{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,29]],"date-time":"2026-06-29T11:45:21Z","timestamp":1782733521054,"version":"3.54.5"},"publisher-location":"Cham","reference-count":36,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783032305176","type":"print"},{"value":"9783032305183","type":"electronic"}],"license":[{"start":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T00:00:00Z","timestamp":1782777600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T00:00:00Z","timestamp":1782777600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2027]]},"DOI":"10.1007\/978-3-032-30518-3_38","type":"book-chapter","created":{"date-parts":[[2026,6,29]],"date-time":"2026-06-29T11:01:59Z","timestamp":1782730919000},"page":"607-623","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Analyzing Ensemble Stacking Technologies for\u00a0Supervised Anomaly Detection"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7991-2410","authenticated-orcid":false,"given":"Arcangelo","family":"Castiglione","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7164-5736","authenticated-orcid":false,"given":"Gianni","family":"D\u2019 Angelo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1760-5527","authenticated-orcid":false,"given":"Francesco","family":"Palmieri","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Antonio","family":"Scarf\u00f3","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,6,30]]},"reference":[{"key":"38_CR1","doi-asserted-by":"crossref","unstructured":"Belouch, M., El Hadaj, S.: Comparison of ensemble learning methods applied to network intrusion detection. In: Proceedings of the 2nd International Conference on Internet of Things, Data and Cloud Computing (ICC 2017), pp. 1\u20134. ACM, New York, NY, USA (2017)","DOI":"10.1145\/3018896.3065830"},{"key":"38_CR2","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1023\/A:1010933404324","volume":"45","author":"L Breiman","year":"2001","unstructured":"Breiman, L.: Random forests. Mach. Learn. 45, 5\u201332 (2001)","journal-title":"Mach. Learn."},{"key":"38_CR3","unstructured":"Brugger, S.T., Chow, J.: An assessment of the DARPA ids evaluation dataset using snort, UC Davis, Department of Computer Science (2007). Tech. rep"},{"key":"38_CR4","doi-asserted-by":"crossref","unstructured":"Chand, N., Mishra, P., Krishna, C.R., Pilli, E.S., Govil, M.C.: A comparative analysis of SVM and its stacking with other classification algorithm for intrusion detection. In: 2016 International Conference on Advances in Computing, Communication, & Automation (ICACCA), pp.\u00a01\u20136. Dehradun, India (2016)","DOI":"10.1109\/ICACCA.2016.7578859"},{"key":"38_CR5","doi-asserted-by":"crossref","unstructured":"Chen, T., Guestrin, C.: XGBoost: a scalable tree boosting system. In: Proceedings of the 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (KDD 2016), pp. 785\u2013794. ACM, New York, NY, USA (2016)","DOI":"10.1145\/2939672.2939785"},{"issue":"3","key":"38_CR6","doi-asserted-by":"publisher","first-page":"273","DOI":"10.1023\/A:1022627411411","volume":"20","author":"C Cortes","year":"1995","unstructured":"Cortes, C., Vapnik, V.: Support-vector networks. Mach. Learn. 20(3), 273\u2013297 (1995)","journal-title":"Mach. Learn."},{"key":"38_CR7","unstructured":"DARPA: KDD cup 1999 data set (1999). http:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html"},{"key":"38_CR8","unstructured":"Mohi-ud din, G.: NSL-KDD. IEEE Dataport (2018)"},{"key":"38_CR9","doi-asserted-by":"crossref","unstructured":"Dong, Y., Chen, K., Peng, Y., Ma, Z.: Comparative study on supervised versus semi-supervised machine learning for anomaly detection of in-vehicle can network. In: IEEE 25th International Conference on Intelligent Transportation Systems (ITSC), pp. 2914\u20132919. Macau, China (2022)","DOI":"10.1109\/ITSC55140.2022.9922235"},{"key":"38_CR10","doi-asserted-by":"crossref","unstructured":"Drapper\u00a0Gil, G., Lashkari, A.H., Mamun, M., Ghorbani, A.A.: Characterization of encrypted and VPN traffic using time-related features. In: 2nd International Conference on Information Systems Security and Privacy (ICISSP 2016), pp. 407\u2013414 (2016)","DOI":"10.5220\/0005740704070414"},{"key":"38_CR11","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.jnca.2016.03.011","volume":"66","author":"G Folino","year":"2016","unstructured":"Folino, G., Sabatino, P.: Ensemble based collaborative and distributed intrusion detection systems: a survey. J. Netw. Comput. Appl. 66, 1\u201316 (2016)","journal-title":"J. Netw. Comput. Appl."