{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T15:44:56Z","timestamp":1778082296596,"version":"3.51.4"},"publisher-location":"Singapore","reference-count":40,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819787975","type":"print"},{"value":"9789819787982","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,12,25]],"date-time":"2024-12-25T00:00:00Z","timestamp":1735084800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,12,25]],"date-time":"2024-12-25T00:00:00Z","timestamp":1735084800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-981-97-8798-2_10","type":"book-chapter","created":{"date-parts":[[2024,12,24]],"date-time":"2024-12-24T05:59:40Z","timestamp":1735019980000},"page":"187-207","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":2,"title":["UARC:Unsupervised Anomalous Traffic Detection with\u00a0Improved U-Shaped Autoencoder and\u00a0RetNet Based Multi-clustering"],"prefix":"10.1007","author":[{"given":"Yunyang","family":"Xie","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kai","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shenghui","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bingqian","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ning","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,12,25]]},"reference":[{"key":"10_CR1","doi-asserted-by":"crossref","unstructured":"Agarwal, S.: Data mining: data mining concepts and techniques. In: 2013 International Conference on Machine Intelligence and Research Advancement, pp. 203\u2013207. IEEE (2013)","DOI":"10.1109\/ICMIRA.2013.45"},{"key":"10_CR2","doi-asserted-by":"crossref","unstructured":"Alam, S., Alam, Y., Cui, S., Akujuobi, C.M.: Unsupervised network intrusion detection using convolutional neural networks. In: 2023 IEEE 13th Annual Computing and Communication Workshop and Conference (CCWC), pp. 712\u2013717. IEEE (2023)","DOI":"10.1109\/CCWC57344.2023.10099151"},{"key":"10_CR3","doi-asserted-by":"crossref","unstructured":"AlEroud, A., Karabatis, G.: Using contextual information to identify cyber-attacks. Information Fusion for Cyber-security Analytics, pp. 1\u201316 (2017)","DOI":"10.1007\/978-3-319-44257-0_1"},{"key":"10_CR4","doi-asserted-by":"publisher","first-page":"108647","DOI":"10.1109\/ACCESS.2019.2933304","volume":"7","author":"S Ali","year":"2019","unstructured":"Ali, S., Li, Y.: Learning multilevel auto-encoders for DDoS attack detection in smart grid network. IEEE Access 7, 108647\u2013108659 (2019). https:\/\/doi.org\/10.1109\/ACCESS.2019.2933304","journal-title":"IEEE Access"},{"issue":"1","key":"10_CR5","first-page":"1","volume":"2","author":"J An","year":"2015","unstructured":"An, J., Cho, S.: Variational autoencoder based anomaly detection using reconstruction probability. Special Lecture on IE 2(1), 1\u201318 (2015)","journal-title":"Special Lecture on IE"},{"key":"10_CR6","doi-asserted-by":"publisher","first-page":"53346","DOI":"10.1109\/ACCESS.2020.2980937","volume":"8","author":"G Andresini","year":"2020","unstructured":"Andresini, G., Appice, A., Mauro, N.D., Loglisci, C., Malerba, D.: Multi-channel deep feature learning for intrusion detection. IEEE Access 8, 53346\u201353359 (2020). https:\/\/doi.org\/10.1109\/ACCESS.2020.2980937","journal-title":"IEEE Access"},{"key":"10_CR7","doi-asserted-by":"crossref","unstructured":"Aytekin, C., Ni, X., Cricri, F., Aksu, E.: Clustering and unsupervised anomaly detection with l2 normalized deep auto-encoder representations. In: 2018 International Joint Conference on Neural Networks (IJCNN), pp.