{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T15:27:08Z","timestamp":1781018828407,"version":"3.54.1"},"reference-count":38,"publisher":"Springer Science and Business Media LLC","issue":"4","license":[{"start":{"date-parts":[[2017,7,5]],"date-time":"2017-07-05T00:00:00Z","timestamp":1499212800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/501100003725","name":"the National Research Foundation of Korea","doi-asserted-by":"crossref","award":["NRF-2014R1A2A1A11052981"],"award-info":[{"award-number":["NRF-2014R1A2A1A11052981"]}],"id":[{"id":"10.13039\/501100003725","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Neural Comput & Applic"],"published-print":{"date-parts":[[2019,4]]},"DOI":"10.1007\/s00521-017-3128-z","type":"journal-article","created":{"date-parts":[[2017,7,5]],"date-time":"2017-07-05T06:56:01Z","timestamp":1499237761000},"page":"955-965","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":104,"title":["An in-depth experimental study of anomaly detection using gradient boosted machine"],"prefix":"10.1007","volume":"31","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1821-6438","authenticated-orcid":false,"given":"Bayu Adhi","family":"Tama","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kyung-Hyune","family":"Rhee","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2017,7,5]]},"reference":[{"key":"3128_CR1","unstructured":"Aiello S, Eckstrand E, Fu A, Landry M, Aboyoun P (2016) Machine learning with R and H2O. https:\/\/h2o-release.s3.amazonaws.com\/h2o\/rel-turan\/4\/docs-website\/h2o-docs\/booklets\/R_Vignette.pdf . Accessed July 2017"},{"key":"3128_CR2","unstructured":"Arora A, Candel A, Lanford J, LeDell E, Parmar V (2016) Deep learning with H2O. http:\/\/h2o.ai\/resources"},{"issue":"1","key":"3128_CR3","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1023\/A:1010933404324","volume":"45","author":"L Breiman","year":"2001","unstructured":"Breiman L (2001) Random forests. Mach Learn 45(1):5\u201332","journal-title":"Mach Learn"},{"key":"3128_CR4","volume-title":"Classification and regression trees","author":"L Breiman","year":"1984","unstructured":"Breiman L, Friedman J, Stone CJ, Olshen RA (1984) Classification and regression trees. CRC Press, Boca Raton"},{"issue":"3","key":"3128_CR5","doi-asserted-by":"publisher","first-page":"27","DOI":"10.1145\/1961189.1961199","volume":"2","author":"CC Chang","year":"2011","unstructured":"Chang CC, Lin CJ (2011) LIBSVM: a library for support vector machines. ACM Trans Intell Syst Technol 2(3):27","journal-title":"ACM Trans Intell Syst Technol"},{"issue":"4","key":"3128_CR6","doi-asserted-by":"publisher","first-page":"295","DOI":"10.1016\/j.cose.2004.09.008","volume":"24","author":"S Chebrolu","year":"2005","unstructured":"Chebrolu S, Abraham A, Thomas JP (2005) Feature deduction and ensemble design of intrusion detection systems. Comput Secur 24(4):295\u2013307","journal-title":"Comput Secur"},{"key":"3128_CR7","unstructured":"Conover WJ (1999) Practical nonparametric statistics 3rd edition, John Wiley and Sons, Michigan"},{"issue":"3","key":"3128_CR8","first-page":"273","volume":"20","author":"C Cortes","year":"1995","unstructured":"Cortes C, Vapnik V (1995) Support-vector networks. Mach Learn 20(3):273\u2013297","journal-title":"Mach Learn"},{"issue":"5","key":"3128_CR9","doi-asserted-by":"publisher","first-page":"1189","DOI":"10.1214\/aos\/1013203451","volume":"29","author":"JH Friedman","year":"2001","unstructured":"Friedman JH (2001) Greedy function approximation: a gradient boosting machine. Ann Stat 29(5):1189\u20131232","journal-title":"Ann Stat"},{"issue":"10","key":"3128_CR10","doi-asserted-by":"publisher","first-page":"2044","DOI":"10.1016\/j.ins.2009.12.010","volume":"180","author":"S Garc\u00eda","year":"2010","unstructured":"Garc\u00eda S, Fern\u00e1ndez A, Luengo J, Herrera F (2010) Advanced nonparametric tests for multiple comparisons in the design of experiments in computational intelligence and data mining: experimental analysis of power. Inf Sci 180(10):2044\u20132064","journal-title":"Inf Sci"},{"issue":"1","key":"3128_CR11","doi-asserted-by":"publisher","first-page":"69","DOI":"10.1016\/j.inffus.2006.10.002","volume":"9","author":"G Giacinto","year":"2008","unstructured":"Giacinto G, Perdisci R, Del Rio M, Roli F (2008) Intrusion detection in computer networks by a modular ensemble of one-class classifiers. Inf Fusion 9(1):69\u201382","journal-title":"Inf Fusion"},{"issue":"8","key":"3128_CR12","doi-asserted-by":"publisher","first-page":"1662","DOI":"10.1016\/j.comnet.2010.12.008","volume":"55","author":"M Govindarajan","year":"2011","unstructured":"Govindarajan M, Chandrasekaran R (2011) Intrusion detection using neural based hybrid classification methods. Comput Netw 55(8):1662\u20131671","journal-title":"Comput Netw"},{"key":"3128_CR13","first-page":"5","volume":"8","author":"HM Harb","year":"2011","unstructured":"Harb HM, Desuky AS (2011) Adaboost ensemble with genetic algorithm post optimization for intrusion detection. Int J Comput Sci Issues 8:5","journal-title":"Int J Comput Sci Issues"},{"key":"3128_CR14","unstructured":"Hsu CW, Chang CC, Lin CJ et al (2010) A practical guide to support vector classification. http:\/\/www.datascienceassn.org\/sites\/default\/files\/Practical Guide to Support Vector Classification.pdf . Accessed July 2017"},{"key":"3128_CR15","doi-asserted-by":"crossref","unstructured":"Kanakarajan NK, Muniasamy K (2016) Improving the accuracy of intrusion detection using GAR-Forest with feature selection. In: Proceedings of the 4th international conference on frontiers in intelligent computing: theory and applications (FICTA) 2015, Springer, New York, pp 539\u2013547","DOI":"10.1007\/978-81-322-2695-6_45"},{"key":"3128_CR16","unstructured":"Kevric J, Jukic S, Subasi A (2016) An effective combining classifier approach using tree algorithms for network intrusion detection. Neural Comput Appl 1\u20138"},{"key":"3128_CR17","doi-asserted-by":"crossref","unstructured":"Kr\u00f6mer P, Plato\u0161 J, Sn\u00e1\u0161el V, Abraham A (2011) Fuzzy classification by evolutionary algorithms. In: 2011 IEEE international conference on systems, man, and cybernetics (SMC), IEEE, pp 313\u2013318","DOI":"10.1109\/ICSMC.2011.6083684"},{"issue":"5","key":"3128_CR18","doi-asserted-by":"publisher","first-page":"1","DOI":"10.18637\/jss.v028.i05","volume":"28","author":"M Kuhn","year":"2008","unstructured":"Kuhn M (2008) Building predictive models in R using the caret package. J Stat Softw 28(5):1\u201326","journal-title":"J Stat Softw"},{"issue":"7553","key":"3128_CR19","doi-asserted-by":"publisher","first-page":"436","DOI":"10.1038\/nature14539","volume":"521","author":"Y LeCun","year":"2015","unstructured":"LeCun Y, Bengio Y, Hinton G (2015) Deep learning. Nature 521(7553):436\u2013444","journal-title":"Nature"},{"key":"3128_CR20","unstructured":"Lewis RJ (2000) An introduction to classification and regression tree (CART) analysis. In: Annual meeting of the society for academic emergency medicine in San Francisco, California, pp 1\u201314"},{"issue":"1","key":"3128_CR21","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1002\/widm.8","volume":"1","author":"WY Loh","year":"2011","unstructured":"Loh WY (2011) Classification and regression trees. Wiley Interdiscip Rev Data Min Knowl Discov 1(1):14\u201323","journal-title":"Wiley Interdiscip Rev Data Min Knowl Discov"},{"issue":"12","key":"3128_CR22","doi-asserted-by":"publisher","first-page":"1296","DOI":"10.1002\/sec.403","volume":"5","author":"M Mohammadi","year":"2012","unstructured":"Mohammadi M, Raahemi B, Akbari A, Nassersharif B (2012) New class-dependent feature transformation for intrusion detection systems. Secur Commun Netw 5(12):1296\u20131311","journal-title":"Secur Commun Netw"},{"key":"3128_CR23","doi-asserted-by":"crossref","unstructured":"Moustafa N, Slay J (2015) UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). In: Military communications and information systems conference (MilCIS), 2015, IEEE, pp 1\u20136","DOI":"10.1109\/MilCIS.2015.7348942"},{"issue":"1\u20133","key":"3128_CR24","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1080\/19393555.2015.1125974","volume":"25","author":"N Moustafa","year":"2016","unstructured":"Moustafa N, Slay J (2016) The evaluation of network anomaly detection systems: statistical analysis of the UNSW-NB15 data set and the comparison with the KDD99 data set. Inf Secur J Glob Perspect 25(1\u20133):18\u201331","journal-title":"Inf Secur J Glob Perspect"},{"issue":"2","key":"3128_CR25","doi-asserted-by":"publisher","first-page":"167","DOI":"10.1016\/j.jnca.2004.01.003","volume":"28","author":"S Mukkamala","year":"2005","unstructured":"Mukkamala S, Sung AH, Abraham A (2005) Intrusion detection using an ensemble of intelligent paradigms. J Netw Comput Appl 28(2):167\u2013182","journal-title":"J Netw Comput Appl"},{"issue":"1","key":"3128_CR26","doi-asserted-by":"publisher","first-page":"4","DOI":"10.1016\/j.inffus.2007.07.002","volume":"9","author":"NC Oza","year":"2008","unstructured":"Oza NC, Tumer K (2008) Classifier ensembles: select real-world applications. Inf Fusion 9(1):4\u201320","journal-title":"Inf Fusion"},{"issue":"1","key":"3128_CR27","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1007\/s10844-015-0388-x","volume":"48","author":"HH Pajouh","year":"2017","unstructured":"Pajouh