832278000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-022-00584-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,3,16]]},"references-count":46,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2022,8]]}},"alternative-id":["584"],"URL":"https:\/\/doi.org\/10.1007\/s10207-022-00584-9","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,3,16]]},"assertion":[{"value":"16 March 2022","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"Qian Gong declares that she has no conflict of interest. Phi DeMar declares that he has no conflict of interest. Mine Altunay declares that she has no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}