},{"key":"38_CR12","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-30164-8","volume-title":"Encyclopedia of Machine Learning","author":"J Furnkranz","year":"2011","unstructured":"Furnkranz, J.: Decision tree. In: Sammut, C., Webb, G.I. (eds.) Encyclopedia of Machine Learning. Springer, Boston, MA (2011). https:\/\/doi.org\/10.1007\/978-0-387-30164-8"},{"key":"38_CR13","first-page":"117","volume":"12","author":"T Hai","year":"2020","unstructured":"Hai, T., Hoang, L., Huh, E.: Network anomaly detection based on late fusion of several machine learning algorithms. Int. J. Comput. Netw. Commun. 12, 117\u2013131 (2020)","journal-title":"Int. J. Comput. Netw. Commun."},{"key":"38_CR14","doi-asserted-by":"publisher","first-page":"993","DOI":"10.1109\/34.58871","volume":"12","author":"LK Hansen","year":"1990","unstructured":"Hansen, L.K., Salamon, P.: Neural network ensembles. IEEE Trans. Pattern Anal. Mach. Intell. 12, 993\u20131001 (1990)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"38_CR15","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-84858-7","volume-title":"The Elements of Statistical Learning","author":"T Hastie","year":"2001","unstructured":"Hastie, T., Tibshirani, R., Friedman, J.: The Elements of Statistical Learning. Springer, New York (2001). https:\/\/doi.org\/10.1007\/978-0-387-84858-7"},{"key":"38_CR16","doi-asserted-by":"crossref","unstructured":"Khoei, T.T., Aissou, G., Hu, W.C., Kaabouch, N.: Ensemble learning methods for anomaly intrusion detection system in smart grid. In: 2021 IEEE International Conference on Electro Information Technology (EIT), pp. 129\u2013135. Mt. Pleasant, MI, USA (2021)","DOI":"10.1109\/EIT51626.2021.9491891"},{"key":"38_CR17","doi-asserted-by":"crossref","unstructured":"Lashkari, A.H., Draper-Gil, G., Mamun, M.S.I., Ghorbani, A.A.: Characterization of tor traffic using time based features. In: 3rd International Conference on Information System Security and Privacy, Porto, Portugal (2017)","DOI":"10.5220\/0005740704070414"},{"issue":"2","key":"38_CR18","doi-asserted-by":"publisher","first-page":"757","DOI":"10.1016\/j.jksuci.2023.01.014","volume":"35","author":"A Mohammed","year":"2023","unstructured":"Mohammed, A., Kora, R.: A comprehensive review on ensemble deep learning: opportunities and challenges. J. King Saud Univ. Comput. Inf. Sci. 35(2), 757\u2013774 (2023)","journal-title":"J. King Saud Univ. Comput. Inf. Sci."},{"key":"38_CR19","doi-asserted-by":"crossref","unstructured":"Moustafa, N., Slay, J.: UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). In: 2015 Military Communications and Information Systems Conference (MilCIS), pp.\u00a01\u20136 (2015)","DOI":"10.1109\/MilCIS.2015.7348942"},{"issue":"1\u20133","key":"38_CR20","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1080\/19393555.2015.1125974","volume":"25","author":"N Moustafa","year":"2016","unstructured":"Moustafa, N., Slay, J.: The evaluation of network anomaly detection systems: statistical analysis of the UNSW-NB15 data set and the comparison with the KDD99 data set. Inf. Secur. J. A Global Perspect. 25(1\u20133), 18\u201331 (2016)","journal-title":"Inf. Secur. J. A Global Perspect."},{"issue":"2","key":"38_CR21","doi-asserted-by":"publisher","first-page":"167","DOI":"10.1016\/j.jnca.2004.01.003","volume":"28","author":"S Mukkamala","year":"2005","unstructured":"Mukkamala, S., Sung, A.H., Abraham, A.: Intrusion detection using an ensemble of intelligent paradigms. J. Netw. Comput. Appl. 28(2), 167\u2013182 (2005)","journal-title":"J. Netw. Comput. Appl."},{"key":"38_CR22","doi-asserted-by":"publisher","first-page":"78658","DOI":"10.1109\/ACCESS.2021.3083060","volume":"9","author":"AB Nassif","year":"2021","unstructured":"Nassif, A.B., Talib, M.A., Nasir, Q., Dakalbab, F.M.: Machine learning for anomaly detection: a systematic review. IEEE Access 9, 78658\u201378700 (2021)","journal-title":"IEEE Access"},{"issue":"1","key":"38_CR23","doi-asserted-by":"publisher","first-page":"4","DOI":"10.1016\/j.inffus.2007.07.002","volume":"9","author":"NC Oza","year":"2008","unstructured":"Oza, N.C., Tumer, K.: Classifier ensembles: select real-world applications. Inf. Fus. 9(1), 4\u201320 (2008)","journal-title":"Inf. Fus."},{"issue":"23","key":"38_CR24","doi-asserted-by":"publisher","first-page":"2435","DOI":"10.1016\/S1389-1286(99)00112-7","volume":"31","author":"V Paxson","year":"1999","unstructured":"Paxson, V.: Bro: a system for detecting network intruders in real-time. Comput. Netw. 31(23), 2435\u20132463 (1999)","journal-title":"Comput. Netw."},{"key":"38_CR25","first-page":"2825","volume":"12","author":"F Pedregosa","year":"2011","unstructured":"Pedregosa, F., Varoquaux, G., Gramfort, A., et al.: Scikit-learn: machine learning in Python. J. Mach. Learn. Res. 12, 2825\u20132830 (2011)","journal-title":"J. Mach. Learn. Res."