{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T09:27:26Z","timestamp":1742981246076,"version":"3.40.3"},"publisher-location":"Cham","reference-count":44,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783319934075"},{"type":"electronic","value":"9783319934082"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-319-93408-2_16","type":"book-chapter","created":{"date-parts":[[2018,6,5]],"date-time":"2018-06-05T10:55:51Z","timestamp":1528196151000},"page":"218-228","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["Trends in Application of Machine Learning to Network-Based Intrusion Detection Systems"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9118-587X","authenticated-orcid":false,"given":"Jakub","family":"Hrabovsky","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1158-7420","authenticated-orcid":false,"given":"Pavel","family":"Segec","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1730-1566","authenticated-orcid":false,"given":"Marek","family":"Moravcik","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8118-7513","authenticated-orcid":false,"given":"Jozef","family":"Papan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2018,6,6]]},"reference":[{"issue":"5","key":"16_CR1","doi-asserted-by":"publisher","first-page":"643","DOI":"10.1016\/j.comnet.2003.10.003","volume":"44","author":"C Douligeris","year":"2004","unstructured":"Douligeris, C., Mitrokotsa, A.: DDoS attacks and defense mechanisms: classification and state-of-the-art. Comput. Netw. 44(5), 643\u2013666 (2004). https:\/\/doi.org\/10.1016\/j.comnet.2003.10.003","journal-title":"Comput. Netw."},{"key":"16_CR2","doi-asserted-by":"crossref","unstructured":"Handley, M.J., Rescorla, E.: RFC 4732 - Internet Denial-of-Service Considerations, pp. 1\u201338 (2006)","DOI":"10.17487\/rfc4732"},{"key":"16_CR3","doi-asserted-by":"publisher","unstructured":"Zlomisli, V., Fertalj, K., Vlado, S.: Denial of service attacks\u202f: an overview. In: 2014 9th Iberian Conference on Information Systems and Technologies (CISTI) (2014). https:\/\/doi.org\/10.1109\/cisti.2014.6876979","DOI":"10.1109\/cisti.2014.6876979"},{"key":"16_CR4","unstructured":"Neustar: Worldwide DDoS Attacks & Protection Report (2016)"},{"key":"16_CR5","unstructured":"Neustar: The threatscape widens: DDoS aggression and the evolution of IoT risks (2016)"},{"key":"16_CR6","unstructured":"Holmes, D.: 2016 DDoS Attack Trends (2016)"},{"issue":"1","key":"16_CR7","doi-asserted-by":"publisher","first-page":"54","DOI":"10.1109\/MSP.2013.55","volume":"12","author":"M Geva","year":"2014","unstructured":"Geva, M., Herzberg, A., Gev, Y.: Bandwidth distributed denial of service: attacks and defenses. IEEE Secur. Priv. 12(1), 54\u201361 (2014). https:\/\/doi.org\/10.1109\/MSP.2013.55","journal-title":"IEEE Secur. Priv."},{"key":"16_CR8","doi-asserted-by":"publisher","first-page":"256","DOI":"10.1201\/b10867","volume-title":"Data Mining and Machine Learning in Cybersecurity","author":"S Dua","year":"2011","unstructured":"Dua, S., Du, X.: Data Mining and Machine Learning in Cybersecurity, 1st edn, p. 256. Auerbach Publications, Boca Raton (2011). ISBN: 9781439839423","edition":"1"},{"key":"16_CR9","doi-asserted-by":"crossref","first-page":"366","DOI":"10.1201\/b15088","volume-title":"Network Anomaly Detection: A Machine Learning Perspective","author":"DK Bhattacharyya","year":"2013","unstructured":"Bhattacharyya, D.K., Kalita, J.K.: Network Anomaly Detection: A Machine Learning Perspective, p. 366. Chapman and Hall\/CRC, \u200eBoca Raton (2013). ISBN: 9781466582088"},{"issue":"8","key":"16_CR10","doi-asserted-by":"publisher","first-page":"41","DOI":"10.5815\/ijcnis.2014.08.06","volume":"8","author":"MD Singh","year":"2014","unstructured":"Singh, M.D.: Analysis of host-based and network-based intrusion detection system. Int. J. Comput. Netw. Inf. Secur. 