{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,20]],"date-time":"2026-01-20T02:19:00Z","timestamp":1768875540054,"version":"3.49.0"},"reference-count":41,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2013,6,13]],"date-time":"2013-06-13T00:00:00Z","timestamp":1371081600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Appl Intell"],"published-print":{"date-parts":[[2014,1]]},"DOI":"10.1007\/s10489-013-0452-6","type":"journal-article","created":{"date-parts":[[2013,6,12]],"date-time":"2013-06-12T01:36:27Z","timestamp":1371000987000},"page":"178-188","source":"Crossref","is-referenced-by-count":53,"title":["A distance sum-based hybrid method for intrusion detection"],"prefix":"10.1007","volume":"40","author":[{"given":"Chun","family":"Guo","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yajian","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yuan","family":"Ping","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhongkun","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Guole","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yixian","family":"Yang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2013,6,13]]},"reference":[{"key":"452_CR1","volume-title":"UCI machine learning repository","author":"A Asuncion","year":"2007","unstructured":"Asuncion A, Newman DJ (2007) In: UCI machine learning repository. University of California, School of Information and Computer Sciences. Available on: http:\/\/www.ics.uci.edu\/mlearn\/MLRepository.html"},{"issue":"1","key":"452_CR2","doi-asserted-by":"crossref","first-page":"33","DOI":"10.1007\/s10710-011-9143-4","volume":"13","author":"K Badran","year":"2012","unstructured":"Badran K, Rockett P (2012) Multi-class pattern classification using single, multi-dimensional feature-space feature extraction evolved by multi-objective genetic programming and its application to network intrusion detection. Genet Program Evol Mach 13(1):33\u201363","journal-title":"Genet Program Evol Mach"},{"issue":"4","key":"452_CR3","doi-asserted-by":"crossref","first-page":"520","DOI":"10.1007\/s10489-012-0383-7","volume":"38","author":"S Benferhat","year":"2013","unstructured":"Benferhat S, Boudjelida A, Tabia K, Drias H (2013) An intrusion detection and alert correlation approach based on revising probabilistic classifiers using expert knowledge. Appl Intell 38(4):520\u2013540","journal-title":"Appl Intell"},{"key":"452_CR4","volume-title":"Proceedings of the 3\u00e8me conf\u00e9rence sur la S\u00e9curit\u00e9 et Architectures R\u00e9seaux (SAR)","author":"Y Bouzida","year":"2004","unstructured":"Bouzida Y, Cuppens F, Cuppens-Boulahia N, Gombault S (2004) Efficient intrusion detection using principal component analysis. In: Proceedings of the 3\u00e8me conf\u00e9rence sur la S\u00e9curit\u00e9 et Architectures R\u00e9seaux (SAR)"},{"issue":"4","key":"452_CR5","doi-asserted-by":"crossref","first-page":"295","DOI":"10.1016\/j.cose.2004.09.008","volume":"24","author":"S Chebrolu","year":"2005","unstructured":"Chebrolu S, Abraham A, Thomas JP (2005) Feature deduction and ensemble design of intrusion detection systems. Comput Secur 24(4):295\u2013307","journal-title":"Comput Secur"},{"issue":"10","key":"452_CR6","doi-asserted-by":"crossref","first-page":"2617","DOI":"10.1016\/j.cor.2004.03.019","volume":"32","author":"WH Chen","year":"2005","unstructured":"Chen WH, Hsu SH, Shen HP (2005) Application of SVM and ANN for intrusion detection. Comput Oper Res 32(10):2617\u20132634","journal-title":"Comput Oper Res"},{"issue":"9","key":"452_CR7","doi-asserted-by":"crossref","first-page":"3014","DOI":"10.1016\/j.asoc.2012.04.020","volume":"12","author":"YY Chung","year":"2012","unstructured":"Chung YY, Wahid N (2012) A hybrid network intrusion detection system using simplified swarm optimization (SSO). Appl Soft Comput 12(9):3014\u20133022","journal-title":"Appl Soft Comput"},{"key":"452_CR8","doi-asserted-by":"crossref","first-page":"222","DOI":"10.1109\/TSE.1987.232894","volume":"13","author":"DE Denning","year":"1987","unstructured":"Denning DE (1987) An intrusion-detection model. IEEE Trans Softw Eng 13:222\u2013232","journal-title":"IEEE Trans Softw