\u00a01\u20136. IEEE (2018)","DOI":"10.1109\/IJCNN.2018.8489068"},{"issue":"1","key":"10_CR8","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s40537-020-00390-x","volume":"8","author":"S Bagui","year":"2021","unstructured":"Bagui, S., Li, K.: Resampling imbalanced data for network intrusion detection datasets. J. Big Data 8(1), 1\u201341 (2021). https:\/\/doi.org\/10.1186\/s40537-020-00390-x","journal-title":"J. Big Data"},{"key":"10_CR9","unstructured":"Bergman, L., Hoshen, Y.: Classification-based anomaly detection for general data. arXiv preprint arXiv:2005.02359 (2020)"},{"issue":"5","key":"10_CR10","doi-asserted-by":"publisher","first-page":"856","DOI":"10.1109\/TDSC.2017.2714164","volume":"16","author":"D Cotroneo","year":"2017","unstructured":"Cotroneo, D., Paudice, A., Pecchia, A.: Empirical analysis and validation of security alerts filtering techniques. IEEE Trans. Dependable Secure Comput. 16(5), 856\u2013870 (2017)","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10_CR11","doi-asserted-by":"publisher","unstructured":"Devi, R.S., Bharathi, R., Kumar, P.K.: Investigation on efficient machine learning algorithm for DDoS attack detection. In: 2023 International Conference on Computer, Electrical and Communication Engineering (ICCECE), pp.\u00a01\u20135 (2023). https:\/\/doi.org\/10.1109\/ICCECE51049.2023.10085248","DOI":"10.1109\/ICCECE51049.2023.10085248"},{"key":"10_CR12","doi-asserted-by":"crossref","unstructured":"Fu, C., Li, Q., Shen, M., Xu, K.: Realtime robust malicious traffic detection via frequency domain analysis. In: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, pp. 3431\u20133446 (2021)","DOI":"10.1145\/3460120.3484585"},{"key":"10_CR13","doi-asserted-by":"publisher","unstructured":"Gao, L., Chen, H.: Abnormal detection of blast furnace condition using PCA similarity and spectral clustering. In: 2018 13th IEEE Conference on Industrial Electronics and Applications (ICIEA). pp. 2198\u20132203 (2018). https:\/\/doi.org\/10.1109\/ICIEA.2018.8398075","DOI":"10.1109\/ICIEA.2018.8398075"},{"issue":"4","key":"10_CR14","doi-asserted-by":"publisher","first-page":"e0152173","DOI":"10.1371\/journal.pone.0152173","volume":"11","author":"M Goldstein","year":"2016","unstructured":"Goldstein, M., Uchida, S.: A comparative evaluation of unsupervised anomaly detection algorithms for multivariate data. PLoS ONE 11(4), e0152173 (2016)","journal-title":"PLoS ONE"},{"key":"10_CR15","doi-asserted-by":"crossref","unstructured":"Graves, A., Graves, A.: Long short-term memory. Supervised Sequence Labelling with Recurrent Neural Networks, pp. 37\u201345 (2012)","DOI":"10.1007\/978-3-642-24797-2_4"},{"key":"10_CR16","doi-asserted-by":"publisher","first-page":"102499","DOI":"10.1016\/j.cose.2021.102499","volume":"112","author":"N Gupta","year":"2022","unstructured":"Gupta, N., Jindal, V., Bedi, P.: CSE-IDS: using cost-sensitive deep learning and ensemble algorithms to handle class imbalance in network-based intrusion detection systems. Comput. Secur. 112, 102499 (2022)","journal-title":"Comput. Secur."},{"key":"10_CR17","doi-asserted-by":"publisher","unstructured":"Lai, L.: Abnormal data detection method of web database based on improved k-means algorithm. In: 2022 Global Reliability and Prognostics and Health Management (PHM-Yantai), pp.