{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T19:51:17Z","timestamp":1784404277425,"version":"3.55.0"},"reference-count":42,"publisher":"Springer Science and Business Media LLC","issue":"10","license":[{"start":{"date-parts":[[2022,9,27]],"date-time":"2022-09-27T00:00:00Z","timestamp":1664236800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2022,9,27]],"date-time":"2022-09-27T00:00:00Z","timestamp":1664236800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100001809","name":"national natural science foundation of china","doi-asserted-by":"publisher","award":["61876189"],"award-info":[{"award-number":["61876189"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"national natural science foundation of china","doi-asserted-by":"publisher","award":["61806219"],"award-info":[{"award-number":["61806219"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"national natural science foundation of china","doi-asserted-by":"publisher","award":["61703426"],"award-info":[{"award-number":["61703426"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Innovation Capability Support Plan of Shaanxi, China","award":["2020KJXX-065"],"award-info":[{"award-number":["2020KJXX-065"]}]},{"name":"National Science Foundation of Shaanxi Provence","award":["2021JM-226"],"award-info":[{"award-number":["2021JM-226"]}]},{"name":"Young Talent fund of University and Association for Science and Technology in Shaanxi, China","award":["20190108"],"award-info":[{"award-number":["20190108"]}]},{"name":"Young Talent fund of University and Association for Science and Technology in Shaanxi, China","award":["20220106"],"award-info":[{"award-number":["20220106"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Appl Intell"],"published-print":{"date-parts":[[2023,5]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>There is a class-imbalance problem that the number of minority class samples is significantly lower than that of majority class samples in common network traffic datasets. Class-imbalance phenomenon will affect the performance of the classifier and reduce the robustness of the classifier to detect unknown anomaly detection. And the distribution of the continuous features in the dataset does not follow the Gaussian distribution, which will bring great difficulties to intrusion detection. We propose Conditional Wasserstein Variational Autoencoders with Generative Adversarial Network (CWVAEGAN) to solve the class-imbalance phenomenon, CWVAEGAN transform the original dataset through data preprocessing, and then use the improved VAEGAN to generate minority class samples. According to the CWVAEGAN model, an intrusion detection system based on CWVAEGAN and One-dimensional convolutional neural networks (1DCNN), namely CWVAEGAN-1DCNN, is established. By using the examples generated by CWVAEGAN, the problem of intrusion detection on class unbalanced data is solved. Specifically, CWVAEGAN-1DCNN consists of three modules: data preprocessing module, CWVAEGAN, and deep neural network. We evaluate the performance of CWVAEGAN-1DCNN on two benchmark datasets and compared it with the other 16 methods. Experiment results suggest that the performance of CWVAEGAN-1DCNN is better than class-balancing methods, and other advanced methods.<\/jats:p>","DOI":"10.1007\/s10489-022-03995-2","type":"journal-article","created":{"date-parts":[[2022,9,27]],"date-time":"2022-09-27T04:02:32Z","timestamp":1664251352000},"page":"12416-12436","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":21,"title":["Network intrusion detection based on conditional wasserstein variational autoencoder with generative adversarial network and one-dimensional convolutional neural networks"],"prefix":"10.1007","volume":"53","author":[{"given":"Jiaxing","family":"He","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2785-9539","authenticated-orcid":false,"given":"Xiaodan","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yafei","family":"Song","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qian","family":"Xiang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chen","family":"Chen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,9,27]]},"reference":[{"key":"3995_CR1","doi-asserted-by":"crossref","unstructured":"Grahn