{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T11:15:11Z","timestamp":1784373311002,"version":"3.55.0"},"reference-count":36,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2021,2,21]],"date-time":"2021-02-21T00:00:00Z","timestamp":1613865600000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2021,2,21]],"date-time":"2021-02-21T00:00:00Z","timestamp":1613865600000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Netw Syst Manage"],"published-print":{"date-parts":[[2021,4]]},"DOI":"10.1007\/s10922-021-09591-y","type":"journal-article","created":{"date-parts":[[2021,2,21]],"date-time":"2021-02-21T11:02:32Z","timestamp":1613905352000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":91,"title":["An Intelligent Tree-Based Intrusion Detection Model for Cyber Security"],"prefix":"10.1007","volume":"29","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5770-6579","authenticated-orcid":false,"given":"Mohammad","family":"Al-Omari","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Majdi","family":"Rawashdeh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fadi","family":"Qutaishat","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mohammad","family":"Alshira\u2019H","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nedal","family":"Ababneh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2021,2,21]]},"reference":[{"key":"9591_CR1","doi-asserted-by":"crossref","unstructured":"Otoum, S., Kantarci, B., Mouftah, H.: A Comparative Study of AI-based Intrusion Detection Techniques in Critical Infrastructures. arxiv.org. (2020)","DOI":"10.1145\/3406093"},{"key":"9591_CR2","doi-asserted-by":"publisher","first-page":"882","DOI":"10.1007\/s10922-020-09564-7","volume":"28","author":"C Hesselman","year":"2020","unstructured":"Hesselman, C., Grosso, P., Holz, R., Kuipers, F., Xue, J.H., Jonker, M., de Ruiter, J., Sperotto, A., van Rijswijk-Deij, R., Moura, G.C.M., Pras, A., de Laat, C.: A responsible internet to increase trust in the digital world. J. Netw. Syst. Manag. 28, 882\u2013922 (2020). https:\/\/doi.org\/10.1007\/s10922-020-09564-7","journal-title":"J. Netw. Syst. Manag."},{"key":"9591_CR3","doi-asserted-by":"publisher","first-page":"516","DOI":"10.1109\/TSMCC.2010.2048428","volume":"40","author":"M Tavallaee","year":"2010","unstructured":"Tavallaee, M., Stakhanova, N., Ghorbani, A.A.: Toward credible evaluation of anomaly-based intrusion-detection methods. IEEE Trans. Syst. Man Cybern. Part C Appl. Rev. 40, 516\u2013524 (2010). https:\/\/doi.org\/10.1109\/TSMCC.2010.2048428","journal-title":"IEEE Trans. Syst. Man Cybern. Part C Appl. Rev."},{"key":"9591_CR4","doi-asserted-by":"publisher","first-page":"312","DOI":"10.1109\/TDSC.2013.39","volume":"12","author":"JE Tapiador","year":"2015","unstructured":"Tapiador, J.E., Orfila, A., Ribagorda, A., Ramos, B.: Key-recovery attacks on KIDS, a keyed anomaly detection system. IEEE Trans. Dependable Secur. Comput. 