Eng"},{"issue":"2","key":"452_CR9","doi-asserted-by":"crossref","first-page":"280","DOI":"10.1007\/s10489-010-0260-1","volume":"36","author":"L Diosan","year":"2012","unstructured":"Diosan L, Rogozan A, Pecuchet J-P (2012) Improving classification performance of support vector machine by genetically optimising kernel shape and hyper-parameters. Appl Intell 36(2):280\u2013294","journal-title":"Appl Intell"},{"key":"452_CR10","volume-title":"Pattern classification","author":"R Duda","year":"2000","unstructured":"Duda R, Hart P, Stork D (2000) Pattern classification, 2nd edn. Wiley, New York","edition":"2"},{"issue":"7","key":"452_CR11","doi-asserted-by":"crossref","first-page":"4349","DOI":"10.1016\/j.asoc.2010.12.004","volume":"11","author":"HT Elshoush","year":"2011","unstructured":"Elshoush HT, Osman IM (2011) Alert correlation in collaborative intelligent intrusion detection systems-A survey. Appl Soft Comput 11(7):4349\u20134365","journal-title":"Appl Soft Comput"},{"issue":"2","key":"452_CR12","doi-asserted-by":"crossref","first-page":"98","DOI":"10.1007\/s10489-007-0101-z","volume":"30","author":"PY Hao","year":"2009","unstructured":"Hao PY, Chiang JH, Lin YH (2009) A new maximal-margin spherical-structured multi-class support vector machine. Appl Intell 30(2):98\u2013111","journal-title":"Appl Intell"},{"issue":"2","key":"452_CR13","doi-asserted-by":"crossref","first-page":"415","DOI":"10.1109\/72.991427","volume":"13","author":"CW Hsu","year":"2002","unstructured":"Hsu CW, Lin CJ (2002) A comparison of methods for multiclass support vector machines. IEEE Trans Neural Netw 13(2):415\u2013425","journal-title":"IEEE Trans Neural Netw"},{"key":"452_CR14","unstructured":"Kdd cup 99 intrusion detection dataset task description. University of California Department of Information and Computer Science (1999). http:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html"},{"issue":"2","key":"452_CR15","doi-asserted-by":"crossref","first-page":"320","DOI":"10.1007\/s10489-010-0263-y","volume":"36","author":"KC Khor","year":"2012","unstructured":"Khor KC, Ting CY, Amnuaisuk SP (2012) A cascaded classifier approach for improving detection rates on rare attack categories in network intrusion detection. Appl Intell 36(2):320\u2013329","journal-title":"Appl Intell"},{"key":"452_CR16","first-page":"255","volume-title":"Advances in kernel methods\u2014support vector learning","author":"U KreBel","year":"1999","unstructured":"KreBel U (1999) Pairwise classification and support vector machines. In: Scholkopf B, Burges CJC, Smola AJ (eds) Advances in kernel methods\u2014support vector learning. MIT Press, Cambridge, pp 255\u2013268"},{"issue":"4","key":"452_CR17","doi-asserted-by":"crossref","first-page":"369","DOI":"10.1007\/s10462-010-9179-5","volume":"34","author":"G Kumar","year":"2010","unstructured":"Kumar G, Kumar K, Sachdeva M (2010) The use of artificial intelligence based techniques for intrusion detection: a review. Artif Intell Rev 34(4):369\u2013387","journal-title":"Artif Intell Rev"},{"issue":"2","key":"452_CR18","doi-asserted-by":"crossref","first-page":"295","DOI":"10.1007\/s10489-010-0261-0","volume":"36","author":"LH Lee","year":"2012","unstructured":"Lee LH, Rajkumar R, Isa D (2012) Automatic folder allocation system using Bayesian-support vector machines hybrid classification approach. Appl Intell 36(2):295\u2013307","journal-title":"Appl Intell"},{"issue":"1","key":"452_CR19","doi-asserted-by":"crossref","first-page":"80","DOI":"10.1007\/s10489-011-0314-z","volume":"37","author":"LH Lee","year":"2012","unstructured":"Lee LH, Wan CH, Rajkumar R, Isa D (2012) An enhanced support vector machine classification framework by using Euclidean distance function for text document categorization. Appl Intell 37(1):80\u201399","journal-title":"Appl Intell"},{"issue":"5","key":"452_CR20","doi-asserted-by":"crossref","first-page":"439","DOI":"10.1016\/S0167-4048(02)00514-X","volume":"21","author":"Y Liao","year":"2002","unstructured":"Liao Y, Vemuri VR (2002) Use of K-nearest neighbor classifier for intrusion detection. Comput Secur 21(5):439\u2013448","journal-title":"Comput Secur"},{"issue":"6","key":"452_CR21","doi-asserted-by":"crossref","first-page":"3408","DOI":"10.1137\/090748834","volume":"20","author":"H