{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T04:42:04Z","timestamp":1743050524574,"version":"3.40.3"},"publisher-location":"Cham","reference-count":26,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783031234910"},{"type":"electronic","value":"9783031234927"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-23492-7_8","type":"book-chapter","created":{"date-parts":[[2023,1,23]],"date-time":"2023-01-23T10:03:37Z","timestamp":1674468217000},"page":"82-92","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Analysis and\u00a0Detection of\u00a0DDoS Backscatter Using NetFlow Data, Hyperband-Optimised Deep Learning and\u00a0Explainability Techniques"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5881-6406","authenticated-orcid":false,"given":"Marek","family":"Pawlicki","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2099-2348","authenticated-orcid":false,"given":"Martin","family":"Zadnik","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7122-3306","authenticated-orcid":false,"given":"Rafa\u0142","family":"Kozik","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1405-9911","authenticated-orcid":false,"given":"Micha\u0142","family":"Chora\u015b","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,1,24]]},"reference":[{"key":"8_CR1","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2019.105124","volume":"189","author":"A Aldweesh","year":"2020","unstructured":"Aldweesh, A., Derhab, A., Emam, A.Z.: Deep learning approaches for anomaly-based intrusion detection systems: a survey, taxonomy, and open issues. Knowl.-Based Syst. 189, 105124 (2020)","journal-title":"Knowl.-Based Syst."},{"key":"8_CR2","doi-asserted-by":"publisher","unstructured":"Ali, S.H.A., Furutani, N., Ozawa, S., Nakazato, J., Ban, T., Shimamura, J.: Distributed denial of service (DDOS) backscatter detection system using resource allocating network with data selection. Memoirs Graduate Sch. Eng. Syst. Inform. Kobe Univ. (7), 8\u201313 (2015). https:\/\/doi.org\/10.5047\/gseku.e.2015.001","DOI":"10.5047\/gseku.e.2015.001"},{"key":"8_CR3","unstructured":"Bergstra, J., Bengio, Y.: Random search for hyper-parameter optimization. J. Mach. Learn. Res. 13(2) (2012)"},{"key":"8_CR4","unstructured":"Bhatt, U., et al.: Explainable machine learning in deployment. arXiv preprint arXiv:1909.06342 (2019)"},{"key":"8_CR5","doi-asserted-by":"publisher","unstructured":"Blenn, N., Ghi\u00ebtte, V., Doerr, C.: Quantifying the spectrum of denial-of-service attacks through internet backscatter. In: Proceedings of the 12th International Conference on Availability, Reliability and Security. ACM, August 2017. https:\/\/doi.org\/10.1145\/3098954.3098985","DOI":"10.1145\/3098954.3098985"},{"key":"8_CR6","unstructured":"Albert, C.: We are ready for machine learning explainability?, June 2019. https:\/\/towardsdatascience.com\/we-are-ready-to-ml-explainability-2e7960cb950d. Accessed 31 Mar 2020"},{"key":"8_CR7","unstructured":"Chen, J.: Machine learning and cybersecurity: studying network behaviour to detect anomalies (2018)"},{"key":"8_CR8","doi-asserted-by":"publisher","first-page":"705","DOI":"10.1016\/j.neucom.2020.07.138","volume":"452","author":"M Chora\u015b","year":"2021","unstructured":"Chora\u015b, M., Pawlicki, M.: Intrusion detection approach based on optimised artificial neural network. Neurocomputing 452, 705\u2013715 (2021)","journal-title":"Neurocomputing"},{"key":"8_CR9","doi-asserted-by":"publisher","unstructured":"Dosilovic, F.K., Brcic, M., Hlupic, N.: Explainable artificial intelligence: a survey. In: 2018 41st International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO). IEEE, May 2018. https:\/\/doi.org\/10.23919\/mipro.2018.8400040","DOI":"10.23919\/mipro.2018.8400040"},{"issue":"1","key":"8_CR10","doi-asserted-by":"publisher","first-page":"497","DOI":"10.1007\/s12652-020-02014-x","volume":"12","author":"A Drewek-Ossowicka","year":"2021","unstructured":"Drewek-Ossowicka, A., Pietro\u0142aj, M., Rumi\u0144ski, J.: A survey of neural networks usage for intrusion detection systems. J. Ambient. Intell. Humaniz. Comput. 12(1), 497\u2013514 (2021)","journal-title":"J. Ambient. Intell. Humaniz. Comput."},{"key":"8_CR11","doi-asserted-by":"publisher","unstructured":"Furutani, N., Ban, T., Nakazato, J., Shimamura, J., Kitazono, J., Ozawa, S.: Detection of DDOS backscatter based on traffic features of darknet TCP packets. In: 2014 Ninth Asia Joint Conference on Information Security. IEEE, September 2014). https:\/\/doi.org\/10.1109\/asiajcis.2014.23","DOI":"10.1109\/asiajcis.2014.23"},{"key":"8_CR12","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2020.102767","volume":"169","author":"S Gamage","year":"2020","unstructured":"Gamage, S., Samarabandu, J.: Deep learning methods in network intrusion detection: a survey and an objective comparison. J. Netw. Comput. Appl. 169, 102767 (2020)","journal-title":"J. Netw. Comput. Appl."