{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,17]],"date-time":"2026-08-17T15:25:05Z","timestamp":1786980305022,"version":"build-2736575974"},"reference-count":37,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2023,12,20]],"date-time":"2023-12-20T00:00:00Z","timestamp":1703030400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2023,12,20]],"date-time":"2023-12-20T00:00:00Z","timestamp":1703030400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"Technology & Innovation Funding Authority"},{"DOI":"10.13039\/501100003789","name":"Helwan University","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100003789","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Neural Comput &amp; Applic"],"published-print":{"date-parts":[[2024,2]]},"abstract":"<jats:title>Abstract<\/jats:title>\n                  <jats:p>One of the significant aspects of our digital world is that data are literally everywhere, and it is increasing. On the other hand, the number of cyberattacks aiming to seize this data and use it illegally is increasing at an exponential rate, and this is the challenge. Therefore, intrusion detection systems (IDS) have attracted considerable interest from researchers and industries. In this regard, machine learning (ML) techniques are playing a pivotal role as they put the responsibility of analyzing enormous amounts of data, finding patterns, classifying intrusions, and solving issues on computers instead of humans. This paper implements two separate classification layers of ML-based algorithms with the recently published NF-UQ-NIDS-v2 dataset, preprocessing two volumes of sample records (100\u00a0k and 10 million), utilizing MinMaxScaler, LabelEncoder, selecting superlative features by recursive feature elimination, normalizing the data, and optimizing hyper-parameters for classical algorithms and neural networks. With a small dataset volume, the results of the classical algorithms layer show high detection accuracy rates for support vector (98.26%), decision tree (98.78%), random forest (99.07%), K-nearest neighbors (98.16%), CatBoost (99.04%), and gradient boosting (98.80%). In addition, the layer of neural network algorithms has proven to be a very powerful technology when using deep learning, particularly due to its unique ability to effectively handle enormous amounts of data and detect hidden correlations and patterns; it showed high detection results, which were (98.87%) for long short-term memory and (98.56%) for convolutional neural networks.<\/jats:p>","DOI":"10.1007\/s00521-023-09309-y","type":"journal-article","created":{"date-parts":[[2023,12,20]],"date-time":"2023-12-20T05:02:43Z","timestamp":1703048563000},"page":"3239-3257","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":19,"title":["Optimizing anomaly-based attack detection using classification machine learning"],"prefix":"10.1007","volume":"36","author":[{"ORCID":"https:\/\/orcid.org\/0009-0005-0548-749X","authenticated-orcid":false,"given":"Hany Abdelghany","family":"Gouda","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5545-0621","authenticated-orcid":false,"given":"Mohamed Abdelslam","family":"Ahmed","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9655-3229","authenticated-orcid":false,"given":"Mohamed Ismail","family":"Roushdy","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2023,12,20]]},"reference":[{"key":"9309_CR1","doi-asserted-by":"crossref","unstructured":"Johnson A, Dempsey K, Ross R, Gupta S, Bailey D (2011) Guide for security-focused configuration management of information systems. Computer Security Division, Information Technology Laboratory (National Institute of Standards and Technology), NIST Special Publication 800-128","DOI":"10.6028\/NIST.SP.800-128-2011"},{"key":"9309_CR2","unstructured":"Internet Crime Report 2021 (2021) Federal Bureau of Investigation (FBI), Internet Crime Complaint Center, IC3"},{"key":"9309_CR3","unstructured":"Abdou H, Khalifa W, Roushdy M, Salem A (2019) Machine learning techniques for credit card fraud detection. Future Comput Inform J 4(2)"},{"key":"9309_CR4","unstructured":"White Paper, Cisco Annual Internet Report (2018\u20132023), Cisco Public, March 9. 