{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,10]],"date-time":"2026-06-10T22:22:46Z","timestamp":1781130166906,"version":"3.54.1"},"publisher-location":"Cham","reference-count":20,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032200259","type":"print"},{"value":"9783032200266","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-3-032-20026-6_9","type":"book-chapter","created":{"date-parts":[[2026,5,10]],"date-time":"2026-05-10T23:55:49Z","timestamp":1778457349000},"page":"150-166","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Revisiting Network Traffic Analysis: Compatible Network Flows for\u00a0ML Models"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4968-3653","authenticated-orcid":false,"given":"Jo\u00e3o","family":"Vitorino","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-3003-6694","authenticated-orcid":false,"given":"Daniela","family":"Pinto","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8075-531X","authenticated-orcid":false,"given":"Eva","family":"Maia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6102-6165","authenticated-orcid":false,"given":"Ivone","family":"Amorim","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2519-9859","authenticated-orcid":false,"given":"Isabel","family":"Pra\u00e7a","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,5,1]]},"reference":[{"key":"9_CR1","doi-asserted-by":"publisher","unstructured":"Adeleke, O.A., Bastin, N., Gurkan, D.: Network traffic generation: a survey and methodology. ACM Comput. Surv. 55(2) (2022). https:\/\/doi.org\/10.1145\/3488375","DOI":"10.1145\/3488375"},{"issue":"4","key":"9_CR2","doi-asserted-by":"publisher","first-page":"3496","DOI":"10.1109\/COMST.2018.2844742","volume":"20","author":"E Benkhelifa","year":"2018","unstructured":"Benkhelifa, E., Welsh, T., Hamouda, W.: A critical review of practices and challenges in intrusion detection systems for IoT: toward universal and resilient systems. IEEE Commun. Surv. Tutor. 20(4), 3496\u20133509 (2018). https:\/\/doi.org\/10.1109\/COMST.2018.2844742","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"9_CR3","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2021.104216","volume":"101","author":"M Di Mauro","year":"2021","unstructured":"Di Mauro, M., Galatro, G., Fortino, G., Liotta, A.: Supervised feature selection techniques in network intrusion detection: a critical review. Eng. Appl. Artif. Intell. 101, 104216 (2021). https:\/\/doi.org\/10.1016\/j.engappai.2021.104216","journal-title":"Eng. Appl. Artif. Intell."},{"key":"9_CR4","doi-asserted-by":"publisher","unstructured":"Garcia, S., Parmisano, A., Erquiaga, M.J.: IoT-23: a labeled dataset with malicious and benign IoT network traffic (2021). https:\/\/doi.org\/10.5281\/zenodo.4743746","DOI":"10.5281\/zenodo.4743746"},{"key":"9_CR5","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102810","volume":"120","author":"JL Guerra","year":"2022","unstructured":"Guerra, J.L., Catania, C., Veas, E.: Datasets are not enough: challenges in labeling network traffic. Comput. Secur. 120, 102810 (2022). https:\/\/doi.org\/10.1016\/j.cose.2022.102810","journal-title":"Comput. Secur."},{"key":"9_CR6","doi-asserted-by":"publisher","unstructured":"Haque, S., El-Moussa, F., Komninos, N., Muttukrishnan, R.: A systematic review of data-driven attack detection trends in IoT. Sensors 23(16) (2023). https:\/\/doi.org\/10.3390\/s23167191","DOI":"10.3390\/s23167191"},{"key":"9_CR7","doi-asserted-by":"publisher","unstructured":"Kenyon, A., Deka, L., Elizondo, D.: Are public intrusion datasets fit for purpose characterising the state of the art in intrusion event datasets. Comput. Secur. 99 (2020). https:\/\/doi.org\/10.1016\/j.cose.2020.102022","DOI":"10.1016\/j.cose.2020.102022"},{"key":"9_CR8","doi-asserted-by":"publisher","first-page":"779","DOI":"10.1016\/j.future.2019.05.041","volume":"100","author":"N Koroniotis","year":"2019","unstructured":"Koroniotis, N., Moustafa, N., Sitnikova, E., Turnbull, B.: Towards the development of realistic botnet dataset in the internet of things for network forensic analytics: BoT-IoT dataset. Futur. Gener. Comput. Syst. 100, 779\u2013796 (2019). https:\/\/doi.org\/10.1016\/j.future.2019.05.041","journal-title":"Futur. Gener. Comput. Syst."},{"key":"9_CR9","doi-asserted-by":"publisher","unstructured":"Neto, E.C.P., Dadkhah, S., Ferreira, R., Zohourian, A., Lu, R., Ghorbani, A.A.: CICIoT2023: a real-time dataset and benchmark for large-scale attacks in IoT environment. Sensors 23(13) (2023). https:\/\/doi.org\/10.3390\/s23135941","DOI":"10.3390\/s23135941"},{"key":"9_CR10","doi-asserted-by":"publisher","unstructured":"Pinto, D., Amorim, I., Maia, E., Pra\u00e7a, I.: A novel approach to network traffic analysis: the HERA tool. In: 2024 IEEE 23rd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), pp. 1850\u20131856 (2024). https:\/\/doi.org\/10.1109\/TrustCom63139.2024.00255","DOI":"10.1109\/TrustCom63139.2024.00255"},{"key":"9_CR11","doi-asserted-by":"publisher","unstructured":"Pinto, D., Amorim, I., Maia, E., Pra\u00e7a, I.: A review on intrusion detection datasets: tools, processes, and features. Comput. Netw. 262, 111177 (2025). https:\/\/doi.org\/10.1016\/j.comnet.2025.111177. https:\/\/www.sciencedirect.com\/science\/article\/pii\/S1389128625001458","DOI":"10.1016\/j.comnet.2025.111177"},{"key":"9_CR12","doi-asserted-by":"publisher","first-page":"147","DOI":"10.1016\/j.cose.2019.06.005","volume":"86","author":"M Ring","year":"2019","unstructured":"Ring, M., Wunderlich, S., Scheuring, D., Landes, D., Hotho, A.: A survey of network-based intrusion detection data sets. Comput. Secur. 