},{"key":"8_CR13","doi-asserted-by":"publisher","unstructured":"Jonker, M., King, A., Krupp, J., Rossow, C., Sperotto, A., Dainotti, A.: Millions of targets under attack. In: Proceedings of the 2017 Internet Measurement Conference. ACM, November 2017. https:\/\/doi.org\/10.1145\/3131365.3131383","DOI":"10.1145\/3131365.3131383"},{"key":"8_CR14","doi-asserted-by":"crossref","unstructured":"Kozik, R., Pawlicki, M., Chora\u015b, M.: Cost-sensitive distributed machine learning for netflow-based botnet activity detection. In: Security and Communication Networks 2018 (2018)","DOI":"10.1155\/2018\/8753870"},{"issue":"1","key":"8_CR15","first-page":"6765","volume":"18","author":"L Li","year":"2017","unstructured":"Li, L., Jamieson, K., DeSalvo, G., Rostamizadeh, A., Talwalkar, A.: Hyperband: a novel bandit-based approach to hyperparameter optimization. J. Mach. Learn. Res. 18(1), 6765\u20136816 (2017)","journal-title":"J. Mach. Learn. Res."},{"key":"8_CR16","doi-asserted-by":"crossref","unstructured":"Maimon, O., Rokach, L.: Data Mining and Knowledge Discovery Handbook, 2nd edn, January 2010","DOI":"10.1007\/978-0-387-09823-4"},{"key":"8_CR17","doi-asserted-by":"publisher","unstructured":"Moore, D., Shannon, C., Brown, D.J., Voelker, G.M., Savage, S.: Inferring internet denial-of-service activity. ACM Trans. Comput. Syst. 24(2), 115\u2013139 (2006). https:\/\/doi.org\/10.1145\/1132026.1132027","DOI":"10.1145\/1132026.1132027"},{"issue":"4","key":"8_CR18","doi-asserted-by":"publisher","first-page":"60","DOI":"10.1109\/MTS.2020.3031848","volume":"39","author":"A Pawlicka","year":"2020","unstructured":"Pawlicka, A., Jaroszewska-Choras, D., Choras, M., Pawlicki, M.: Guidelines for stego\/malware detection tools: achieving GDPR compliance. IEEE Technol. Soc. Mag. 39(4), 60\u201370 (2020)","journal-title":"IEEE Technol. Soc. Mag."},{"key":"8_CR19","unstructured":"Syn flood attack. online. https:\/\/www.cloudflare.com\/learning\/ddos\/syn-flood-ddos-attack\/"},{"key":"8_CR20","doi-asserted-by":"crossref","unstructured":"Ribeiro, M.T., Singh, S., Guestrin, C.: \u201cwhy should I trust you?\u201d: Explaining the predictions of any classifier. CoRR abs\/1602.04938 (2016). http:\/\/arxiv.org\/abs\/1602.04938","DOI":"10.1145\/2939672.2939778"},{"key":"8_CR21","doi-asserted-by":"publisher","unstructured":"Sani, Y., Mohamedou, A., Ali, K., Farjamfar, A., Azman, M., Shamsuddin, S.: An overview of neural networks use in anomaly intrusion detection systems. In: 2009 IEEE Student Conference on Research and Development (SCOReD), pp. 89\u201392, November 2009. https:\/\/doi.org\/10.1109\/SCORED.2009.5443289","DOI":"10.1109\/SCORED.2009.5443289"},{"key":"8_CR22","doi-asserted-by":"publisher","unstructured":"Skrjanc, I., Ozawa, S., Dovzan, D., Tao, B., Nakazato, J., Shimamura, J.: Evolving Cauchy possibilistic clustering and its application to large-scale cyberattack monitoring. In: 2017 IEEE Symposium Series on Computational Intelligence (SSCI). IEEE, November 2017. https:\/\/doi.org\/10.1109\/ssci.2017.8285203","DOI":"10.1109\/ssci.2017.8285203"},{"key":"8_CR23","unstructured":"Snoek, J., Larochelle, H., Adams, R.P.: Practical Bayesian optimization of machine learning algorithms. In: Advances in Neural Information Processing System, vol. 25 (2012)"},{"issue":"3","key":"8_CR24","doi-asserted-by":"publisher","first-page":"647","DOI":"10.1007\/s10115-013-0679-x","volume":"41","author":"E \u0160trumbelj","year":"2014","unstructured":"\u0160trumbelj, E., Kononenko, I.: Explaining prediction models and individual predictions with feature contributions. Knowl. Inf. Syst. 41(3), 647\u2013665 (2014)","journal-title":"Knowl. Inf. Syst."},{"key":"8_CR25","doi-asserted-by":"crossref","unstructured":"Szczepa\u0144ski, M., Chora\u015b, M., Pawlicki, M., Kozik, R.: Achieving explainability of intrusion detection system by hybrid oracle-explainer approach. In: 2020 International Joint Conference on Neural Networks (IJCNN), pp. 1\u20138. IEEE (2020)","DOI":"10.1109\/IJCNN48605.2020.9207199"},{"key":"8_CR26","doi-asserted-by":"publisher","unstructured":"Zadnik, M.: DDoS Backscatter Dataset, vol. 1 (2022). https:\/\/doi.org\/10.17632\/37zz4pvjzp.1","DOI":"10.17632\/37zz4pvjzp.1"}],"container-title":["Lecture Notes in Computer Science","Artificial Intelligence and Soft Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-23492-7_8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,2,3]],"date-time":"2023-02-03T09:08:07Z","timestamp":1675415287000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-23492-7_8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031234910","9783031234927"],"references-count":26,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-23492-7_8","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"24 January 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICAISC","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Artificial Intelligence and Soft Computing","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Zakopane","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Poland","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2022","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"19 June 2022","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 June 2022","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"21","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icaisc2022","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/icaisc.eu\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}