2020. https:\/\/www.cisco.com\/c\/en\/us\/solutions\/collateral\/executive-perspectives\/annual-internet-report\/white-paper-c11-741490.html. Accessed 01 Dec 2022"},{"key":"9309_CR5","doi-asserted-by":"crossref","unstructured":"Scarfone K, Mell P (2007) Guide to intrusion detection and prevention systems\u2014IDPS. Computer Security Division, Information Technology Laboratory (National Institute of Standards and Technology), NIST Special Publication 800-94","DOI":"10.6028\/NIST.SP.800-94"},{"key":"9309_CR6","unstructured":"(2013) Information technology\u2014security techniques\u2014code of practice for information security controls, 2nd edition. International Standard ISO\/IEC 27002, pp 67\u201371"},{"key":"9309_CR7","unstructured":"(2015) Information technology\u2014security techniques\u2014selection, deployment and operations of intrusion detection systems (IDPS), 1st edn. International Standard ISO\/IEC 27039"},{"key":"9309_CR8","unstructured":"Edgescan (2022) vulnerability statistics report. Smart Vulnerability Management"},{"key":"9309_CR9","unstructured":"Saikushwanth V, Ramachandra G (2021) Intrusion detection system using machine learning, vol 2, issue 10. Department of Computer Science and Engineering, Chalapathi Institute of Engineering and Technology, Guntur, United International Journal for Research and Technology (UIJRT). ISSN:2582-6832"},{"key":"9309_CR10","doi-asserted-by":"crossref","unstructured":"Bhatia V, Choudhary S, Ramkumar KR (2020) A comparative study on various intrusion detection techniques using machine learning and neural network. Department of Computer Science and Engineering, Chitkara University Institute of Engineering and Technology, Chitkara University, Punjab India, 2020 8th international conference on reliability, infocom technologies and optimization (trends and future directions) (ICRITO), Amity University, Noida, India. IEEE. 978-1-7281-7016-9\/20\/$31.00 \u00a92020","DOI":"10.1109\/ICRITO48877.2020.9198008"},{"key":"9309_CR11","doi-asserted-by":"publisher","unstructured":"Meftah S, et al. (2019) Network based intrusion detection using the UNSW-NB15 dataset. Int J Comput Digit Syst. https:\/\/doi.org\/10.12785\/ijcds\/080505. ISSN (2210-142X)","DOI":"10.12785\/ijcds\/080505"},{"key":"9309_CR12","doi-asserted-by":"publisher","first-page":"3735","DOI":"10.1007\/s12652-019-01569-8","volume":"11","author":"T Alamiedy","year":"2020","unstructured":"Alamiedy T et al (2020) Anomaly-based intrusion detection system using multi-objective grey wolf optimisation algorithm. J Ambient Intell Hum Comput 11:3735\u20133756. https:\/\/doi.org\/10.1007\/s12652-019-01569-8","journal-title":"J Ambient Intell Hum Comput"},{"key":"9309_CR13","doi-asserted-by":"publisher","first-page":"12499","DOI":"10.1007\/s00521-020-04708-x","volume":"32","author":"P Devan","year":"2020","unstructured":"Devan P, Khare N (2020) An efficient XGBoost\u2013DNN-based classification model for network intrusion detection system. Neural Comput Appl 32:12499\u201312514","journal-title":"Neural Comput Appl"},{"key":"9309_CR14","doi-asserted-by":"crossref","unstructured":"Wei W, et al. (2020) An improved multi-objective immune algorithm for intrusion feature selection in intrusion detecion. Appl Soft Comput 95:106522. https:\/\/www.sciencedirect.com\/science\/article\/pii\/S1568494620304610","DOI":"10.1016\/j.asoc.2020.106522"},{"key":"9309_CR15","doi-asserted-by":"crossref","unstructured":"Zhang X, Niyaz Q, Jahan F, Sun W (2020) Early detection of host-based intrusions in linux environment. 