{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,7]],"date-time":"2026-03-07T17:59:41Z","timestamp":1772906381971,"version":"3.50.1"},"publisher-location":"Cham","reference-count":25,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031509582","type":"print"},{"value":"9783031509599","type":"electronic"}],"license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023]]},"DOI":"10.1007\/978-3-031-50959-9_41","type":"book-chapter","created":{"date-parts":[[2023,12,30]],"date-time":"2023-12-30T10:02:35Z","timestamp":1703930555000},"page":"599-611","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["A New Data Model for\u00a0Behavioral Based Anomaly Detection in\u00a0IoT Device Monitoring"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9979-8208","authenticated-orcid":false,"given":"Marcin","family":"Michalak","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Piotr","family":"Biczyk","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5038-6309","authenticated-orcid":false,"given":"B\u0142a\u017cej","family":"Adamczyk","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Maksym","family":"Brz\u0229czek","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6063-0600","authenticated-orcid":false,"given":"Marek","family":"Hermansa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5471-0919","authenticated-orcid":false,"given":"Iwona","family":"Kostorz","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1201-5344","authenticated-orcid":false,"given":"\u0141ukasz","family":"Wawrowski","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Micha\u0142","family":"Czerwi\u0144ski","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2023,12,31]]},"reference":[{"key":"41_CR1","doi-asserted-by":"publisher","unstructured":"Adamczyk, B., Brz\u0229czek, M., Michalak, M., et\u00a0al.: Dataset generation framework for evaluation of IoT Linux host-based intrusion detection systems. In: 2022 IEEE International Conference on Big Data (Big Data), pp. 6179\u20136187 (2022). https:\/\/doi.org\/10.1109\/BigData55660.2022.10020442","DOI":"10.1109\/BigData55660.2022.10020442"},{"key":"41_CR2","unstructured":"CAIDA: Center of applied internet data analysis (1998\u20132013). https:\/\/www.caida.org\/catalog\/datasets\/completed-datasets\/. Accessed 16 Mar 2021"},{"key":"41_CR3","doi-asserted-by":"publisher","unstructured":"Creech, G., Hu, J.: Generation of a new IDS test dataset: time to retire the KDD collection. In: 2013 IEEE Wireless Communications and Networking Conference (WCNC), pp. 4487\u20134492, April 2013. https:\/\/doi.org\/10.1109\/WCNC.2013.6555301. ISSN 1558-2612","DOI":"10.1109\/WCNC.2013.6555301"},{"key":"41_CR4","doi-asserted-by":"crossref","unstructured":"Czerwi\u0144ski, M., Michalak, M., Biczyk, P., et\u00a0al.: Cybersecurity threat detection in the behavior of IoT devices: analysis of data mining competition results. In: 18th Conference on Computer Science and Intelligence Systems, FedCSIS 2023 (2023, in press)","DOI":"10.15439\/2023F3089"},{"key":"41_CR5","unstructured":"Ester, M., Kriegel, H.P., Sander, J., Xu, X.: A density-based algorithm for discovering clusters in large spatial databases with noise. In: Proceedings of the Second International Conference on Knowledge Discovery and Data Mining, KDD 1996, pp. 226\u2013231. AAAI Press (1996)"},{"key":"41_CR6","doi-asserted-by":"publisher","unstructured":"Garcia, S., Parmisano, A., Erquiaga, M.J.: IoT-23: a labeled dataset with malicious and benign IoT network traffic, January 2020. https:\/\/doi.org\/10.5281\/zenodo.4743746. More details here https:\/\/www.stratosphereips.org\/datasets-iot23","DOI":"10.5281\/zenodo.4743746"},{"key":"41_CR7","doi-asserted-by":"crossref","unstructured":"Joulin, A., Grave, E., Bojanowski, P., Mikolov, T.: Bag of tricks for efficient text classification. In: Proceedings of the 