12, 312\u2013325 (2015). https:\/\/doi.org\/10.1109\/TDSC.2013.39","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"9591_CR5","doi-asserted-by":"publisher","first-page":"1153","DOI":"10.1109\/COMST.2015.2494502","volume":"18","author":"AL Buczak","year":"2016","unstructured":"Buczak, A.L., Guven, E.: A survey of data mining and machine learning methods for cyber security intrusion detection. IEEE Commun. Surv. Tutorials 18, 1153\u20131176 (2016). https:\/\/doi.org\/10.1109\/COMST.2015.2494502","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"9591_CR6","doi-asserted-by":"publisher","first-page":"686","DOI":"10.1109\/COMST.2018.2847722","volume":"21","author":"P Mishra","year":"2019","unstructured":"Mishra, P., Varadharajan, V., Tupakula, U., Pilli, E.S.: A detailed investigation and analysis of using machine learning techniques for intrusion detection. IEEE Commun. Surv. Tutorials 21, 686\u2013728 (2019). https:\/\/doi.org\/10.1109\/COMST.2018.2847722","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"9591_CR7","doi-asserted-by":"publisher","first-page":"3369","DOI":"10.1109\/COMST.2018.2854724","volume":"20","author":"A Nisioti","year":"2018","unstructured":"Nisioti, A., Mylonas, A., Yoo, P.D., Katos, V.: From intrusion detection to attacker attribution: a comprehensive survey of unsupervised methods. IEEE Commun. Surv. Tutorials 20, 3369\u20133388 (2018). https:\/\/doi.org\/10.1109\/COMST.2018.2854724","journal-title":"IEEE Commun. Surv. Tutorials"},{"key":"9591_CR8","volume-title":"Machine Learning Approaches in Cyber Security Analytics","author":"T Thomas","year":"2019","unstructured":"Thomas, T., Vijayaraghavan, A.P., Emmanuel, S.: Machine Learning Approaches in Cyber Security Analytics. Springer, Singapore (2019)"},{"key":"9591_CR9","doi-asserted-by":"crossref","unstructured":"Otoum, S., Kantarci, B., Mouftah, H.T.: A novel ensemble method for advanced intrusion detection in wireless sensor networks. In: IEEE International Conference on Communications. Institute of Electrical and Electronics Engineers Inc. (2020)","DOI":"10.1109\/ICC40277.2020.9149413"},{"key":"9591_CR10","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.011.2000371","author":"I Al Ridhawi","year":"2020","unstructured":"Al Ridhawi, I., Otoum, S., Aloqaily, M., Boukerche, A.: Generalizing AI: challenges and opportunities for plug and play AI solutions. IEEE Netw. (2020). https:\/\/doi.org\/10.1109\/MNET.011.2000371","journal-title":"IEEE Netw."},{"key":"9591_CR11","doi-asserted-by":"publisher","first-page":"102419","DOI":"10.1016\/j.jisa.2019.102419","volume":"50","author":"MA Ferrag","year":"2020","unstructured":"Ferrag, M.A., Maglaras, L., Moschoyiannis, S., Janicke, H.: Deep learning for cyber security intrusion detection: approaches, datasets, and comparative study. J. Inf. Secur. Appl. 50, 102419 (2020). https:\/\/doi.org\/10.1016\/j.jisa.2019.102419","journal-title":"J. Inf. Secur. Appl."},{"key":"9591_CR12","doi-asserted-by":"publisher","DOI":"10.1109\/jsyst.2020.2992966","author":"D Gumusbas","year":"2020","unstructured":"Gumusbas, D., Yldrm, T., Genovese, A., Scotti, F.: A comprehensive survey of databases and deep learning methods for cybersecurity and intrusion detection systems. IEEE Syst. J. (2020). https:\/\/doi.org\/10.1109\/jsyst.2020.2992966","journal-title":"IEEE Syst. J."},{"key":"9591_CR13","doi-asserted-by":"publisher","first-page":"5","DOI":"10.5120\/ijca2017914340","volume":"173","author":"H Shapoorifard","year":"2017","unstructured":"Shapoorifard, H., Shamsinejad, P.: Intrusion detection using a novel hybrid method incorporating an improved KNN. Int. J. Comput. Appl. 173, 5\u20139 (2017). https:\/\/doi.org\/10.5120\/ijca2017914340","journal-title":"Int. J. Comput. Appl."