K, Westerlund M, Pulkkis G (2017) Analytics for network security: a survey and taxonomy. In: Alsmadi IM, Karabatis G, Aleroud A (eds) Information fusion for cyber-security analytics. Springer International Publishing, Cham. pp 175\u2013193","DOI":"10.1007\/978-3-319-44257-0_8"},{"key":"3995_CR2","unstructured":"Panda M, Patra M (20071) Network intrusion detection using naive bayes. p 7"},{"key":"3995_CR3","doi-asserted-by":"publisher","first-page":"45","DOI":"10.4236\/jilsa.2014.61005","volume":"06","author":"MdA Hasan","year":"2014","unstructured":"Hasan MdA, Nasser M, Pal B, Ahmad S (2014) Support vector machine and random forest modeling for intrusion detection system (IDS). J Intell Learn Syst Appl 06:45\u201352. https:\/\/doi.org\/10.4236\/jilsa.2014.61005","journal-title":"J Intell Learn Syst Appl"},{"key":"3995_CR4","doi-asserted-by":"publisher","first-page":"2528","DOI":"10.3390\/s19112528","volume":"19","author":"Y Yang","year":"2019","unstructured":"Yang Y, Zheng K, Wu C, Yang Y (2019) Improving the classification effectiveness of intrusion detection by using improved conditional variational autoencoder and deep neural network. Sensors 19:2528. https:\/\/doi.org\/10.3390\/s19112528","journal-title":"Sensors"},{"key":"3995_CR5","unstructured":"Srivastava A, Valkov L, Russell C et al (2017) VEEGAN: reducing mode collapse in gans using implicit variational learning"},{"key":"3995_CR6","doi-asserted-by":"publisher","unstructured":"Tavallaee M, Bagheri E, Lu W, Ghorbani A (2009) A detailed analysis of the KDD CUP 99 dataset. IEEE Symposium Comput Intell Security Defense Appl, CISDA 2. https:\/\/doi.org\/10.1109\/CISDA.2009.5356528https:\/\/doi.org\/10.1109\/CISDA.2009.5356528","DOI":"10.1109\/CISDA.2009.5356528 10.1109\/CISDA.2009.5356528"},{"key":"3995_CR7","unstructured":"Bishop C (2006) Pattern recognition and machine learning. In: Journal of electronic imaging, pp 140\u2013155"},{"key":"3995_CR8","unstructured":"Gulrajani I, Ahmed F, Arjovsky M et al (2017) Improved training of wasserstein GANs"},{"key":"3995_CR9","unstructured":"Larsen A, S\u00f8nderby S, Winther O (2015) Autoencoding beyond pixels using a learned similarity metric"},{"key":"3995_CR10","unstructured":"Wang Y, Wong J, Miner A (2004) Anomaly intrusion detection using one class SVM"},{"key":"3995_CR11","unstructured":"Deng H (2003) SVM-based intrusion detection system for wireless ad hoc networks"},{"key":"3995_CR12","unstructured":"Moradi M, ZULKERNINE M (2014) A Neural network based system for intrusion detection and classification of attacks"},{"key":"3995_CR13","doi-asserted-by":"crossref","unstructured":"Li Z, Qin Z, Huang K et al (2017) Intrusion detection using convolutional neural networks for representation learning. In: Liu D, Xie S, Li Y (eds) Neural Information Processing. Springer International Publishing, Cham, pp1 858\u2013866","DOI":"10.1007\/978-3-319-70139-4_87"},{"key":"3995_CR14","doi-asserted-by":"publisher","first-page":"1701","DOI":"10.3390\/s16101701","volume":"16","author":"T Ma","year":"2016","unstructured":"Ma T, Wang F, Cheng J, et al. (2016) A hybrid spectral clustering and deep neural network ensemble algorithm for intrusion detection in sensor networks. Sensors 16:1701. https:\/\/doi.org\/10.3390\/s16101701https:\/\/doi.org\/10.3390\/s16101701","journal-title":"Sensors"},{"key":"3995_CR15","doi-asserted-by":"publisher","first-page":"21954","DOI":"10.1109\/ACCESS.2017.2762418","volume":"5","author":"C Yin","year":"2017","unstructured":"Yin C, Zhu Y, Fei J, He X (2017) A deep learning approach for intrusion detection using recurrent neural networks. IEEE Acce 5:21954\u201321961. https:\/\/doi.org\/10.1109\/ACCESS.2017.2762418","journal-title":"IEEE Acce"},{"key":"3995_CR16","doi-asserted-by":"publisher","unstructured":"Adhi Tama B, Comuzzi M, Rhee KH (2019) TSE-IDS: a two-stage classifier ensemble for intelligent anomaly-based intrusion detection system. IEEE Acc, p 7. https:\/\/doi.org\/10.1109\/ACCESS.2019.2928048https:\/\/doi.org\/10.1109\/ACCESS.2019.2928048","DOI":"10.1109\/ACCESS.2019.2928048 