<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-02301393</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-24T21:55:49+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">ADAM &amp; RAL: Adaptive Memory Learning and Reinforcement Active Learning for Network Monitoring</title>
            <author role="aut">
              <persName>
                <forename type="first">Sarah</forename>
                <surname>Wassermann</surname>
              </persName>
              <email type="md5">c283361f772fb5ed264f6366f5f4e461</email>
              <email type="domain">gmail.com</email>
              <idno type="idhal" notation="numeric">1032980</idno>
              <idno type="halauthorid" notation="string">1379992-1032980</idno>
              <affiliation ref="#struct-196396"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Thibaut</forename>
                <surname>Cuvelier</surname>
              </persName>
              <email type="md5">d6fba87897df96a5ede02de7a6f23564</email>
              <email type="domain">gmail.com</email>
              <ptr type="url" target="http://www.tcuvelier.be/"/>
              <idno type="idhal" notation="string">thibaut-cuvelier</idno>
              <idno type="idhal" notation="numeric">173056</idno>
              <idno type="halauthorid" notation="string">37572-173056</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-4233-2316</idno>
              <idno type="GOOGLE SCHOLAR">https://scholar.google.be/citations?user=X38LkrkAAAAJ</idno>
              <idno type="ARXIV">https://arxiv.org/a/cuvelier_t_2</idno>
              <idno type="RESEARCHERID">http://www.researcherid.com/rid/AAI-8354-2020</idno>
              <affiliation ref="#struct-411575"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Pavol</forename>
                <surname>Mulinka</surname>
              </persName>
              <idno type="halauthorid">1477743-0</idno>
              <affiliation ref="#struct-242783"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Pedro</forename>
                <surname>Casas</surname>
              </persName>
              <idno type="halauthorid">465626-0</idno>
              <orgName ref="#struct-196396"/>
              <affiliation ref="#struct-196396"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Sarah</forename>
                <surname>Wassermann</surname>
              </persName>
              <email type="md5">c283361f772fb5ed264f6366f5f4e461</email>
              <email type="domain">gmail.com</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2019-09-30 13:54:20</date>
              <date type="whenModified">2024-01-23 18:05:26</date>
              <date type="whenReleased">2019-10-01 16:12:35</date>
              <date type="whenProduced">2019-10-21</date>
              <date type="whenEndEmbargoed">2019-09-30</date>
              <ref type="file" target="https://hal.science/hal-02301393v1/document">
                <date notBefore="2019-09-30"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-02301393v1/file/cnsm_2019.pdf" id="file-2301393-2219475">
                <date notBefore="2019-09-30"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="560046">
                <persName>
                  <forename>Sarah</forename>
                  <surname>Wassermann</surname>
                </persName>
                <email type="md5">c283361f772fb5ed264f6366f5f4e461</email>
                <email type="domain">gmail.com</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-02301393</idno>
            <idno type="halUri">https://hal.science/hal-02301393</idno>
            <idno type="halBibtex">wassermann:hal-02301393</idno>
            <idno type="halRefHtml">&lt;i&gt;15th International Conference on Network and Service Management (CNSM)&lt;/i&gt;, IFIP, Oct 2019, Halifax, Canada. &lt;a target="_blank" href="https://dx.doi.org/10.23919/cnsm46954.2019.9012675"&gt;&amp;#x27E8;10.23919/cnsm46954.2019.9012675&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">15th International Conference on Network and Service Management (CNSM), IFIP, Oct 2019, Halifax, Canada. &amp;#x27E8;10.23919/cnsm46954.2019.9012675&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-2301393-2219475"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="SUP_LSS">Laboratoire des Signaux et Systèmes</idno>
            <idno type="stamp" n="SUP_TELECOMS" corresp="SUP_LSS">Pôle Télécoms et Réseaux</idno>
            <idno type="stamp" n="CENTRALESUPELEC">Ecole CentraleSupélec</idno>
            <idno type="stamp" n="UNIV-PARIS-SACLAY">Université Paris-Saclay</idno>
            <idno type="stamp" n="CENTRALESUPELEC-SACLAY" corresp="UNIV-PARIS-SACLAY">CENTRALESUPELEC-SACLAY</idno>
            <idno type="stamp" n="GS-ENGINEERING">Graduate School Sciences de l'Ingénierie et des Systèmes</idno>
            <idno type="stamp" n="GS-COMPUTER-SCIENCE">Graduate School Computer Science</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">ADAM &amp; RAL: Adaptive Memory Learning and Reinforcement Active Learning for Network Monitoring</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Sarah</forename>
                    <surname>Wassermann</surname>
                  </persName>
                  <email type="md5">c283361f772fb5ed264f6366f5f4e461</email>
                  <email type="domain">gmail.com</email>
                  <idno type="idhal" notation="numeric">1032980</idno>
                  <idno type="halauthorid" notation="string">1379992-1032980</idno>
                  <affiliation ref="#struct-196396"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Thibaut</forename>
                    <surname>Cuvelier</surname>
                  </persName>
                  <email type="md5">d6fba87897df96a5ede02de7a6f23564</email>
                  <email type="domain">gmail.com</email>
                  <ptr type="url" target="http://www.tcuvelier.be/"/>
                  <idno type="idhal" notation="string">thibaut-cuvelier</idno>
                  <idno type="idhal" notation="numeric">173056</idno>
