{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,30]],"date-time":"2026-01-30T03:55:35Z","timestamp":1769745335875,"version":"3.49.0"},"publisher-location":"Cham","reference-count":28,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031976254","type":"print"},{"value":"9783031976261","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-97626-1_15","type":"book-chapter","created":{"date-parts":[[2025,6,29]],"date-time":"2025-06-29T11:52:39Z","timestamp":1751197959000},"page":"210-224","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Dual Adaptive Windows Toward Concept-Drift in\u00a0Online Network Intrusion Detection"],"prefix":"10.1007","author":[{"given":"Xiaowei","family":"Hu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Duohe","family":"Ma","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wen","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Feng","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,6,30]]},"reference":[{"issue":"1","key":"15_CR1","doi-asserted-by":"publisher","DOI":"10.1002\/ett.4150","volume":"32","author":"Z Ahmad","year":"2021","unstructured":"Ahmad, Z., Shahid Khan, A., Wai Shiang, C., Abdullah, J., Ahmad, F.: Network intrusion detection system: a systematic study of machine learning and deep learning approaches. Trans. Emerg. Telecommun. Technol. 32(1), e4150 (2021)","journal-title":"Trans. Emerg. Telecommun. Technol."},{"key":"15_CR2","doi-asserted-by":"crossref","unstructured":"Andresini, G., Pendlebury, F., Pierazzi, F., Loglisci, C., Appice, A., Cavallaro, L.: Insomnia: towards concept-drift robustness in network intrusion detection. In: Proceedings of the 14th ACM Workshop on Artificial Intelligence and Security, pp. 111\u2013122 (2021)","DOI":"10.1145\/3474369.3486864"},{"key":"15_CR3","unstructured":"Arp, D., et al.: Dos and don\u2019ts of machine learning in computer security. In: 31st USENIX Security Symposium (USENIX Security 22), pp. 3971\u20133988 (2022)"},{"issue":"3","key":"15_CR4","doi-asserted-by":"publisher","first-page":"186","DOI":"10.1145\/357830.357849","volume":"3","author":"S Axelsson","year":"2000","unstructured":"Axelsson, S.: The base-rate fallacy and the difficulty of intrusion detection. ACM Trans. Inf. Syst. Secur. (TISSEC) 3(3), 186\u2013205 (2000)","journal-title":"ACM Trans. Inf. Syst. Secur. (TISSEC)"},{"key":"15_CR5","doi-asserted-by":"publisher","unstructured":"Bao, H., et al.: Payload level graph attention network for web attack traffic detection. In: International Conference on Computational Science, pp. 394\u2013407. Springer, Heidelberg (2023). https:\/\/doi.org\/10.1007\/978-3-031-36030-5_32","DOI":"10.1007\/978-3-031-36030-5_32"},{"key":"15_CR6","doi-asserted-by":"crossref","unstructured":"Bifet, A., Gavalda, R.: Learning from time-changing data with adaptive windowing. In: Proceedings of the 2007 SIAM International Conference on Data Mining, pp. 443\u2013448. SIAM (2007)","DOI":"10.1137\/1.9781611972771.42"},{"issue":"1","key":"15_CR7","first-page":"8845540","volume":"2021","author":"A Chiche","year":"2021","unstructured":"Chiche, A., Meshesha, M.: Towards a scalable and adaptive learning approach for network intrusion detection. J. Comput. Netw. Commun. 2021(1), 8845540 (2021)","journal-title":"J. Comput. Netw. Commun."},{"key":"15_CR8","unstructured":"Feng, X., et al.: Understanding and securing device vulnerabilities through automated bug report analysis. In: SEC\u201919: Proceedings of the 28th USENIX Conference on Security Symposium (2019)"},{"key":"15_CR9","volume":"50","author":"MA Ferrag","year":"2020","unstructured":"Ferrag, M.A., Maglaras, L., Moschoyiannis, S., Janicke, H.: Deep learning for cyber security intrusion detection: approaches, datasets, and comparative study. J. Inf. Secur. Appl. 50, 102419 (2020)","journal-title":"J. Inf. Secur. Appl."