},{"key":"9591_CR14","doi-asserted-by":"publisher","first-page":"998","DOI":"10.1007\/s10922-014-9335-3","volume":"23","author":"SY Ji","year":"2015","unstructured":"Ji, S.Y., Choi, S., Jeong, D.H.: Designing an internet traffic predictive model by applying a signal processing method. J. Netw. Syst. Manag. 23, 998\u20131015 (2015). https:\/\/doi.org\/10.1007\/s10922-014-9335-3","journal-title":"J. Netw. Syst. Manag."},{"key":"9591_CR15","doi-asserted-by":"publisher","first-page":"2986","DOI":"10.1109\/TC.2016.2519914","volume":"65","author":"MA Ambusaidi","year":"2016","unstructured":"Ambusaidi, M.A., He, X., Nanda, P., Tan, Z.: Building an intrusion detection system using a filter-based feature selection algorithm. IEEE Trans. Comput. 65, 2986\u20132998 (2016). https:\/\/doi.org\/10.1109\/TC.2016.2519914","journal-title":"IEEE Trans. Comput."},{"key":"9591_CR16","doi-asserted-by":"publisher","first-page":"1184","DOI":"10.1016\/j.jnca.2011.01.002","volume":"34","author":"F Amiri","year":"2011","unstructured":"Amiri, F., Rezaei Yousefi, M., Lucas, C., Shakery, A., Yazdani, N.: Mutual information-based feature selection for intrusion detection systems. J. Netw. Comput. Appl. 34, 1184\u20131199 (2011). https:\/\/doi.org\/10.1016\/j.jnca.2011.01.002","journal-title":"J. Netw. Comput. Appl."},{"key":"9591_CR17","doi-asserted-by":"publisher","first-page":"35365","DOI":"10.1109\/ACCESS.2018.2836950","volume":"6","author":"Y Xin","year":"2018","unstructured":"Xin, Y., Kong, L., Liu, Z., Chen, Y., Li, Y., Zhu, H., Gao, M., Hou, H., Wang, C.: Machine learning and deep learning methods for cybersecurity. IEEE Access 6, 35365\u201335381 (2018). https:\/\/doi.org\/10.1109\/ACCESS.2018.2836950","journal-title":"IEEE Access"},{"key":"9591_CR18","doi-asserted-by":"publisher","first-page":"149","DOI":"10.1016\/j.neucom.2019.02.056","volume":"347","author":"S Mahdavifar","year":"2019","unstructured":"Mahdavifar, S., Ghorbani, A.A.: Application of deep learning to cybersecurity: a survey. Neurocomputing 347, 149\u2013176 (2019). https:\/\/doi.org\/10.1016\/j.neucom.2019.02.056","journal-title":"Neurocomputing"},{"key":"9591_CR19","doi-asserted-by":"publisher","first-page":"493","DOI":"10.1007\/s12083-017-0630-0","volume":"12","author":"N Sultana","year":"2019","unstructured":"Sultana, N., Chilamkurti, N., Peng, W., Alhadad, R.: Survey on SDN based network intrusion detection system using machine learning approaches. Peer-to-Peer Netw. Appl. 12, 493\u2013501 (2019). https:\/\/doi.org\/10.1007\/s12083-017-0630-0","journal-title":"Peer-to-Peer Netw. Appl."},{"key":"9591_CR20","doi-asserted-by":"publisher","first-page":"e0155781","DOI":"10.1371\/journal.pone.0155781","volume":"11","author":"M-J Kang","year":"2016","unstructured":"Kang, M.-J., Kang, J.-W.: Intrusion detection system using deep neural network for in-vehicle network security. PLoS One 11, e0155781 (2016). https:\/\/doi.org\/10.1371\/journal.pone.0155781","journal-title":"PLoS One"},{"key":"9591_CR21","doi-asserted-by":"publisher","first-page":"82","DOI":"10.1016\/j.adhoc.2018.09.014","volume":"84","author":"F Feng","year":"2019","unstructured":"Feng, F., Liu, X., Yong, B., Zhou, R., Zhou, Q.: Anomaly detection in ad-hoc networks based on deep learning model: a plug and play device. Ad Hoc Netw. 84, 82\u201389 (2019). https:\/\/doi.org\/10.1016\/j.adhoc.2018.09.014","journal-title":"Ad Hoc Netw."