15th Conference of the European Chapter of the Association for Computational Linguistics: Volume 2, Short Papers, pp. 427\u2013431. Association for Computational Linguistics, April 2017","DOI":"10.18653\/v1\/E17-2068"},{"key":"41_CR8","doi-asserted-by":"publisher","unstructured":"Koroniotis, N., Moustafa, N., Sitnikova, E., Turnbull, B.: Towards the development of realistic botnet dataset in the internet of things for network forensic analytics: Bot-IoT dataset. arXiv (2018). https:\/\/doi.org\/10.48550\/ARXIV.1811.00701. https:\/\/arxiv.org\/abs\/1811.00701","DOI":"10.48550\/ARXIV.1811.00701"},{"key":"41_CR9","doi-asserted-by":"publisher","unstructured":"Kursa, M.B., Rudnicki, W.R.: Feature selection with the Boruta package. J. Stat. Softw. 36(11), 1\u201313 (2010). https:\/\/doi.org\/10.18637\/jss.v036.i11. https:\/\/www.jstatsoft.org\/index.php\/jss\/article\/view\/v036i11","DOI":"10.18637\/jss.v036.i11"},{"key":"41_CR10","unstructured":"Kyoto_University: Traffic data from Kyoto University\u2019s honeypots (2015). https:\/\/www.takakura.com\/Kyoto_data\/. Accessed 17 Mar 2021"},{"key":"41_CR11","unstructured":"MIT: MIT Lincoln Laboratory - DARPA datasets (1998\u20131999). https:\/\/www.ll.mit.edu\/r-d\/datasets. Accessed 16 Mar 2021"},{"key":"41_CR12","doi-asserted-by":"publisher","unstructured":"Moustafa, N., Ahmed, M., Ahmed, S.: Data analytics-enabled intrusion detection: evaluations of ToN_IoT Linux datasets. In: 2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), pp. 727\u2013735 (2020). https:\/\/doi.org\/10.1109\/TrustCom50675.2020.00100","DOI":"10.1109\/TrustCom50675.2020.00100"},{"key":"41_CR13","doi-asserted-by":"publisher","unstructured":"Moustafa, N., Slay, J.: UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). In: 2015 Military Communications and Information Systems Conference (MilCIS), pp.\u00a01\u20136 (2015). https:\/\/doi.org\/10.1109\/MilCIS.2015.7348942","DOI":"10.1109\/MilCIS.2015.7348942"},{"issue":"11","key":"41_CR14","doi-asserted-by":"publisher","first-page":"559","DOI":"10.1080\/14786440109462720","volume":"2","author":"K Pearson","year":"1901","unstructured":"Pearson, K.: On lines and planes of closest fit to systems of points in space. London Edinburgh Dublin Philos. Mag. J. Sci. 2(11), 559\u2013572 (1901). https:\/\/doi.org\/10.1080\/14786440109462720","journal-title":"London Edinburgh Dublin Philos. Mag. J. Sci."},{"issue":"5","key":"41_CR15","first-page":"2003","volume":"233","author":"K Pearson","year":"2022","unstructured":"Pearson, K.: Detection of outliers and extreme events of ground level particulate matter using DBSCAN algorithm with local parameters. Water Air Soil Pollut. 233(5), 2003 (2022)","journal-title":"Water Air Soil Pollut."},{"key":"41_CR16","unstructured":"Sangster, B., O\u2019Connor, T.J., Cook, T., et\u00a0al.: Toward instrumenting network warfare competitions to generate labeled datasets. In: Proceedings of the 2nd Conference on Cyber Security Experimentation and Test, CSET 2009, p.\u00a09. USENIX Association, USA (2009)"},{"key":"41_CR17","doi-asserted-by":"publisher","unstructured":"Shiravi, A., Shiravi, H., Tavallaee, M., Ghorbani, A.A.: Toward developing a systematic approach to generate benchmark datasets for intrusion detection. Comput. Secur. 31(3), 357\u2013374 (2012). https:\/\/doi.org\/10.1016\/j.cose.2011.12.012. https:\/\/www.sciencedirect.com\/science\/article\/pii\/S0167404811001672","DOI":"10.1016\/j.cose.2011.12.012"},{"key":"41_CR18","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"39","DOI":"10.1007\/978-3-642-04968-2_4","volume-title":"IP Operations and Management","author":"A Sperotto","year":"2009","unstructured":"Sperotto, A., Sadre, R., van Vliet, F., Pras, A.: A labeled data set for flow-based intrusion detection. In: Nunzi, G., Scoglio, C., Li, X. (eds.) IPOM 2009. LNCS, vol. 5843, pp. 