{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T03:43:01Z","timestamp":1784000581915,"version":"3.55.0"},"reference-count":28,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2014,2,7]],"date-time":"2014-02-07T00:00:00Z","timestamp":1391731200000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/2.0"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["EURASIP J. on Info. Security"],"published-print":{"date-parts":[[2014,12]]},"DOI":"10.1186\/1687-417x-2014-5","type":"journal-article","created":{"date-parts":[[2014,2,7]],"date-time":"2014-02-07T15:02:09Z","timestamp":1391785329000},"source":"Crossref","is-referenced-by-count":23,"title":["How can sliding HyperLogLog and EWMA detect port scan attacks in IP traffic?"],"prefix":"10.1186","volume":"2014","author":[{"given":"Yousra","family":"Chabchoub","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Raja","family":"Chiky","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Betul","family":"Dogan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2014,2,7]]},"reference":[{"key":"18_CR1","first-page":"411","volume":"8","author":"M de Vivo","year":"1999","unstructured":"de Vivo M, Carrasco E, Isern G, de Vivo GO: A review of port scanning techniques. SIGCOMM Comput. Commun. Review 1999, 8: 411-430.","journal-title":"SIGCOMM Comput. Commun. Review"},{"key":"18_CR2","unstructured":"Staniford S, Hoagland JA, Alerney McJM: Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning. (Insecure, 370 Altair Way Ste 113 Sunnyvale, California 94086-6161 US)."},{"key":"18_CR3","unstructured":"Durumeric Z, Wustrow E, Halderman JA: ZMap: Fast internet-wide scanning and its security applications. Paper presented at the 22nd USENIX security symposium. Washington, D.C., USA, 14\u201316 Aug 2013"},{"key":"18_CR4","doi-asserted-by":"crossref","unstructured":"Jung J, Paxson V, Berger A, Balakrishnan H: Fast portscan detection using sequential hypothesis testing. Paper presented at IEEE symposium on security and privacy. Claremont Resort Oakland, California, USA, 9\u201312 May 2004","DOI":"10.1109\/SECPRI.2004.1301325"},{"key":"18_CR5","doi-asserted-by":"publisher","first-page":"112","DOI":"10.1007\/978-3-642-19260-9_12","volume":"6579","author":"J Mikians","year":"2011","unstructured":"Mikians J, Barlet-Ros P, Sanjuas-Cuxart J, Sole-Pareta J: A practical approach to portscan detection in very high-speed links. Lect. Notes Comput. Sc 2011, 6579: 112-121. 10.1007\/978-3-642-19260-9_12","journal-title":"Lect. Notes Comput. Sc"},{"key":"18_CR6","doi-asserted-by":"publisher","first-page":"1545","DOI":"10.1016\/j.comnet.2008.01.008","volume":"52","author":"S Nam","year":"2008","unstructured":"Nam S, Kim H, Kim H: Detector SherLOCK: enhancing TRW with Bloom filters under memory and performance constraints. Computer Networks 2008, 52: 1545-1566. 10.1016\/j.comnet.2008.01.008","journal-title":"Computer Networks"},{"key":"18_CR7","doi-asserted-by":"crossref","unstructured":"Sridharan A, Ye T, Bhattacharyya S: Connectionless port scan detection on the backbone. Paper presented at the 25th IEEE performance, computing, and communications conference (PCCC),. Phoenix, AZ, USA, 0\u201312 April 2006","DOI":"10.1109\/.2006.1629454"},{"issue":"10","key":"18_CR8","doi-asserted-by":"publisher","first-page":"1565","DOI":"10.1093\/comjnl\/bxr035","volume":"54","author":"H Monowar","year":"2011","unstructured":"Monowar H, Bhattacharyya DK, Kalita JK: Surveying port scans and their detection methodologies. Comput. J 2011, 54(10):1565-1581. 