{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,29]],"date-time":"2026-06-29T12:49:34Z","timestamp":1782737374486,"version":"3.54.5"},"reference-count":275,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T00:00:00Z","timestamp":1625097600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T00:00:00Z","timestamp":1625097600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Artif Intell Rev"],"published-print":{"date-parts":[[2022,1]]},"DOI":"10.1007\/s10462-021-10037-9","type":"journal-article","created":{"date-parts":[[2021,7,1]],"date-time":"2021-07-01T21:02:33Z","timestamp":1625173353000},"page":"453-563","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":282,"title":["A survey on intrusion detection system: feature selection, model, performance measures, application perspective, challenges, and future research directions"],"prefix":"10.1007","volume":"55","author":[{"given":"Ankit","family":"Thakkar","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1794-8300","authenticated-orcid":false,"given":"Ritika","family":"Lohiya","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,7,1]]},"reference":[{"key":"10037_CR1","doi-asserted-by":"crossref","first-page":"360","DOI":"10.1016\/j.asoc.2015.10.011","volume":"38","author":"AA Aburomman","year":"2016","unstructured":"Aburomman AA, Reaz MBI (2016) A novel SVM-kNN-PSO ensemble method for intrusion detection system. Appl Soft Comput 38:360\u2013372","journal-title":"Appl Soft Comput"},{"issue":"3","key":"10037_CR2","first-page":"420","volume":"18","author":"MH Aghdam","year":"2016","unstructured":"Aghdam MH, Kabiri P (2016) Feature selection for intrusion detection system using ant colony optimization. IJ Netw Secur 18(3):420\u2013432","journal-title":"IJ Netw Secur"},{"key":"10037_CR3","doi-asserted-by":"crossref","first-page":"708","DOI":"10.1016\/j.procs.2015.08.220","volume":"60","author":"S Agrawal","year":"2015","unstructured":"Agrawal S, Agrawal J (2015) Survey on anomaly detection using data mining techniques. Procedia Comput Sci 60:708\u2013713","journal-title":"Procedia Comput Sci"},{"key":"10037_CR4","doi-asserted-by":"crossref","unstructured":"Ahmad AB Iftikhar\u00a0and, Alghamdi AS (2009) Application of artificial neural network in detection of probing attacks. In: IEEE symposium on industrial electronics and applications, 2009. ISIEA 2009, vol\u00a02. IEEE, pp 557\u2013562","DOI":"10.1109\/ISIEA.2009.5356382"},{"key":"10037_CR5","doi-asserted-by":"crossref","first-page":"33789","DOI":"10.1109\/ACCESS.2018.2841987","volume":"6","author":"I Ahmad","year":"2018","unstructured":"Ahmad I, Basheri M, Iqbal MJ, Rahim A (2018) Performance comparison of support vector machine, random forest, and extreme learning machine for intrusion detection. IEEE Access 6:33789\u201333795","journal-title":"IEEE Access"},{"key":"10037_CR6","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1016\/j.jnca.2015.11.016","volume":"60","author":"M Ahmed","year":"2016","unstructured":"Ahmed M, Mahmood AN, Hu J (2016) A survey of network anomaly detection techniques. J Netw Comput Appl 60:19\u201331","journal-title":"J Netw Comput Appl"},{"key":"10037_CR7","doi-asserted-by":"crossref","unstructured":"Ahmim A, Maglaras L, Ferrag MA, Derdour M, Janicke H (2019) A novel hierarchical intrusion detection system based on decision tree and rules-based models. In: 2019 15th international conference on distributed computing in sensor systems (DCOSS). IEEE, pp 228\u2013233","DOI":"10.1109\/DCOSS.2019.00059"},{"key":"10037_CR8","doi-asserted-by":"crossref","unstructured":"Akinyelu AA, Adewumi AO (2014) Classification of phishing email using random forest machine learning technique. J Appl Math 2014:1\u20136","DOI":"10.1155\/2014\/425731"},{"key":"10037_CR9","doi-asserted-by":"crossref","unstructured":"Al-Emadi S, Al-Mohannadi A, Al-Senaid F (2020) Using deep learning techniques for network intrusion detection. In: 2020 IEEE international conference on informatics, IoT, and enabling technologies (ICIoT). IEEE, pp 171\u2013176","DOI":"10.1109\/ICIoT48696.2020.9089524"},{"key":"10037_CR10","doi-asserted-by":"crossref","unstructured":"Al-Janabi STF, Saeed HA (2011) A neural network based anomaly intrusion detection system. In: Developments in E-systems engineering (DeSE), 2011. IEEE, pp 221\u2013226","DOI":"10.1109\/DeSE.2011.19"},{"key":"10037_CR11","doi-asserted-by":"crossref","unstructured":"Alelyani S, Tang J, Liu H (2018) Feature selection for clustering: a review. In: Data clustering. Chapman and Hall\/CRC, pp 29\u201360","DOI":"10.1201\/9781315373515-2"},{"issue":"11","key":"10037_CR12","doi-asserted-by":"crossref","first-page":"e0166017","DOI":"10.1371\/journal.pone.0166017","volume":"11","author":"TA Alhaj","year":"2016","unstructured":"Alhaj TA, Siraj MM, Zainal A, Elshoush HT, Elhaj F (2016) Feature selection using information gain for improved structural-based alert correlation. PLoS ONE 11(11):e0166017","journal-title":"PLoS ONE"},{"key":"10037_CR13","doi-asserted-by":"crossref","first-page":"20255","DOI":"10.1109\/ACCESS.2018.2820092","volume":"6","author":"MH Ali","year":"2018","unstructured":"Ali MH, Al Mohammed BAD, Ismail A, Zolkipli MF (2018a) A new intrusion detection system based on fast learning network and particle swarm optimization. IEEE Access 6:20255\u201320261","journal-title":"IEEE Access"},{"key":"10037_CR14","doi-asserted-by":"crossref","unstructured":"Ali MH, Fadlizolkipi M, Firdaus A, Khidzir NZ (2018b) A hybrid particle swarm optimization-extreme learning machine approach for intrusion detection system. In: 2018 IEEE student conference on research and development (SCOReD). IEEE, pp 1\u20134","DOI":"10.1109\/SCORED.2018.8711287"},{"key":"10037_CR15","doi-asserted-by":"crossref","first-page":"152","DOI":"10.1016\/j.jocs.2017.03.006","volume":"25","author":"S Aljawarneh","year":"2018","unstructured":"Aljawarneh S, Aldwairi M, Yassein MB (2018) Anomaly-based intrusion detection system through feature selection analysis and building hybrid efficient model. J Comput Sci 25:152\u2013160","journal-title":"J Comput Sci"},{"issue":"05","key":"10037_CR16","first-page":"365","volume":"79","author":"C Ambikavathi","year":"2020","unstructured":"Ambikavathi C, Srivatsa SK et al (2020) Predictor selection and attack classification using random forest for intrusion detection. J Sci Ind Res (JSIR) 79(05):365\u2013368","journal-title":"J Sci Ind Res (JSIR)"},{"key":"10037_CR17","doi-asserted-by":"crossref","unstructured":"Ambusaidi MA, He X, Nanda P (2015) Unsupervised feature selection method for intrusion detection system. In: 2015 IEEE Trustcom\/BigDataSE\/ISPA, IEEE, vol\u00a01, pp 295\u2013301","DOI":"10.1109\/Trustcom.2015.387"},{"issue":"10","key":"10037_CR18","doi-asserted-by":"crossref","first-page":"2986","DOI":"10.1109\/TC.2016.2519914","volume":"65","author":"MA Ambusaidi","year":"2016","unstructured":"Ambusaidi MA, He X, Nanda P, Tan Z (2016) Building an intrusion detection system using a filter-based feature selection algorithm. IEEE Trans Comput 65(10):2986\u20132998","journal-title":"IEEE Trans Comput"},{"issue":"4","key":"10037_CR20","doi-asserted-by":"crossref","first-page":"1184","DOI":"10.1016\/j.jnca.2011.01.002","volume":"34","author":"F Amiri","year":"2011","unstructured":"Amiri F, Yousefi MR, Lucas C, Shakery A, Yazdani N (2011) Mutual information-based feature selection for intrusion detection systems. J Netw Comput Appl 34(4):1184\u20131199","journal-title":"J Netw Comput Appl"},{"issue":"2\u20133","key":"10037_CR21","doi-asserted-by":"crossref","first-page":"174","DOI":"10.1504\/IJSN.2011.043674","volume":"6","author":"NK Ampah","year":"2011","unstructured":"Ampah NK, Akujuobi CM, Sadiku MN, Alam S (2011) An intrusion detection technique based on continuous binary communication channels. Int J Secure Netw 6(2\u20133):174\u2013180","journal-title":"Int J Secure Netw"},{"issue":"2","key":"10037_CR22","doi-asserted-by":"crossref","first-page":"39","DOI":"10.3390\/a10020039","volume":"10","author":"S Anwar","year":"2017","unstructured":"Anwar S, Mohamad Zain J, Zolkipli MF, Inayat Z, Khan S, Anthony B, Chang V (2017) From intrusion detection to an intrusion response system: fundamentals, requirements, and future directions. Algorithms 10(2):39","journal-title":"Algorithms"},{"issue":"6","key":"10037_CR23","doi-asserted-by":"crossref","first-page":"1669","DOI":"10.1007\/s00521-015-1964-2","volume":"27","author":"B Aslahi-Shahri","year":"2016","unstructured":"Aslahi-Shahri B, Rahmani R, Chizari M, Maralani A, Eslami M, Golkar M, Ebrahimi A (2016) A hybrid method consisting of GA and SVM for intrusion detection system. Neural Comput Appl 27(6):1669\u20131676","journal-title":"Neural Comput Appl"},{"key":"10037_CR24","doi-asserted-by":"crossref","unstructured":"Bajto\u0161 T, Gajdo\u0161 A, Kleinov\u00e1 L, Lu\u010divjansk\u00e1 K, Sokol P (2018) Network intrusion detection with threat agent profiling. Security and Communication Networks (2018)","DOI":"10.1155\/2018\/3614093"},{"issue":"3\u20134","key":"10037_CR25","doi-asserted-by":"crossref","first-page":"91","DOI":"10.1007\/s13119-013-0018-2","volume":"2","author":"FA Barbhuiya","year":"2013","unstructured":"Barbhuiya FA, Bansal G, Kumar N, Biswas S, Nandi S (2013) Detection of neighbor discovery protocol based attacks in ipv6 network. Netw Sci 2(3\u20134):91\u2013113","journal-title":"Netw Sci"},{"key":"10037_CR26","unstructured":"Barrett M (2018) Framework for improving critical infrastructure cybersecurity. Technical Report, National Institute of Standards and Technology, Gaithersburg, MD, USA"},{"key":"10037_CR27","doi-asserted-by":"crossref","unstructured":"Basnet R, Mukkamala S, Sung AH (2008) Detection of phishing attacks: a machine learning approach. In: Soft computing applications in industry. Springer, pp 373\u2013383","DOI":"10.1007\/978-3-540-77465-5_19"},{"issue":"22","key":"10037_CR28","doi-asserted-by":"crossref","first-page":"8520","DOI":"10.1016\/j.eswa.2015.07.007","volume":"42","author":"M Bennasar","year":"2015","unstructured":"Bennasar M, Hicks Y, Setchi R (2015) Feature selection using joint mutual information maximisation. Expert Syst Appl 42(22):8520\u20138532","journal-title":"Expert Syst Appl"},{"issue":"4","key":"10037_CR29","doi-asserted-by":"crossref","first-page":"2371","DOI":"10.1007\/s13369-019-03970-z","volume":"45","author":"BS Bhati","year":"2020","unstructured":"Bhati BS, Rai C (2020) Analysis of support vector machine-based intrusion detection techniques. Arab J Sci Eng 45(4):2371\u20132383","journal-title":"Arab J Sci Eng"},{"issue":"1","key":"10037_CR30","doi-asserted-by":"crossref","first-page":"303","DOI":"10.1109\/SURV.2013.052213.00046","volume":"16","author":"MH Bhuyan","year":"2014","unstructured":"Bhuyan MH, Bhattacharyya DK, Kalita JK (2014) Network anomaly detection: methods, systems and tools. IEEE Commun Surv Tutor 16(1):303\u2013336","journal-title":"IEEE Commun Surv Tutor"},{"key":"10037_CR31","doi-asserted-by":"crossref","unstructured":"Blum A, Wardman B, Solorio T, Warner G (2010) Lexical feature based phishing url detection using online learning. In: Proceedings of the 3rd ACM workshop on artificial intelligence and security. ACM, pp 54\u201360","DOI":"10.1145\/1866423.1866434"},{"key":"10037_CR32","volume-title":"Crafting the InfoSec playbook: security monitoring and incident response master plan","author":"J Bollinger","year":"2015","unstructured":"Bollinger J, Enright B, Valites M (2015) Crafting the InfoSec playbook: security monitoring and incident response master plan. O\u2019Reilly Media Inc, Newton"},{"key":"10037_CR33","doi-asserted-by":"crossref","first-page":"56","DOI":"10.1016\/j.patcog.2016.08.027","volume":"62","author":"H Bostani","year":"2017","unstructured":"Bostani H, Sheikhan M (2017) Modification of supervised OPF-based intrusion detection systems using unsupervised learning and social network concept. Pattern Recogn 62:56\u201372","journal-title":"Pattern Recogn"},{"key":"10037_CR34","doi-asserted-by":"crossref","unstructured":"Brown C, Cowperthwaite A, Hijazi A, Somayaji A (2009) Analysis of the 1999 Darpa\/Lincoln laboratory IDs evaluation data with netadhict. In: IEEE symposium on computational intelligence for security and defense applications (2009), CISDA 2009. IEEE, pp 1\u20137","DOI":"10.1109\/CISDA.2009.5356522"},{"issue":"2","key":"10037_CR35","doi-asserted-by":"crossref","first-page":"1153","DOI":"10.1109\/COMST.2015.2494502","volume":"18","author":"AL Buczak","year":"2016","unstructured":"Buczak AL, Guven E (2016) A survey of data mining and machine learning methods for cyber security intrusion detection. IEEE Commun Surv Tutor 18(2):1153\u20131176","journal-title":"IEEE Commun Surv Tutor"},{"key":"10037_CR36","doi-asserted-by":"crossref","unstructured":"Bujlow T, Riaz T, Pedersen JM (2012) A method for classification of network traffic based on C5. 