HH, Dastghaibyfard G, Hashemi S (2017) Two-tier network anomaly detection model: a machine learning approach. J Intell Inf Syst 48(1):61\u201374","journal-title":"J Intell Inf Syst"},{"key":"#cr-split#-3128_CR28.1","doi-asserted-by":"crossref","unstructured":"10. Panda M, Abraham A, Patra MR (2010) Discriminative multinomial naive bayes for network intrusion detection. In: Information assurance and security","DOI":"10.1109\/ISIAS.2010.5604193"},{"key":"#cr-split#-3128_CR28.2","unstructured":"11. (IAS), 2010 sixth international conference on IEEE, pp 5-10"},{"issue":"1\u20132","key":"3128_CR29","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10462-009-9124-7","volume":"33","author":"L Rokach","year":"2010","unstructured":"Rokach L (2010) Ensemble-based classifiers. Artif Intell Rev 33(1\u20132):1\u201339","journal-title":"Artif Intell Rev"},{"issue":"1","key":"3128_CR30","doi-asserted-by":"publisher","first-page":"129","DOI":"10.1016\/j.eswa.2011.06.013","volume":"39","author":"SSS Sindhu","year":"2012","unstructured":"Sindhu SSS, Geetha S, Kannan A (2012) Decision tree based light weight intrusion detection using a wrapper approach. Expert Syst Appl 39(1):129\u2013141","journal-title":"Expert Syst Appl"},{"key":"3128_CR31","doi-asserted-by":"crossref","unstructured":"Tama BA, Rhee KH (2015a) A combination of PSO-based feature selection and tree-based classifiers ensemble for intrusion detection systems. In: Advances in computer science and ubiquitous computing, Springer, New York, pp 489\u2013495","DOI":"10.1007\/978-981-10-0281-6_71"},{"key":"3128_CR32","doi-asserted-by":"crossref","unstructured":"Tama BA, Rhee KH (2015b) Performance analysis of multiple classifier system in DoS attack detection. In: International workshop on information security applications, Springer, New York, pp 339\u2013347","DOI":"10.1007\/978-3-319-31875-2_28"},{"key":"3128_CR33","doi-asserted-by":"crossref","unstructured":"Tama BA, Rhee KH (2016) Classifier ensemble design with rotation forest to enhance attack detection of IDS in wireless network. In: 2016 11th Asia joint conference on information security (AsiaJCIS), IEEE, pp 87\u201391","DOI":"10.1109\/AsiaJCIS.2016.13"},{"issue":"1","key":"3128_CR34","doi-asserted-by":"publisher","first-page":"22","DOI":"10.1504\/IJIPT.2017.083033","volume":"10","author":"BA Tama","year":"2017","unstructured":"Tama BA, Rhee KH (2017) Performance evaluation of intrusion detection system using classifier ensembles. Int J Internet Protoc Technol 10(1):22\u201329","journal-title":"Int J Internet Protoc Technol"},{"key":"3128_CR35","doi-asserted-by":"crossref","unstructured":"Tavallaee M, Bagheri E, Lu W, Ghorbani AA (2009) A detailed analysis of the KDD Cup 99 data set. In: Proceedings of the second IEEE symposium on computational intelligence for security and Defence applications 2009","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"3128_CR36","first-page":"1","volume":"3","author":"TM Therneau","year":"2010","unstructured":"Therneau TM, Atkinson B, Ripley B et al (2010) rpart: Recursive partitioning. R Package Version 3:1\u201346","journal-title":"R Package Version"},{"key":"3128_CR37","unstructured":"Vilela DW, Ferreira E, Shinoda AA, de Souza Araujo NV, de Oliveira R, Nascimento VE (2014) A dataset for evaluating intrusion detection systems in IEEE 802.11 wireless networks. In: IEEE Colombian conference on communications and computing (COLCOM), IEEE, pp 1\u20135"}],"container-title":["Neural Computing and Applications"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00521-017-3128-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s00521-017-3128-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00521-017-3128-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,28]],"date-time":"2019-09-28T10:21:45Z","timestamp":1569666105000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s00521-017-3128-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,7,5]]},"references-count":38,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2019,4]]}},"alternative-id":["3128"],"URL":"https:\/\/doi.org\/10.1007\/s00521-017-3128-z","relation":{},"ISSN":["0941-0643","1433-3058"],"issn-type":[{"value":"0941-0643","type":"print"},{"value":"1433-3058","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,7,5]]},"assertion":[{"value":"14 October 2016","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"19 June 2017","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"5 July 2017","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Compliance with ethical standards"}},{"value":"The authors declare that there is no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}]}}