{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,20]],"date-time":"2026-04-20T21:40:53Z","timestamp":1776721253186,"version":"3.51.2"},"publisher-location":"Singapore","reference-count":36,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819543809","type":"print"},{"value":"9789819543816","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,11,16]],"date-time":"2025-11-16T00:00:00Z","timestamp":1763251200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,11,16]],"date-time":"2025-11-16T00:00:00Z","timestamp":1763251200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026]]},"DOI":"10.1007\/978-981-95-4381-6_33","type":"book-chapter","created":{"date-parts":[[2025,11,15]],"date-time":"2025-11-15T07:01:06Z","timestamp":1763190066000},"page":"485-500","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Binning Encoder-Based Grouped Aggregation for\u00a0Network Traffic Anomaly Detection"],"prefix":"10.1007","author":[{"given":"Lingyao","family":"Lu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tongya","family":"Zheng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Haoye","family":"Wang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zunlei","family":"Feng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mingli","family":"Song","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,11,16]]},"reference":[{"key":"33_CR1","doi-asserted-by":"crossref","unstructured":"Sommer, R., Paxson, V.: Outside the closed world: On using machine learning for network intrusion detection. In: 2010 IEEE Symposium On Security And Privacy, pp. 305\u2013316 (2010)","DOI":"10.1109\/SP.2010.25"},{"key":"33_CR2","doi-asserted-by":"publisher","first-page":"181","DOI":"10.1109\/32.372146","volume":"21","author":"K Ilgun","year":"2002","unstructured":"Ilgun, K., Kemmerer, R., Porras, P.: State transition analysis: a rule-based intrusion detection approach. IEEE Trans. Software Eng. 21, 181\u2013199 (2002)","journal-title":"IEEE Trans. Software Eng."},{"key":"33_CR3","doi-asserted-by":"publisher","first-page":"1366","DOI":"10.1016\/S0140-3664(02)00038-5","volume":"25","author":"S Jha","year":"2002","unstructured":"Jha, S., Hassan, M.: Building agents for rule-based intrusion detection system. Comput. Commun. 25, 1366\u20131373 (2002)","journal-title":"Comput. Commun."},{"key":"33_CR4","doi-asserted-by":"publisher","first-page":"424","DOI":"10.1109\/INFCOM.2009.5061947","volume":"2009","author":"N Duffield","year":"2009","unstructured":"Duffield, N., Haffner, P., Krishnamurthy, B., Ringberg, H.: Rule-based anomaly detection on IP flows. IEEE Infocom 2009, 424\u2013432 (2009)","journal-title":"IEEE Infocom"},{"key":"33_CR5","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1016\/j.cose.2008.08.003","volume":"28","author":"P Garcia-Teodoro","year":"2009","unstructured":"Garcia-Teodoro, P., Diaz-Verdejo, J., Maci\u00e1-Fern\u00e1ndez, G., V\u00e1zquez, E.: Anomaly-based network intrusion detection: techniques, systems and challenges. Comput. Secur. 28, 18\u201328 (2009)","journal-title":"Comput. Secur."},{"key":"33_CR6","doi-asserted-by":"crossref","unstructured":"Wang, M., Yang, N., Weng, N.: K-GetNID: knowledge-guided graphs for early and transferable network intrusion detection. In: IEEE Transactions On Information Forensics And Security (2024)","DOI":"10.1109\/TIFS.2024.3431932"},{"key":"33_CR7","first-page":"108906","volume":"210","author":"B Yu","year":"2022","unstructured":"Yu, B., Li, S., Guo, W., Xue, G., Liu, Y.: Graph neural networks for network anomaly detection: opportunities and challenges. Comput. Netw. 210, 108906 (2022)","journal-title":"Comput. Netw."},{"key":"33_CR8","doi-asserted-by":"publisher","first-page":"41","DOI":"10.3390\/info14010041","volume":"14","author":"R Chaganti","year":"2023","unstructured":"Chaganti, R., Suliman, W., Ravi, V., Dua, A.: Deep learning approach for SDN-enabled intrusion detection system in IoT networks. Information 14, 41 (2023)","journal-title":"Information"},{"key":"33_CR9","doi-asserted-by":"crossref","unstructured":"Rizvi, S., Scanlon, M., McGibney, J., Sheppard, J.: Deep learning based network intrusion detection system for resource-constrained environments. In: International Conference On Digital Forensics And Cyber Crime, pp. 355\u2013367 (2022)","DOI":"10.1007\/978-3-031-36574-4_21"},{"key":"33_CR10","doi-asserted-by":"crossref","unstructured":"Duan, M., He, D., Zheng, T., Jia, L., Song, M., Wang, X., Feng, Z.: Global attribute-association