{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T22:33:53Z","timestamp":1743114833536,"version":"3.40.3"},"publisher-location":"Singapore","reference-count":38,"publisher":"Springer Singapore","isbn-type":[{"type":"print","value":"9789811513763"},{"type":"electronic","value":"9789811513770"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-981-15-1377-0_8","type":"book-chapter","created":{"date-parts":[[2019,11,13]],"date-time":"2019-11-13T07:03:36Z","timestamp":1573628616000},"page":"104-115","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["Two-Layer Intrusion Detection Model Based on Ensemble Classifier"],"prefix":"10.1007","author":[{"given":"Limin","family":"Lu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shaohua","family":"Teng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhenhua","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lunke","family":"Fei","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiaozhao","family":"Fang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,11,14]]},"reference":[{"issue":"1","key":"8_CR1","doi-asserted-by":"crossref","first-page":"16","DOI":"10.1016\/j.jnca.2012.09.004","volume":"36","author":"HJ Liao","year":"2013","unstructured":"Liao, H.J., Lin, C.H.R., Lin, Y.C., Tung, K.Y.: Intrusion detection system: a comprehensive review. J. Netw. Comput. Appl. 36(1), 16\u201324 (2013)","journal-title":"J. Netw. Comput. Appl."},{"key":"8_CR2","doi-asserted-by":"crossref","unstructured":"Lee, J.H., Lee, J.H., Sohn, S.G., Ryu, J.H.: Effective value of decision tree with KDD 99 intrusion detection datasets for intrusion detection system. In: International Conference on Advanced Communication Technology. IEEE (2008)","DOI":"10.1109\/ICACT.2008.4493974"},{"key":"8_CR3","doi-asserted-by":"crossref","unstructured":"Amor, N.B., Benferhat, S., Elouedi, Z.: Naive Bayes vs decision trees in intrusion detection systems. In: Proceedings of the 2004 ACM Symposium on Applied Computing (SAC), Nicosia, Cyprus, pp. 14\u201317 (2004)","DOI":"10.1145\/967900.967989"},{"issue":"1","key":"8_CR4","first-page":"223","volume":"310","author":"T Yingjie","year":"2018","unstructured":"Yingjie, T., Mahboubeh, M., Hosseini, B.S.M., Huadong, W., Qiang, Q.: Ramp loss one-class support vector machine; a robust and effective approach to anomaly detection problems. Neurocomputing 310(1), 223\u2013235 (2018)","journal-title":"Neurocomputing"},{"key":"8_CR5","unstructured":"Zhang, Z., Li, J., et al.: A hierarchical anomaly network intrusion detection system using neural network classification. In: CD-ROM Proceedings of 2001 WSES International Conference on: Neural Networks and Applications (2001)"},{"issue":"4","key":"8_CR6","first-page":"97","volume":"18","author":"TG Dietterich","year":"1997","unstructured":"Dietterich, T.G.: Machine learning research: four current directions ai magazine. Ai Mag. 18(4), 97\u2013136 (1997)","journal-title":"Ai Mag."},{"issue":"6","key":"8_CR7","doi-asserted-by":"crossref","first-page":"878","DOI":"10.1109\/TNNLS.2013.2246578","volume":"24","author":"J Yang","year":"2013","unstructured":"Yang, J., Zeng, X., Zhong, S., Wu, S.: Effective neural network ensemble approach for improving generalization performance. IEEE Trans. Neural Netw. Learn. Syst. 24(6), 878\u2013887 (2013)","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"issue":"C","key":"8_CR8","doi-asserted-by":"crossref","first-page":"360","DOI":"10.1016\/j.asoc.2015.10.011","volume":"38","author":"AA Aburomman","year":"2016","unstructured":"Aburomman, A.A., Reaz, M.B.I.: A novel SVM-KNN-PSO ensemble method for intrusion detection system. Appl. Soft Comput. 38(C), 360\u2013372 (2016)","journal-title":"Appl. Soft Comput."},{"key":"8_CR9","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.jnca.2016.03.011","volume":"66","author":"G Folino","year":"2016","unstructured":"Folino, G., Sabatino, P.: Ensemble based collaborative and distributed intrusion detection systems: a survey. J. Netw. Comput. Appl. 66, 1\u201316 (2016)","journal-title":"J. Netw. Comput. Appl."