Mittelmann","year":"2010","unstructured":"Mittelmann H, Peng J (2010) Estimating bounds for quadratic assignment problems associated with Hamming and Manhattan distance matrices based on semidefinite programming. SIAM J Optim 20(6):3408\u20133426","journal-title":"SIAM J Optim"},{"issue":"1","key":"452_CR22","first-page":"73","volume":"9","author":"JF Peng","year":"2011","unstructured":"Peng JF, Zhou YJ, Wang C, Yang YX, Ping Y (2011) Early TCP traffic classification. J Appl Sci 9(1):73\u201377","journal-title":"J Appl Sci"},{"key":"452_CR23","volume-title":"Proceedings of the 2000 NAACL-ANL","author":"DR Radev","year":"2000","unstructured":"Radev DR, Jing H, Budzikowska M (2000) Centroid-based summarization of multiple documents: sentence extraction, utility-based evaluation, and user studies. In: Proceedings of the 2000 NAACL-ANL"},{"issue":"4","key":"452_CR24","doi-asserted-by":"crossref","first-page":"403","DOI":"10.3233\/IDA-2004-8406","volume":"8","author":"M Sabhnani","year":"2004","unstructured":"Sabhnani M, Serpen G (2004) Why machine learning algorithms fail in misuse detection on KDD intrusion detection data set. Intell Data Anal 8(4):403\u2013415","journal-title":"Intell Data Anal"},{"key":"452_CR25","doi-asserted-by":"crossref","first-page":"38","DOI":"10.1109\/SECPRI.2001.924286","volume-title":"Proceedings of the 2001 IEEE symposium on security and privacy","author":"MG Schultz","year":"2001","unstructured":"Schultz MG, Eskin E, Zadok F, Stolfo SJ (2001) Data mining methods for detection of new malicious executables. In: Proceedings of the 2001 IEEE symposium on security and privacy. IEEE Press, New York, pp 38\u201349"},{"issue":"18","key":"452_CR26","doi-asserted-by":"crossref","first-page":"3799","DOI":"10.1016\/j.ins.2007.03.025","volume":"177","author":"T Shon","year":"2007","unstructured":"Shon T, Moon J (2007) A hybrid machine learning approach to network anomaly detection. Inf Sci 177(18):3799\u20133821","journal-title":"Inf Sci"},{"issue":"3","key":"452_CR27","doi-asserted-by":"crossref","first-page":"225","DOI":"10.1109\/TEVC.2004.841683","volume":"9","author":"D Song","year":"2005","unstructured":"Song D, Heywood MI, Zincir-Heywood AN (2005) Training genetic programming on half a million patterns: an example from anomaly detection. IEEE Trans Evol Comput 9(3):225\u2013239","journal-title":"IEEE Trans Evol Comput"},{"issue":"2","key":"452_CR28","doi-asserted-by":"crossref","first-page":"462","DOI":"10.1016\/j.asoc.2008.06.001","volume":"9","author":"A Tajbakhsh","year":"2009","unstructured":"Tajbakhsh A, Rahmati M, Mirzaei A (2009) Intrusion detection using fuzzy association rules. Appl Soft Comput 9(2):462\u2013469","journal-title":"Appl Soft Comput"},{"issue":"5","key":"452_CR29","doi-asserted-by":"crossref","first-page":"516","DOI":"10.1109\/TSMCC.2010.2048428","volume":"40","author":"M Tavallaee","year":"2010","unstructured":"Tavallaee M, Stakhanova N, Ghorbani AA (2010) Toward credible evaluation of anomaly-based intrusion-detection methods. IEEE Trans Syst Man Cybern, Part C, Appl Rev 40(5):516\u2013524","journal-title":"IEEE Trans Syst Man Cybern, Part C, Appl Rev"},{"key":"452_CR30","doi-asserted-by":"crossref","first-page":"428","DOI":"10.1109\/CSAC.2004.4","volume-title":"Proceedings of the 20th annual computer security applications conference","author":"E Tombini","year":"2004","unstructured":"Tombini E, Debar H, Me L, Ducasse M (2004) A serial combination of anomaly and misuse IDSs applied to HTTP traffic. In: Proceedings of the 20th annual computer security applications conference. IEEE Press, New York, pp 428\u2013437"},{"issue":"1","key":"452_CR31","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1155\/2011\/136319","volume":"2011","author":"CF Tsai","year":"2011","unstructured":"Tsai CF, Lin WY, Hong ZF, Hsieh CY (2011) Distance-based features in pattern classification. EURASIP J Adv Signal Process 2011(1):1\u201311","journal-title":"EURASIP J Adv Signal Process"},{"issue":"1","key":"452_CR32","doi-asserted-by":"crossref","first-page":"222","DOI":"10.1016\/j.patcog.2009.05.017","volume":"43","author":"CF Tsai","year":"2010","unstructured":"Tsai CF, Lin CY (2010) A triangle area based nearest