{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,7]],"date-time":"2026-03-07T17:55:45Z","timestamp":1772906145072,"version":"3.50.1"},"reference-count":41,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2018,2,1]],"date-time":"2018-02-01T00:00:00Z","timestamp":1517443200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"DOI":"10.13039\/501100001381","name":"Singapore National Research Foundation","doi-asserted-by":"publisher","award":["NRF2014NCR-NCR001-034"],"award-info":[{"award-number":["NRF2014NCR-NCR001-034"]}],"id":[{"id":"10.13039\/501100001381","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE\/ACM Trans. Networking"],"published-print":{"date-parts":[[2018,2]]},"DOI":"10.1109\/tnet.2017.2765719","type":"journal-article","created":{"date-parts":[[2017,12,8]],"date-time":"2017-12-08T20:24:32Z","timestamp":1512764672000},"page":"131-144","source":"Crossref","is-referenced-by-count":68,"title":["Anomaly Detection and Attribution in Networks With Temporally Correlated Traffic"],"prefix":"10.1109","volume":"26","author":[{"given":"Ido","family":"Nevat","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8706-432X","authenticated-orcid":false,"given":"Dinil Mon","family":"Divakaran","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9821-432X","authenticated-orcid":false,"given":"Sai Ganesh","family":"Nagarajan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Pengfei","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Le","family":"Su","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Li Ling","family":"Ko","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vrizlynn L. L.","family":"Thing","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/1851182.1851215"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2009.5061979"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.orl.2006.11.005"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/18.108249"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/18.2636"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/18.149515"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/2677046.2677050"},{"key":"ref36","year":"2016","journal-title":"WIDE Project"},{"key":"ref35","year":"2016","journal-title":"MAWI working group traffic archive"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1214\/aoms\/1177707039"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1023\/A:1010091220143"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2004.826687"},{"key":"ref11","author":"rubinstein","year":"2013","journal-title":"The Cross-Entropy Method A Unified Approach to Combinatorial Optimization Monte-Carlo Simulation and Machine Learning"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1214\/aoms\/1177700150"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/584091.584093"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/1330107.1330148"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1214\/aoms\/1177732144"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2011.14"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2010.2070845"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/JSTSP.2012.2233713"},{"key":"ref19","author":"wald","year":"1947","journal-title":"Sequential Analysis"},{"key":"ref28","first-page":"552","article-title":"Extension of the limit theorems of probability theory to a sum of variables connected in a chain","volume":"1","author":"markov","year":"1971","journal-title":"Dynamic Probabilistic Systems Markov Models"},{"key":"ref4","doi-asserted-by":"crossref","first-page":"235","DOI":"10.1214\/ss\/1042727940","article-title":"Statistical fraud detection: A review","volume":"17","author":"bolton","year":"2002","journal-title":"Stat Sci"},{"key":"ref27","first-page":"18","article-title":"Rasprostranenie zakona bol’shih chisel na velichiny, zavisyaschie drug ot druga","volume":"15","author":"markov","year":"1906","journal-title":"Izvestiya Fiziko-matematicheskogo obschestva pri Kazanskom universitete"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2016.2535165"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2008.2001468"},{"key":"ref29","first-page":"175","article-title":"On the use and interpretation of certain test criteria for purposes of statistical inference: Part I","volume":"20a","author":"neyman","year":"1928","journal-title":"Biometrika"},{"key":"ref5","doi-asserted-by":"crossref","first-page":"59","DOI":"10.1007\/s10994-014-5473-9","article-title":"Analysis of network traffic features for anomaly detection","volume":"101","author":"iglesias","year":"2014","journal-title":"Mach Learn"},{"key":"ref8","author":"van trees","year":"1968","journal-title":"Detection Estimation and Modulation Theory Part I"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/TCNS.2014.2378631"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2013.2293970"},{"key":"ref9","volume":"2","author":"kay","year":"1998","journal-title":"Fundamentals of Statistical Signal Processing Detection Theory"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/1851275.1851220"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1002\/ett.1432"},{"key":"ref22","volume":"38","author":"dembo","year":"2009","journal-title":"Large Deviations Techniques and Applications"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2013.07.028"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2015.7402811"},{"key":"ref41","author":"zhang","year":"2017","journal-title":"Statistical anomaly detection via composite hypothesis testing for Markov models"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-76544-0"},{"key":"ref26","first-page":"215","article-title":"How does TCP generate pseudo-self-similarity?","author":"guo","year":"2001","journal-title":"Proc MASCOTS"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2005.02.012"}],"container-title":["IEEE\/ACM Transactions on Networking"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/90\/8291715\/08170290.pdf?arnumber=8170290","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T16:26:33Z","timestamp":1642004793000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/8170290\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,2]]},"references-count":41,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tnet.2017.2765719","relation":{},"ISSN":["1063-6692","1558-2566"],"issn-type":[{"value":"1063-6692","type":"print"},{"value":"1558-2566","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,2]]}}}