},{"issue":"10","key":"8_CR10","first-page":"993","volume":"12","author":"A De Jongh","year":"2004","unstructured":"De Jongh, A.: Neural network ensembles. IEEE Trans. Pattern Anal. Mach. Intell. 12(10), 993\u20131001 (2004)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"8_CR11","unstructured":"Zhao, Z., Morstatter, F., Sharma, S., Alelyani, S., Anand, A., Liu, H.: Advancing feature selection research. In: ASU Feature Selection Repository, pp. 1\u201328 (2010)"},{"issue":"2","key":"8_CR12","first-page":"197","volume":"5","author":"RE Schapire","year":"1990","unstructured":"Schapire, R.E.: The strength of weak learnability. Mach. Learn. 5(2), 197\u2013227 (1990)","journal-title":"Mach. Learn."},{"key":"8_CR13","doi-asserted-by":"crossref","unstructured":"Wo\u017aniak, M., Gran\u030ba, M., Corchado, E.: A survey of multiple classifier systems as hybrid systems. Elsevier Science Publishers B. V (2014)","DOI":"10.1016\/j.inffus.2013.04.006"},{"issue":"3","key":"8_CR14","doi-asserted-by":"crossref","first-page":"598","DOI":"10.1109\/TMI.2009.2022630","volume":"29","author":"A Takemura","year":"2010","unstructured":"Takemura, A., Shimizu, A., Hamamoto, K.: Discrimination of breast tumors in ultrasonic images using an ensemble classifier based on the adaboost algorithm with feature selection. IEEE Trans. Med. Imaging 29(3), 598\u2013609 (2010)","journal-title":"IEEE Trans. Med. Imaging"},{"issue":"20","key":"8_CR15","doi-asserted-by":"crossref","first-page":"3867","DOI":"10.1016\/j.ins.2008.05.025","volume":"178","author":"I Partalas","year":"2008","unstructured":"Partalas, I., Tsoumakas, G., Hatzikos, E.V., Vlahavas, I.: Greedy regression ensemble selection: theory and an application to water quality prediction. Inf. Sci. 178(20), 3867\u20133879 (2008)","journal-title":"Inf. Sci."},{"issue":"4","key":"8_CR16","doi-asserted-by":"crossref","first-page":"1189","DOI":"10.1109\/JBHI.2017.2723463","volume":"22","author":"VC Korfiatis","year":"2017","unstructured":"Korfiatis, V.C., Tassani, S., Matsopoulos, G.K.: A new ensemble classification system for fracture zone prediction using imbalanced micro-CT bone morphometrical data. IEEE J. Biomed. Health Inform. 22(4), 1189\u20131196 (2017)","journal-title":"IEEE J. Biomed. Health Inform."},{"issue":"2","key":"8_CR17","first-page":"258","volume":"112","author":"W Bin","year":"2018","unstructured":"Bin, W., Lin, L., Xing, W., Megahed, F.M., Waldyn, M.: Predicting short-term stock prices using ensemble methods and online data sources. Expert Syst. Appl. 112(2), 258\u2013273 (2018)","journal-title":"Expert Syst. Appl."},{"issue":"1","key":"8_CR18","doi-asserted-by":"crossref","first-page":"114","DOI":"10.1016\/j.jnca.2005.06.003","volume":"30","author":"S Peddabachigari","year":"2007","unstructured":"Peddabachigari, S., Abraham, A., Grosan, C., Thomas, J.: Modeling intrusion detection system using hybrid intelligent systems. J. Netw. Comput. Appl. 30(1), 114\u2013132 (2007)","journal-title":"J. Netw. Comput. Appl."},{"key":"8_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"254","DOI":"10.1007\/978-3-540-76929-3_24","volume-title":"Advances in Computer Science \u2013 ASIAN 2007. Computer and Network Security","author":"A Borji","year":"2007","unstructured":"Borji, A.: Combining heterogeneous classifiers for network intrusion detection. In: Cervesato, I. (ed.) ASIAN 2007. LNCS, vol. 4846, pp. 254\u2013260. Springer, Heidelberg (2007). \n                  https:\/\/doi.org\/10.1007\/978-3-540-76929-3_24"},{"issue":"2","key":"8_CR20","doi-asserted-by":"crossref","first-page":"577","DOI":"10.1109\/TSMCB.2007.914695","volume":"38","author":"W Hu","year":"2008","unstructured":"Hu, W., Hu, W., Maybank, S.: Adaboost-based algorithm for network intrusion detection. IEEE Trans. Syst. Man Cybern. Part B Cybern. 