0 Machine Learning Algorithm. In: 2012 international conference on computing, networking and communications (ICNC). IEEE, pp 237\u2013241","DOI":"10.1109\/ICCNC.2012.6167418"},{"issue":"3","key":"10037_CR37","doi-asserted-by":"crossref","first-page":"37","DOI":"10.1109\/SURV.2009.090304","volume":"11","author":"A Callado","year":"2009","unstructured":"Callado A, Kamienski C, Szab\u00f3 G, Gero BP, Kelner J, Fernandes S, Sadok D (2009) A survey on internet traffic identification. IEEE Commun Surv Tutor 11(3):37\u201352","journal-title":"IEEE Commun Surv Tutor"},{"key":"10037_CR38","doi-asserted-by":"crossref","unstructured":"Canzanese R, Mancoridis S, Kam M, (2015) System call-based detection of malicious processes. In: IEEE international conference on software quality, reliability and security. IEEE, pp 119\u2013124","DOI":"10.1109\/QRS.2015.26"},{"key":"10037_CR39","unstructured":"Carneiro G (2010) NS-3: Network simulator 3. In: UTM Lab Meeting April, vol\u00a020, pp 4\u20135"},{"key":"10037_CR40","unstructured":"Carrasquilla U (2010) Benchmarking algorithms for detecting anomalies in large datasets. MeasureIT, Nov pp 1\u201316"},{"key":"10037_CR41","volume-title":"Digital evidence and computer crime: forensic science, computers, and the internet","author":"E Casey","year":"2011","unstructured":"Casey E (2011) Digital evidence and computer crime: forensic science, computers, and the internet. Academic Press, London"},{"key":"10037_CR42","unstructured":"Chae Hs, Jo Bo, Choi SH, Park Tk (2013) Feature selection for intrusion detection using NSL-KDD. In: Recent advances in computer science, pp 184\u2013187"},{"issue":"5","key":"10037_CR43","doi-asserted-by":"crossref","first-page":"1408","DOI":"10.1016\/j.tele.2018.03.011","volume":"35","author":"A Chakraborty","year":"2018","unstructured":"Chakraborty A, Bhattacharjee S, Marsden JR, Shankar R, Katz ES, Vallee WL Jr (2018) Predictive models to measure the impact of fiber-optic broadband speeds on local towns and communities. Telematics Inform 35(5):1408\u20131420","journal-title":"Telematics Inform"},{"key":"10037_CR44","doi-asserted-by":"crossref","unstructured":"Chandala V, Banerjee A, Kumar V (2009) Anomaly detection: a survey. University of Minnesota, ACM Computing Surveys","DOI":"10.1145\/1541880.1541882"},{"key":"10037_CR45","doi-asserted-by":"crossref","unstructured":"Chandra A, Khatri SK, Simon R (2019) Filter-based attribute selection approach for intrusion detection using k-means clustering and sequential minimal optimization technique. In: 2019 Amity international conference on artificial intelligence (AICAI). IEEE, pp 740\u2013745","DOI":"10.1109\/AICAI.2019.8701373"},{"key":"10037_CR46","first-page":"1","volume":"27","author":"K Chaudhari","year":"2019","unstructured":"Chaudhari K, Thakkar A (2019a) A comprehensive survey on travel recommender systems. Arch Comput Methods Eng 27:1\u201327","journal-title":"Arch Comput Methods Eng"},{"key":"10037_CR47","doi-asserted-by":"crossref","first-page":"282","DOI":"10.1016\/j.eswa.2019.01.028","volume":"124","author":"K Chaudhari","year":"2019","unstructured":"Chaudhari K, Thakkar A (2019b) Survey on handwriting-based personality trait identification. Expert Syst Appl 124:282\u2013308","journal-title":"Expert Syst Appl"},{"key":"10037_CR48","doi-asserted-by":"crossref","unstructured":"Chaudhari K, Thakkar A (2019c) Travelling salesman problem: an empirical comparison between ACO, PSO, ABC, FA and GA. In: Emerging research in computing, information, communication and applications. Springer, pp 397\u2013405","DOI":"10.1007\/978-981-13-6001-5_32"},{"issue":"4","key":"10037_CR49","doi-asserted-by":"crossref","first-page":"295","DOI":"10.1016\/j.cose.2004.09.008","volume":"24","author":"S Chebrolu","year":"2005","unstructured":"Chebrolu S, Abraham A, Thomas JP (2005) Feature deduction and ensemble design of intrusion detection systems. Comput Secur 24(4):295\u2013307","journal-title":"Comput Secur"},{"key":"10037_CR51","doi-asserted-by":"crossref","first-page":"77","DOI":"10.1016\/j.future.2014.06.010","volume":"49","author":"L Chen","year":"2015","unstructured":"Chen L, Yan Z, Zhang W, Kantola R (2015) Trusms: a trustworthy SMS spam control system based on trust management. Fut Gener Comput Syst 49:77\u201393","journal-title":"Fut Gener Comput Syst"},{"key":"10037_CR50","doi-asserted-by":"crossref","first-page":"106167","DOI":"10.1016\/j.knosys.2020.106167","volume":"203","author":"J Chen","year":"2020","unstructured":"Chen J, Qi X, Chen L, Chen F, Cheng G (2020) Quantum-inspired ant lion optimized hybrid k-means for cluster analysis and intrusion detection. Knowl Based Syst 203:106167","journal-title":"Knowl Based Syst"},{"key":"10037_CR52","doi-asserted-by":"crossref","unstructured":"Chitrakar R, Huang C (2012) Anomaly based intrusion detection using hybrid learning approach of combining k-medoids clustering and naive bayes classification. In: 2012 8th international conference on wireless communications, networking and mobile computing (WiCOM). IEEE, pp 1\u20135","DOI":"10.1109\/WiCOM.2012.6478433"},{"issue":"1","key":"10037_CR54","first-page":"43","volume":"8","author":"SS Choi","year":"2010","unstructured":"Choi SS, Cha SH, Tappert CC (2010) A survey of binary similarity and distance measures. J Syst Cybern Inform 8(1):43\u201348","journal-title":"J Syst Cybern Inform"},{"issue":"3","key":"10037_CR55","first-page":"196","volume":"4","author":"TS Chou","year":"2008","unstructured":"Chou TS, Yen KK, Luo J (2008) Network intrusion detection design using feature selection of soft computing paradigms. Int J Comput Intell 4(3):196\u2013208","journal-title":"Int J Comput Intell"},{"key":"10037_CR56","doi-asserted-by":"crossref","unstructured":"Creech G, Hu J (2013) Generation of a new IDS test dataset: time to retire the KDD collection. In: Wireless communications and networking conference (WCNC). IEEE, pp 4487\u20134492","DOI":"10.1109\/WCNC.2013.6555301"},{"key":"10037_CR57","doi-asserted-by":"crossref","unstructured":"Da\u015f R, Karabade A, Tuna G (2015) Common network attack types and defense mechanisms. In: 2015 23nd signal processing and communications applications conference (SIU). IEEE, pp 2658\u20132661","DOI":"10.1109\/SIU.2015.7130435"},{"key":"10037_CR58","volume-title":"Artificial immune systems and their applications","author":"D Dasgupta","year":"2012","unstructured":"Dasgupta D (2012) Artificial immune systems and their applications. Springer, Berlin"},{"key":"10037_CR59","doi-asserted-by":"crossref","unstructured":"Dash M, Koot PW (2009) Feature selection for clustering. In: Encyclopedia of database systems. Springer, pp 1119\u20131125","DOI":"10.1007\/978-0-387-39940-9_613"},{"key":"10037_CR60","unstructured":"Dembczynski K, Jachnik A, Kotlowski W, Waegeman W, H\u00fcllermeier E (2013) Optimizing the f-measure in multi-label classification: plug-in rule approach versus structured loss minimization. In: International conference on machine learning, pp 1130\u20131138"},{"issue":"3","key":"10037_CR61","doi-asserted-by":"crossref","first-page":"567","DOI":"10.1007\/s13198-014-0277-7","volume":"9","author":"P Deshpande","year":"2018","unstructured":"Deshpande P, Sharma SC, Peddoju SK, Junaid S (2018) HIDS: a host based intrusion detection system for cloud computing environment. Int J Syst Assur Eng Manag 9(3):567\u2013576","journal-title":"Int J Syst Assur Eng Manag"},{"issue":"3","key":"10037_CR62","first-page":"106167","volume":"4","author":"S Devaraju","year":"2014","unstructured":"Devaraju S, Ramakrishnan S (2014) Performance comparison for intrusion detection system using neural network with KDD dataset. ICTACT J Soft Comput 4(3):106167","journal-title":"ICTACT J Soft Comput"},{"issue":"1","key":"10037_CR63","first-page":"62","volume":"7","author":"Z Dewa","year":"2016","unstructured":"Dewa Z, Maglaras LA (2016) Data mining and intrusion detection systems. Int J Adv Comput Sci Appl 7(1):62\u201371","journal-title":"Int J Adv Comput Sci Appl"},{"key":"10037_CR64","unstructured":"Doak J (1992) CSE-92-18-an evaluation of feature selection methods and their application to computer security"},{"key":"10037_CR65","doi-asserted-by":"crossref","unstructured":"Duarte V, Farruca N (2010) Using libpcap for monitoring distributed applications. In: 2010 international conference on high performance computing and simulation. IEEE, pp 92\u201397","DOI":"10.1109\/HPCS.2010.5547144"},{"key":"10037_CR66","unstructured":"Duch W, Winiarski T, Biesiada J, Kachel A (2003) Feature selection and ranking filters. In: International conference on artificial neural networks (ICANN) and international conference on neural information processing (ICONIP), Citeseer, vol 251, p 254"},{"key":"10037_CR67","doi-asserted-by":"crossref","unstructured":"Dutta V, Chora\u015b M, Pawlicki M, Kozik R (2020) Hybrid model for improving the classification effectiveness of network intrusion detection. In: Proceedings of the 13th international conference on computational intelligence in security for information systems (CISIS 2020), Burgos, Spain, pp 18\u201320","DOI":"10.1007\/978-3-030-57805-3_38"},{"key":"10037_CR68","unstructured":"Dy JG, Brodley CE (2000) Feature subset selection and order identification for unsupervised learning. In: ICML, Citeseer, pp 247\u2013254"},{"issue":"5","key":"10037_CR69","doi-asserted-by":"crossref","first-page":"2670","DOI":"10.1016\/j.eswa.2014.11.009","volume":"42","author":"AS Eesa","year":"2015","unstructured":"Eesa AS, Orman Z, Brifcani AMA (2015) A novel feature-selection approach based on the cuttlefish optimization algorithm for intrusion detection systems. Expert Syst Appl 42(5):2670\u20132679","journal-title":"Expert Syst Appl"},{"key":"10037_CR70","doi-asserted-by":"crossref","unstructured":"Elhag S, Fern\u00e1ndez A, Alshomrani S, Herrera F (2019) Evolutionary fuzzy systems: a case study for intrusion detection systems. In: Evolutionary and swarm intelligence algorithms. Springer, pp 169\u2013190","DOI":"10.1007\/978-3-319-91341-4_9"},{"key":"10037_CR71","doi-asserted-by":"crossref","first-page":"107042","DOI":"10.1016\/j.comnet.2019.107042","volume":"168","author":"W