                  <idno type="halauthorid" notation="string">37572-173056</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-4233-2316</idno>
                  <idno type="GOOGLE SCHOLAR">https://scholar.google.be/citations?user=X38LkrkAAAAJ</idno>
                  <idno type="ARXIV">https://arxiv.org/a/cuvelier_t_2</idno>
                  <idno type="RESEARCHERID">http://www.researcherid.com/rid/AAI-8354-2020</idno>
                  <affiliation ref="#struct-411575"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Pavol</forename>
                    <surname>Mulinka</surname>
                  </persName>
                  <idno type="halauthorid">1477743-0</idno>
                  <affiliation ref="#struct-242783"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Pedro</forename>
                    <surname>Casas</surname>
                  </persName>
                  <idno type="halauthorid">465626-0</idno>
                  <orgName ref="#struct-196396"/>
                  <affiliation ref="#struct-196396"/>
                </author>
              </analytic>
              <monogr>
                <meeting>
                  <title>15th International Conference on Network and Service Management (CNSM)</title>
                  <date type="start">2019-10-21</date>
                  <date type="end">2019-10-25</date>
                  <settlement>Halifax</settlement>
                  <country key="CA">Canada</country>
                </meeting>
                <respStmt>
                  <resp>conferenceOrganizer</resp>
                  <name>IFIP</name>
                </respStmt>
                <imprint/>
              </monogr>
              <idno type="doi">10.23919/cnsm46954.2019.9012675</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Stream-based Machine Learning</term>
                <term xml:lang="en">Active Learning</term>
                <term xml:lang="en">Reinforcement Learning</term>
                <term xml:lang="en">ADWIN</term>
                <term xml:lang="en">Network Attacks</term>
                <term xml:lang="en">MAWILab</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-ni">Computer Science [cs]/Networking and Internet Architecture [cs.NI]</classCode>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halDomain" n="info.info-lg">Computer Science [cs]/Machine Learning [cs.LG]</classCode>
              <classCode scheme="halDomain" n="info.info-mc">Computer Science [cs]/Mobile Computing</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Network-traffic data commonly arrives in the form of fast data streams; online network-monitoring systems continuously analyze these kinds of streams, sequentially collecting measurements over time. Continuous and dynamic learning is an effective learning strategy when operating in these fast and dynamic environments, where concept drifts constantly occur. In this paper, we propose different approaches for stream-based machine learning, able to analyze network-traffic streams on the fly, using supervised learning techniques. We address two major challenges associated to stream-based machine learning and online network monitoring: (i) how to dynamically learn from and adapt to non-stationary data and patterns changing over time, and (ii) how to deal with the limited availability of ground truth or labeled data to continuously tune a supervised learning model. We introduce ADAM &amp; RAL, two stream-based machine-learning approaches to tackle these challenges. ADAM implements multiple stream-based machine-learning models and relies on an adaptive memory strategy to dynamically adapt the size of the system's learning memory to the most recent data distribution, triggering new learning steps when concept drifts are detected. RAL implements a stream-based active-learning strategy to reduce the amount of labeled data needed for stream-based learning, dynamically deciding on the most informative samples to integrate into the continuous learning scheme. Using a reinforcement learning loop, RAL improves prediction performance by additionally learning from the goodness of its previous sample-selection decisions. We focus on a particularly challenging problem in network monitoring: continuously tuning detection models able to recognize network attacks over time. By continuously learning from and detecting concept drifts within real network measurements, we show that ADAM &amp; RAL can continuously achieve high detection accuracy and limit the amount of training data needed to detect attacks over dynamic network data streams.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-196396" status="VALID">
          <idno type="ROR">https://ror.org/04knbh022</idno>
          <orgName>Austrian Institute of Technology [Vienna]</orgName>
          <orgName type="acronym">AIT</orgName>
          <desc>
            <address>
              <addrLine>Donau-City-Straße 11220 Vienna</addrLine>
              <country key="AT"/>
            </address>
            <ref type="url">http://www.ait.ac.at/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-411575" status="VALID">
          <idno type="IdRef">184443237</idno>
          <idno type="ROR">https://ror.org/019tcpt25</idno>
          <orgName>CentraleSupélec</orgName>
          <desc>
            <address>
              <addrLine>3, rue Joliot Curie,Plateau de Moulon,91192 GIF-SUR-YVETTE Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.centralesupelec.fr</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-242783" status="VALID">
          <orgName>Czech Technical University in Prague</orgName>
          <orgName type="acronym">CTU</orgName>
          <date type="start">1707-01-01</date>
          <desc>
            <address>
              <addrLine>České vysoké učení technické v Praze Zikova 1903/4 166 36 Praha 6 Česká republika</addrLine>
              <country key="CZ"/>
            </address>
            <ref type="url">https://www.cvut.cz/en/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>