38(2), 577\u2013583 (2008)","journal-title":"IEEE Trans. Syst. Man Cybern. Part B Cybern."},{"key":"8_CR21","doi-asserted-by":"crossref","unstructured":"Panda, M., Patra, M.R.: Ensemble of classifiers for detecting network intrusion. In: International Conference on Advances in Computing. ACM (2009)","DOI":"10.1109\/ARTCom.2009.121"},{"issue":"1","key":"8_CR22","doi-asserted-by":"crossref","first-page":"66","DOI":"10.1109\/TCYB.2013.2247592","volume":"44","author":"W Hu","year":"2014","unstructured":"Hu, W., Gao, J., Wang, Y., Wu, O., Maybank, S.: Online adaboost-based parameterized methods for dynamic distributed network intrusion detection. IEEE Trans. Cybern. 44(1), 66\u201382 (2014)","journal-title":"IEEE Trans. Cybern."},{"issue":"2","key":"8_CR23","doi-asserted-by":"crossref","first-page":"1550033","DOI":"10.1142\/S0218213015500335","volume":"25","author":"M Amini","year":"2016","unstructured":"Amini, M., Rezaeenour, J., Hadavandi, H.: A neural network ensemble classifier for effective intrusion detection using fuzzy clustering and radial basis function networks. Int. J. Artif. Intell. Tools 25(2), 1550033 (2016)","journal-title":"Int. J. Artif. Intell. Tools"},{"issue":"5","key":"8_CR24","first-page":"59","volume":"18","author":"M Mehdi","year":"2018","unstructured":"Mehdi, M., Khalid, E.Y., Seddik, B.: Mining network traffics for intrusion detection based on bagging ensemble multilayer perceptron with genetic algorithm optimization. Int. J. Comput. Sci. Netw. Secur. 18(5), 59\u201366 (2018)","journal-title":"Int. J. Comput. Sci. Netw. Secur."},{"issue":"4","key":"8_CR25","first-page":"475","volume":"5","author":"S Teng","year":"2010","unstructured":"Teng, S., Du, H., Wu, N., Zhang, W., Su, J.: A cooperative network intrusion detection based on fuzzy SVMs. J. Netw. 5(4), 475\u2013483 (2010)","journal-title":"J. Netw."},{"issue":"1","key":"8_CR26","doi-asserted-by":"crossref","first-page":"108","DOI":"10.1109\/JAS.2017.7510730","volume":"5","author":"S Teng","year":"2018","unstructured":"Teng, S., Wu, N., Zhu, H., et al.: SVM-DT-based adaptive and collaborative intrusion detection. IEEE\/CAA J. Autom. Sinica 5(1), 108\u2013118 (2018)","journal-title":"IEEE\/CAA J. Autom. Sinica"},{"key":"8_CR27","doi-asserted-by":"crossref","first-page":"164","DOI":"10.1016\/j.comnet.2018.11.010","volume":"148","author":"S Fadi","year":"2019","unstructured":"Fadi, S., Ali, B.N., Aleksander, E.: Dimensionality reduction with IG-PCA and ensemble classifier for network intrusion detection. Comput. Netw. 148, 164\u2013175 (2019)","journal-title":"Comput. Netw."},{"issue":"1","key":"8_CR28","doi-asserted-by":"crossref","first-page":"424","DOI":"10.1016\/j.eswa.2011.07.032","volume":"39","author":"Y Li","year":"2012","unstructured":"Li, Y., Xia, J., Zhang, S., Yan, J., Ai, X., Dai, K.: An efficient intrusion detection system based on support vector machines and gradually feature removal method. Expert Syst. Appl. 39(1), 424\u2013430 (2012)","journal-title":"Expert Syst. Appl."},{"issue":"4","key":"8_CR29","doi-asserted-by":"crossref","first-page":"602","DOI":"10.1093\/comjnl\/bxt044","volume":"57","author":"P Gogoi","year":"2014","unstructured":"Gogoi, P., Bhattacharyya, D.K., Borah, B., Kalita, J.K.: MLH-IDS: a multi-level hybrid intrusion detection method. Comput. J. 57(4), 602\u2013623 (2014)","journal-title":"Comput. J."},{"issue":"7","key":"8_CR30","doi-asserted-by":"crossref","first-page":"918","DOI":"10.1016\/j.patrec.2008.01.008","volume":"29","author":"C Xiang","year":"2008","unstructured":"Xiang, C., Yong, P.C., Meng, L.S.: Design of multiple-level hybrid classifier for intrusion detection system using Bayesian clustering and decision trees. Pattern Recogn. Lett. 29(7), 918\u2013924 (2008)","journal-title":"Pattern Recogn. Lett."