Elmasry","year":"2020","unstructured":"Elmasry W, Akbulut A, Zaim AH (2020) Evolving deep learning architectures for network intrusion detection using a double pso metaheuristic. Comput Netw 168:107042","journal-title":"Comput Netw"},{"key":"10037_CR72","doi-asserted-by":"crossref","unstructured":"Elsherif A et\u00a0al. (2018) Automatic intrusion detection system using deep recurrent neural network paradigm. J Inf Secur Cybercrimes Res 1(1):21\u201331","DOI":"10.26735\/16587790.2018.003"},{"key":"10037_CR73","doi-asserted-by":"crossref","unstructured":"Emary E, Zawbaa HM, Ghany KKA, Hassanien AE, Parv B (2015) Firefly optimization algorithm for feature selection. In: Proceedings of the 7th Balkan conference on informatics conference. ACM, p\u00a026","DOI":"10.1145\/2801081.2801091"},{"key":"10037_CR74","doi-asserted-by":"crossref","unstructured":"Enache AC, Sg\u00e2rciu V (2015) An improved bat algorithm driven by support vector machines for intrusion detection. In: International joint conference. Springer, pp 41\u201351","DOI":"10.1007\/978-3-319-19713-5_4"},{"key":"10037_CR75","unstructured":"Farid DM, Harbi N, Rahman MZ (2010) Combining naive bayes and decision tree for adaptive intrusion detection. arXiv preprint arXiv:10054496"},{"key":"10037_CR76","doi-asserted-by":"crossref","first-page":"213","DOI":"10.1016\/j.procs.2016.06.047","volume":"89","author":"N Farnaaz","year":"2016","unstructured":"Farnaaz N, Jabbar M (2016) Random forest modeling for network intrusion detection system. Procedia Comput Sci 89:213\u2013217","journal-title":"Procedia Comput Sci"},{"key":"10037_CR77","volume-title":"Fundamentals of neural networks: architectures, algorithms, and applications","author":"LV Fausett","year":"1994","unstructured":"Fausett LV et al (1994) Fundamentals of neural networks: architectures, algorithms, and applications, vol 3. Prentice-Hall, Englewood Cliffs"},{"issue":"Nov","key":"10037_CR78","first-page":"1531","volume":"5","author":"F Fleuret","year":"2004","unstructured":"Fleuret F (2004) Fast binary feature selection with conditional mutual information. J Mach Learn Res 5(Nov):1531\u20131555","journal-title":"J Mach Learn Res"},{"issue":"383","key":"10037_CR79","doi-asserted-by":"crossref","first-page":"553","DOI":"10.1080\/01621459.1983.10478008","volume":"78","author":"EB Fowlkes","year":"1983","unstructured":"Fowlkes EB, Mallows CL (1983) A method for comparing two hierarchical clusterings. J Am Stat Assoc 78(383):553\u2013569","journal-title":"J Am Stat Assoc"},{"key":"10037_CR80","doi-asserted-by":"crossref","unstructured":"Fries TP (2008) A fuzzy-genetic approach to network intrusion detection. In: Proceedings of the 10th annual conference companion on Genetic and evolutionary computation. ACM, pp 2141\u20132146","DOI":"10.1145\/1388969.1389037"},{"key":"10037_CR81","doi-asserted-by":"crossref","unstructured":"Gamal M, Abbas H, Sadek R (2020) Hybrid approach for improving intrusion detection based on deep learning and machine learning techniques. In: Joint European-US workshop on applications of invariance in computer vision. Springer, pp 225\u2013236","DOI":"10.1007\/978-3-030-44289-7_22"},{"key":"10037_CR82","doi-asserted-by":"crossref","first-page":"271","DOI":"10.1186\/1687-1499-2013-271","volume":"1","author":"S Ganapathy","year":"2013","unstructured":"Ganapathy S, Kulothungan K, Muthurajkumar S, Vijayalakshmi M, Yogesh P, Kannan A (2013) Intelligent feature selection and classification techniques for intrusion detection in networks: a survey. EURASIP J Wirel Commun Netw 1:271","journal-title":"EURASIP J Wirel Commun Netw"},{"key":"10037_CR84","unstructured":"Gao HH, Yang HH, Wang XY (2005) Ant colony optimization based network intrusion feature selection and detection. In: Proceedings of 2005 international conference on machine learning and cybernetics, vol\u00a06, 2005. IEEE, pp 3871\u20133875"},{"key":"10037_CR85","doi-asserted-by":"crossref","unstructured":"Gharib A, Sharafaldin I, Lashkari AH, Ghorbani AA (2016) An evaluation framework for intrusion detection dataset. In: 2016 international conference on information science and security (ICISS). IEEE, pp 1\u20136","DOI":"10.1109\/ICISSEC.2016.7885840"},{"key":"10037_CR86","doi-asserted-by":"crossref","unstructured":"Ghosh J, Kumar D, Tripathi R (2020) Features extraction for network intrusion detection using genetic algorithm (GA). In: Modern approaches in machine learning and cognitive science: a walkthrough. Springer, pp 13\u201325","DOI":"10.1007\/978-3-030-38445-6_2"},{"key":"10037_CR87","doi-asserted-by":"crossref","unstructured":"Goeschel K (2016) Reducing false positives in intrusion detection systems using data-mining techniques utilizing support vector machines, decision trees, and naive Bayes for off-line analysis. In: SoutheastCon 2016. IEEE, pp 1\u20136","DOI":"10.1109\/SECON.2016.7506774"},{"key":"10037_CR88","doi-asserted-by":"crossref","first-page":"1106","DOI":"10.1016\/j.future.2017.05.046","volume":"86","author":"D Grzonka","year":"2018","unstructured":"Grzonka D, Jakobik A, Ko\u0142odziej J, Pllana S (2018) Using a multi-agent system and artificial intelligence for monitoring and improving the cloud performance and security. Future Gener Comput Syst 86:1106\u20131117","journal-title":"Future Gener Comput Syst"},{"key":"10037_CR89","doi-asserted-by":"crossref","DOI":"10.4018\/978-1-5225-0105-3","volume-title":"Handbook of research on modern cryptographic solutions for computer and cyber security","author":"B Gupta","year":"2016","unstructured":"Gupta B, Agrawal DP, Yamaguchi S (2016a) Handbook of research on modern cryptographic solutions for computer and cyber security. IGI Global, Hershey"},{"key":"10037_CR90","doi-asserted-by":"crossref","unstructured":"Gupta S, Chaudhari BS, Chakrabarty B (2016b) Vulnerable network analysis using war driving and security intelligence. In: 2016 international conference on inventive computation technologies (ICICT), vol\u00a03. IEEE, pp 1\u20135","DOI":"10.1109\/INVENTIVE.2016.7830165"},{"issue":"3","key":"10037_CR91","first-page":"8","volume":"11","author":"S Gurung","year":"2019","unstructured":"Gurung S, Ghose MK, Subedi A (2019) Deep learning approach on network intrusion detection system using NSL-KDD dataset. Int J Comput Netw Inf Secur (IJCNIS) 11(3):8\u201314","journal-title":"Int J Comput Netw Inf Secur (IJCNIS)"},{"issue":"2\u20133","key":"10037_CR92","doi-asserted-by":"crossref","first-page":"107","DOI":"10.1023\/A:1012801612483","volume":"17","author":"M Halkidi","year":"2001","unstructured":"Halkidi M, Batistakis Y, Vazirgiannis M (2001) On clustering validation techniques. J Intell Inf Syst 17(2\u20133):107\u2013145","journal-title":"J Intell Inf Syst"},{"key":"10037_CR93","doi-asserted-by":"crossref","first-page":"390","DOI":"10.1016\/j.eswa.2017.09.013","volume":"92","author":"AH Hamamoto","year":"2018","unstructured":"Hamamoto AH, Carvalho LF, Sampaio LDH, Abr\u00e3o T, Proen\u00e7a ML Jr (2018) Network anomaly detection system using genetic algorithm and fuzzy logic. Expert Syst Appl 92:390\u2013402","journal-title":"Expert Syst Appl"},{"key":"10037_CR94","doi-asserted-by":"crossref","unstructured":"Hamed T, Ernst JB, Kremer SC (2018) A survey and taxonomy of classifiers of intrusion detection systems. In: Computer and network security essentials. Springer, pp 21\u201339","DOI":"10.1007\/978-3-319-58424-9_2"},{"issue":"6","key":"10037_CR95","doi-asserted-by":"crossref","first-page":"54","DOI":"10.9781\/ijimai.2017.05.002","volume":"4","author":"B Harish","year":"2017","unstructured":"Harish B, Kumar SA (2017) Anomaly based intrusion detection using modified fuzzy clustering. IJIMAI 4(6):54\u201359","journal-title":"IJIMAI"},{"key":"10037_CR96","doi-asserted-by":"crossref","unstructured":"Hassan MM, Gumaei A, Alsanad A, Alrubaian M, Fortino G (2020) A hybrid deep learning model for efficient intrusion detection in big data environment. Inf Sci 513:386\u2013396","DOI":"10.1016\/j.ins.2019.10.069"},{"key":"10037_CR97","doi-asserted-by":"crossref","DOI":"10.4324\/9780203808986","volume-title":"Multilevel modeling of categorical outcomes using IBM SPSS","author":"RH Heck","year":"2013","unstructured":"Heck RH, Thomas S, Tabata L (2013) Multilevel modeling of categorical outcomes using IBM SPSS. Routledge, London"},{"issue":"7","key":"10037_CR98","doi-asserted-by":"crossref","first-page":"1164","DOI":"10.3390\/electronics9071164","volume":"9","author":"J Henriques","year":"2020","unstructured":"Henriques J, Caldeira F, Cruz T, Sim\u00f5es P (2020) Combining k-means and xgboost models for anomaly detection using log datasets. Electronics 9(7):1164","journal-title":"Electronics"},{"key":"10037_CR99","unstructured":"Hindy H, Atkinson R, Tachtatzis C, Colin JN, Bayne E, Bellekens X (2020) Towards an effective zero-day attack detection using outlier-based deep learning techniques. arXiv preprint arXiv:200615344"},{"issue":"2","key":"10037_CR100","doi-asserted-by":"crossref","first-page":"85","DOI":"10.1023\/B:AIRE.0000045502.10941.a9","volume":"22","author":"V Hodge","year":"2004","unstructured":"Hodge V, Austin J (2004) A survey of outlier detection methodologies. Artif Intell Rev 22(2):85\u2013126","journal-title":"Artif Intell Rev"},{"key":"10037_CR101","unstructured":"Hodo E, Bellekens X, Hamilton A, Tachtatzis C, Atkinson R (2017) Shallow and deep networks intrusion detection system: a taxonomy and survey. arXiv preprint arXiv:170102145"},{"key":"10037_CR102","unstructured":"Hoque MS, Mukit M, Bikas M, Naser A et\u00a0al. (2012) An implementation of intrusion detection system using genetic algorithm. arXiv preprint arXiv:12041336"},{"key":"10037_CR103","doi-asserted-by":"crossref","first-page":"107168","DOI":"10.1016\/j.comnet.2020.107168","volume":"173","author":"S Hosseini","year":"2020","unstructured":"Hosseini S, Zade BMH (2020) New hybrid method for attack detection using combination of evolutionary algorithms, SVM, and ANN. Comput Netw 173:107168","journal-title":"Comput Netw"},{"issue":"2","key":"10037_CR104","doi-asserted-by":"crossref","first-page":"577","DOI":"10.1109\/TSMCB.2007.914695","volume":"38","author":"W Hu","year":"2008","unstructured":"Hu W, Hu W, Maybank S (2008) Adaboost-based algorithm for network intrusion detection. IEEE Trans Syst Man Cybern Part B Cybern 38(2):577\u2013583","journal-title":"IEEE Trans Syst Man Cybern Part B Cybern"},{"key":"10037_CR105","doi-asserted-by":"crossref","unstructured":"Igbe O, Darwish I, Saadawi T (2016) Distributed network intrusion detection systems: an artificial immune system approach. In: 2016 IEEE first international conference on connected health: applications, systems and engineering technologies (CHASE). IEEE, pp 101\u2013106","DOI":"10.1109\/CHASE.2016.36"},{"issue":"2","key":"10037_CR106","doi-asserted-by":"crossref","first-page":"133","DOI":"10.20532\/cit.2016.1002701","volume":"24","author":"ST Ikram","year":"2016","unstructured":"Ikram ST, Cherukuri AK (2016) Improving accuracy of intrusion detection model using PCA and optimized SVM. J Comput Inf Technol 24(2):133\u2013148","journal-title":"J Comput Inf Technol"},{"issue":"2","key":"10037_CR107","doi-asserted-by":"crossref","first-page":"159","DOI":"10.1089\/big.2018.0023","volume":"6","author":"Y Imamverdiyev","year":"2018","unstructured":"Imamverdiyev Y, Abdullayeva F (2018) Deep learning method for denial of service attack detection based on restricted Boltzmann machine. Big Data 6(2):159\u2013169","journal-title":"Big