{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,15]],"date-time":"2026-10-15T16:26:09Z","timestamp":1792081569107,"version":"4.4.0"},"reference-count":42,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009,11]]},"DOI":"10.1109\/glocom.2009.5425651","type":"proceedings-article","created":{"date-parts":[[2010,3,8]],"date-time":"2010-03-08T11:49:02Z","timestamp":1268048942000},"page":"1-8","source":"Crossref","is-referenced-by-count":44,"title":["A Distribution-Based Approach to Anomaly Detection and Application to 3G Mobile Traffic"],"prefix":"10.1109","author":[{"given":"Alessandro","family":"D'Alconzo","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Angelo","family":"Coluccia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fabio","family":"Ricciato","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peter","family":"Romirer-Maierhofer","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2004.833360"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1162\/089976603321780272"},{"key":"ref33","first-page":"299","article-title":"Information-type measures of difference of probability distributions and indirect observations","volume":"2","author":"csisz\u00e1r","year":"1967","journal-title":"Studia Sci Math Hungar"},{"key":"ref32","article-title":"A general class of coefficients of divergence of one distribution","volume":"28","author":"ali","year":"1966","journal-title":"Journal of Royal Statistical Society"},{"key":"ref31","author":"thomas","year":"1991","journal-title":"Elements of Information Theory"},{"key":"ref30","year":"0","journal-title":"DARWIN homepage"},{"key":"ref37","article-title":"Symmetrizing the Kullback-Leibler distance","author":"johnson","year":"2001","journal-title":"IEEE Transactions on Information Theory"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/1281192.1281264"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/s11276-005-3511-z"},{"key":"ref34","volume":"87","author":"liese","year":"0","journal-title":"Convex Statistical Distances"},{"key":"ref10","article-title":"A machine learning framework for network anomaly detection using SVM and GA","author":"shon","year":"2005","journal-title":"IEEE Workshop in Information Assurance and Security U S Military Academy"},{"key":"ref40","author":"papoulis","year":"1991","journal-title":"Probability random variables and stochastic processes"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/IAW.2007.381936"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637210"},{"key":"ref13","article-title":"A peaks over threshold model for change-point detection by wavelets","volume":"14","author":"raimondo","year":"2004","journal-title":"Statistica Sinica"},{"key":"ref14","article-title":"Aberrant behavior detection in time series for network monioting","author":"brutlag","year":"2000","journal-title":"Proc USENIX 40th System Admin Conf LISA XIV"},{"key":"ref15","article-title":"Detecting SYN flooding attacks","volume":"45","author":"wang","year":"1999","journal-title":"IEEE Trans on Information Theory"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2007.153"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1190095.1190162"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/IMTC.2006.328439"},{"key":"ref19","doi-asserted-by":"crossref","first-page":"1053","DOI":"10.1109\/TNN.2005.853414","article-title":"Statistical analysis of network traffic for adaptive faults detection","volume":"16","author":"wang","year":"2005","journal-title":"IEEE Trans Neural Networks"},{"key":"ref28","article-title":"An information-theoretic approach to detecting changes in multi-dimensional data streams","author":"dasu","year":"2006","journal-title":"INTERFACE'06"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/IPDPS.2006.1639519"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330148"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICNN.1994.374748"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCB.2005.843274"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1002\/0470860936"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/INDCON.2005.1590237"},{"key":"ref8","first-page":"93","article-title":"Using random forests for network-based anomaly detection","author":"prashanth","year":"2008","journal-title":"IEEE ICSCN'08"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ISSPIT.2005.1577126"},{"key":"ref2","article-title":"On attack causality in internet-connected cellular networks","author":"traynor","year":"2007","journal-title":"USENIX Security'07"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLC.2005.1527622"},{"key":"ref1","article-title":"Securing a wireless world","volume":"94","author":"yang","year":"2006","journal-title":"IEEE Proceedings"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2007.79"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015492"},{"key":"ref21","doi-asserted-by":"crossref","DOI":"10.1145\/1090191.1080118","article-title":"Mining anomalies using traffic feature","author":"lakhina","year":"2005","journal-title":"ACM SIGCOMM"},{"key":"ref42","article-title":"Composition of gprs\/umts traffic: snapshots from a live network","author":"svoboda","year":"2006","journal-title":"proc IPS-MoMe'06"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330147"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.1981.1056331"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/1005686.1005697"},{"key":"ref26","article-title":"Information theoretic measures for anomaly detection","volume":"130","author":"lee","year":"2001","journal-title":"Proc Symposium on Security and Privacy"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/1368436.1368476"}],"event":{"name":"GLOBECOM 2009 - 2009 IEEE Global Telecommunications Conference","location":"Honolulu, Hawaii","start":{"date-parts":[[2009,11,30]]},"end":{"date-parts":[[2009,12,4]]}},"container-title":["GLOBECOM 2009 - 2009 IEEE Global Telecommunications Conference"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx5\/5425207\/5425208\/05425651.pdf?arnumber=5425651","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2017,6,19]],"date-time":"2017-06-19T01:54:13Z","timestamp":1497837253000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/5425651\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009,11]]},"references-count":42,"URL":"https:\/\/doi.org\/10.1109\/glocom.2009.5425651","relation":{},"subject":[],"published":{"date-parts":[[2009,11]]}}}