8(8), 41\u201347 (2014). https:\/\/doi.org\/10.5815\/ijcnis.2014.08.06","journal-title":"Int. J. Comput. Netw. Inf. Secur."},{"issue":"26","key":"16_CR11","doi-asserted-by":"publisher","first-page":"28","DOI":"10.5120\/12136-8419","volume":"69","author":"K Letou","year":"2013","unstructured":"Letou, K., Devi, D., Singh, Y.J.: Host-based intrusion detection and prevention system (HIDPS). Int. J. Comput. Appl. 69(26), 28\u201333 (2013). https:\/\/doi.org\/10.5120\/12136-8419","journal-title":"Int. J. Comput. Appl."},{"key":"16_CR12","doi-asserted-by":"crossref","unstructured":"Gerhards, R.: RFC 5424 - The Syslog Protocol (2009)","DOI":"10.17487\/rfc5424"},{"key":"16_CR13","doi-asserted-by":"publisher","unstructured":"Creech, G., Hu, J.: A semantic approach to host-based intrusion detection systems using contiguousand discontiguous system call patterns. IEEE Trans. Comput. (2014). https:\/\/doi.org\/10.1109\/tc.2013.13","DOI":"10.1109\/tc.2013.13"},{"issue":"3","key":"16_CR14","doi-asserted-by":"publisher","first-page":"241","DOI":"10.1016\/0004-3702(86)90072-X","volume":"29","author":"J Pearl","year":"1986","unstructured":"Pearl, J.: Fusion, propagation, and structuring in belief networks. Artif. Intell. 29(3), 241\u2013288 (1986). https:\/\/doi.org\/10.1016\/0004-3702(86)90072-X","journal-title":"Artif. Intell."},{"key":"16_CR15","unstructured":"Vijaykumar, B., Vikramkumar, Trilochan: Bayes and Naive Bayes Classifier. arXiv (2014)"},{"issue":"3","key":"16_CR16","doi-asserted-by":"publisher","first-page":"273","DOI":"10.1023\/a:1022627411411","volume":"20","author":"C Cortes","year":"1995","unstructured":"Cortes, C., Vapnik, V.: Support-vector networks. Mach. Learn. 20(3), 273\u2013297 (1995). https:\/\/doi.org\/10.1023\/a:1022627411411. ISSN: 1573-0565","journal-title":"Mach. Learn."},{"issue":"9","key":"16_CR17","doi-asserted-by":"publisher","first-page":"1464","DOI":"10.1109\/5.58325","volume":"78","author":"T Kohonen","year":"1990","unstructured":"Kohonen, T.: The self-organizing map. Proc. IEEE 78(9), 1464\u20131480 (1990). https:\/\/doi.org\/10.1109\/5.58325","journal-title":"Proc. IEEE"},{"issue":"3","key":"16_CR18","doi-asserted-by":"publisher","first-page":"31","DOI":"10.11591\/ijins.v3i3.6222","volume":"3","author":"KK Patel","year":"2014","unstructured":"Patel, K.K., Buddhadev, B.V.: Machine learning based research for network intrusion detection: a state-of-the-art. Int. J. Inf. Netw. Secur. 3(3), 31\u201350 (2014). https:\/\/doi.org\/10.11591\/ijins.v3i3.6222","journal-title":"Int. J. Inf. Netw. Secur."},{"key":"16_CR19","doi-asserted-by":"crossref","unstructured":"Vijayasarathy, R.: A systems approach to network modelling for DDoS detection using Naive Bayes classifier. In: Communication Systems and Networks (COMSNETS). IEEE, January 2011","DOI":"10.1109\/COMSNETS.2011.5716474"},{"key":"16_CR20","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1155\/2013\/962185","volume":"2013","author":"G Kumar","year":"2013","unstructured":"Kumar, G., Kumar, K.: Design of an evolutionary approach for intrusion detection. Sci. World J. 2013, 14 (2013). https:\/\/doi.org\/10.1155\/2013\/962185","journal-title":"Sci. World J."