Data"},{"key":"10037_CR108","doi-asserted-by":"crossref","first-page":"53","DOI":"10.1016\/j.jnca.2015.12.006","volume":"62","author":"Z Inayat","year":"2016","unstructured":"Inayat Z, Gani A, Anuar NB, Khan MK, Anwar S (2016) Intrusion response systems: foundations, design, and challenges. J Netw Comput Appl 62:53\u201374","journal-title":"J Netw Comput Appl"},{"key":"10037_CR109","unstructured":"Index CVN (2017) Global mobile data traffic forecast update, 2016\u20132021 white paper. Cisco, San Jose"},{"issue":"1","key":"10037_CR110","doi-asserted-by":"crossref","first-page":"324","DOI":"10.1016\/j.jnca.2012.05.009","volume":"36","author":"R Islam","year":"2013","unstructured":"Islam R, Abawajy J (2013) A multi-tier phishing detection and filtering approach. J Netw Comput Appl 36(1):324\u2013335","journal-title":"J Netw Comput Appl"},{"key":"10037_CR111","doi-asserted-by":"crossref","unstructured":"Javaid A, Niyaz Q, Sun W, Alam M (2016) A deep learning approach for network intrusion detection system. In: Proceedings of the 9th EAI international conference on bio-inspired information and communications technologies (formerly BIONETICS), ICST (Institute for Computer Sciences, and\u00a0Social-Informatics), pp 21\u201326","DOI":"10.4108\/eai.3-12-2015.2262516"},{"key":"10037_CR112","doi-asserted-by":"crossref","unstructured":"John GH, Kohavi R, Pfleger K (1994) Irrelevant features and the subset selection problem. In: Machine learning proceedings. Elsevier, pp 121\u2013129","DOI":"10.1016\/B978-1-55860-335-6.50023-4"},{"key":"10037_CR114","doi-asserted-by":"crossref","unstructured":"Jovi\u0107 A, Brki\u0107 K, Bogunovi\u0107 N (2015) A review of feature selection methods with applications. In: 2015 38th international convention on information and communication technology, electronics and microelectronics (MIPRO). IEEE, pp 1200\u20131205","DOI":"10.1109\/MIPRO.2015.7160458"},{"key":"10037_CR115","doi-asserted-by":"crossref","first-page":"303","DOI":"10.1016\/j.future.2017.01.029","volume":"79","author":"E Kabir","year":"2018","unstructured":"Kabir E, Hu J, Wang H, Zhuo G (2018) A novel statistical technique for intrusion detection systems. Future Gener Comput Syst 79:303\u2013318","journal-title":"Future Gener Comput Syst"},{"issue":"3","key":"10037_CR116","doi-asserted-by":"crossref","first-page":"3747","DOI":"10.1016\/j.eswa.2011.09.073","volume":"39","author":"MM Kabir","year":"2012","unstructured":"Kabir MM, Shahjahan M, Murase K (2012) A new hybrid ant colony optimization algorithm for feature selection. Expert Syst Appl 39(3):3747\u20133763","journal-title":"Expert Syst Appl"},{"issue":"4","key":"10037_CR117","first-page":"13","volume":"166","author":"MR Kabir","year":"2017","unstructured":"Kabir MR, Onik AR, Samad T (2017) A network intrusion detection framework based on Bayesian network using wrapper approach. Int J Comput Appl 166(4):13\u201317","journal-title":"Int J Comput Appl"},{"key":"10037_CR118","doi-asserted-by":"crossref","unstructured":"Kalita DJ, Singh VP, Kumar V (2020) SVM hyper-parameters optimization using multi-PSO for intrusion detection. In: Social networking and computational intelligence. Springer, pp 227\u2013241","DOI":"10.1007\/978-981-15-2071-6_19"},{"key":"10037_CR119","doi-asserted-by":"crossref","unstructured":"Kamisi\u0144ski A, Fung C (2015) Flowmon: detecting malicious switches in software-defined networks. In: Proceedings of the 2015 workshop on automated decision making for active cyber defense. ACM, pp 39\u201345","DOI":"10.1145\/2809826.2809833"},{"key":"10037_CR120","doi-asserted-by":"crossref","unstructured":"Kannan A, Maguire GQ, Sharma A, Schoo P (2012) Genetic algorithm based feature selection algorithm for effective intrusion detection in cloud networks. In: 2012 IEEE 12th international conference on data mining workshops (ICDMW). IEEE, pp 416\u2013423","DOI":"10.1109\/ICDMW.2012.56"},{"key":"10037_CR121","volume-title":"Fundamentals of machine learning for predictive data analytics: algorithms, worked examples, and case studies","author":"JD Kelleher","year":"2015","unstructured":"Kelleher JD, Mac Namee B, D\u2019arcy A, (2015) Fundamentals of machine learning for predictive data analytics: algorithms, worked examples, and case studies. MIT Press, Cambridge"},{"key":"10037_CR122","doi-asserted-by":"crossref","first-page":"255","DOI":"10.1016\/j.cose.2017.06.005","volume":"70","author":"C Khammassi","year":"2017","unstructured":"Khammassi C, Krichen S (2017) A GA-LR wrapper approach for feature selection in network intrusion detection. Comput Secur 70:255\u2013277","journal-title":"Comput Secur"},{"issue":"2","key":"10037_CR123","doi-asserted-by":"crossref","first-page":"499","DOI":"10.1007\/s13369-017-2634-8","volume":"43","author":"S Khan","year":"2018","unstructured":"Khan S, Gani A, Wahab AWA, Singh PK (2018) Feature selection of denial-of-service attacks using entropy and granular computing. Ara J Sci Eng 43(2):499\u2013508","journal-title":"Ara J Sci Eng"},{"issue":"1","key":"10037_CR124","doi-asserted-by":"crossref","first-page":"173","DOI":"10.3390\/electronics9010173","volume":"9","author":"A Khraisat","year":"2020","unstructured":"Khraisat A, Gondal I, Vamplew P, Kamruzzaman J, Alazab A (2020) Hybrid intrusion detection system based on the stacking ensemble of c5 decision tree classifier and one class support vector machine. Electronics 9(1):173","journal-title":"Electronics"},{"key":"10037_CR125","doi-asserted-by":"crossref","unstructured":"Kim J, Kim H (2015) Applying recurrent neural network to intrusion detection with hessian free optimization. In: International workshop on information security applications. Springer, pp 357\u2013369","DOI":"10.1007\/978-3-319-31875-2_30"},{"key":"10037_CR126","doi-asserted-by":"crossref","first-page":"66","DOI":"10.1016\/j.eswa.2018.04.004","volume":"106","author":"TY Kim","year":"2018","unstructured":"Kim TY, Cho SB (2018) Web traffic anomaly detection using C-LSTM neural networks. Expert Syst Appl 106:66\u201376","journal-title":"Expert Syst Appl"},{"key":"10037_CR127","unstructured":"Knight W (2018) MIT technology review. Serious quantum computers are finally here What are we going to do with them"},{"key":"10037_CR128","unstructured":"Kolari P, Java A, Finin T, Oates T, Joshi A, et\u00a0al. (2006) Detecting spam blogs: a machine learning approach. In: Proceedings of the national conference on artificial intelligence, vol\u00a021. MIT Press, Cambridge, p 1351"},{"issue":"8","key":"10037_CR129","first-page":"5722","volume":"13","author":"R Kondaiah","year":"2018","unstructured":"Kondaiah R, Sathyanarayana B (2018) Trust based genetic neuro-fuzzy system for intrusion detection and self adaptive firefly integrated particle swarm optimization algorithm for secure routing in manet. Int J Appl Eng Res 13(8):5722\u20135735","journal-title":"Int J Appl Eng Res"},{"key":"10037_CR130","doi-asserted-by":"crossref","unstructured":"Krishnaveni S, Vigneshwar P, Kishore S, Jothi B, Sivamohan S (2020) Anomaly-based intrusion detection system using support vector machine. In: Artificial intelligence and evolutionary computations in engineering systems. Springer, pp 723\u2013731","DOI":"10.1007\/978-981-15-0199-9_62"},{"key":"10037_CR131","doi-asserted-by":"crossref","first-page":"178","DOI":"10.1016\/j.asoc.2014.01.028","volume":"18","author":"F Kuang","year":"2014","unstructured":"Kuang F, Xu W, Zhang S (2014) A novel hybrid KPCA and SVM with GA model for intrusion detection. Appl Soft Comput 18:178\u2013184","journal-title":"Appl Soft Comput"},{"issue":"1","key":"10037_CR132","doi-asserted-by":"crossref","first-page":"275","DOI":"10.1007\/s11227-019-03035-w","volume":"76","author":"G Kumar","year":"2020","unstructured":"Kumar G (2020) An improved ensemble approach for effective intrusion detection. J Supercomput 76(1):275\u2013291","journal-title":"J Supercomput"},{"issue":"12","key":"10037_CR134","first-page":"1","volume":"150","author":"K Kumar","year":"2016","unstructured":"Kumar K, Batth JS (2016) Network intrusion detection with feature selection techniques using machine-learning algorithms. Int J Comput Appl 150(12):1\u201313","journal-title":"Int J Comput Appl"},{"key":"10037_CR133","doi-asserted-by":"crossref","unstructured":"Kumar GR, Mangathayaru N, Narasimha G (2015) An improved k-means clustering algorithm for intrusion detection using Gaussian function. In: Proceedings of the the international conference on engineering & MIS 2015. ACM, p\u00a069","DOI":"10.1145\/2832987.2833082"},{"key":"10037_CR135","doi-asserted-by":"crossref","unstructured":"Landress AD (2016) A hybrid approach to reducing the false positive rate in unsupervised machine learning intrusion detection. In: SoutheastCon 2016. IEEE, pp 1\u20136","DOI":"10.1109\/SECON.2016.7506773"},{"key":"10037_CR136","doi-asserted-by":"crossref","unstructured":"Lashkari AH, Draper-Gil G, Mamun MSI, Ghorbani AA (2017) Characterization of tor traffic using time based features. In: ICISSP, pp 253\u2013262","DOI":"10.5220\/0005740704070414"},{"key":"10037_CR137","doi-asserted-by":"crossref","unstructured":"Lever J, Krzywinski M, Altman N (2016) Points of significance: model selection and overfitting","DOI":"10.1038\/nmeth.3968"},{"issue":"6","key":"10037_CR142","doi-asserted-by":"crossref","first-page":"466","DOI":"10.1016\/j.cose.2009.01.001","volume":"28","author":"Y Li","year":"2009","unstructured":"Li Y, Wang JL, Tian ZH, Lu TB, Young C (2009) Building lightweight intrusion detection system using wrapper-based feature selection mechanisms. Comput Secur 28(6):466\u2013475","journal-title":"Comput Secur"},{"key":"10037_CR138","doi-asserted-by":"crossref","unstructured":"Li J, Liu Y, Gu L (2010) DDoS attack detection based on neural network. In: 2010 2nd international symposium on aware computing (ISAC). IEEE, pp 196\u2013199","DOI":"10.1109\/ISAC.2010.5670479"},{"key":"10037_CR141","unstructured":"Li WS, Bai XM, Duan LZ, Zhang X (2011) Intrusion Detection based on ant colony algorithm of Fuzzy clustering. In: 2011 international conference on computer science and network technology (ICCSNT), vol\u00a03. IEEE, pp 1642\u20131645"},{"key":"10037_CR139","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1016\/j.chaos.2018.03.010","volume":"110","author":"L Li","year":"2018","unstructured":"Li L, Zhang H, Peng H, Yang Y (2018) Nearest neighbors based density peaks approach to intrusion detection. Chaos Solitons Fractals 110:33\u201340","journal-title":"Chaos Solitons Fractals"},{"key":"10037_CR140","doi-asserted-by":"crossref","first-page":"481","DOI":"10.1016\/j.future.2019.02.064","volume":"96","author":"W Li","year":"2019","unstructured":"Li W, Tug S, Meng W, Wang Y (2019) Designing collaborative blockchained signature-based intrusion detection in IoT environments. Future Gener Comput Syst 96:481\u2013489","journal-title":"Future Gener Comput Syst"},{"issue":"10","key":"10037_CR143","doi-asserted-by":"crossref","first-page":"3285","DOI":"10.1016\/j.asoc.2012.05.004","volume":"12","author":"SW Lin","year":"2012","unstructured":"Lin SW, Ying KC, Lee CY, Lee ZJ (2012) An intelligent algorithm with feature selection and decision rules applied to anomaly intrusion detection. Appl Soft Comput 12(10):3285\u20133290","journal-title":"Appl Soft Comput"},{"key":"10037_CR144","doi-asserted-by":"crossref","first-page":"13","DOI":"10.1016\/j.knosys.2015.01.009","volume":"78","author":"WC Lin","year":"2015","unstructured":"Lin WC, Ke SW, Tsai CF (2015) CANN: an intrusion detection system based on combining cluster centers and nearest neighbors. Knowl-Based Syst 78:13\u201321","journal-title":"Knowl-Based Syst"},{"key":"10037_CR145","volume-title":"Feature selection for knowledge discovery and data mining","author":"H Liu","year":"2012","unstructured":"Liu H, Motoda H (2012) Feature selection for knowledge discovery and data mining, vol 454. Springer, Berlin"},{"key":"10037_CR147","doi-asserted-by":"crossref","first-page":"032048","DOI":"10.1088\/1742-6596\/1601\/3\/032048","volume":"1601","author":"Y Liu","year":"2020","unstructured":"Liu Y, Liang S, Fang W, Zhou Z, Hu R, Zhou H, Hou J, Wang Y (2020) A hybrid feature selection algorithm combining information gain and genetic search for intrusion detection. J. Phys. Conf. Ser. 1601:032048","journal-title":"J. Phys. Conf. Ser."