},{"issue":"3","key":"15_CR10","doi-asserted-by":"publisher","first-page":"810","DOI":"10.1109\/TKDE.2014.2345382","volume":"27","author":"I Frias-Blanco","year":"2014","unstructured":"Frias-Blanco, I., del Campo-\u00c1vila, J., Ramos-Jimenez, G., Morales-Bueno, R., Ortiz-Diaz, A., Caballero-Mota, Y.: Online and non-parametric drift detection methods based on hoeffding\u2019s bounds. IEEE Trans. Knowl. Data Eng. 27(3), 810\u2013823 (2014)","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"15_CR11","series-title":"Lecture Notes in Computer Science (Lecture Notes in Artificial Intelligence)","doi-asserted-by":"publisher","first-page":"286","DOI":"10.1007\/978-3-540-28645-5_29","volume-title":"Advances in Artificial Intelligence \u2013 SBIA 2004","author":"J Gama","year":"2004","unstructured":"Gama, J., Medas, P., Castillo, G., Rodrigues, P.: Learning with drift detection. In: Bazzan, A., Labidi, S. (eds.) SBIA 2004. LNCS (LNAI), vol. 3171, pp. 286\u2013295. Springer, Heidelberg (2004). https:\/\/doi.org\/10.1007\/978-3-540-28645-5_29"},{"key":"15_CR12","doi-asserted-by":"publisher","first-page":"82512","DOI":"10.1109\/ACCESS.2019.2923640","volume":"7","author":"X Gao","year":"2019","unstructured":"Gao, X., Shan, C., Hu, C., Niu, Z., Liu, Z.: An adaptive ensemble machine learning model for intrusion detection. IEEE Access 7, 82512\u201382521 (2019)","journal-title":"IEEE Access"},{"key":"15_CR13","doi-asserted-by":"crossref","unstructured":"Gomes, H.M., et al.: Adaptive random forests for evolving data stream classification. Mach. Learn. 106, 1469\u20131495 (2017)","DOI":"10.1007\/s10994-017-5642-8"},{"key":"15_CR14","volume":"10","author":"V Hnamte","year":"2023","unstructured":"Hnamte, V., Hussain, J.: Dcnnbilstm: an efficient hybrid deep learning-based intrusion detection system. Telemat. Inf. Rep. 10, 100053 (2023)","journal-title":"Telemat. Inf. Rep."},{"issue":"3","key":"15_CR15","doi-asserted-by":"publisher","first-page":"2099","DOI":"10.1007\/s10586-021-03249-9","volume":"24","author":"M Jain","year":"2021","unstructured":"Jain, M., Kaur, G.: Distributed anomaly detection using concept drift detection based hybrid ensemble techniques in streamed network data. Clust. Comput. 24(3), 2099\u20132114 (2021). https:\/\/doi.org\/10.1007\/s10586-021-03249-9","journal-title":"Clust. Comput."},{"key":"15_CR16","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2022.116510","volume":"193","author":"M Jain","year":"2022","unstructured":"Jain, M., Kaur, G., Saxena, V.: A k-means clustering and svm based hybrid concept drift detection technique for network anomaly detection. Expert Syst. Appl. 193, 116510 (2022)","journal-title":"Expert Syst. Appl."},{"key":"15_CR17","doi-asserted-by":"crossref","unstructured":"Liu, L., Engelen, G., Lynar, T., Essam, D., Joosen, W.: Error prevalence in nids datasets: A case study on cic-ids-2017 and cse-cic-ids-2018. In: 2022 IEEE Conference on Communications and Network Security (CNS), pp. 254\u2013262. IEEE (2022)","DOI":"10.1109\/CNS56114.2022.9947235"},{"issue":"12","key":"15_CR18","first-page":"2346","volume":"31","author":"J Lu","year":"2018","unstructured":"Lu, J., Liu, A., Dong, F., Gu, F., Gama, J., Zhang, G.: Learning under concept drift: a review. IEEE Trans. Knowl. Data Eng. 31(12), 2346\u20132363 (2018)","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"15_CR19","doi-asserted-by":"crossref","unstructured":"Rajeswari, P.V.N., Shashi, M., Rao, T.K., Rajya\u00a0Lakshmi, M., Kiran, L.V.: Effective intrusion detection system using concept drifting data stream and support vector machine. Concurr. Comput. Pract. Exp. 34(21), e7118 (2022)","DOI":"10.1002\/cpe.7118"},{"key":"15_CR20","doi-asserted-by":"crossref","unstructured":"Seth, S., Chahal, K.K., Singh, G.: Concept drift\u2013based