neighbors approach to intrusion detection. Pattern Recognit 43(1):222\u2013229","journal-title":"Pattern Recognit"},{"issue":"10","key":"452_CR33","doi-asserted-by":"crossref","first-page":"11994","DOI":"10.1016\/j.eswa.2009.05.029","volume":"36","author":"CF Tsai","year":"2009","unstructured":"Tsai CF, Hsu YF, Lin CY, Lin WY (2009) Intrusion detection by machine learning: a review. Expert Syst Appl 36(10):11994\u201312000","journal-title":"Expert Syst Appl"},{"issue":"9","key":"452_CR34","doi-asserted-by":"crossref","first-page":"2373","DOI":"10.1016\/j.patcog.2006.12.009","volume":"40","author":"CH Tsang","year":"2007","unstructured":"Tsang CH, Kwong S, Wang H (2007) Genetic-fuzzy rule mining approach and evaluation of feature selection techniques for anomaly intrusion detection. Pattern Recognit 40(9):2373\u20132391","journal-title":"Pattern Recognit"},{"key":"452_CR35","volume-title":"The telecommunication networks group @ UniBs","author":"UNIBS","year":"2010","unstructured":"UNIBS (2010) The UNIBS anonymized 2009 Internet traces. In: The telecommunication networks group @ UniBs. http:\/\/www.ing.unibs.it\/ntw\/tools\/traces"},{"key":"452_CR36","first-page":"207","volume":"10","author":"KQ Weinberger","year":"2009","unstructured":"Weinberger KQ, Saul LK (2009) Distance metric learning for large margin nearest neighbor classification. J Mach Learn Res 10:207\u2013244","journal-title":"J Mach Learn Res"},{"issue":"1","key":"452_CR37","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.asoc.2009.06.019","volume":"10","author":"SX Wu","year":"2010","unstructured":"Wu SX, Banzhaf W (2010) The use of computational intelligence in intrusion detection systems: a review. Appl Soft Comput 10(1):1\u201335","journal-title":"Appl Soft Comput"},{"issue":"7","key":"452_CR38","doi-asserted-by":"crossref","first-page":"918","DOI":"10.1016\/j.patrec.2008.01.008","volume":"29","author":"C Xiang","year":"2008","unstructured":"Xiang C, Yong PC, Meng LS (2008) Design of multiple-level hybrid classifier for intrusion detection system using Bayesian clustering and decision trees. Pattern Recognit Lett 29(7):918\u2013924","journal-title":"Pattern Recognit Lett"},{"issue":"1","key":"452_CR39","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1007\/s10489-009-0202-y","volume":"35","author":"J Zeng","year":"2011","unstructured":"Zeng J, Liu X, Li T, Li G, Li H, Zeng J (2011) A novel intrusion detection approach learned from the change of antibody concentration in biological immune response. Appl Intell 35(1):41\u201362","journal-title":"Appl Intell"},{"key":"452_CR40","first-page":"262","volume-title":"Proceedings of the first international conference on availability, reliability and security","author":"J Zhang","year":"2006","unstructured":"Zhang J, Zulkernine M (2006) A hybrid network intrusion detection technique using random forests. In: Proceedings of the first international conference on availability, reliability and security. IEEE Press, New York, pp 262\u2013269"},{"key":"452_CR41","first-page":"212","volume-title":"Proceedings of the 28th annual international","author":"Y Zhenwei","year":"2004","unstructured":"Zhenwei Y, Tsai JJP (2004) A multi-class SLIPPER system for intrusion detection. In: Proceedings of the 28th annual international, Computer Software and Applications Conference, 2004, pp 212\u2013217"}],"container-title":["Applied Intelligence"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10489-013-0452-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10489-013-0452-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10489-013-0452-6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,7,15]],"date-time":"2019-07-15T05:56:18Z","timestamp":1563170178000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10489-013-0452-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2013,6,13]]},"references-count":41,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2014,1]]}},"alternative-id":["452"],"URL":"https:\/\/doi.org\/10.1007\/s10489-013-0452-6","relation":{},"ISSN":["0924-669X","1573-7497"],"issn-type":[{"value":"0924-669X","type":"print"},{"value":"1573-7497","type":"electronic"}],"subject":[],"published":{"date-parts":[[2013,6,13]]}}}