pattern aggregation for graph fraud detection. In: Proceedings Of The AAAI Conference On Artificial Intelligence, vol. 39, 11616\u201311624 (2025)","DOI":"10.1609\/aaai.v39i11.33264"},{"key":"33_CR11","doi-asserted-by":"crossref","unstructured":"Duan, M., Zheng, T., Gao, Y., Wang, G., Feng, Z., Wang, X.: Dga-gnn: dynamic grouping aggregation gnn for fraud detection. In: Proceedings Of The AAAI Conference On Artificial Intelligence, vol. 38, pp. 11820\u201311828 (2024)","DOI":"10.1609\/aaai.v38i10.29067"},{"key":"33_CR12","doi-asserted-by":"crossref","unstructured":"Wang, Y., Liu, S., Zheng, T., Chen, K., Song, M.: Unveiling global interactive patterns across graphs: Towards interpretable graph neural networks. In: Proceedings Of The 30th ACM SIGKDD Conference On Knowledge Discovery And Data Mining, pp. 3277\u20133288 (2024)","DOI":"10.1145\/3637528.3671838"},{"key":"33_CR13","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/1541880.1541882","volume":"41","author":"V Chandola","year":"2009","unstructured":"Chandola, V., Banerjee, A., Kumar, V.: Anomaly detection: a survey. ACM Comput. Surv. (CSUR). 41, 1\u201358 (2009)","journal-title":"ACM Comput. Surv. (CSUR)."},{"key":"33_CR14","unstructured":"Li, Y., Ma, J., Chen, L., Song, J.: Enhancing graph neural network-based anomaly detection with contrastive learning. In: Proceedings of the Web Conference, vol. 2022, pp. 3696\u20133706 (2022)"},{"key":"33_CR15","doi-asserted-by":"crossref","unstructured":"Communication networks, S. Retracted: Research on DoS traffic detection model based on random forest and multilayer perceptron. Wiley Online Library (2023)","DOI":"10.1155\/2023\/9769056"},{"issue":"14","key":"33_CR16","doi-asserted-by":"publisher","first-page":"2158","DOI":"10.3390\/electronics11142158","volume":"11","author":"S Gadal","year":"2022","unstructured":"Gadal, S., Mokhtar, R., Abdelhaq, M., Alsaqour, R., Ali, E.S., Saeed, R.: Machine learning-based anomaly detection using K-mean array and sequential minimal optimization. Electronics 11(14), 2158 (2022)","journal-title":"Electronics"},{"key":"33_CR17","doi-asserted-by":"crossref","unstructured":"Z\u00fcgner, D., Akbarnejad, A., G\u00fcnnemann, S.: Adversarial attacks on neural networks for graph data. In: Proceedings Of The 24th ACM SIGKDD International Conference On Knowledge Discovery & Data Mining, pp. 2847\u20132856 (2018)","DOI":"10.1145\/3219819.3220078"},{"key":"33_CR18","doi-asserted-by":"publisher","first-page":"916","DOI":"10.3390\/electronics9060916","volume":"9","author":"J Kim","year":"2020","unstructured":"Kim, J., Kim, J., Kim, H., Shim, M., Choi, E.: CNN-based network intrusion detection against denial-of-service attacks. Electronics 9, 916 (2020)","journal-title":"Electronics"},{"key":"33_CR19","doi-asserted-by":"publisher","first-page":"8890306","DOI":"10.1155\/2020\/8890306","volume":"2020","author":"P Sun","year":"2020","unstructured":"Sun, P., Liu, P., Li, Q., Liu, C., Lu, X., Hao, R., Chen, J.: DL-IDS: extracting features using CNN-LSTM hybrid network for intrusion detection system. Secur. Commun. Netw. 2020, 8890306 (2020)","journal-title":"Secur. Commun. Netw."},{"key":"33_CR20","doi-asserted-by":"publisher","first-page":"4221","DOI":"10.3390\/app9204221","volume":"9","author":"J Lee","year":"2019","unstructured":"Lee, J., Park, K.: AE-CGAN model based high performance network intrusion detection system. Appl. Sci. 9, 4221 (2019)","journal-title":"Appl. Sci."},{"key":"33_CR21","doi-asserted-by":"publisher","first-page":"1727","DOI":"10.1109\/TITS.2020.3025685","volume":"23","author":"R Islam","year":"2020","unstructured":"Islam, R., Refat, R., Yerram, S., Malik, H.: Graph-based intrusion detection system for controller area networks. IEEE Trans. Intell. Transp. Syst. 23, 1727\u20131736 (2020)","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"33_CR22","doi-asserted-by":"crossref","unstructured":"Graves, A.: Long short-term memory. In: Supervised Sequence Labelling With Recurrent Neural Networks, pp. 37\u201345 (2012)","DOI":"10.1007\/978-3-642-24797-2_4"},{"key":"33_CR23","unstructured":"Goodfellow, I., et al.: Generative adversarial nets. In: Advances In Neural Information Processing Systems, vol. 27 (2014)"},{"key":"33_CR24","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1109\/TNN.2008.2005605","volume":"20","author":"F Scarselli","year":"2008","unstructured":"Scarselli, F., Gori, M., Tsoi, A., Hagenbuchner, M., Monfardini, G.: The graph neural network model. IEEE Trans. Neural Networks 20, 61\u201380 (2008)","journal-title":"IEEE Trans. Neural Networks"},{"key":"33_CR25","doi-asserted-by":"publisher","first-page":"110030","DOI":"10.1016\/j.knosys.2022.110030","volume":"258","author":"E Caville","year":"2022","unstructured":"Caville, E., Lo, W., Layeghy, S., Portmann, M.: Anomal-E: a self-supervised network intrusion detection system based on graph neural networks. Knowl.