10.1109\/ACCESS.2019.2928048"},{"key":"3995_CR17","doi-asserted-by":"publisher","first-page":"1133","DOI":"10.1007\/s10489-020-01886-y","volume":"51","author":"P Bedi","year":"2021","unstructured":"Bedi P, Gupta N, Jindal V (2021) I-SiamIDS: an improved Siam-IDS: for handling class imbalance in network-based intrusion detection systems. Appl Intell 51:1133\u20131151. https:\/\/doi.org\/10.1007\/s10489-020-01886-yhttps:\/\/doi.org\/10.1007\/s10489-020-01886-y","journal-title":"Appl Intell"},{"key":"3995_CR18","doi-asserted-by":"publisher","unstructured":"Khan F, Gumaei A, Derhab A, Hussain A (2019) A novel two-stage deep learning model for efficient network intrusion detection. IEEE Access:1\u201310. https:\/\/doi.org\/10.1109\/ACCESS.2019.2899721https:\/\/doi.org\/10.1109\/ACCESS.2019.2899721","DOI":"10.1109\/ACCESS.2019.2899721 10.1109\/ACCESS.2019.2899721"},{"key":"3995_CR19","doi-asserted-by":"publisher","first-page":"2528","DOI":"10.3390\/s19112528","volume":"19","author":"Y Yang","year":"2019","unstructured":"Yang Y, Zheng K, Wu C, Yang Y (2019) Improving the classification effectiveness of intrusion detection by using improved conditional variational autoencoder and deep neural network. Sensors 19:2528. https:\/\/doi.org\/10.3390\/s19112528","journal-title":"Sensors"},{"key":"3995_CR20","doi-asserted-by":"publisher","unstructured":"Tian Q, Han D, Li K -C, Liu X, Duan L, Castiglione A (2020) An intrusion detection approach based on improved deep belief network. Appl Intell:50, https:\/\/doi.org\/10.1007\/s10489-020-01694-4https:\/\/doi.org\/10.1007\/s10489-020-01694-4","DOI":"10.1007\/s10489-020-01694-4 10.1007\/s10489-020-01694-4"},{"key":"3995_CR21","doi-asserted-by":"publisher","unstructured":"Lee J, Park K (2019) GAN-based imbalanced data intrusion detection system. Pers Ubiquit Comput, https:\/\/doi.org\/10.1007\/s00779-019-01332-yhttps:\/\/doi.org\/10.1007\/s00779-019-01332-y","DOI":"10.1007\/s00779-019-01332-y 10.1007\/s00779-019-01332-y"},{"key":"3995_CR22","doi-asserted-by":"publisher","first-page":"42169","DOI":"10.1109\/ACCESS.2020.2977007","volume":"8","author":"Y Yang","year":"2020","unstructured":"Yang Y, Zheng K, Wu B, et al. (2020) Network intrusion detection based on supervised adversarial variational auto-encoder with regularization. IEEE Access 8:42169\u201342184. https:\/\/doi.org\/10.1109\/ACCESS.2020.2977007https:\/\/doi.org\/10.1109\/ACCESS.2020.2977007","journal-title":"IEEE Access"},{"key":"3995_CR23","doi-asserted-by":"publisher","first-page":"102177","DOI":"10.1016\/j.adhoc.2020.102177","volume":"105","author":"S Huang","year":"2020","unstructured":"Huang S, Lei K (2020) IGAN-IDS: An imbalanced generative adversarial network towards intrusion detection system in ad-hoc networks. Ad Hoc Netw 105:102177. https:\/\/doi.org\/10.1016\/j.adhoc.2020.102177https:\/\/doi.org\/10.1016\/j.adhoc.2020.102177","journal-title":"Ad Hoc Netw"},{"key":"3995_CR24","doi-asserted-by":"crossref","unstructured":"Puri A, Gupta M (2019) Comparative analysis of resampling techniques under noisy imbalanced datasets","DOI":"10.1109\/ICICT46931.2019.8977650"},{"key":"3995_CR25","doi-asserted-by":"crossref","unstructured":"Kuang L, Zulkernine M (2008) An anomaly intrusion detection method using the CSI-KNN algorithm","DOI":"10.1145\/1363686.1363897"},{"key":"3995_CR26","doi-asserted-by":"publisher","unstructured":"Abdulhammed R, Faezipour M, Abuzneid A, Abumallouh A (2019) Deep and machine learning approaches for anomaly-based intrusion detection of imbalanced network traffic. vol 3:1\u20134, https:\/\/doi.org\/10.1109\/LSENS.2018.2879990","DOI":"10.1109\/LSENS.2018.2879990"},{"key":"3995_CR27","unstructured":"Cieslak D (2006) Combating imbalance in network intrusion datasets"},{"key":"3995_CR28","doi-asserted-by":"publisher","first-page":"321","DOI":"10.1613\/jair.953","volume":"16","author":"N Chawla","year":"2002","unstructured":"Chawla N, Bowyer K, Hall L, Kegelmeyer W (2002) SMOte: synthetic minority over-sampling technique. J Artif Intell Res (JAIR) 16:321\u2013357. https:\/\/doi.org\/10.1613\/jair.953","journal-title":"J Artif Intell Res (JAIR)"},{"key":"3995_CR29","doi-asserted-by":"publisher","unstructured":"Qazi