{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:28:00Z","timestamp":1750307280817,"version":"3.41.0"},"reference-count":52,"publisher":"Association for Computing Machinery (ACM)","issue":"4","license":[{"start":{"date-parts":[[2011,3,1]],"date-time":"2011-03-01T00:00:00Z","timestamp":1298937600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["3.49E+12"],"award-info":[{"award-number":["3.49E+12"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Internet Technol."],"published-print":{"date-parts":[[2011,3]]},"abstract":"<jats:p>Many projects have tried to analyze the structure and dynamics of application overlay networks on the Internet using packet analysis and network flow data. While such analysis is essential for a variety of network management and security tasks, it is infeasible on many networks: either the volume of data is so large as to make packet inspection intractable, or privacy concerns forbid packet capture and require the dissociation of network flows from users\u2019 actual IP addresses. Our analytical framework permits useful analysis of network usage patterns even under circumstances where the only available source of data is anonymized flow records. Using this data, we are able to uncover distributions and scaling relations in host-to-host networks that bear implications for capacity planning and network application design. We also show how to classify network applications based entirely on topological properties of their overlay networks, yielding a taxonomy that allows us to accurately identify the functions of unknown applications. We repeat this analysis on a more recent dataset, allowing us to demonstrate that the aggregate behavior of users is remarkably stable even as the population changes.<\/jats:p>","DOI":"10.1145\/1944339.1944342","type":"journal-article","created":{"date-parts":[[2011,4,1]],"date-time":"2011-04-01T15:54:25Z","timestamp":1301673265000},"page":"1-23","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":9,"title":["Properties and Evolution of Internet Traffic Networks from Anonymized Flow Data"],"prefix":"10.1145","volume":"10","author":[{"given":"Mark","family":"Meiss","sequence":"first","affiliation":[{"name":"Indiana University"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Filippo","family":"Menczer","sequence":"additional","affiliation":[{"name":"Indiana University and Institute for Scientific Interchange"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alessandro","family":"Vespignani","sequence":"additional","affiliation":[{"name":"Indiana University and Institute for Scientific Interchange"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2011,3]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/383694.383707"},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2005.861250"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1126\/science.286.5439.509"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1368436.1368445"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(00)00083-9"},{"volume-title":"Proceedings of the National Academy of Engineering Workshop (NAE\u201999)","year":"1999","author":"Claffy K.","key":"e_1_2_1_6_1"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/1163593.1163601"},{"volume-title":"Internet Measurements: Infrastructure, Traffic and Applications","year":"2006","author":"Crovella M.","key":"e_1_2_1_8_1"},{"key":"e_1_2_1_9_1","first-page":"035103","article-title":"Scale-Free topology of e-mail networks","volume":"66","author":"Ebel H.","year":"2002","journal-title":"Phys. Rev."},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1162678.1162679"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242692"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/863955.863972"},{"volume-title":"Proceedings of the International Colloquium on Automata, Languages and Programming (ICALP).","author":"Fabrikant A.","key":"e_1_2_1_13_1"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/262793.262811"},{"volume-title":"Proceedings of the 22nd Annual Joint Conference of the IEEE Computer and Communications Societies (InfoCom).","author":"Garetto M.","key":"e_1_2_1_15_1"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1126\/science.277.5325.535"},{"key":"e_1_2_1_17_1","doi-asserted-by":"crossref","unstructured":"Huberman B. Pirolli P. Pitkow J. and Lukose R. 1998. Strong regularities in World Wide Web surfing. Science 280 5360 95--97. Huberman B. Pirolli P. Pitkow J. and Lukose R. 1998. Strong regularities in World Wide Web surfing. Science 280 5360 95--97.","DOI":"10.1126\/science.280.5360.95"},{"volume-title":"Proceedings of the Annual Conference of the Internet Society (INET\u201900)","author":"Huffaker B.","key":"e_1_2_1_18_1"},{"volume-title":"INET: Internet