},{"issue":"8","key":"16_CR21","doi-asserted-by":"publisher","first-page":"2191","DOI":"10.1109\/TSP.2003.814797","volume":"51","author":"M Thottan","year":"2003","unstructured":"Thottan, M.: Anomaly detection in IP networks. IEEE Trans. Signal Process. 51(8), 2191\u20132204 (2003). https:\/\/doi.org\/10.1109\/TSP.2003.814797","journal-title":"IEEE Trans. Signal Process."},{"issue":"1","key":"16_CR22","doi-asserted-by":"publisher","first-page":"436","DOI":"10.14569\/ijacsa.2016.070159","volume":"7","author":"M Alkasassbeh","year":"2016","unstructured":"Alkasassbeh, M., Al-Naymat, G., Hassanat, A.B.A., Almseidin, M.: Detecting distributed denial of service attacks using data mining techniques. Int. J. Adv. Comput. Sci. Appl. 7(1), 436\u2013445 (2016). https:\/\/doi.org\/10.14569\/ijacsa.2016.070159","journal-title":"Int. J. Adv. Comput. Sci. Appl."},{"issue":"3","key":"16_CR23","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/1541880.1541882","volume":"41","author":"V Chandola","year":"2009","unstructured":"Chandola, V., Banerjee, A., Kumar, V.: Anomaly detection. ACM Comput. Surv. 41(3), 1\u201358 (2009). https:\/\/doi.org\/10.1145\/1541880.1541882","journal-title":"ACM Comput. Surv."},{"issue":"11","key":"16_CR24","first-page":"15","volume":"8","author":"A Osareh","year":"2008","unstructured":"Osareh, A., Shadgar, B.: Intrusion detection in computer networks based on machine learning algorithms. Ijcsns 8(11), 15 (2008)","journal-title":"Ijcsns"},{"issue":"4","key":"16_CR25","doi-asserted-by":"publisher","first-page":"1690","DOI":"10.1016\/j.eswa.2013.08.066","volume":"41","author":"G Kim","year":"2014","unstructured":"Kim, G., Lee, S., Kim, S.: A novel hybrid intrusion detection method integrating anomaly detection with misuse detection. Expert Syst. Appl. 41(4), 1690\u20131700 (2014). https:\/\/doi.org\/10.1016\/j.eswa.2013.08.066. PART 2","journal-title":"Expert Syst. Appl."},{"key":"16_CR26","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1016\/j.patcog.2016.03.028","volume":"58","author":"SM Erfani","year":"2016","unstructured":"Erfani, S.M., Rajasegarar, S., Karunasekera, S., Leckie, C.: High-dimensional and large-scale anomaly detection using a linear one-class SVM with deep learning. Pattern Recognit. 58, 121\u2013134 (2016). https:\/\/doi.org\/10.1016\/j.patcog.2016.03.028","journal-title":"Pattern Recognit."},{"issue":"1","key":"16_CR27","doi-asserted-by":"publisher","first-page":"13","DOI":"10.5121\/ijnsa.2017.9102","volume":"9","author":"C She","year":"2017","unstructured":"She, C., Wen, W., Lin, Z., Zheng, K.: Application-Layer DDOS Detection Based on a One-Class Support Vector Machine. Int. J. Netw. Secur. Appl. 9(1), 13\u201324 (2017). https:\/\/doi.org\/10.5121\/ijnsa.2017.9102","journal-title":"Int. J. Netw. Secur. Appl."},{"key":"16_CR28","doi-asserted-by":"publisher","first-page":"31","DOI":"10.1016\/S1319-1578(06)80002-9","volume":"18","author":"AA Alfantookh","year":"2006","unstructured":"Alfantookh, A.A.: DoS attacks intelligent detection using neural networks. J. King Saud Univ. Comput. Inf. Sci. 18, 31\u201351 (2006). https:\/\/doi.org\/10.1016\/S1319-1578(06)80002-9","journal-title":"J. King Saud Univ. Comput. Inf. Sci."