86, 147\u2013167 (2019). https:\/\/doi.org\/10.1016\/j.cose.2019.06.005","journal-title":"Comput. Secur."},{"key":"9_CR13","doi-asserted-by":"publisher","first-page":"9326","DOI":"10.3390\/s22239326","volume":"22","author":"M Rodr\u00edguez","year":"2022","unstructured":"Rodr\u00edguez, M., Alesanco, A., Mehavilla, L., Garc\u00eda, J.: Evaluation of machine learning techniques for traffic flow-based intrusion detection. Sensors 22, 9326 (2022). https:\/\/doi.org\/10.3390\/s22239326","journal-title":"Sensors"},{"issue":"1","key":"9_CR14","doi-asserted-by":"publisher","first-page":"357","DOI":"10.1007\/s11036-021-01843-0","volume":"27","author":"M Sarhan","year":"2022","unstructured":"Sarhan, M., Layeghy, S., Portmann, M.: Towards a standard feature set for network intrusion detection system datasets. Mob. Netw. Appl. 27(1), 357\u2013370 (2022). https:\/\/doi.org\/10.1007\/s11036-021-01843-0","journal-title":"Mob. Netw. Appl."},{"key":"9_CR15","doi-asserted-by":"publisher","unstructured":"Silva, M., Vitorino, J., Maia, E., Pra\u00e7a, I.: Efficient network traffic feature sets for IoT intrusion detection. In: Distributed Computing and Artificial Intelligence, Special Sessions I, 21st International Conference, pp. 3\u201313 (2025). https:\/\/doi.org\/10.1007\/978-3-031-76459-2_1","DOI":"10.1007\/978-3-031-76459-2_1"},{"key":"9_CR16","doi-asserted-by":"publisher","unstructured":"Skouloudi, C., Dede, R., Malatras, A., Naydenov, R.: Guidelines for securing the Internet of Things - Secure supply chain for IoT. European Union Agency for Cybersecurity (2020). https:\/\/doi.org\/10.2824\/314452","DOI":"10.2824\/314452"},{"issue":"4","key":"9_CR17","doi-asserted-by":"publisher","first-page":"3211","DOI":"10.1007\/s11831-020-09496-0","volume":"28","author":"A Thakkar","year":"2021","unstructured":"Thakkar, A., Lohiya, R.: A review on machine learning and deep learning perspectives of IDS for IoT: recent updates, security issues, and challenges. Arch. Comput. Methods Eng. 28(4), 3211\u20133243 (2021). https:\/\/doi.org\/10.1007\/s11831-020-09496-0","journal-title":"Arch. Comput. Methods Eng."},{"issue":"1","key":"9_CR18","doi-asserted-by":"publisher","first-page":"453","DOI":"10.1007\/s10462-021-10037-9","volume":"55","author":"A Thakkar","year":"2022","unstructured":"Thakkar, A., Lohiya, R.: A survey on intrusion detection system: feature selection, model, performance measures, application perspective, challenges, and future research directions. Artif. Intell. Rev. 55(1), 453\u2013563 (2022). https:\/\/doi.org\/10.1007\/s10462-021-10037-9","journal-title":"Artif. Intell. Rev."},{"key":"9_CR19","doi-asserted-by":"publisher","unstructured":"Vitorino, J., Pra\u00e7a, I., Maia, E.: SoK: realistic adversarial attacks and defenses for intelligent network intrusion detection. Comput. Secur. 134, 103433 (2023). https:\/\/doi.org\/10.1016\/j.cose.2023.103433","DOI":"10.1016\/j.cose.2023.103433"},{"key":"9_CR20","doi-asserted-by":"publisher","first-page":"341","DOI":"10.1007\/s12243-024-01047-z","volume":"80","author":"J Vitorino","year":"2024","unstructured":"Vitorino, J., Silva, M., Maia, E., Pra\u00e7a, I.: Reliable feature selection for adversarially robust cyber-attack detection. Ann. Telecommun. 80, 341\u2013355 (2024). https:\/\/doi.org\/10.1007\/s12243-024-01047-z","journal-title":"Ann. Telecommun."}],"container-title":["Lecture Notes in Computer Science","Foundations and Practice of Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-20026-6_9","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,10]],"date-time":"2026-05-10T23:55:50Z","timestamp":1778457350000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-20026-6_9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"ISBN":["9783032200259","9783032200266"],"references-count":20,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-20026-6_9","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]},"assertion":[{"value":"1 May 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"FPS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Symposium on Foundations and Practice of Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Brest","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"France","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25 November 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 November 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"fps2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/hub.imt-atlantique.fr\/fps2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}