},{"key":"10037_CR148","doi-asserted-by":"crossref","unstructured":"Lohiya R, Thakkar A (2020) Application domains, evaluation datasets, and research challenges of IoT: a systematic review. IEEE Internet Things J","DOI":"10.1109\/JIOT.2020.3048439"},{"key":"10037_CR149","unstructured":"Lohiya R, Thakkar A (In press) Intrusion detection using deep neural network with antirectifier layer. In: International conference on applied soft computing and communication networks (ACN\u201920), ISBN 978-981-33-6173-7\\_7"},{"key":"10037_CR150","doi-asserted-by":"crossref","unstructured":"Lv L, Wang W, Zhang Z, Liu X (2020) A novel intrusion detection system based on an optimal hybrid kernel extreme learning machine. Knowl Based Syst 105648","DOI":"10.1016\/j.knosys.2020.105648"},{"issue":"1","key":"10037_CR151","doi-asserted-by":"crossref","first-page":"130","DOI":"10.1109\/TSMCC.2010.2050685","volume":"41","author":"S Mabu","year":"2011","unstructured":"Mabu S, Chen C, Lu N, Shimada K, Hirasawa K (2011) An intrusion-detection model based on fuzzy class-association-rule mining using genetic network programming. IEEE Trans Syst Man Cybern Part C Appl Rev 41(1):130\u2013139","journal-title":"IEEE Trans Syst Man Cybern Part C Appl Rev"},{"key":"10037_CR152","doi-asserted-by":"crossref","unstructured":"Mandal N, Jadhav S (2016) A survey on network security tools for open source. In: 2016 IEEE international conference on current trends in advanced computing (ICCTAC). IEEE, pp 1\u20136","DOI":"10.1109\/ICCTAC.2016.7567330"},{"issue":"4","key":"10037_CR153","doi-asserted-by":"crossref","first-page":"262","DOI":"10.1145\/382912.382923","volume":"3","author":"J McHugh","year":"2000","unstructured":"McHugh J (2000) Testing intrusion detection systems: a critique of the 1998 and 1999 Darpa intrusion detection system evaluations as performed by Lincoln laboratory. ACM Trans Inf Syst Secur (TISSEC) 3(4):262\u2013294","journal-title":"ACM Trans Inf Syst Secur (TISSEC)"},{"issue":"3","key":"10037_CR154","doi-asserted-by":"crossref","first-page":"276","DOI":"10.11613\/BM.2012.031","volume":"22","author":"ML McHugh","year":"2012","unstructured":"McHugh ML (2012) Interrater reliability: the kappa statistic. Biochemia medica: Biochemia medica 22(3):276\u2013282","journal-title":"Biochemia medica: Biochemia medica"},{"issue":"5","key":"10037_CR155","first-page":"478","volume":"8","author":"S Meftah","year":"2019","unstructured":"Meftah S, Rachidi T, Assem N (2019) Network based intrusion detection using the UNSW-NB15 dataset. Int J Comput Digit Syst 8(5):478\u2013487","journal-title":"Int J Comput Digit Syst"},{"issue":"6","key":"10037_CR156","first-page":"383","volume":"1","author":"P Mehra","year":"2012","unstructured":"Mehra P (2012) A brief study and comparison of snort and bro open source network intrusion detection systems. Int J Adv Res Comput Commun Eng 1(6):383\u2013386","journal-title":"Int J Adv Res Comput Commun Eng"},{"key":"10037_CR157","unstructured":"Migliavacca M, Papagiannis I, Eyers DM, Shand B, Bacon J, Pietzuch P (2010) DEFCON: high-performance event processing with information security. In: Proceedings of the 2010 USENIX conference on USENIX annual technical conference, USENIX Association, pp 1\u20131"},{"issue":"3","key":"10037_CR158","doi-asserted-by":"crossref","first-page":"301","DOI":"10.1109\/34.990133","volume":"24","author":"P Mitra","year":"2002","unstructured":"Mitra P, Murthy C, Pal SK (2002) Unsupervised feature selection using feature similarity. IEEE Trans Pattern Anal Mach Intell 24(3):301\u2013312","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"key":"10037_CR159","doi-asserted-by":"crossref","unstructured":"Moustafa N, Slay J (2015) UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). In: 2015 military communications and information systems conference (MilCIS), IEEE, pp 1\u20136","DOI":"10.1109\/MilCIS.2015.7348942"},{"issue":"1","key":"10037_CR160","doi-asserted-by":"crossref","first-page":"13","DOI":"10.33736\/jita.45.2014","volume":"4","author":"Z Muda","year":"2016","unstructured":"Muda Z, Yassin W, Sulaiman M, Udzir N (2016) K-means clustering and Naive Bayes classification for intrusion detection. J IT Asia 4(1):13\u201325","journal-title":"J IT Asia"},{"key":"10037_CR161","doi-asserted-by":"crossref","first-page":"119","DOI":"10.1016\/j.protcy.2012.05.017","volume":"4","author":"S Mukherjee","year":"2012","unstructured":"Mukherjee S, Sharma N (2012) Intrusion detection using Naive Bayes classifier with feature reduction. Procedia Technol 4:119\u2013128","journal-title":"Procedia Technol"},{"key":"10037_CR163","doi-asserted-by":"crossref","unstructured":"Mungra D, Agrawal A, Thakkar A (2020) A voting-based sentiment classification model. In: Intelligent communication, control and devices. Springer, pp 551\u2013558","DOI":"10.1007\/978-981-13-8618-3_57"},{"key":"10037_CR164","doi-asserted-by":"crossref","first-page":"174","DOI":"10.1016\/j.proeng.2012.01.849","volume":"30","author":"AP Muniyandi","year":"2012","unstructured":"Muniyandi AP, Rajeswari R, Rajaram R (2012) Network anomaly detection by cascading k-Means clustering and C4. 5 decision tree algorithm. Procedia Eng 30:174\u2013182","journal-title":"Procedia Eng"},{"key":"10037_CR165","doi-asserted-by":"crossref","first-page":"16623","DOI":"10.1109\/ACCESS.2018.2798626","volume":"6","author":"MN Napiah","year":"2018","unstructured":"Napiah MN, Idris MYIB, Ramli R, Ahmedy I (2018) Compression header analyzer intrusion detection system (CHA-IDS) for 6LoWPAN communication protocol. IEEE Access 6:16623\u201316638","journal-title":"IEEE Access"},{"key":"10037_CR166","doi-asserted-by":"crossref","first-page":"48231","DOI":"10.1109\/ACCESS.2018.2863036","volume":"6","author":"S Naseer","year":"2018","unstructured":"Naseer S, Saleem Y, Khalid S, Bashir MK, Han J, Iqbal MM, Han K (2018) Enhanced network anomaly detection based on deep neural networks. IEEE Access 6:48231\u201348246","journal-title":"IEEE Access"},{"key":"10037_CR167","volume-title":"Lawrence Berkeley National Laboratory (LBNL)\/ICSI enterprise tracing project","author":"B Nechaev","year":"2004","unstructured":"Nechaev B, Allman M, Paxson V, Gurtov A (2004) Lawrence Berkeley National Laboratory (LBNL)\/ICSI enterprise tracing project. LBNL\/ICSI, Berkeley"},{"key":"10037_CR168","doi-asserted-by":"crossref","unstructured":"Nehinbe JO (2009) A simple method for improving intrusion detections in corporate networks. In: International conference on information security and digital forensics. Springer, pp 111\u2013122","DOI":"10.1007\/978-3-642-11530-1_13"},{"key":"10037_CR169","doi-asserted-by":"crossref","unstructured":"Nehinbe JO (2011) A critical evaluation of datasets for investigating IDSs and IPSs researches. In: 2011 IEEE 10th international conference on cybernetic intelligent systems (CIS). IEEE, pp 92\u201397","DOI":"10.1109\/CIS.2011.6169141"},{"issue":"4","key":"10037_CR170","doi-asserted-by":"crossref","first-page":"56","DOI":"10.1109\/SURV.2008.080406","volume":"10","author":"TT Nguyen","year":"2008","unstructured":"Nguyen TT, Armitage G (2008) A survey of techniques for internet traffic classification using machine learning. IEEE Commun Surv Tutor 10(4):56\u201376","journal-title":"IEEE Commun Surv Tutor"},{"key":"10037_CR171","doi-asserted-by":"crossref","unstructured":"Ni X, He D, Chan S, Ahmad F (2016) Network anomaly detection using unsupervised feature selection and density peak clustering. In: International conference on applied cryptography and network security. Springer, pp 212\u2013227","DOI":"10.1007\/978-3-319-39555-5_12"},{"issue":"2\u20133","key":"10037_CR172","doi-asserted-by":"crossref","first-page":"103","DOI":"10.1023\/A:1007692713085","volume":"39","author":"K Nigam","year":"2000","unstructured":"Nigam K, McCallum AK, Thrun S, Mitchell T (2000) Text classification from labeled and unlabeled documents using EM. Mach Learn 39(2\u20133):103\u2013134","journal-title":"Mach Learn"},{"issue":"4","key":"10037_CR173","doi-asserted-by":"crossref","first-page":"3369","DOI":"10.1109\/COMST.2018.2854724","volume":"20","author":"A Nisioti","year":"2018","unstructured":"Nisioti A, Mylonas A, Yoo PD, Katos V (2018) From intrusion detection to attacker attribution: a comprehensive survey of unsupervised methods. IEEE Commun Surv Tutor 20(4):3369\u20133388","journal-title":"IEEE Commun Surv Tutor"},{"key":"10037_CR174","doi-asserted-by":"crossref","unstructured":"Niu Z, Shi S, Sun J, He X (2011) A survey of outlier detection methodologies and their applications. In: International conference on artificial intelligence and computational intelligence. Springer, pp 380\u2013387","DOI":"10.1007\/978-3-642-23881-9_50"},{"key":"10037_CR175","unstructured":"Norouzian MR, Merati S (2011) Classifying attacks in a network intrusion detection system based on artificial neural networks. In: 2011 13th international conference on advanced communication technology (ICACT). IEEE, pp 868\u2013873"},{"issue":"1","key":"10037_CR176","doi-asserted-by":"crossref","first-page":"119","DOI":"10.2298\/YJOR1101119N","volume":"21","author":"J Novakovi\u0107","year":"2016","unstructured":"Novakovi\u0107 J (2016) Toward optimal feature selection using ranking methods and classification algorithms. Yugoslav J Oper Res 21(1):119\u2013135","journal-title":"Yugoslav J Oper Res"},{"issue":"13","key":"10037_CR177","doi-asserted-by":"crossref","first-page":"1216","DOI":"10.1056\/NEJMp1606181","volume":"375","author":"Z Obermeyer","year":"2016","unstructured":"Obermeyer Z, Emanuel EJ (2016) Predicting the future-big data, machine learning, and clinical medicine. New Engl J Med 375(13):1216","journal-title":"New Engl J Med"},{"key":"10037_CR178","unstructured":"OpenDNS L (2016) PhishTank: an anti-phishing site. https:\/\/www.phishtank.com"},{"key":"10037_CR179","doi-asserted-by":"crossref","first-page":"130","DOI":"10.1186\/s13638-016-0623-3","volume":"1","author":"O Osanaiye","year":"2016","unstructured":"Osanaiye O, Cai H, Choo KKR, Dehghantanha A, Xu Z, Dlodlo M (2016) Ensemble-based multi-filter feature selection method for DDoS detection in cloud computing. EURASIP J Wirel Commun Netw 1:130","journal-title":"EURASIP J Wirel Commun Netw"},{"key":"10037_CR180","doi-asserted-by":"crossref","unstructured":"Panda M, Abraham A, Patra MR (2010) Discriminative multinomial Naive Bayes for network intrusion detection. In: 2010 sixth international conference on information assurance and security (IAS). IEEE, pp 5\u201310","DOI":"10.1109\/ISIAS.2010.5604193"},{"issue":"16","key":"10037_CR181","first-page":"18","volume":"117","author":"R Pandya","year":"2015","unstructured":"Pandya R, Pandya J (2015) C5.0 algorithm to improved decision tree with feature selection and reduced error pruning. Int J Comput Appl 117(16):18\u201321","journal-title":"Int J Comput Appl"},{"issue":"3","key":"10037_CR183","doi-asserted-by":"crossref","first-page":"2259","DOI":"10.1007\/s10462-020-09904-8","volume":"54","author":"P Pareek","year":"2021","unstructured":"Pareek P, Thakkar A (2021) A survey on video-based human action recognition: recent updates, datasets, challenges, and applications. Artif Intell Rev 54(3):2259\u20132322","journal-title":"Artif Intell Rev"},{"issue":"02","key":"10037_CR184","first-page":"02","volume":"2","author":"C Patel","year":"2012","unstructured":"Patel C, Patel R, Thakkar A (2012a) Object detection and segmentation using local and global property. Int J Comput Sci Res Appl 2(02):02\u201310","journal-title":"Int J Comput Sci Res Appl"},{"key":"10037_CR185","doi-asserted-by":"crossref","unstructured":"Patel R, Patel CI, Thakkar A (2012b) Aggregate features approach for texture analysis. In: 2012 Nirma University international conference on engineering (NUiCONE). IEEE, pp 1\u20135","DOI":"10.1109\/NUICONE.2012.6493209"},{"key":"10037_CR186","doi-asserted-by":"crossref","unstructured":"Patgiri R, Varshney U, Akutota T, Kunde R (2018) An investigation on intrusion detection system using machine learning. In: 2018 IEEE symposium series on computational intelligence (SSCI). IEEE, pp 1684\u20131691","DOI":"10.1109\/SSCI.2018.8628676"},{"issue":"1","key":"10037_CR187","doi-asserted-by":"crossref","first-page":"114","DOI":"10.1016\/j.jnca.2005.06.003","volume":"30","author":"S Peddabachigari","year":"2007","unstructured":"Peddabachigari S, Abraham A, Grosan C, Thomas J (2007) Modeling intrusion detection system using hybrid intelligent systems. J Netw Comput Appl 30(1):114\u2013132","journal-title":"J Netw Comput Appl"},{"issue":"8","key":"10037_CR188","doi-asserted-by":"crossref","first-page":"1226","DOI":"10.1109\/TPAMI.2005.159","volume":"27","author":"H Peng","year":"2005","unstructured":"Peng H, Long F, Ding C (2005) Feature selection based on mutual information criteria of max-dependency, max-relevance, and min-redundancy. IEEE Trans Pattern Anal Mach Intell 27(8):1226\u20131238","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"key":"10037_CR189","doi-asserted-by":"crossref","first-page":"14","DOI":"10.1016\/j.jnca.2016.06.012","volume":"72","author":"J Peng","year":"2016","unstructured":"Peng J, Choo KKR, Ashman H (2016) User profiling in intrusion detection: a review. J Netw Comput Appl 72:14\u201327","journal-title":"J Netw Comput Appl"},{"key":"10037_CR190","doi-asserted-by":"crossref","unstructured":"Potluri S, Henry NF, Diedrich C (2017) Evaluation of hybrid deep learning techniques for ensuring security in networked control systems. In: 2017 22nd IEEE international conference on emerging technologies and factory automation (ETFA). IEEE, pp 1\u20138","DOI":"10.1109\/ETFA.2017.8247662"},{"key":"10037_CR191","doi-asserted-by":"crossref","unstructured":"Prusty S, Levine BN, Liberatore M (2011) Forensic investigation of the OneSwarm anonymous filesharing system. In: Proceedings of the 18th ACM conference on Computer and communications security. ACM, pp 201\u2013214","DOI":"10.1145\/2046707.2046731"},{"issue":"1","key":"10037_CR192","first-page":"184","volume":"20","author":"HM Rais","year":"2018","unstructured":"Rais HM, Mehmood T (2018) Dynamic ant colony system with three level update feature selection for intrusion detection. IJ Netw Secur 20(1):184\u2013192","journal-title":"IJ Netw Secur"},{"key":"10037_CR193","doi-asserted-by":"crossref","unstructured":"Rajagopal S, Kundapur PP, Hareesha KS (2020) A stacking ensemble for network intrusion detection using heterogeneous datasets. Secur Commun Netw 2020:1\u20139","DOI":"10.1155\/2020\/4586875"},{"key":"10037_CR194","doi-asserted-by":"crossref","unstructured":"Rajput D, Thakkar A (2019) A survey on different network intrusion detection systems and countermeasure. In: Emerging research in computing, information, communication and applications. Springer, pp 497\u2013506","DOI":"10.1007\/978-981-13-6001-5_41"},{"key":"10037_CR195","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.knosys.2017.07.005","volume":"134","author":"MG Raman","year":"2017","unstructured":"Raman MG, Somu N, Kirthivasan K, Liscano R, Sriram VS (2017) An efficient intrusion detection system based on hypergraph-genetic algorithm for parameter optimization and feature selection in support vector machine. Knowl-Based Syst 134:1\u201312","journal-title":"Knowl-Based Syst"},{"issue":"3","key":"10037_CR196","doi-asserted-by":"crossref","first-page":"223","DOI":"10.1002\/wics.1347","volume":"7","author":"S Ranshous","year":"2015","unstructured":"Ranshous S, Shen S, Koutra D, Harenberg S, Faloutsos C, Samatova NF (2015) Anomaly detection in dynamic networks: a survey. Wiley Interdiscip Rev Comput Stat 7(3):223\u2013247","journal-title":"Wiley Interdiscip Rev Comput Stat"},{"key":"10037_CR197","doi-asserted-by":"crossref","unstructured":"Riquelme N, Von\u00a0L\u00fccken C, Baran B (2015) Performance metrics in multi-objective optimization. In: 2015 Latin American computing conference (CLEI). IEEE, pp 1\u201311","DOI":"10.1109\/CLEI.2015.7360024"},{"key":"10037_CR198","doi-asserted-by":"crossref","first-page":"53","DOI":"10.1016\/0377-0427(87)90125-7","volume":"20","author":"PJ Rousseeuw","year":"1987","unstructured":"Rousseeuw PJ (1987) Silhouettes: a graphical aid to the interpretation and validation of cluster analysis. J Comput Appl Math 20:53\u201365","journal-title":"J Comput Appl Math"},{"key":"10037_CR199","doi-asserted-by":"crossref","unstructured":"Sabahi F, Movaghar A (2008) Intrusion detection: a survey. In: 3rd International Conference on Systems and Networks Communications, 2008. ICSNC\u201908. IEEE, pp 23\u201326","DOI":"10.1109\/ICSNC.2008.44"},{"issue":"19","key":"10037_CR200","doi-asserted-by":"crossref","first-page":"2507","DOI":"10.1093\/bioinformatics\/btm344","volume":"23","author":"Y Saeys","year":"2007","unstructured":"Saeys Y, Inza I, Larra\u00f1aga P (2007) A review of feature selection techniques in bioinformatics. Bioinformatics 23(19):2507\u20132517","journal-title":"Bioinformatics"},{"key":"10037_CR201","doi-asserted-by":"crossref","unstructured":"Sahu S, Mehtre BM (2015) Network intrusion detection system using J48 Decision Tree. In: 2015 international conference on advances in computing, communications and informatics (ICACCI). IEEE, pp 2023\u20132026","DOI":"10.1109\/ICACCI.2015.7275914"},{"key":"10037_CR202","doi-asserted-by":"crossref","unstructured":"S\u00e1nchez-Maro\u00f1o N, Alonso-Betanzos A, Tombilla-Sanrom\u00e1n M (2007) Filter methods for feature selection\u2013a comparative study. In: International conference on intelligent data engineering and automated learning. Springer, pp 178\u2013187","DOI":"10.1007\/978-3-540-77226-2_19"},{"issue":"18","key":"10037_CR203","doi-asserted-by":"crossref","first-page":"2227","DOI":"10.1016\/j.comcom.2011.07.001","volume":"34","author":"P Sangkatsanee","year":"2011","unstructured":"Sangkatsanee P, Wattanapongsakorn N, Charnsripinyo C (2011) Practical real-time intrusion detection using machine learning approaches. Comput Commun 34(18):2227\u20132235","journal-title":"Comput Commun"},{"key":"10037_CR204","unstructured":"Sangster B, O\u2019Connor T, Cook T, Fanelli R, Dean E, Morrell C, Conti GJ (2009) Toward instrumenting network warfare competitions to generate labeled datasets. In: CSET"},{"key":"10037_CR205","doi-asserted-by":"crossref","first-page":"70651","DOI":"10.1109\/ACCESS.2020.2986217","volume":"8","author":"S Sarvari","year":"2020","unstructured":"Sarvari S, Sani NFM, Hanapi ZM, Abdullah MT (2020) An efficient anomaly intrusion detection method with feature selection and evolutionary neural network. IEEE Access 8:70651\u201370663","journal-title":"IEEE Access"},{"key":"10037_CR206","doi-asserted-by":"crossref","unstructured":"Sato M, Yamaki H, Takakura H (2012) Unknown attacks detection using feature extraction from anomaly-based ids alerts. In: 2012 IEEE\/IPSJ 12th international symposium on applications and the internet (SAINT). IEEE, pp 273\u2013277","DOI":"10.1109\/SAINT.2012.51"},{"issue":"2","key":"10037_CR207","doi-asserted-by":"crossref","first-page":"159","DOI":"10.1145\/317087.317089","volume":"2","author":"B Schneier","year":"1999","unstructured":"Schneier B, Kelsey J (1999) Secure audit logs to support computer forensics. ACM Trans Inf Syst Secur (TISSEC) 2(2):159\u2013176","journal-title":"ACM Trans Inf Syst Secur (TISSEC)"},{"key":"10037_CR208","doi-asserted-by":"crossref","first-page":"157","DOI":"10.1016\/j.future.2017.10.016","volume":"80","author":"SAR Shah","year":"2018","unstructured":"Shah SAR, Issac B (2018) Performance comparison of intrusion detection systems and application of machine learning to snort system. Future Gener Comput Syst 80:157\u2013170","journal-title":"Future Gener Comput Syst"},{"key":"10037_CR209","doi-asserted-by":"crossref","unstructured":"Sharafaldin I, Lashkari AH, Ghorbani AA (2018) Toward generating a new intrusion detection dataset and intrusion traffic characterization. In: ICISSP, pp 108\u2013116","DOI":"10.5220\/0006639801080116"},{"key":"10037_CR211","unstructured":"Sharbaf M (2018) Artificial intelligence and cybersecurity. Bus Strategy Artif Intell Econ 5"},{"key":"10037_CR212","doi-asserted-by":"crossref","unstructured":"Sharma R, Rajvaidya H, Pareek P, Thakkar A (2019) A comparative study of machine learning techniques for emotion recognition. In: Emerging research in computing, information, communication and applications. Springer, pp 459\u2013464","DOI":"10.1007\/978-981-13-6001-5_37"},{"key":"10037_CR213","doi-asserted-by":"crossref","unstructured":"Sheen S, Rajesh R (2008) Network intrusion detection using feature selection and Decision tree classifier. In: TENCON 2008\u20142008 IEEE Region 10 conference. IEEE, pp 1\u20134","DOI":"10.1109\/TENCON.2008.4766847"},{"issue":"6","key":"10037_CR214","doi-asserted-by":"crossref","first-page":"1185","DOI":"10.1007\/s00521-010-0487-0","volume":"21","author":"M Sheikhan","year":"2012","unstructured":"Sheikhan M, Jadidi Z, Farrokhi A (2012) Intrusion detection using reduced-size RNN based on feature grouping. Neural Comput Appl 21(6):1185\u20131190","journal-title":"Neural Comput Appl"},{"key":"10037_CR215","unstructured":"Sheth N, Yong L, Callon R, Black D (2015) Juniper networks"},{"issue":"3","key":"10037_CR216","doi-asserted-by":"crossref","first-page":"357","DOI":"10.1016\/j.cose.2011.12.012","volume":"31","author":"A Shiravi","year":"2012","unstructured":"Shiravi A, Shiravi H, Tavallaee M, Ghorbani AA (2012) Toward developing a systematic approach to generate benchmark datasets for intrusion detection. Comput Secur 31(3):357\u2013374","journal-title":"Comput Secur"},{"issue":"3","key":"10037_CR217","first-page":"2581","volume":"3","author":"HM Shirazi","year":"2009","unstructured":"Shirazi HM (2009) Anomaly intrusion detection system using information theory, K-NN and KMC algorithms. Aust J Basic Appl Sci 3(3):2581\u20132597","journal-title":"Aust J Basic Appl Sci"},{"key":"10037_CR218","unstructured":"Snapp SR, Brentano J, Dias G, Goan TL, Heberlein LT, Ho CL, Levitt KN (2017) DIDS (distributed intrusion detection system)-motivation, architecture, and an early prototype"},{"key":"10037_CR219","doi-asserted-by":"crossref","unstructured":"Soheily-Khah S, Marteau