},{"key":"38_CR26","doi-asserted-by":"crossref","unstructured":"Possebon, I.P., Silva, A.S., Granville, L.Z., Schaeffer-Filho, A., Marnerides, A.: Improved network traffic classification using ensemble learning. In: IEEE Symposium on Computers and Communications (ISCC), pp. 1\u20136. , Barcelona, Spain (2019)","DOI":"10.1109\/ISCC47284.2019.8969637"},{"key":"38_CR27","doi-asserted-by":"publisher","first-page":"147","DOI":"10.1016\/j.cose.2019.06.005","volume":"86","author":"M Ring","year":"2019","unstructured":"Ring, M., Wunderlich, S., Scheuring, D., Landes, D., Hotho, A.: A survey of network-based intrusion detection data sets. Comput. Secur. 86, 147\u2013167 (2019)","journal-title":"Comput. Secur."},{"issue":"2","key":"38_CR28","doi-asserted-by":"publisher","first-page":"197","DOI":"10.1023\/A:1022648800760","volume":"5","author":"RE Schapire","year":"1990","unstructured":"Schapire, R.E.: The strength of weak learnability. Mach. Learn. 5(2), 197\u2013227 (1990)","journal-title":"Mach. Learn."},{"key":"38_CR29","doi-asserted-by":"crossref","unstructured":"Sharafaldin, I., Lashkari, A.H., Ghorbani, A.A.: Toward generating a new intrusion detection dataset and intrusion traffic characterization. In: 4th International Conference on Information Systems Security and Privacy (ICISSP) (2018)","DOI":"10.5220\/0006639801080116"},{"key":"38_CR30","unstructured":"Talukder, M.A., Uddin, M.A.: CIC-ddos2019 dataset. Mendeley Data, V1 (2023)"},{"key":"38_CR31","doi-asserted-by":"publisher","first-page":"24120","DOI":"10.1109\/ACCESS.2020.2969428","volume":"8","author":"BA Tama","year":"2020","unstructured":"Tama, B.A., Nkenyereye, L., Islam, S.M.R., Kwak, K.S.: An enhanced anomaly detection in web traffic using a stack of classifier ensemble. IEEE Access 8, 24120\u201324134 (2020)","journal-title":"IEEE Access"},{"key":"38_CR32","unstructured":"Tavallaee, M.: NSL-KDD dataset (2012). http:\/\/www.iscx.ca\/NSL-KDD"},{"key":"38_CR33","doi-asserted-by":"crossref","unstructured":"Tavallaee, M., Bagheri, E., Lu, W., Ghorbani, A.A.: A detailed analysis of the KDD cup 99 data set. In: 2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications, pp. 1\u20136. ON, Canada, Ottawa (2009)","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"38_CR34","doi-asserted-by":"publisher","first-page":"1134","DOI":"10.1145\/1968.1972","volume":"27","author":"LG Valiant","year":"1984","unstructured":"Valiant, L.G.: A theory of the learnable. Commun. ACM 27, 1134\u20131142 (1984)","journal-title":"Commun. ACM"},{"key":"38_CR35","doi-asserted-by":"crossref","unstructured":"Vanerio, J., Casas, P.: Ensemble-learning approaches for network security and anomaly detection. In: Proceedings of the Workshop on Big Data Analytics and Machine Learning for Data Communication Networks (Big-DAMA 2017), pp. 1\u20136. ACM, New York, NY, USA (2017)","DOI":"10.1145\/3098593.3098594"},{"key":"38_CR36","doi-asserted-by":"crossref","unstructured":"Zainal, A., Maarof, M.A., Shamsuddin, S.M., Abraham, A.: Ensemble of one-class classifiers for network intrusion detection system. In: 4th International Conference on Information Assurance and Security, pp. 180\u2013185. Naples, Italy (2008)","DOI":"10.1109\/IAS.2008.35"}],"container-title":["Lecture Notes in Computer Science","Computational Science and Its Applications \u2013 ICCSA 2026 Workshops"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-032-30518-3_38","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,29]],"date-time":"2026-06-29T11:02:18Z","timestamp":1782730938000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-032-30518-3_38"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6,30]]},"ISBN":["9783032305176","9783032305183"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-3-032-30518-3_38","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,6,30]]},"assertion":[{"value":"30 June 2026","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICCSA","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Computational Science and Its Applications","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Braga","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Portugal","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2026","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 June 2026","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"3 July 2026","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iccsa2026","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/iccsa.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}