N, Raza K (2012) Effect of feature selection. smote and under sampling on class imbalance classification. https:\/\/doi.org\/10.1109\/UKSim.2012.116https:\/\/doi.org\/10.1109\/UKSim.2012.116","DOI":"10.1109\/UKSim.2012.116 10.1109\/UKSim.2012.116"},{"key":"3995_CR30","doi-asserted-by":"crossref","unstructured":"Tesfahun A, Bhaskari L (2013) Intrusion detection using random forests classifier with smote and feature reduction","DOI":"10.1109\/CUBE.2013.31"},{"key":"3995_CR31","unstructured":"Kingma D, Welling M (2014) Auto-Encoding Variational Bayes"},{"key":"3995_CR32","unstructured":"Goodfellow IJ, Pouget-Abadie J, Mirza M et al (2014) Generative adversarial networks. arXiv:14062661 [cs, stat]"},{"key":"3995_CR33","unstructured":"Mirza M, Osindero S (2014) Conditional generative adversarial nets"},{"key":"3995_CR34","unstructured":"Arjovsky M (2017) Wasserste GAN, Bottou, L"},{"key":"3995_CR35","doi-asserted-by":"publisher","unstructured":"Xiang Q, Wang X, Song Y, Lei L, Li R, Lai J (2020) One-dimensional convolutional neural networks for high-resolution range profile recognition via adaptively feature recalibrating and automatically channel pruning. Int J Intell Syst, p 36. https:\/\/doi.org\/10.1002\/int.22302","DOI":"10.1002\/int.22302"},{"key":"3995_CR36","unstructured":"Misra D (2019) Mish: a self regularized non-monotonic neural activation function"},{"key":"3995_CR37","doi-asserted-by":"publisher","unstructured":"Moustafa N, Slay J (2016) The evaluation of Network Anomaly Detection Systems: statistical analysis of the UNSW-NB15 dataset and the comparison with the KDD99 dataset, pp 1\u201314. https:\/\/doi.org\/10.1080\/19393555.2015.1125974","DOI":"10.1080\/19393555.2015.1125974"},{"key":"3995_CR38","unstructured":"He H, Bai Y, Garcia E, Li S (2008) Adaptive synthetic sampling approach for imbalanced learning, ADASYN"},{"key":"3995_CR39","doi-asserted-by":"publisher","unstructured":"Adhi Tama B, Comuzzi M, Rhee KH (2019) TSE-IDS: a two-stage classifier ensemble for intelligent anomaly-based intrusion detection system. IEEE Acc vol 7, https:\/\/doi.org\/10.1109\/ACCESS.2019.2928048https:\/\/doi.org\/10.1109\/ACCESS.2019.2928048","DOI":"10.1109\/ACCESS.2019.2928048 10.1109\/ACCESS.2019.2928048"},{"key":"3995_CR40","doi-asserted-by":"crossref","unstructured":"Li Z, Gonzalez Rios A, Xu G, Trajkovic L (2019) Machine learning techniques for classifying network anomalies and intrusions","DOI":"10.1109\/ISCAS.2019.8702583"},{"key":"3995_CR41","doi-asserted-by":"publisher","first-page":"1071","DOI":"10.14778\/3231751.3231757","volume":"11","author":"N Park","year":"2018","unstructured":"Park N, Mohammadi M, Gorde K, Jajodia S, Park H, Kim Y (2018) Data synthesis based on generative adversarial networks. Proc VLDB Endow 11:1071\u20131083. https:\/\/doi.org\/10.14778\/3231751.3231757https:\/\/doi.org\/10.14778\/3231751.3231757","journal-title":"Proc VLDB Endow"},{"key":"3995_CR42","unstructured":"Benavoli A, Corani G, Mangili F (2015) Should we really use post-hoc tests based on mean-ranks?. arXive:1505.02288 Accessed 07 07 2022"}],"container-title":["Applied Intelligence"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10489-022-03995-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10489-022-03995-2\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10489-022-03995-2.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,5,20]],"date-time":"2023-05-20T10:40:12Z","timestamp":1684579212000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10489-022-03995-2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,9,27]]},"references-count":42,"journal-issue":{"issue":"10","published-print":{"date-parts":[[2023,5]]}},"alternative-id":["3995"],"URL":"https:\/\/doi.org\/10.1007\/s10489-022-03995-2","relation":{},"ISSN":["0924-669X","1573-7497"],"issn-type":[{"value":"0924-669X","type":"print"},{"value":"1573-7497","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,9,27]]},"assertion":[{"value":"12 July 2022","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"27 September 2022","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"<!--Emphasis Type='Bold' removed-->Conflict of Interests"}}]}}