},{"key":"16_CR29","doi-asserted-by":"crossref","first-page":"85","DOI":"10.22436\/jmcs.06.02.01","volume":"6","author":"MM Javidi","year":"2013","unstructured":"Javidi, M.M., Nattaj, M.H.: A new and quick method to detect DoS attacks by neural networks. J. Math. Comput. Sci. 6, 85\u201396 (2013)","journal-title":"J. Math. Comput. Sci."},{"key":"16_CR30","doi-asserted-by":"publisher","unstructured":"Tang, T.A., Mhamdi, L., McLernon, D., Zaidi, S.A.R., Ghogho, M.: Deep learning approach for network intrusion detection in software defined networking. In: 2016 International Conference on Wireless Networks and Mobile Communications (WINCOM), pp. 258\u2013263 (2016). https:\/\/doi.org\/10.1109\/wincom.2016.7777224","DOI":"10.1109\/wincom.2016.7777224"},{"key":"16_CR31","doi-asserted-by":"publisher","first-page":"5","DOI":"10.17562\/PB-51-1","volume":"51","author":"MA Garcia","year":"2015","unstructured":"Garcia, M.A., Trinh, T.: Detecting simulated attacks in computer networks using resilient propagation artificial neural networks. Polibits 51, 5\u201310 (2015). https:\/\/doi.org\/10.17562\/PB-51-1","journal-title":"Polibits"},{"key":"16_CR32","doi-asserted-by":"publisher","first-page":"657","DOI":"10.1007\/978-3-642-40618-8_85","volume-title":"Lecture Notes in Electrical Engineering","author":"Mingjun Wei","year":"2013","unstructured":"Wei, M., Su, J., Jin, J., Wang, L.: Research on intrusion detection system based on BP neural network, vol. 270. LNEE, vol. 1, pp. 657\u2013663 (2014). https:\/\/doi.org\/10.1007\/978-3-642-40618-8_85"},{"key":"16_CR33","doi-asserted-by":"publisher","unstructured":"Li, J., Liu, Y., Gu, L.: DDoS attack detection based on neural network. In: 2010 2nd International Symposium on Aware Computing (ISAC), pp. 196\u2013199 (2010). https:\/\/doi.org\/10.1109\/isac.2010.5670479","DOI":"10.1109\/isac.2010.5670479"},{"key":"16_CR34","doi-asserted-by":"publisher","unstructured":"Mitrokotsa, A., Douligeris, C.: Detecting denial of service attacks using emergent self-organizing maps. In: Proceedings of the Fifth IEEE International Symposium on Signal Processing and Information Technology, vol. 2005, pp. 375\u2013380 (2005). https:\/\/doi.org\/10.1109\/isspit.2005.1577126","DOI":"10.1109\/isspit.2005.1577126"},{"key":"16_CR35","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"564","DOI":"10.1007\/11576235_58","volume-title":"Parallel and Distributed Processing and Applications","author":"W Pan","year":"2005","unstructured":"Pan, W., Li, W.: A hybrid neural network approach to the classification of novel attacks for intrusion detection. In: Pan, Y., Chen, D., Guo, M., Cao, J., Dongarra, J. (eds.) ISPA 2005. LNCS, vol. 3758, pp. 564\u2013575. Springer, Heidelberg (2005). https:\/\/doi.org\/10.1007\/11576235_58. ISBN: 978-3-540-32100-2"},{"key":"16_CR36","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"356","DOI":"10.1007\/978-3-540-77092-3_31","volume-title":"Embedded and Ubiquitous Computing","author":"C Wang","year":"2007","unstructured":"Wang, C., Yu, H., Wang, H., Liu, K.: SOM-based anomaly intrusion detection system. In: Kuo, T.