-Based Syst. 258, 110030 (2022)","journal-title":"Knowl.-Based Syst."},{"key":"33_CR26","doi-asserted-by":"publisher","first-page":"110495","DOI":"10.1016\/j.comnet.2024.110495","volume":"248","author":"R Xu","year":"2024","unstructured":"Xu, R., Wu, G., Wang, W., Gao, X., He, A., Zhang, Z.: Applying self-supervised learning to network intrusion detection for network flows with graph neural network. Comput. Netw. 248, 110495 (2024)","journal-title":"Comput. Netw."},{"key":"33_CR27","doi-asserted-by":"crossref","unstructured":"Fu, C., Li, Q., Xu, K.: Detecting unknown encrypted malicious traffic in real time via flow interaction graph analysis. ArXiv Preprint ArXiv:2301.13686 (2023)","DOI":"10.14722\/ndss.2023.23080"},{"key":"33_CR28","doi-asserted-by":"crossref","unstructured":"Claise, B.: Cisco systems netflow services export version 9. (2004)","DOI":"10.17487\/rfc3954"},{"key":"33_CR29","doi-asserted-by":"crossref","unstructured":"Sarhan, M., Layeghy, S., Moustafa, N., Portmann, M.: Netflow datasets for machine learning-based network intrusion detection systems. In: International Conference On Big Data Technologies And Applications, pp. 117\u2013135 (2020)","DOI":"10.1007\/978-3-030-72802-1_9"},{"key":"33_CR30","doi-asserted-by":"publisher","first-page":"357","DOI":"10.1007\/s11036-021-01843-0","volume":"27","author":"M Sarhan","year":"2022","unstructured":"Sarhan, M., Layeghy, S., Portmann, M.: Towards a standard feature set for network intrusion detection system datasets. Mob. Netw. Appl. 27, 357\u2013370 (2022)","journal-title":"Mob. Netw. Appl."},{"key":"33_CR31","doi-asserted-by":"publisher","first-page":"533","DOI":"10.1038\/323533a0","volume":"323","author":"D Rumelhart","year":"1986","unstructured":"Rumelhart, D., Hinton, G., Williams, R.: Learning representations by back-propagating errors. Nature 323, 533\u2013536 (1986)","journal-title":"Nature"},{"key":"33_CR32","unstructured":"Kipf, T.N., Welling, M.: Semi-supervised classification with graph convolutional networks. arXiv:1609.02907 (2016)"},{"key":"33_CR33","unstructured":"Veli\u010dkovi\u0107, P., Cucurull, G., Casanova, A., Romero, A., Lio, P., Bengio, Y.: Graph attention networks. ArXiv Preprint ArXiv: arXiv:1710.10903 (2017)"},{"key":"33_CR34","unstructured":"Wang, M.: Deep graph library: towards efficient and scalable deep learning on graphs. In: ICLR Workshop On Representation Learning On Graphs And Manifolds (2019)"},{"key":"33_CR35","unstructured":"Adam, K.: et al.: A method for stochastic optimization. ArXiv Preprint ArXiv: arXiv:1412.6980 vol. 1412 (2014)"},{"key":"33_CR36","unstructured":"Powers, D.: Evaluation: from precision, recall and F-measure to ROC, informedness, markedness and correlation. ArXiv Preprint arXiv:2010.16061 (2020)"}],"container-title":["Lecture Notes in Computer Science","Neural Information Processing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-95-4381-6_33","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,20]],"date-time":"2026-04-20T20:46:37Z","timestamp":1776717997000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-95-4381-6_33"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,16]]},"ISBN":["9789819543809","9789819543816"],"references-count":36,"URL":"https:\/\/doi.org\/10.1007\/978-981-95-4381-6_33","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,11,16]]},"assertion":[{"value":"16 November 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICONIP","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Neural Information Processing","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Okinawa","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Japan","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 November 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 November 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"32","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iconip2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/iconip2025.apnns.org\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}