PF, B\u00e9chet N (2018) Intrusion detection in network systems through hybrid supervised and unsupervised machine learning process: a case study on the ISCX dataset. In: 2018 1st international conference on data intelligence and security (ICDIS). IEEE, pp 219\u2013226","DOI":"10.1109\/ICDIS.2018.00043"},{"issue":"23\u201324","key":"10037_CR220","doi-asserted-by":"crossref","first-page":"2477","DOI":"10.1016\/S1389-1286(99)00113-9","volume":"31","author":"P Sommer","year":"1999","unstructured":"Sommer P (1999) Intrusion detection systems as evidence. Comput Netw 31(23\u201324):2477\u20132487","journal-title":"Comput Netw"},{"issue":"1","key":"10037_CR221","doi-asserted-by":"crossref","first-page":"76","DOI":"10.1109\/MSP.2016.14","volume":"14","author":"J Song","year":"2016","unstructured":"Song J, Alves-Foss J (2016) The DARPA cyber grand challenge: a competitor\u2019s perspective, part 2. IEEE Secur Priv 14(1):76\u201381","journal-title":"IEEE Secur Priv"},{"key":"10037_CR222","doi-asserted-by":"crossref","unstructured":"Song J, Takakura H, Okabe Y, Eto M, Inoue D, Nakao K (2011) Statistical analysis of honeypot data and building of Kyoto 2006+ dataset for NIDS evaluation. In: Proceedings of the first workshop on building analysis datasets and gathering experience returns for security. ACM, pp 29\u201336","DOI":"10.1145\/1978672.1978676"},{"issue":"1","key":"10037_CR223","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1109\/TKDE.2011.181","volume":"25","author":"Q Song","year":"2013","unstructured":"Song Q, Ni J, Wang G (2013) A fast clustering-based feature subset selection algorithm for high-dimensional data. IEEE Trans Knowl Data Eng 25(1):1\u201314","journal-title":"IEEE Trans Knowl Data Eng"},{"key":"10037_CR224","doi-asserted-by":"crossref","unstructured":"Sperotto A, Sadre R, Van\u00a0Vliet F, Pras A (2009) A labeled data set for flow-based intrusion detection. In: International workshop on IP operations and management. Springer, pp 39\u201350","DOI":"10.1007\/978-3-642-04968-2_4"},{"issue":"3","key":"10037_CR225","doi-asserted-by":"crossref","first-page":"343","DOI":"10.1109\/SURV.2010.032210.00054","volume":"12","author":"A Sperotto","year":"2010","unstructured":"Sperotto A, Schaffrath G, Sadre R, Morariu C, Pras A, Stiller B (2010) An overview of IP flow-based intrusion detection. IEEE Commun Surv Tutor 12(3):343\u2013356","journal-title":"IEEE Commun Surv Tutor"},{"key":"10037_CR226","doi-asserted-by":"crossref","unstructured":"S\u00f8hoel H, Jaatun MG, Boyd C (2018) OWASP Top 10-Do Startups Care? In: 2018 international conference on cyber security and protection of digital services (Cyber Security). IEEE, pp 1\u20138","DOI":"10.1109\/CyberSecPODS.2018.8560666"},{"key":"10037_CR227","doi-asserted-by":"crossref","first-page":"178","DOI":"10.1016\/j.future.2018.09.063","volume":"92","author":"J Srinivas","year":"2019","unstructured":"Srinivas J, Das AK, Kumar N (2019) Government regulations in cyber security: framework, standards and recommendations. Future Gener Comput Syst 92:178\u2013188","journal-title":"Future Gener Comput Syst"},{"issue":"2","key":"10037_CR228","doi-asserted-by":"crossref","first-page":"722","DOI":"10.1016\/j.jnca.2010.10.009","volume":"34","author":"MY Su","year":"2011","unstructured":"Su MY (2011) Using clustering to improve the KNN-based classifiers for online anomaly network traffic identification. J Netw Comput Appl 34(2):722\u2013730","journal-title":"J Netw Comput Appl"},{"key":"10037_CR229","doi-asserted-by":"crossref","unstructured":"Subba B, Biswas S, Karmakar S (2016) Enhancing performance of anomaly based intrusion detection systems through dimensionality reduction using principal component analysis. In: 2016 IEEE international conference on advanced networks and telecommunications systems (ANTS). IEEE, pp 1\u20136","DOI":"10.1109\/ANTS.2016.7947776"},{"key":"10037_CR230","doi-asserted-by":"crossref","unstructured":"Sung AH, Mukkamala S (2004) The feature selection and intrusion detection problems. In: Annual Asian computing science conference. Springer, pp 468\u2013482","DOI":"10.1007\/978-3-540-30502-6_34"},{"key":"10037_CR231","doi-asserted-by":"crossref","unstructured":"Suresh M, Anitha R (2011) Evaluating machine learning algorithms for detecting DDoS attacks. In: International conference on network security and applications. Springer, pp 441\u2013452","DOI":"10.1007\/978-3-642-22540-6_42"},{"issue":"5","key":"10037_CR232","doi-asserted-by":"crossref","first-page":"279","DOI":"10.3390\/info11050279","volume":"11","author":"B Susilo","year":"2020","unstructured":"Susilo B, Sari RF (2020) Intrusion detection in IoT networks using deep learning algorithm. Information 11(5):279","journal-title":"Information"},{"key":"10037_CR233","doi-asserted-by":"crossref","unstructured":"Talavera L (2005) An evaluation of filter and wrapper methods for feature selection in categorical clustering. In: International symposium on intelligent data analysis. Springer, pp 440\u2013451","DOI":"10.1007\/11552253_40"},{"key":"10037_CR234","doi-asserted-by":"crossref","unstructured":"Tama BA, Rhee KH (2015) A combination of PSO-based feature selection and tree-based classifiers ensemble for intrusion detection systems. In: Advances in computer science and ubiquitous computing. Springer, pp 489\u2013495","DOI":"10.1007\/978-981-10-0281-6_71"},{"key":"10037_CR235","doi-asserted-by":"crossref","unstructured":"Tang P, Jiang Ra, Zhao M (2010) Feature selection and design of intrusion detection system based on k-means and triangle area support vector machine. In: Second international conference on future networks, 2010. ICFN\u201910. IEEE, pp 144\u2013148","DOI":"10.1109\/ICFN.2010.42"},{"key":"10037_CR236","doi-asserted-by":"crossref","unstructured":"Tang TA, Mhamdi L, McLernon D, Zaidi SAR, Ghogho M (2018) Deep recurrent neural network for intrusion detection in SDN-based networks. In: 2018 4th IEEE conference on network softwarization and workshops (NetSoft). IEEE, pp 202\u2013206","DOI":"10.1109\/NETSOFT.2018.8460090"},{"key":"10037_CR237","doi-asserted-by":"crossref","unstructured":"Tavallaee M, Bagheri E, Lu W, Ghorbani AA (2009) A detailed analysis of the KDD CUP 99 data set. In: IEEE symposium on computational intelligence for security and defense applications (2009), CISDA 2009. IEEE, pp 1\u20136","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"10037_CR238","doi-asserted-by":"crossref","unstructured":"Thakkar A, Chaudhari K (2020a) A comprehensive survey on portfolio optimization, stock price and trend prediction using particle swarm optimization. Arch Comput Methods Eng 28(4):2133-\u20132164","DOI":"10.1007\/s11831-020-09448-8"},{"key":"10037_CR239","doi-asserted-by":"crossref","first-page":"616","DOI":"10.1016\/j.procs.2020.03.328","volume":"167","author":"A Thakkar","year":"2020","unstructured":"Thakkar A, Chaudhari K (2020b) Crest: cross-reference to exchange-based stock trend prediction using long short-term memory. Procedia Comput Sci 167:616\u2013625","journal-title":"Procedia Comput Sci"},{"key":"10037_CR240","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2020.106684","author":"A Thakkar","year":"2020","unstructured":"Thakkar A, Chaudhari K (2020c) Predicting stock trend using an integrated term frequency-inverse document frequency-based feature weight matrix with neural networks. Appl Soft Comput. https:\/\/doi.org\/10.1016\/j.asoc.2020.106684","journal-title":"Appl Soft Comput"},{"key":"10037_CR241","doi-asserted-by":"crossref","first-page":"95","DOI":"10.1016\/j.inffus.2020.08.019","volume":"65","author":"A Thakkar","year":"2021","unstructured":"Thakkar A, Chaudhari K (2021) Fusion in stock market prediction: a decade survey on the necessity, recent developments, and potential future directions. Inf Fusion 65:95\u2013107","journal-title":"Inf Fusion"},{"issue":"02","key":"10037_CR243","first-page":"19","volume":"1","author":"A Thakkar","year":"2011","unstructured":"Thakkar A, Kotecha K (2011) Bio-inspired based optimized algorithm for cluster head election using RSSI and LQI. Int J Comput Sci 1(02):19\u201329","journal-title":"Int J Comput Sci"},{"key":"10037_CR245","doi-asserted-by":"crossref","first-page":"636","DOI":"10.1016\/j.procs.2020.03.330","volume":"167","author":"A Thakkar","year":"2020","unstructured":"Thakkar A, Lohiya R (2020a) A review of the advancement in intrusion detection datasets. Procedia Comput Sci 167:636\u2013645","journal-title":"Procedia Comput Sci"},{"key":"10037_CR246","doi-asserted-by":"crossref","unstructured":"Thakkar A, Lohiya R (2020b) Role of swarm and evolutionary algorithms for intrusion detection system: a survey. In: Swarm and evolutionary computation, p 100631","DOI":"10.1016\/j.swevo.2019.100631"},{"key":"10037_CR244","doi-asserted-by":"crossref","unstructured":"Thakkar A, Lohiya R (2021a) Attack classification using feature selection techniques: a comparative study. J. Ambient Intell Human Comput 12(1):1249\u20131266","DOI":"10.1007\/s12652-020-02167-9"},{"issue":"4","key":"10037_CR247","doi-asserted-by":"crossref","first-page":"3211","DOI":"10.1007\/s11831-020-09496-0","volume":"28","author":"A Thakkar","year":"2021","unstructured":"Thakkar A, Lohiya R (2021b) A review on machine learning and deep learning perspectives of ids for IoT: recent updates, security issues, and challenges. Arch Comput Methods Eng 28(4):3211\u20133243","journal-title":"Arch Comput Methods Eng"},{"key":"10037_CR248","doi-asserted-by":"crossref","unstructured":"Thakkar A, Jivani N, Padasumbiya J, Patel CI (2013) A new hybrid method for face recognition. In: 2013 Nirma University international conference on engineering (NUiCONE). IEEE, pp 1\u20139","DOI":"10.1109\/NUiCONE.2013.6780090"},{"issue":"1","key":"10037_CR249","doi-asserted-by":"crossref","first-page":"9","DOI":"10.1504\/IJICA.2020.105315","volume":"11","author":"A Thakkar","year":"2020","unstructured":"Thakkar A, Mungra D, Agrawal A (2020) Sentiment analysis: an empirical comparison between various training algorithms for artificial neural network. Int J Innov Comput Appl 11(1):9\u201329","journal-title":"Int J Innov Comput Appl"},{"key":"10037_CR250","doi-asserted-by":"crossref","unstructured":"Thaseen IS, Kumar CA (2014) Intrusion detection model using fusion of PCA and optimized SVM. In: 2014 international conference on contemporary computing and informatics (IC3I). IEEE, pp 879\u2013884","DOI":"10.1109\/IC3I.2014.7019692"},{"issue":"4","key":"10037_CR252","doi-asserted-by":"crossref","first-page":"462","DOI":"10.1016\/j.jksus.2017.05.013","volume":"29","author":"IS Thaseen","year":"2017","unstructured":"Thaseen IS, Kumar CA (2017) Intrusion detection model using fusion of chi-square feature selection and multi class SVM. J King Saud Univ Comput Inf Sci 29(4):462\u2013472","journal-title":"J King Saud Univ Comput Inf Sci"},{"issue":"1\u20132","key":"10037_CR253","doi-asserted-by":"crossref","first-page":"303","DOI":"10.1007\/s11071-009-9650-5","volume":"61","author":"J Tian","year":"2010","unstructured":"Tian J, Gu H (2010) Anomaly detection combining one-class SVMs and particle swarm optimization algorithms. Nonlinear Dyn 61(1\u20132):303\u2013310","journal-title":"Nonlinear Dyn"},{"key":"10037_CR254","doi-asserted-by":"crossref","unstructured":"Tsoumakas G, Katakis I, Vlahavas I (2010) Data mining and knowledge discovery handbook. Mining multi-label data","DOI":"10.1007\/978-0-387-09823-4_34"},{"key":"10037_CR255","doi-asserted-by":"crossref","unstructured":"Udd R, Asplund