978-1-7281-5317-9\/20\/$31.00 \u00a92020 IEEE","DOI":"10.1109\/EIT48999.2020.9208245"},{"key":"9309_CR16","doi-asserted-by":"publisher","unstructured":"Masser ZK, et al. (2021) Benchmarking of machine learning for anomaly based intrusion detection systems in the CICIDS2017 dataset. IEEE Access, Open Access J. https:\/\/doi.org\/10.1109\/ACCESS.2021.3056614","DOI":"10.1109\/ACCESS.2021.3056614"},{"key":"9309_CR17","doi-asserted-by":"crossref","unstructured":"Anwer M, et al (2021) Attack detection in IoT using machine learning. Eng, Technol Appl Sci Res 11(3):7273\u20137278. https:\/\/www.etasr.com","DOI":"10.48084\/etasr.4202"},{"key":"9309_CR18","doi-asserted-by":"crossref","unstructured":"Al-Bakaa A, Al-Musawi B (2021) Improving the performance of intrusion detection system through finding the most effective features. Department of Electronics and Communication Faculty of Engineering, University of Kufa, Iraq. 978-1-6654-1224-7\/21\/$31.00 \u00a92021 IEEE","DOI":"10.1109\/ICOTEN52080.2021.9493564"},{"key":"9309_CR19","doi-asserted-by":"publisher","first-page":"168","DOI":"10.1007\/s42979-022-01053-9","volume":"3","author":"KP Singh","year":"2022","unstructured":"Singh KP, Kesswani N (2022) An anomaly-based intrusion detection system for IoT networks using trust factor. SN Comput Sci 3:168. https:\/\/doi.org\/10.1007\/s42979-022-01053-9","journal-title":"SN Comput Sci"},{"key":"9309_CR20","doi-asserted-by":"publisher","unstructured":"Ambavkar O, et al. (2022) Review on IDS based on ML algorithms. Int J Res Appl Sci Eng Technol (IJRASET). IC Value: 45.98. https:\/\/doi.org\/10.22214\/ijraset.2022.47284. ISSN: 2321-9653","DOI":"10.22214\/ijraset.2022.47284"},{"key":"9309_CR21","unstructured":"Anderson JP (1980) Computer security threat monitoring and surveillance. Tech. Rep., James P. Anderson Co., Washington"},{"key":"9309_CR22","doi-asserted-by":"crossref","unstructured":"Denning DE (1987) An intrusion-detection model. IEEE Transact Softw Eng 13(2)","DOI":"10.1109\/TSE.1987.232894"},{"key":"9309_CR23","doi-asserted-by":"publisher","unstructured":"Ozkan-Okay M, et al. (2021) A comprehensive systematic literature review on intrusion detection systems. Department of Computer Engineering, Ankara University Turkey, IEEE Access. Digital Object Identifier. https:\/\/doi.org\/10.1109\/ACCESS.2021.3129336","DOI":"10.1109\/ACCESS.2021.3129336"},{"key":"9309_CR24","doi-asserted-by":"crossref","unstructured":"Lai C, et al. (2021) Review of intrusion detection methods and tools for distributed energy resources. Sandia National Laboratories, Sandia Report, SAND2021-1737, pp 15\u201324","DOI":"10.2172\/1769265"},{"key":"9309_CR25","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-019-0038-7","author":"A Khraisat","year":"2019","unstructured":"Khraisat A et al (2019) Cybersecurity, \u201cSurvey of intrusion detection systems: techniques, datasets and challenges. Internet Commerce Security Laboratory, Federation University Australia, Mount Helen, Australia. Springer Open Access. https:\/\/doi.org\/10.1186\/s42400-019-0038-7","journal-title":"Springer Open Access"},{"key":"9309_CR26","unstructured":"Sharma M, Sawant K (2021) Intrusion detection system Using Deep Learning. Int J Sci Res Eng Trends (IJSRET) 7(2): 2395\u2013566x. ISSN (Online)"},{"key":"9309_CR27","doi-asserted-by":"crossref","unstructured":"Malek Z, Trivedi B, Shah A (2020) User behavior pattern-signature based intrusion detection. In: 2020 4th world conference on smart trends in systems, security and sustainability (WorldS4)","DOI":"10.1109\/WorldS450073.2020.9210368"},{"key":"9309_CR28","doi-asserted-by":"crossref","unstructured":"Likhomanov D, Poliukh V (2020) Predicting malicious hosts by blacklisted IPv4 address density estimation. In: The 11th IEEE international conference on dependable systems, services and technologies, DESSERT 2020, Kyiv, Ukraine","DOI":"10.1109\/DESSERT50317.2020.9125012"},{"key":"9309_CR29","doi-asserted-by":"publisher","unstructured":"Paullada A, et al. (2021) Data and its (dis)contents: a survey of dataset development and use in machine learning research. Department of Linguistics, University of Washington, Seattle, WA, USA. https:\/\/doi.org\/10.1016\/j.patter.2021.10033","DOI":"10.1016\/j.patter.2021.10033"},{"key":"9309_CR30","unstructured":"Sydorenko I (2021) [Online]. https:\/\/labelyourdata.com\/articles\/what-is-dataset-in-machine-learning. Accessed 20 Dec 2022"},{"key":"9309_CR31","unstructured":"The University of Queensland in Australia. https:\/\/staff.itee.uq.edu.au\/marius\/NIDS_datasets\/#RA5"},{"key":"9309_CR32","doi-asserted-by":"publisher","first-page":"357","DOI":"10.1007\/s11036-021-01843-0","volume":"27","author":"M Sarhan","year":"2022","unstructured":"Sarhan M, Layeghy S, Portmann M (2022) Towards a Standards Feature Set for Network Intrusion Detection System Datasets, University of Queensland, Brisbane QLD 4072, Australia. Mob Netw Appl 27:357\u2013370. https:\/\/doi.org\/10.1007\/s11036-021-01843-0","journal-title":"Mob Netw Appl"},{"key":"9309_CR33","unstructured":"What it is machine learning [online]. https:\/\/www.ibm.com\/topics\/machine-learning. Accessed 10 Dec 2022"},{"key":"9309_CR34","unstructured":"What it is machine learning [online]. https:\/\/ischoolonline.berkeley.edu\/blog\/what-is-machine-learning\/. Accessed 10 Dec 2022"},{"key":"9309_CR35","unstructured":"What it is machine learning [online]. https:\/\/www.oracle.com\/ng\/artificial-intelligence\/machine-learning\/what-is-machine-learning\/. Accessed 10 Dec 2022"},{"key":"9309_CR36","doi-asserted-by":"publisher","first-page":"685","DOI":"10.1007\/s12525-021-00475-2","volume":"31","author":"C Janiesch","year":"2021","unstructured":"Janiesch C, Zschech P, Heinrich K (2021) Machine learning and deep learning. Electron Mark 31:685\u2013695. https:\/\/doi.org\/10.1007\/s12525-021-00475-2","journal-title":"Electron Mark"},{"key":"9309_CR37","doi-asserted-by":"crossref","unstructured":"Pasupa K, Sunhem W (2016) A compariosn between shallow and deep architecture classifiers on small dataset. In: 8th international conference on information technology and electrical engineering (ICITEE), Yogyakarta, Indonesia. 978-1-5090-4139-8\/16\/$31.00 \u00a92016 IEEE","DOI":"10.1109\/ICITEED.2016.7863293"}],"container-title":["Neural Computing and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00521-023-09309-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00521-023-09309-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00521-023-09309-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,23]],"date-time":"2024-01-23T02:14:23Z","timestamp":1705976063000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00521-023-09309-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,12,20]]},"references-count":37,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2024,2]]}},"alternative-id":["9309"],"URL":"https:\/\/doi.org\/10.1007\/s00521-023-09309-y","relation":{},"ISSN":["0941-0643","1433-3058"],"issn-type":[{"value":"0941-0643","type":"print"},{"value":"1433-3058","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,12,20]]},"assertion":[{"value":"10 April 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"16 November 2023","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 December 2023","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}