},{"key":"8_CR31","unstructured":"Xiang, C., Chong, M.Y., Zhu, H.L.: Design of mnitiple-level tree classifiers for intrusion detection system. In: IEEE Conference on Cybernetics & Intelligent Systems (2004)"},{"key":"8_CR32","doi-asserted-by":"crossref","unstructured":"Lu, H., Xu, J.: Three-level hybrid intrusion detection system. In: International Conference on Information Engineering & Computer Science (2009)","DOI":"10.1109\/ICIECS.2009.5366474"},{"key":"8_CR33","doi-asserted-by":"crossref","unstructured":"Tavallaee, M., Bagheri, E., Lu, W., Ghorbani, A.A.: A detailed analysis of the KDD CUP 99 data set. In: IEEE International Conference on Computational Intelligence for Security & Defense Applications (2009)","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"8_CR34","doi-asserted-by":"crossref","unstructured":"Chauhan, H., Kumar, V., Pundir, S., Pilli, E.S.: A comparative study of classification techniques for intrusion detection. In: International Symposium on Computational & Business Intelligence. IEEE Computer Society (2013)","DOI":"10.1109\/ISCBI.2013.16"},{"issue":"A","key":"8_CR35","first-page":"109","volume":"24","author":"AAS Aziz","year":"2016","unstructured":"Aziz, A.A.S., Hanafi, E.O., Hassanien, A.E.: Comparison of classification techniques applied for network intrusion detection and classification. J. Appl. Log. 24(A), 109\u2013118 (2016)","journal-title":"J. Appl. Log."},{"key":"8_CR36","doi-asserted-by":"crossref","first-page":"33789","DOI":"10.1109\/ACCESS.2018.2841987","volume":"6","author":"L Ahmad","year":"2018","unstructured":"Ahmad, L., Basheri, M.J., Raheem, A.: Performance comparison of support vector machine, random forest, and extreme learning machine for intrusion detection. IEEE Access 6, 33789\u201333795 (2018)","journal-title":"IEEE Access"},{"issue":"1","key":"8_CR37","doi-asserted-by":"crossref","first-page":"61","DOI":"10.1007\/s10844-015-0388-x","volume":"48","author":"HP Hamed","year":"2017","unstructured":"Hamed, H.P., GholamHossein, D., Sattar, H.: Two-tier network anomaly detection model: a machine learning approach. J. Intell. Inf. Syst. 48(1), 61\u201374 (2017)","journal-title":"J. Intell. Inf. Syst."},{"key":"8_CR38","doi-asserted-by":"crossref","unstructured":"Tama, B.A., Patil, A.S., Rhee, K.H.: An improved model of anomaly detection using two-level classifier ensemble. In: Asia Joint Conference on Information Security. IEEE Computer Society (2017)","DOI":"10.1109\/AsiaJCIS.2017.9"}],"container-title":["Communications in Computer and Information Science","Computer Supported Cooperative Work and Social Computing"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-15-1377-0_8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,7,17]],"date-time":"2020-07-17T17:42:51Z","timestamp":1595007771000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-981-15-1377-0_8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9789811513763","9789811513770"],"references-count":38,"URL":"https:\/\/doi.org\/10.1007\/978-981-15-1377-0_8","relation":{},"ISSN":["1865-0929","1865-0937"],"issn-type":[{"type":"print","value":"1865-0929"},{"type":"electronic","value":"1865-0937"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"14 November 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ChineseCSCW","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"CCF Conference on Computer Supported Cooperative Work  and Social Computing","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Kunming","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"China","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 August 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 August 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"chinesecscw2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/www.scholat.com\/confweb\/CCSCW2019","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}