},{"key":"9591_CR22","doi-asserted-by":"crossref","unstructured":"Zhao, G., Zhang, C., Zheng, L.: Intrusion detection using deep belief network and probabilistic neural network. In: Proceedings\u20142017 IEEE International Conference on Computational Science and Engineering and IEEE\/IFIP International Conference on Embedded and Ubiquitous Computing, CSE and EUC 2017, pp. 639\u2013642. Institute of Electrical and Electronics Engineers Inc. (2017)","DOI":"10.1109\/CSE-EUC.2017.119"},{"key":"9591_CR23","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1016\/j.jisa.2018.11.007","volume":"44","author":"S Mohammadi","year":"2019","unstructured":"Mohammadi, S., Mirvaziri, H., Ghazizadeh-Ahsaee, M., Karimipour, H.: Cyber intrusion detection by combined feature selection algorithm. J. Inf. Secur. Appl. 44, 80\u201388 (2019). https:\/\/doi.org\/10.1016\/j.jisa.2018.11.007","journal-title":"J. Inf. Secur. Appl."},{"key":"9591_CR24","doi-asserted-by":"publisher","first-page":"101842","DOI":"10.1016\/j.adhoc.2019.02.001","volume":"90","author":"M Aloqaily","year":"2019","unstructured":"Aloqaily, M., Otoum, S., Al Ridhawi, I., Jararweh, Y.: An intrusion detection system for connected vehicles in smart cities. Ad Hoc Netw. 90, 101842 (2019). https:\/\/doi.org\/10.1016\/j.adhoc.2019.02.001","journal-title":"Ad Hoc Netw."},{"key":"9591_CR25","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1016\/j.jbi.2009.07.008","volume":"43","author":"Y Peng","year":"2010","unstructured":"Peng, Y., Wu, Z., Jiang, J.: A novel feature selection approach for biomedical data classification. J. Biomed. Inform. 43, 15\u201323 (2010). https:\/\/doi.org\/10.1016\/j.jbi.2009.07.008","journal-title":"J. Biomed. Inform."},{"key":"9591_CR26","doi-asserted-by":"publisher","first-page":"325","DOI":"10.1007\/s10586-015-0527-8","volume":"19","author":"SH Kang","year":"2016","unstructured":"Kang, S.H., Kim, K.J.: A feature selection approach to find optimal feature subsets for the network intrusion detection system. Clust. Comput. 19, 325\u2013333 (2016). https:\/\/doi.org\/10.1007\/s10586-015-0527-8","journal-title":"Clust. Comput."},{"key":"9591_CR27","doi-asserted-by":"publisher","first-page":"2670","DOI":"10.1016\/j.eswa.2014.11.009","volume":"42","author":"AS Eesa","year":"2015","unstructured":"Eesa, A.S., Orman, Z., Brifcani, A.M.A.: A novel feature-selection approach based on the cuttlefish optimization algorithm for intrusion detection systems. Expert Syst. Appl. 42, 2670\u20132679 (2015). https:\/\/doi.org\/10.1016\/j.eswa.2014.11.009","journal-title":"Expert Syst. Appl."},{"key":"9591_CR28","doi-asserted-by":"crossref","unstructured":"Ingre, B., Yadav, A., Soni, A.K.: Decision tree based intrusion detection system for NSL-KDD dataset. In: Satapathy S., Joshi A. (eds.) Information and Communication Technology for Intelligent Systems (ICTIS 2017) - Vol. 2, ICTIS 2017. Smart Innovation, Systems and Technologies, pp. 207\u2013218. Springer Science and Business Media Deutschland GmbH (2018)","DOI":"10.1007\/978-3-319-63645-0_23"},{"key":"9591_CR29","doi-asserted-by":"publisher","first-page":"2881","DOI":"10.1007\/s11227-015-1604-8","volume":"73","author":"D Moon","year":"2017","unstructured":"Moon, D., Im, H., Kim, I., Park, J.H.: DTB-IDS: an intrusion detection system based on decision tree using behavior analysis for preventing APT attacks. J. Supercomput. 73, 2881\u20132895 (2017). https:\/\/doi.org\/10.1007\/s11227-015-1604-8","journal-title":"J. Supercomput."