{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,28]],"date-time":"2026-03-28T03:40:09Z","timestamp":1774669209709,"version":"3.50.1"},"reference-count":44,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/access.2021.3104115","type":"journal-article","created":{"date-parts":[[2021,8,11]],"date-time":"2021-08-11T20:08:02Z","timestamp":1628712482000},"page":"113061-113076","source":"Crossref","is-referenced-by-count":43,"title":["Signature-Based Traffic Classification and Mitigation for DDoS Attacks Using Programmable Network Data Planes"],"prefix":"10.1109","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1118-0804","authenticated-orcid":false,"given":"Marinos","family":"Dimolianis","sequence":"first","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3803-2804","authenticated-orcid":false,"given":"Adam","family":"Pavlidis","sequence":"additional","affiliation":[]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0352-5713","authenticated-orcid":false,"given":"Vasilis","family":"Maglaris","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"ref39","year":"0","journal-title":"sFlow sampling rates"},{"key":"ref38","year":"2021","journal-title":"Imperva DDoS Mitigation SLA"},{"key":"ref33","year":"2021","journal-title":"Network-Layer DDoS Attack Trends for Q4 2020"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/4235.996017"},{"key":"ref31","author":"phaal","year":"2021","journal-title":"RFC 3176 - InMon Corporation's sFlow A Method for Monitoring Traffic in Switched and Routed Networks"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1016\/j.patrec.2010.03.014"},{"key":"ref37","first-page":"1","article-title":"Adam: A method for stochastic optimization","author":"kingma","year":"2014","journal-title":"Proc 3rd Int Conf Learn Represent"},{"key":"ref36","author":"singh","year":"2021","journal-title":"10 days dns network traffic from april-may 2016"},{"key":"ref35","first-page":"263","article-title":"Traffic data repository at the WIDE project","author":"cho","year":"2000","journal-title":"Proc Annu Conf USENIX Annu Tech Conf"},{"key":"ref34","year":"2021","journal-title":"Platypus Multiobjective Optimization in Python"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2021.3073597"},{"key":"ref40","year":"2021","journal-title":"Netronome Flow Processor (NFP) Kernel Drivers"},{"key":"ref11","first-page":"54","article-title":"The eXpress data path: Fast programmable packet processing in the operating system kernel","author":"h\u00f8iland-j\u00f8rgensen","year":"2018","journal-title":"Proc 14th Int Conf Emerg Netw Exp Technol"},{"key":"ref12","year":"2021","journal-title":"Netronome Agilio CX SmartNICs"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC.2005.50"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/LCN.2010.5735752"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2016.04.005"},{"key":"ref16","article-title":"A deep learning based DDoS detection system in software-defined networking (SDN)","author":"niyaz","year":"2016","journal-title":"arXiv 1611 07400"},{"key":"ref17","doi-asserted-by":"crossref","first-page":"1958","DOI":"10.1002\/sec.1368","article-title":"A scalable anomaly detection and mitigation architecture for legacy networks via an OpenFlow middlebox","volume":"9","author":"kostas","year":"2016","journal-title":"Secur Commun Netw"},{"key":"ref18","first-page":"27","article-title":"ATLANTIC: A framework for anomaly traffic detection, classification, and mitigation in SDN","author":"santos da silva","year":"2016","journal-title":"Proc IEEE\/IFIP Netw Oper Manage Symp"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2020.2971776"},{"key":"ref28","year":"2021","journal-title":"What is Out of Bag (OOB) Score in Random Forest"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2011.2161615"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1023\/A:1010933404324"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2933491"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/2656877.2656890"},{"key":"ref29","year":"2021","journal-title":"RandomForestClassifier -- scikit-learn"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/ICIN51074.2021.9385540"},{"key":"ref8","first-page":"19","article-title":"Offloading real-time DDoS attack detection to programmable data planes","author":"lapolli","year":"2019","journal-title":"Proc IFIP\/IEEE Int Symp Integr Netw Manage"},{"key":"ref7","year":"2021","journal-title":"Tofino 2 Barefoot"},{"key":"ref2","year":"2021","journal-title":"Global DDoS Summary—NETSCOUT Cyber Threat Horizon"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ICIN48450.2020.9059327"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2014.23233"},{"key":"ref20","year":"2021","journal-title":"eBPF and XDP Suricata"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2019.2899124"},{"key":"ref21","year":"2021","journal-title":"Ddos detection tool"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2019.2899085"},{"key":"ref24","author":"bertin","year":"2021","journal-title":"Introducing the p0f BPF compiler"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2020.05.036"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/SMARTCOMP.2017.7946998"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1017\/S0269888920000259"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/INM.2015.7140298"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737507"},{"key":"ref25","author":"serodio","year":"2021","journal-title":"Traffic Diversion Techniques for DDoS Mitigation Using BGP Flowspec Distributed Denial of Service (DDoS) Attacks"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/9312710\/09511420.pdf?arnumber=9511420","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,12,17]],"date-time":"2021-12-17T19:57:28Z","timestamp":1639771048000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9511420\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":44,"URL":"https:\/\/doi.org\/10.1109\/access.2021.3104115","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}