\u00a01\u20137 (2022). https:\/\/doi.org\/10.1109\/PHM-Yantai55411.2022.9942021","DOI":"10.1109\/PHM-Yantai55411.2022.9942021"},{"key":"10_CR18","unstructured":"Lai, Y., Ping, G., Wu, Y., Lu, C., Ye, X.: OpenSMax: unknown domain generation algorithm detection. In: ECAI 2020, pp. 1850\u20131857. IOS Press (2020)"},{"key":"10_CR19","unstructured":"Lipton, Z.C., Berkowitz, J., Elkan, C.: A critical review of recurrent neural networks for sequence learning. arXiv preprint arXiv:1506.00019 (2015)"},{"key":"10_CR20","doi-asserted-by":"crossref","unstructured":"Liu, F.T., Ting, K.M., Zhou, Z.H.: Isolation forest. In: 2008 Eighth IEEE International Conference on Data Mining, pp. 413\u2013422. IEEE (2008)","DOI":"10.1109\/ICDM.2008.17"},{"issue":"11","key":"10_CR21","doi-asserted-by":"publisher","first-page":"205","DOI":"10.21105\/joss.00205","volume":"2","author":"L McInnes","year":"2017","unstructured":"McInnes, L., Healy, J., Astels, S.: HDBSCAN: hierarchical density based clustering. J. Open Source Softw. 2(11), 205 (2017)","journal-title":"J. Open Source Softw."},{"key":"10_CR22","doi-asserted-by":"publisher","first-page":"102940","DOI":"10.1016\/j.cose.2022.102940","volume":"123","author":"MS Milosevic","year":"2022","unstructured":"Milosevic, M.S., Ciric, V.M.: Extreme minority class detection in imbalanced data for network intrusion. Comput. Secur. 123, 102940 (2022)","journal-title":"Comput. Secur."},{"key":"10_CR23","doi-asserted-by":"crossref","unstructured":"Moustafa, N., Slay, J.: UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). In: 2015 Military Communications and Information Systems Conference (MilCIS), pp.\u00a01\u20136. IEEE (2015)","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"10_CR24","unstructured":"Panigrahi, R., Borah, S.: A detailed analysis of CICIDS2017 dataset for designing intrusion detection systems. Int. J. Eng. Technol. 7(3.24), 479\u2013482 (2018)"},{"key":"10_CR25","unstructured":"Papadimitriou, C.H., Steiglitz, K.: Combinatorial optimization: algorithms and complexity. Courier Corporation (1998)"},{"key":"10_CR26","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4899-7502-7","volume-title":"Encyclopedia of Machine Learning and Data Science","author":"D Phung","year":"2020","unstructured":"Phung, D., Webb, G.I., Sammut, C.: Encyclopedia of Machine Learning and Data Science. Springer, US (2020)"},{"key":"10_CR27","doi-asserted-by":"crossref","unstructured":"Ping, G., Feng, S., Li, Y., Ye, X.: Unsupervised anomalous traffic detection based on cascading representation and multiple-clustering. In: 2022 IEEE 8th International Conference on Computer and Communications (ICCC), pp. 2303\u20132307. IEEE (2022)","DOI":"10.1109\/ICCC56324.2022.10065635"},{"key":"10_CR28","unstructured":"Ruff, L., et al.: Deep one-class classification. In: International Conference on Machine Learning, pp. 4393\u20134402. PMLR (2018)"},{"key":"10_CR29","doi-asserted-by":"crossref","unstructured":"Sharafaldin, I., Lashkari, A.H., Ghorbani, A.A.: Toward generating a new intrusion detection dataset and intrusion traffic characterization. In: ICISSP, vol. 1, pp. 108\u2013116 (2018)","DOI":"10.5220\/0006639801080116"},{"key":"10_CR30","first-page":"13016","volume":"33","author":"L Shen","year":"2020","unstructured":"Shen, L., Li, Z., Kwok, J.: Timeseries anomaly detection using temporal hierarchical one-class network. Adv. Neural. Inf. Process. Syst. 33, 13016\u201313026 (2020)","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"10_CR31","unstructured":"Sun, Y., et al.: Retentive network: a successor to transformer for large language models. arXiv preprint arXiv:2307.08621 (2023)"},{"key":"10_CR32","unstructured":"Vaswani, A., et al.: Attention is all you need. Adv. Neural Inf. Process. Syst. 30 (2017)"},{"key":"10_CR33","doi-asserted-by":"crossref","unstructured":"Vitorino, J., Pra\u00e7a, I., Maia, E.: SoK: realistic adversarial attacks and defenses for intelligent network intrusion detection. Comput. Secur., p. 103433 (2023)","DOI":"10.1016\/j.cose.2023.103433"},{"key":"10_CR34","doi-asserted-by":"publisher","first-page":"103131","DOI":"10.1016\/j.cose.2023.103131","volume":"128","author":"W Wang","year":"2023","unstructured":"Wang, W., Jian, S., Tan, Y., Wu, Q., Huang, C.: Robust unsupervised network intrusion detection with self-supervised masked context reconstruction. Comput. Secur. 