10.1093\/comjnl\/bxr035","journal-title":"Comput. J"},{"key":"18_CR9","volume-title":"Detection of network anomalies using rank tests","author":"C Levy-Leduc","year":"2008","unstructured":"Levy-Leduc C: Detection of network anomalies using rank tests. Paper presented at the EUSIPCO, Laussane, Switzerland, 25\u201329 Aug 2008"},{"key":"18_CR10","volume-title":"Sliding HyperLogLog: estimating cardinality in a data stream over a sliding window","author":"Y Chabchoub","year":"2010","unstructured":"Chabchoub Y, Hebrail G: Sliding HyperLogLog: estimating cardinality in a data stream over a sliding window. Paper presented at the ICDM workshop on large-scale analytics for complex instrumented systems (LACIS), Sydney, 13 Dec 2010"},{"key":"18_CR11","first-page":"127","volume-title":"Paper presented at the 13th conference on analysis of algorithm (AofA), Juan des Pins, 17\u201322","author":"P Flajolet","year":"2007","unstructured":"Flajolet P, Fusy E, Gandouet O, Meunier F: Hyperloglog: the analysis of a near-optimal cardinality estimation algorithm. Paper presented at the 13th conference on analysis of algorithm (AofA), Juan des Pins, 17\u201322 June 2007, 127-146."},{"key":"18_CR12","volume-title":"Paper presented at the EDBT 2013 conference, Genoa, Italy, 18\u201322","author":"S Heule","year":"2013","unstructured":"Heule S, Nunkesser M, Hall A: HyperLogLog in practice: algorithmic engineering of a state of the art cardinality estimation algorithm. Paper presented at the EDBT 2013 conference, Genoa, Italy, 18\u201322 March 2013"},{"key":"18_CR13","unstructured":"GitHub: PostgreSQL extension adding HyperLogLog data structures as a native data type. . Accessed 20 Dec 2013 \n                    http:\/\/github.com\/aggregateknowledge\/postgresql-hll"},{"issue":"6","key":"18_CR14","doi-asserted-by":"publisher","first-page":"1794","DOI":"10.1137\/S0097539701398363","volume":"31","author":"M Datar","year":"2002","unstructured":"Datar M, Gionis A, Indyk P, Motwan R: Maintaining stream statistics over sliding windows. SIAM J. Comput 2002, 31(6):1794-1813. 10.1137\/S0097539701398363","journal-title":"SIAM J. Comput"},{"key":"18_CR15","volume-title":"Detection of Abrupt Changes: Theory and Application","author":"M Basseville","year":"1993","unstructured":"Basseville M, Nikiforov I: Detection of Abrupt Changes: Theory and Application. Prentice-Hall, Upper Saddle River; 1993."},{"key":"18_CR16","volume-title":"Bell Telephone Laboratories series: Economic Control of Quality of Manufactured Product","author":"W Shewhart","year":"1931","unstructured":"Shewhart W: Bell Telephone Laboratories series: Economic Control of Quality of Manufactured Product. Princeton: D. Van Nostrand Company; 1931."},{"key":"18_CR17","volume-title":"Time Series Analysis, Forecasting and Control","author":"GEP Box","year":"1990","unstructured":"Box GEP, Jenkins G: Time Series Analysis, Forecasting and Control. San Francisco: Holden-Day; 1990."},{"key":"18_CR18","doi-asserted-by":"publisher","first-page":"239","DOI":"10.1080\/00401706.1959.10489860","volume":"1","author":"SW Roberts","year":"1959","unstructured":"Roberts SW: Control chart tests based on geometric moving averages. Technomearics 1959, 1: 239-250. 10.1080\/00401706.1959.10489860","journal-title":"Technomearics"},{"key":"18_CR19","doi-asserted-by":"publisher","first-page":"24","DOI":"10.1109\/TASSP.1981.1163523","volume":"29","author":"BE M Basseville","year":"1981","unstructured":"M Basseville BE, Gasnier J: Edge detection using sequential methods for change in level. Trans. Acoust. Speech Signal Processing 1981, 29: 24-31. 10.1109\/TASSP.1981.1163523","journal-title":"Trans. Acoust. Speech Signal Processing"},{"key":"18_CR20","doi-asserted-by":"publisher","first-page":"100","DOI":"10.1093\/biomet\/41.1-2.100","volume":"41","author":"ES Page","year":"1954","unstructured":"Page ES: Continuous inspection schemes. Biometrika 1954, 41: 100-115.","journal-title":"Biometrika"},{"key":"18_CR21","doi-asserted-by":"publisher","first-page":"114","DOI":"10.1214\/aoms\/1177729489","volume":"23","author":"M Girshick","year":"1952","unstructured":"Girshick M, Rubin H: A Bayes approach to a quality control model. Ann. Math. Stat 1952, 23: 114-125. 