39\u201350. Springer, Heidelberg (2009). https:\/\/doi.org\/10.1007\/978-3-642-04968-2_4"},{"key":"41_CR19","unstructured":"Stolfo, S., Fan, W., Lee, W., et\u00a0al.: Cost-based modeling and evaluation for data mining with application to fraud and intrusion detection: results from the JAM project, September 1999"},{"key":"41_CR20","unstructured":"Stratosphere: Stratosphere laboratory datasets (2020). https:\/\/www.stratosphereips.org\/datasets-overview. Accessed 15 Mar 2021"},{"key":"41_CR21","doi-asserted-by":"publisher","unstructured":"Tavallaee, M., Bagheri, E., Lu, W., Ghorbani, A.A.: A detailed analysis of the KDD CUP 99 data set. In: 2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications, pp. 1\u20136, July 2009. https:\/\/doi.org\/10.1109\/CISDA.2009.5356528","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"41_CR22","doi-asserted-by":"publisher","unstructured":"Thang, T.M., Kim, J.: The anomaly detection by using DBSCAN clustering with multiple parameters. In: 2011 International Conference on Information Science and Applications, pp.\u00a01\u20135 (2011). https:\/\/doi.org\/10.1109\/ICISA.2011.5772437","DOI":"10.1109\/ICISA.2011.5772437"},{"key":"41_CR23","doi-asserted-by":"publisher","unstructured":"Ullah, I., Mahmoud, Q.H.: A technique for generating a botnet dataset for anomalous activity detection in IoT networks. In: 2020 IEEE International Conference on Systems, Man, and Cybernetics (SMC), pp. 134\u2013140 (2020). https:\/\/doi.org\/10.1109\/SMC42975.2020.9283220","DOI":"10.1109\/SMC42975.2020.9283220"},{"key":"41_CR24","doi-asserted-by":"publisher","unstructured":"Wawrowski, L., Michalak, M., Bia\u0142as, A., et\u00a0al.: Detecting anomalies and attacks in network traffic monitoring with classification methods and XAI-based explainability. Procedia Comput. Sci. 192(C), 2259\u20132268 (2021). https:\/\/doi.org\/10.1016\/j.procs.2021.08.239. https:\/\/doi.org\/10.1016\/j.procs.2021.08.239","DOI":"10.1016\/j.procs.2021.08.239"},{"key":"41_CR25","doi-asserted-by":"publisher","unstructured":"Yang, S., Kurose, J., Levine, B.: Disambiguation of residential wired and wireless access in a forensic setting, pp. 360\u2013364, April 2013. https:\/\/doi.org\/10.1109\/INFCOM.2013.6566795","DOI":"10.1109\/INFCOM.2013.6566795"}],"container-title":["Lecture Notes in Computer Science","Rough Sets"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-50959-9_41","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,12,30]],"date-time":"2023-12-30T10:08:01Z","timestamp":1703930881000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-50959-9_41"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"ISBN":["9783031509582","9783031509599"],"references-count":25,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-50959-9_41","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]},"assertion":[{"value":"31 December 2023","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"IJCRS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Joint Conference on Rough Sets","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Krakow","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Poland","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2023","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"5 October 2023","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 October 2023","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"ijcrs2023","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/ijcrs2023.agh.edu.pl\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Springer EquinOCS","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"83","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"43","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"52% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"5","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}