M, Nadjm-Tehrani S, Kazemtabrizi M, Ekstedt M (2016) Exploiting bro for intrusion detection in a SCADA system. In: Proceedings of the 2nd ACM international workshop on cyber-physical system security. ACM, pp 44\u201351","DOI":"10.1145\/2899015.2899028"},{"key":"10037_CR256","doi-asserted-by":"crossref","first-page":"238","DOI":"10.1016\/j.cose.2017.05.009","volume":"70","author":"MF Umer","year":"2017","unstructured":"Umer MF, Sher M, Bi Y (2017) Flow-based intrusion detection: techniques and challenges. Comput Secur 70:238\u2013254","journal-title":"Comput Secur"},{"issue":"9","key":"10037_CR257","first-page":"1844","volume":"12","author":"KK Vardhini","year":"2017","unstructured":"Vardhini KK, Sitamahalakshmi T (2017) Enhanced intrusion detection system using data reduction: an ant colony optimization approach. Int J Appl Eng Res 12(9):1844\u20131847","journal-title":"Int J Appl Eng Res"},{"issue":"4","key":"10037_CR258","doi-asserted-by":"crossref","first-page":"55","DOI":"10.1145\/2716260","volume":"47","author":"E Vasilomanolakis","year":"2015","unstructured":"Vasilomanolakis E, Karuppayah S, M\u00fchlh\u00e4user M, Fischer M (2015) Taxonomy and survey of collaborative intrusion detection. ACM Comput Surv (CSUR) 47(4):55","journal-title":"ACM Comput Surv (CSUR)"},{"key":"10037_CR259","doi-asserted-by":"crossref","unstructured":"Veeramachaneni K, Arnaldo I, Korrapati V, Bassias C, Li K (2016) AI 2: training a big data machine to defend. In: 2016 IEEE 2nd international conference on big data security on cloud (BigDataSecurity), IEEE international conference on high performance and smart computing (HPSC), and IEEE international conference on intelligent data and security (IDS). IEEE, pp 49\u201354","DOI":"10.1109\/BigDataSecurity-HPSC-IDS.2016.79"},{"key":"10037_CR260","doi-asserted-by":"crossref","unstructured":"Verma P, Anwar S, Khan S, Mane SB (2018) Network intrusion detection using clustering and gradient boosting. 2018 9th international conference on computing, communication and networking technologies (ICCCNT). IEEE, pp 1\u20137","DOI":"10.1109\/ICCCNT.2018.8494186"},{"key":"10037_CR261","doi-asserted-by":"crossref","unstructured":"Vidal JM, Monge MAS, Monterrubio SMM (2020) Anomaly-based intrusion detection: adapting to present and forthcoming communication environments. In: Handbook of research on machine and deep learning applications for cyber security. IGI Global, pp 195\u2013218","DOI":"10.4018\/978-1-5225-9611-0.ch010"},{"key":"10037_CR262","doi-asserted-by":"crossref","first-page":"304","DOI":"10.1016\/j.cose.2018.04.010","volume":"77","author":"R Vijayanand","year":"2018","unstructured":"Vijayanand R, Devaraj D, Kannapiran B (2018) Intrusion detection system for wireless mesh network using multiple support vector machine classifiers with genetic-algorithm-based feature selection. Comput Secur 77:304\u2013314","journal-title":"Comput Secur"},{"issue":"Oct","key":"10037_CR263","first-page":"2837","volume":"11","author":"NX Vinh","year":"2010","unstructured":"Vinh NX, Epps J, Bailey J (2010) Information theoretic measures for clusterings comparison: variants, properties, normalization and correction for chance. J Mach Learn Res 11(Oct):2837\u20132854","journal-title":"J Mach Learn Res"},{"key":"10037_CR264","doi-asserted-by":"crossref","unstructured":"Wang AH (2010) Detecting spam bots in online social networking sites: a machine learning approach. In: IFIP annual conference on data and applications security and privacy. Springer, pp 335\u2013342","DOI":"10.1007\/978-3-642-13739-6_25"},{"issue":"9","key":"10037_CR265","doi-asserted-by":"crossref","first-page":"6225","DOI":"10.1016\/j.eswa.2010.02.102","volume":"37","author":"G Wang","year":"2010","unstructured":"Wang G, Hao J, Ma J, Huang L (2010) A new approach to intrusion detection using Artificial Neural Networks and fuzzy clustering. Expert Syst Appl 37(9):6225\u20136232","journal-title":"Expert Syst Appl"},{"key":"10037_CR266","doi-asserted-by":"crossref","first-page":"130","DOI":"10.1016\/j.knosys.2017.09.014","volume":"136","author":"H Wang","year":"2017","unstructured":"Wang H, Gu J, Wang S (2017) An effective intrusion detection framework based on SVM with feature augmentation. Knowl-Based Syst 136:130\u2013139","journal-title":"Knowl-Based Syst"},{"key":"10037_CR267","unstructured":"Wang J, Hong X, Ren Rr, Li Th (2009) A real-time intrusion detection system based on PSO-SVM. In: Proceedings. The 2009 international workshop on information security and application (IWISA 2009), Citeseer, p 319"},{"issue":"12","key":"10037_CR268","doi-asserted-by":"crossref","first-page":"15234","DOI":"10.1016\/j.eswa.2011.05.076","volume":"38","author":"SS Wang","year":"2011","unstructured":"Wang SS, Yan KQ, Wang SC, Liu CW (2011) An integrated intrusion detection system for cluster-based wireless sensor networks. Expert Syst Appl 38(12):15234\u201315243","journal-title":"Expert Syst Appl"},{"key":"10037_CR269","doi-asserted-by":"crossref","first-page":"1792","DOI":"10.1109\/ACCESS.2017.2780250","volume":"6","author":"W Wang","year":"2018","unstructured":"Wang W, Sheng Y, Wang J, Zeng X, Ye X, Huang Y, Zhu M (2018) HAST-IDS: learning hierarchical spatial-temporal features using deep neural networks to improve intrusion detection. IEEE Access 6:1792\u20131806","journal-title":"IEEE Access"},{"key":"10037_CR270","doi-asserted-by":"crossref","unstructured":"Wedde HF, Lehnhoff S, van Bonn B, Bay Z, Becker S, B\u00f6ttcher S, Brunner C, B\u00fcscher A, F\u00fcrst T, Lazarescu AM, et\u00a0al. (2007) Highly dynamic and adaptive traffic congestion avoidance in real-time inspired by honey bee behavior. In: Mobilit\u00e4t und Echtzeit, Springer, pp 21\u201331","DOI":"10.1007\/978-3-540-74837-3_3"},{"key":"10037_CR271","unstructured":"Woland A, Santuka V, Harris M, Sanbower J (2018) Integrated security technologies and solutions-volume I: Cisco security solutions for advanced threat protection with next generation firewall, intrusion prevention, AMP, and content security. Cisco Press"},{"key":"10037_CR272","doi-asserted-by":"crossref","unstructured":"Xie M, Hu J (2013) Evaluating host-based anomaly detection systems: a preliminary analysis of ADFA-LD. In: 2013 6th international congress on image and signal processing (CISP), vol\u00a03. IEEE, pp 1711\u20131716","DOI":"10.1109\/CISP.2013.6743952"},{"key":"10037_CR273","doi-asserted-by":"crossref","unstructured":"Xie M, Hu J, Slay J (2014) Evaluating host-based anomaly detection systems: application of the one-class SVM algorithm to ADFA-LD. In: 2014 11th international conference on fuzzy systems and knowledge discovery (FSKD). IEEE, pp 978\u2013982","DOI":"10.1109\/FSKD.2014.6980972"},{"key":"10037_CR274","doi-asserted-by":"crossref","first-page":"26","DOI":"10.1016\/j.future.2016.02.005","volume":"61","author":"Y Xie","year":"2016","unstructured":"Xie Y, Feng D, Tan Z, Zhou J (2016) Unifying intrusion detection and forensic analysis via provenance awareness. Future Gener Comput Syst 61:26\u201336","journal-title":"Future Gener Comput Syst"},{"key":"10037_CR275","doi-asserted-by":"crossref","unstructured":"Xin Y, Kong L, Liu Z, Chen Y, Li Y, Zhu H, Gao M, Hou H, Wang C (2018) Machine Learning and Deep Learning Methods for Cybersecurity. IEEE Access 6:35365\u201335381","DOI":"10.1109\/ACCESS.2018.2836950"},{"key":"10037_CR276","doi-asserted-by":"crossref","unstructured":"Xu C, Zhang Q, Li J, Zhao X (2008) A bee swarm genetic algorithm for the optimization of DNA encoding. In: 3rd international conference on innovative computing information and control, 2008. ICICIC\u201908. IEEE, pp 35\u201335","DOI":"10.1109\/ICICIC.2008.8"},{"key":"10037_CR277","doi-asserted-by":"crossref","first-page":"48697","DOI":"10.1109\/ACCESS.2018.2867564","volume":"6","author":"C Xu","year":"2018","unstructured":"Xu C, Shen J, Du X, Zhang F (2018) An intrusion detection system using a deep neural network with gated recurrent units. IEEE Access 6:48697\u201348707","journal-title":"IEEE Access"},{"key":"10037_CR278","first-page":"14","volume":"00","author":"J Xu","year":"2020","unstructured":"Xu J, Han D, Li KC, Jiang H (2020) A k-means algorithm based on characteristics of density applied to network intrusion detection. Comput Sci Inf Syst 00:14\u201314","journal-title":"Comput Sci Inf Syst"},{"key":"10037_CR279","doi-asserted-by":"crossref","first-page":"30750","DOI":"10.1038\/srep30750","volume":"6","author":"Z Yang","year":"2016","unstructured":"Yang Z, Algesheimer R, Tessone CJ (2016) A comparative analysis of community detection algorithms on artificial networks. Sci Rep 6:30750","journal-title":"Sci Rep"},{"key":"10037_CR280","unstructured":"Yassin W, Udzir NI, Muda Z, Sulaiman MN, et\u00a0al. (2013) Anomaly-based intrusion detection through k-means clustering and Naives Bayes classification. In: Proceedings of 4th international conference on computing and informatics, ICOCI, vol 49, pp 298\u2013303"},{"key":"10037_CR281","doi-asserted-by":"crossref","unstructured":"Yihunie F, Abdelfattah E, Regmi A (2019) Applying machine learning to anomaly-based intrusion detection systems. In: 2019 IEEE Long Island systems, applications and technology conference (LISAT). IEEE, pp 1\u20135","DOI":"10.1109\/LISAT.2019.8817340"},{"key":"10037_CR282","doi-asserted-by":"crossref","first-page":"21954","DOI":"10.1109\/ACCESS.2017.2762418","volume":"5","author":"C Yin","year":"2017","unstructured":"Yin C, Zhu Y, Fei J, He X (2017) A deep learning approach for intrusion detection using recurrent neural networks. IEEE Access 5:21954\u201321961","journal-title":"IEEE Access"},{"issue":"5","key":"10037_CR283","doi-asserted-by":"crossref","first-page":"649","DOI":"10.1109\/TSMCC.2008.923876","volume":"38","author":"J Zhang","year":"2008","unstructured":"Zhang J, Zulkernine M, Haque A (2008) Random-forests-based network intrusion detection systems. IEEE Trans Syst Man Cybern Part C Appl Rev 38(5):649\u2013659","journal-title":"IEEE Trans Syst Man Cybern Part C Appl Rev"},{"key":"10037_CR285","doi-asserted-by":"crossref","unstructured":"Zhang W, Yang Q, Geng Y (2009) A survey of anomaly detection methods in networks. In: International symposium on computer network and multimedia technology (2009), CNMT 2009. IEEE, pp 1\u20133","DOI":"10.1109\/CNMT.2009.5374676"},{"key":"10037_CR286","doi-asserted-by":"crossref","unstructured":"Zhou H (2018) Malware detection with neural network using combined features. In: China cyber security annual conference. Springer, pp 96\u2013106","DOI":"10.1007\/978-981-13-6621-5_8"}],"container-title":["Artificial Intelligence Review"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10462-021-10037-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10462-021-10037-9\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10462-021-10037-9.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,29]],"date-time":"2022-01-29T07:12:33Z","timestamp":1643440353000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10462-021-10037-9"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,7,1]]},"references-count":275,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2022,1]]}},"alternative-id":["10037"],"URL":"https:\/\/doi.org\/10.1007\/s10462-021-10037-9","relation":{},"ISSN":["0269-2821","1573-7462"],"issn-type":[{"value":"0269-2821","type":"print"},{"value":"1573-7462","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,7,1]]},"assertion":[{"value":"1 July 2021","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of Interest"}}]}}