10.1214\/aoms\/1177729489","journal-title":"Ann. Math. Stat"},{"issue":"3","key":"18_CR22","doi-asserted-by":"publisher","first-page":"411","DOI":"10.1080\/00401706.1966.10490374","volume":"8","author":"S Roberts","year":"1966","unstructured":"Roberts S: A comparison of some control chart procedures. Technometrics 1966, 8(3):411-430. 10.1080\/00401706.1966.10490374","journal-title":"Technometrics"},{"key":"18_CR23","volume-title":"Paper presented at the 14th Portuguese conference on artificial intelligence (EPIA), Aveiro, Portugal, 12\u201315","author":"R Sebastiao","year":"2009","unstructured":"Sebastiao R, Gama J: A study on change detection methods. Paper presented at the 14th Portuguese conference on artificial intelligence (EPIA), Aveiro, Portugal, 12\u201315 Oct 2009"},{"key":"18_CR24","first-page":"286","volume-title":"Advances in Artificial Intelligence","author":"J Gama","year":"2004","unstructured":"Gama J, Medas P, Castillo G, Rodrigues P: Learning with drift detection. In Advances in Artificial Intelligence. Edited by: Bazzan ALC, Labidi S. New York: Springer; 2004:286-295."},{"key":"18_CR25","volume-title":"Paper presented at the 7th SIAM international conference on data mining, Minneapolis, MN, USA, 29 Sept\u20131","author":"A Bifet","year":"2007","unstructured":"Bifet A, Gavalda R: Learning from time-changing data with adaptive windowing. Paper presented at the 7th SIAM international conference on data mining, Minneapolis, MN, USA, 29 Sept\u20131 Oct 2007"},{"key":"18_CR26","doi-asserted-by":"publisher","first-page":"25","DOI":"10.1007\/978-3-642-12519-5_2","volume-title":"Lecture Notes in Computer Science: Knowledge Discovery from Sensor Data","author":"R Sebastiao","year":"2010","unstructured":"Sebastiao R, Gama J: Monitoring incremental histogram distribution for change detection in data Streams. In Lecture Notes in Computer Science: Knowledge Discovery from Sensor Data. Edited by: Gaber MM, Vatsavai RR, Omitaomu OA, Gama J, Chawla NV, Ganguly AR. New York: Springer; 2010:25-42."},{"key":"18_CR27","volume-title":"Introduction to Statistical Quality Control","author":"C Douglas","year":"2004","unstructured":"Douglas C: Introduction to Statistical Quality Control. New York: Wiley; 2004."},{"key":"18_CR28","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1080\/00401706.1990.10484583","volume":"32","author":"JM Lucas","year":"1990","unstructured":"Lucas JM, Saccucci MS, Baxley RVJ, Woodall WH, Maragh HD, Faltin FW, Hahn GJ, Tucker WT, Hunter JS, MacGregor JF, Harris TJ: Exponentially weighted moving average control schemes: properties and enhancements. Technometrics 1990, 32: 1-29. doi:10.1080\/00401706.1990.10484583 10.1080\/00401706.1990.10484583","journal-title":"Technometrics"}],"container-title":["EURASIP Journal on Information Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/article\/10.1186\/1687-417X-2014-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/1687-417X-2014-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/1687-417X-2014-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,1,21]],"date-time":"2019-01-21T21:30:59Z","timestamp":1548106259000},"score":1,"resource":{"primary":{"URL":"https:\/\/jis-eurasipjournals.springeropen.com\/articles\/10.1186\/1687-417X-2014-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,2,7]]},"references-count":28,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2014,12]]}},"alternative-id":["18"],"URL":"https:\/\/doi.org\/10.1186\/1687-417x-2014-5","relation":{},"ISSN":["1687-417X"],"issn-type":[{"value":"1687-417X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2014,2,7]]},"article-number":"5"}}