},{"key":"9591_CR30","doi-asserted-by":"publisher","first-page":"1151","DOI":"10.1007\/s11036-019-01443-z","volume":"25","author":"IH Sarker","year":"2020","unstructured":"Sarker, I.H., Colman, A., Han, J., Khan, A.I., Abushark, Y.B., Salah, K.: BehavDT: a behavioral decision tree learning to build user-centric context-aware predictive model. Mob. Netw. Appl. 25, 1151\u20131161 (2020). https:\/\/doi.org\/10.1007\/s11036-019-01443-z","journal-title":"Mob. Netw. Appl."},{"key":"9591_CR31","doi-asserted-by":"crossref","unstructured":"Puthran, S., Shah, K.: Intrusion detection using improved decision tree algorithm with binary and quad split. In: Mueller P., Thampi S., Alam Bhuiyan M., Ko R., Doss R., Alcaraz Calero J. (eds.) Security in Computing and Communications, pp. 427\u2013438. Springer (2016)","DOI":"10.1007\/978-981-10-2738-3_37"},{"key":"9591_CR32","first-page":"2828","volume":"7","author":"K Rai","year":"2016","unstructured":"Rai, K., Syamala Devi, M., Guleria, A.: Decision tree based algorithm for intrusion detection. Int. J. Adv. Netw. Appl. 7, 2828\u20132834 (2016)","journal-title":"Int. J. Adv. Netw. Appl."},{"key":"9591_CR33","doi-asserted-by":"publisher","first-page":"754","DOI":"10.3390\/SYM12050754","volume":"12","author":"IH Sarker","year":"2020","unstructured":"Sarker, I.H., Abushark, Y.B., Alsolami, F., Khan, A.I.: IntruDTree: a machine learning based cyber security intrusion detection model. Symmetry (Basel) 12, 754 (2020). https:\/\/doi.org\/10.3390\/SYM12050754","journal-title":"Symmetry (Basel)"},{"key":"9591_CR34","unstructured":"Kaggle, https:\/\/www.kaggle.com (2020). Accessed 24 July 2020"},{"key":"9591_CR35","volume-title":"Feature Engineering for Machine Learning","author":"A Zheng","year":"2018","unstructured":"Zheng, A., Casari, A.: Feature Engineering for Machine Learning. O\u2019Reilly Media, Sebastopol (2018)"},{"key":"9591_CR36","volume-title":"Data mining: Concepts and Techniques","author":"J Han","year":"2012","unstructured":"Han, J., Kamber, M., Pei, J.: Data mining: Concepts and Techniques. Elsevier, Amsterdam (2012)"}],"container-title":["Journal of Network and Systems Management"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-021-09591-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s10922-021-09591-y\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-021-09591-y.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,12,18]],"date-time":"2022-12-18T11:16:21Z","timestamp":1671362181000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s10922-021-09591-y"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,2,21]]},"references-count":36,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2021,4]]}},"alternative-id":["9591"],"URL":"https:\/\/doi.org\/10.1007\/s10922-021-09591-y","relation":{},"ISSN":["1064-7570","1573-7705"],"issn-type":[{"value":"1064-7570","type":"print"},{"value":"1573-7705","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,2,21]]},"assertion":[{"value":"19 August 2020","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"26 January 2021","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"10 February 2021","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"21 February 2021","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Compliance with Ethical Standards"}},{"value":"The authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"20"}}