128, 103131 (2023)","journal-title":"Comput. Secur."},{"key":"10_CR35","doi-asserted-by":"publisher","first-page":"102899","DOI":"10.1016\/j.cose.2022.102899","volume":"122","author":"J Yang","year":"2022","unstructured":"Yang, J., Li, H., Shao, S., Zou, F., Wu, Y.: FS-IDS: a framework for intrusion detection based on few-shot learning. Comput. Secur. 122, 102899 (2022)","journal-title":"Comput. Secur."},{"issue":"10","key":"10_CR36","doi-asserted-by":"publisher","first-page":"2761","DOI":"10.1109\/TIP.2010.2049235","volume":"19","author":"Y Yang","year":"2010","unstructured":"Yang, Y., Xu, D., Nie, F., Yan, S., Zhuang, Y.: Image clustering using local discriminant models and global integration. IEEE Trans. Image Process. 19(10), 2761\u20132773 (2010)","journal-title":"IEEE Trans. Image Process."},{"key":"10_CR37","doi-asserted-by":"publisher","first-page":"102675","DOI":"10.1016\/j.cose.2022.102675","volume":"116","author":"Z Yang","year":"2022","unstructured":"Yang, Z., et al.: A systematic literature review of methods and datasets for anomaly-based network intrusion detection. Comput. Secur. 116, 102675 (2022)","journal-title":"Comput. Secur."},{"key":"10_CR38","doi-asserted-by":"publisher","unstructured":"Yin, Y., Jang-Jaccard, J., Sabrina, F., Kwak, J.: Improving multilayer-perceptron (MLP)-based network anomaly detection with birch clustering on CICIDS-2017 dataset. In: 2023 26th International Conference on Computer Supported Cooperative Work in Design (CSCWD), pp. 423\u2013431 (2023). https:\/\/doi.org\/10.1109\/CSCWD57460.2023.10152640","DOI":"10.1109\/CSCWD57460.2023.10152640"},{"key":"10_CR39","doi-asserted-by":"publisher","unstructured":"Zhang, H., Zhang, X., Xie, J., Wang, Y.: Group abnormal behavior detection based on fuzzy clustering. In: 2020 3rd International Conference on Unmanned Systems (ICUS), pp. 245\u2013250 (2020). https:\/\/doi.org\/10.1109\/ICUS50048.2020.9274820","DOI":"10.1109\/ICUS50048.2020.9274820"},{"key":"10_CR40","unstructured":"Zong, B., et al.: Deep autoencoding gaussian mixture model for unsupervised anomaly detection. In: International Conference on Learning Representations (2018)"}],"container-title":["Lecture Notes in Computer Science","Information and Communications Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-97-8798-2_10","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,24]],"date-time":"2024-12-24T06:04:01Z","timestamp":1735020241000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-97-8798-2_10"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,25]]},"ISBN":["9789819787975","9789819787982"],"references-count":40,"URL":"https:\/\/doi.org\/10.1007\/978-981-97-8798-2_10","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,12,25]]},"assertion":[{"value":"25 December 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Information and Communications Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Mytilene","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Greece","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"27 August 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29 August 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"26","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"icics2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/icics2024.aegean.gr","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}