-W., Sha, E., Guo, M., Yang, Laurence T., Shao, Z. (eds.) EUC 2007. LNCS, vol. 4808, pp. 356\u2013366. Springer, Heidelberg (2007). https:\/\/doi.org\/10.1007\/978-3-540-77092-3_31. ISBN: 978-3-540-77092-3"},{"key":"16_CR37","doi-asserted-by":"publisher","unstructured":"Jiang, D., Yang, Y., Xia, M.: Research on intrusion detection based on an improved SOM neural network. In: 2009 Fifth International Conference on Information Assurance and Security, pp. 400\u2013403 (2009). https:\/\/doi.org\/10.1109\/ias.2009.247","DOI":"10.1109\/ias.2009.247"},{"issue":"4","key":"16_CR38","first-page":"11","volume":"4","author":"K Choksi","year":"2014","unstructured":"Choksi, K., Shah, B., Ompriya Kale, A.: Intrusion detection system using self organizing map: a survey. J. Eng. Res. Appl. 4(4), 11 (2014). www.ijera.com. ISSN: 2248-9622","journal-title":"J. Eng. Res. Appl."},{"key":"16_CR39","doi-asserted-by":"publisher","unstructured":"Kim, M., Jung, S., Park, M.: A distributed self-organizing map for DoS attack detection. In: 2015 Seventh International Conference on Ubiquitous and Future Networks, pp. 19\u201322. IEEE (2015). https:\/\/doi.org\/10.1109\/icufn.2015.7182487","DOI":"10.1109\/icufn.2015.7182487"},{"key":"16_CR40","doi-asserted-by":"publisher","first-page":"7","DOI":"10.1016\/j.procs.2016.05.170","volume":"85","author":"S Behal","year":"2016","unstructured":"Behal, S., Kumar, K.: Trends in validation of DDoS research. Procedia Comput. Sci. 85, 7\u201315 (2016). https:\/\/doi.org\/10.1016\/j.procs.2016.05.170","journal-title":"Procedia Comput. Sci."},{"key":"16_CR41","doi-asserted-by":"publisher","unstructured":"Tavallaee, M., Bagheri, E., Lu, W., Ghorbani, A.A.: A detailed analysis of the KDD CUP 99 data set. In: IEEE Symposium on Computational Intelligence for Security and Defense Applications CISDA 2009, no. Cisda, pp. 1\u20136 (2009). https:\/\/doi.org\/10.1109\/cisda.2009.5356528","DOI":"10.1109\/cisda.2009.5356528"},{"key":"16_CR42","unstructured":"The CAIDA UCSD \u2018DDoS Attack 2007\u2019 Dataset. http:\/\/www.caida.org\/data\/passive\/ddos-20070804_dataset.xml"},{"key":"16_CR43","unstructured":"DARPA Scalable Network Monitoring (SNM) Program Traffic. https:\/\/impactcybertrust.org\/dataset_view?idDataset=303"},{"key":"16_CR44","doi-asserted-by":"publisher","unstructured":"Gogoi, P. Bhuyan, M.H., Bhattacharyya, D.K., Kalita, J.K.: Packet and flow based network intrusion dataset. Contemp. Comput., 322\u2013334 (2012). https:\/\/doi.org\/10.1007\/978-3-642-32129-0_34. ISBN 978-3-642-32129-0","DOI":"10.1007\/978-3-642-32129-0_34"}],"container-title":["Communications in Computer and Information Science","Innovations for Community Services"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-319-93408-2_16","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,7]],"date-time":"2024-03-07T14:28:10Z","timestamp":1709821690000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-319-93408-2_16"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783319934075","9783319934082"],"references-count":44,"URL":"https:\/\/doi.org\/10.1007\/978-3-319-93408-2_16","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2018]]},"assertion":[{"value":"6 June 2018","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"I4CS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Innovations for Community Services","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"\u017dilina","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Slovakia","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2018","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 June 2018","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 June 2018","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"i4cs2018","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/fribot.sk\/i4cs\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}