intrusion detection for evolving data stream classification in ids: approaches and comparative study. Comput. J., bxae023 (2024)","DOI":"10.1093\/comjnl\/bxae023"},{"key":"15_CR21","first-page":"108","volume":"1","author":"I Sharafaldin","year":"2018","unstructured":"Sharafaldin, I., Lashkari, A.H., Ghorbani, A.A., et al.: Toward generating a new intrusion detection dataset and intrusion traffic characterization. ICISSp 1, 108\u2013116 (2018)","journal-title":"ICISSp"},{"key":"15_CR22","doi-asserted-by":"crossref","unstructured":"Shen, Y., Mariconti, E., Vervier, P.A., Stringhini, G.: Tiresias: predicting security events through deep learning. In: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, pp. 592\u2013605 (2018)","DOI":"10.1145\/3243734.3243811"},{"key":"15_CR23","doi-asserted-by":"crossref","unstructured":"Sommer, R., Paxson, V.: Outside the closed world: on using machine learning for network intrusion detection. In: 2010 IEEE Symposium on Security and Privacy, pp. 305\u2013316. IEEE (2010)","DOI":"10.1109\/SP.2010.25"},{"key":"15_CR24","doi-asserted-by":"crossref","unstructured":"Tavallaee, M., Bagheri, E., Lu, W., Ghorbani, A.A.: A detailed analysis of the kdd cup 99 data set. In: 2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications, pp.\u00a01\u20136. IEEE (2009)","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"15_CR25","doi-asserted-by":"publisher","unstructured":"Wang, X., Bao, H., Li, W., Chen, H., Wang, W., Liu, F.: A framework for intelligent generation of intrusion detection rules based on grad-cam. In: International Conference on Computational Science, pp. 147\u2013161. Springer, Heidelberg (2024). https:\/\/doi.org\/10.1007\/978-3-031-63783-4_12","DOI":"10.1007\/978-3-031-63783-4_12"},{"key":"15_CR26","doi-asserted-by":"crossref","unstructured":"Yang, L., Manias, D.M., Shami, A.: Pwpae: an ensemble framework for concept drift adaptation in iot data streams. In: 2021 IEEE Global Communications Conference (GLOBECOM), pp. 01\u201306. IEEE (2021)","DOI":"10.1109\/GLOBECOM46510.2021.9685338"},{"key":"15_CR27","unstructured":"Yang, L., et al.: $$\\{$$CADE$$\\}$$: detecting and explaining concept drift samples for security applications. In: 30th USENIX Security Symposium (USENIX Security 21), pp. 2327\u20132344 (2021)"},{"issue":"2","key":"15_CR28","doi-asserted-by":"publisher","first-page":"103","DOI":"10.1145\/235968.233324","volume":"25","author":"T Zhang","year":"1996","unstructured":"Zhang, T., Ramakrishnan, R., Livny, M.: Birch: an efficient data clustering method for very large databases. ACM SIGMOD Rec. 25(2), 103\u2013114 (1996)","journal-title":"ACM SIGMOD Rec."}],"container-title":["Lecture Notes in Computer Science","Computational Science \u2013 ICCS 2025"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-97626-1_15","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,29]],"date-time":"2025-06-29T11:52:43Z","timestamp":1751197963000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-97626-1_15"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783031976254","9783031976261"],"references-count":28,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-97626-1_15","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"30 June 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICCS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Computational Science","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Singapore","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Singapore","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"7 July 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9 July 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iccs-computsci2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.iccs-meeting.org\/iccs2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}