topology generators. Tech. rep. CSE-TR-433-00, Electrical Engineering and Computer Science Department","year":"2000","author":"Jin C.","key":"e_1_2_1_19_1"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080119"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1198255.1198267"},{"volume-title":"Proceedings of the 41st Annual IEEE Symposium on Foundations of Computer Science. IEEE Computer Society Press, 57--65","author":"Kumar S.","key":"e_1_2_1_22_1"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028813"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015492"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1005686.1005697"},{"volume-title":"Proceedings of the European Symposium on Algorithms.","author":"Laura L.","key":"e_1_2_1_26_1"},{"volume-title":"Gnutella: Topology dynamics on phase space. Preprint cs\/0702022.","year":"2007","author":"Li C.","key":"e_1_2_1_27_1"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015470"},{"volume-title":"BRITE: A flexible generator of Internet topologies. Tech. rep. BU-CS-TR-2000-005","year":"2000","author":"Medina A.","key":"e_1_2_1_29_1"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1060745.1060820"},{"volume-title":"Proceedings of the NSF Symposium on Next Generation of Data Mining and Cyber-Enabled Discovery for Innovation.","author":"Meiss M.","key":"e_1_2_1_31_1"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1341531.1341543"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1088\/1751-8113\/41\/22\/224022"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.212348399"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.0307554100"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1064212.1064220"},{"volume-title":"Proceedings of the USENIX Security Symposium.","author":"Moore D.","key":"e_1_2_1_37_1"},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/637201.637244"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.66.035101"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevLett.86.3200"},{"key":"e_1_2_1_41_1","doi-asserted-by":"crossref","unstructured":"Pastor-Satorras R. and Vespignani A. 2004. Evolution and Structure of the Internet. Cambridge University Press Cambridge UK. Pastor-Satorras R. and Vespignani A. 2004. Evolution and Structure of the Internet . Cambridge University Press Cambridge UK.","DOI":"10.1017\/CBO9780511610905"},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/1080173.1080182"},{"key":"e_1_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/4236.978369"},{"volume-title":"Proceedings of the Multimedia Computing and Networking Conference (MMCN\u201902)","author":"Saroiu S.","key":"e_1_2_1_44_1"},{"key":"e_1_2_1_45_1","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2003.818796"},{"volume-title":"Proceedings of the ACM\/USENIX Symposium on Operating System Design and Implementation.","author":"Singh S.","key":"e_1_2_1_46_1"},{"volume-title":"Proceedings of the 11th USENIX Security Symposium (Security\u201902)","author":"Staniford S.","key":"e_1_2_1_47_1"},{"key":"e_1_2_1_48_1","unstructured":"Uhlig S. and Bonaventure O. 2001. The macroscopic behavior of Internet traffic: A comparative study. Tech. rep. Infonet-TR-2001-10 University of Namur. Uhlig S. and Bonaventure O. 2001. The macroscopic behavior of Internet traffic: A comparative study. Tech. rep. Infonet-TR-2001-10 University of Namur."},{"key":"e_1_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.1963.10500845"},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.172501399"},{"key":"e_1_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028802"},{"volume-title":"Proceedings of the 13th International Conference on Computer Communications and Networks (ICCCN\u201904)","author":"Zou C.","key":"e_1_2_1_52_1"}],"container-title":["ACM Transactions on Internet Technology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1944339.1944342","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1944339.1944342","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T10:59:30Z","timestamp":1750244370000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1944339.1944342"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,3]]},"references-count":52,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2011,3]]}},"alternative-id":["10.1145\/1944339.1944342"],"URL":"https:\/\/doi.org\/10.1145\/1944339.1944342","relation":{},"ISSN":["1533-5399","1557-6051"],"issn-type":[{"type":"print","value":"1533-5399"},{"type":"electronic","value":"1557-6051"}],"subject":[],"published":{"date-parts":[[2011,3]]},"assertion":[{"value":"2010-06-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2010-11-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2011-03-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}