{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,22]],"date-time":"2026-07-22T16:43:50Z","timestamp":1784738630692,"version":"3.55.0"},"reference-count":92,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2019,10,2]],"date-time":"2019-10-02T00:00:00Z","timestamp":1569974400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2019,10,2]],"date-time":"2019-10-02T00:00:00Z","timestamp":1569974400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"funder":[{"name":"There are no Funding Sources","award":["0"],"award-info":[{"award-number":["0"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Mobile Netw Appl"],"published-print":{"date-parts":[[2021,4]]},"DOI":"10.1007\/s11036-019-01353-0","type":"journal-article","created":{"date-parts":[[2019,10,2]],"date-time":"2019-10-02T12:05:02Z","timestamp":1570017902000},"page":"808-829","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":80,"title":["A Survey on the Development of Self-Organizing Maps for Unsupervised Intrusion Detection"],"prefix":"10.1007","volume":"26","author":[{"given":"Xiaofei","family":"Qu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lin","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kai","family":"Guo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Linru","family":"Ma","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Meng","family":"Sun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mingxing","family":"Ke","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mu","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2019,10,2]]},"reference":[{"issue":"2","key":"1353_CR1","doi-asserted-by":"crossref","first-page":"222","DOI":"10.1109\/TSE.1987.232894","volume":"13","author":"DE Denning","year":"1987","unstructured":"Denning DE (1987) An intrusion detection model. IEEE Trans Softw Eng (Special issue on Computer Security and Privacy) 13(2):222\u2013232","journal-title":"IEEE Trans Softw Eng (Special issue on Computer Security and Privacy)"},{"key":"1353_CR2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.asoc.2009.06.019","volume":"10","author":"SX Wu","year":"2010","unstructured":"Wu SX, Banzhaf W (2010) The use of computational intelligence in intrusion detection systems: a review. Appl Soft Comput 10:1\u201335","journal-title":"Appl Soft Comput"},{"key":"1353_CR3","first-page":"71","volume":"164","author":"E De la Hoz","year":"2015","unstructured":"De la Hoz E, De la Hoz E, Ortiz A, Ortega J, Prieto B (2015) PCA filtering and probabilistic SOM for network intrusion detection. Advances in Computational Intelligence in Elsevier Neurocomputing 164:71\u201381","journal-title":"Advances in Computational Intelligence in Elsevier Neurocomputing"},{"issue":"17","key":"1353_CR4","first-page":"112","volume":"49","author":"W Zhisheng","year":"2013","unstructured":"Zhisheng W, Xiaobing X (2013) An improved adaptive self-organizing map. Comput Eng Appl 49(17):112\u2013115","journal-title":"Comput Eng Appl"},{"key":"1353_CR5","first-page":"24","volume":"5","author":"AJ Hoglund","year":"2000","unstructured":"Hoglund AJ, Hatonen K, Sorvari AS (2000) A computer host-based user anomaly detction system using the self-organizing map. Proceedings of the IEEEINNS-ENNS International Joint Conference on Neural Networks (IJCNN00) 5:24\u201327","journal-title":"Proceedings of the IEEEINNS-ENNS International Joint Conference on Neural Networks (IJCNN00)"},{"key":"1353_CR6","unstructured":"Lichodzijewski P, Nur Zincir-Heywood A, Heywood MI (2002) Host-based intrusion detection using self-organizing maps. The IEEE World Congress on Computational Intelligence International Joint Conference on Neural Networks (IJCNN02)"},{"key":"1353_CR7","doi-asserted-by":"crossref","unstructured":"Kayacik HG, Zincir-Heywood AN, Heywood MI (2003) On the capability of a SOM based intrusion detection system. In: Proceedings of the International Joint Conference on Neural Networks (IJCNN03), vol 3, pp 20\u201324","DOI":"10.1109\/IJCNN.2003.1223682"},{"issue":"4","key":"1353_CR8","doi-asserted-by":"crossref","first-page":"439","DOI":"10.1016\/j.engappai.2006.09.005","volume":"20","author":"HG Kayacik","year":"2007","unstructured":"Kayacik HG, Zincir-Heywood AN, Heywood MI (2007) A hierarchical SOM-based intrusion detection system. Eng Appl Artif Intell 20(4):439\u2013451","journal-title":"Eng Appl Artif Intell"},{"key":"1353_CR9","doi-asserted-by":"crossref","first-page":"1331","DOI":"10.1109\/TNN.2002.804221","volume":"13","author":"A Rauber","year":"2002","unstructured":"Rauber A, Merkl D, Dittenbach M (2002) The growing hierarchical self-organizingmap:exploratory analysis of high-dimensional data. IEEE Trans Neural Networks 13:1331\u20131341","journal-title":"IEEE Trans Neural Networks"},{"key":"1353_CR10","doi-asserted-by":"crossref","first-page":"322","DOI":"10.1016\/j.knosys.2014.08.013","volume":"71","author":"E dela Hoza","year":"2014","unstructured":"dela Hoza E, dela Hoza E, Ortiz A, Ortega J, Martinez-Alvarez A (2014) Feature selection by multi-objective optimisation: Application to network anomaly detection by hierarchical self-organising maps. Knowl-Based Syst 71:322\u2013338","journal-title":"Knowl-Based Syst"},{"issue":"17","key":"1353_CR11","first-page":"112","volume":"49","author":"S Zanero","year":"2013","unstructured":"Zanero S, Savaresi SM (2013) Unsupervised learning techniques for an intrusion detection system. Proceedings of the ACM symposium on applied computing 49(17):112\u2013115","journal-title":"Proceedings of the ACM symposium on applied computing"},{"key":"1353_CR12","unstructured":"Zanero S (2004) Improving self organizing map performance for network intrusion detection. In: SDM 2005 Workshop on clustering high dimensional data and its applications, submitted for publication"},{"key":"1353_CR13","doi-asserted-by":"crossref","unstructured":"Zanero S (2005) Analyzing TCP traffic patterns using self organizing maps. In: Roli F., Vitulano S. (eds) International conference on image analysis and processing (ICIAP05), Cagliari, Italy, 6C8 September 2005, volume 3617 of Lecture Notes in Computer Science. Springer, Berlin, pp 83\u201390","DOI":"10.1007\/11553595_10"},{"key":"1353_CR14","doi-asserted-by":"crossref","unstructured":"Zanero S (May 2008) Unsupervised learning algorithms for intrusion detection. PhD dissertation, Politecnico di Milano T.U.","DOI":"10.1109\/NOMS.2008.4575276"},{"key":"1353_CR15","doi-asserted-by":"crossref","unstructured":"Palomo EJ, Domnguez E, Luque RM, Munoz J (2009) Network security using growing hierarchical self-organizing maps. In: Proceedings of the 9th international conference on adaptive and natural computing algorithms, ICANNGA09. Springer, Berlin, pp 130\u2013139","DOI":"10.1007\/978-3-642-04921-7_14"},{"key":"1353_CR16","first-page":"232","volume":"5","author":"Y Yang","year":"2010","unstructured":"Yang Y, Jiang D, Xia M (2010) Using improved GHSOM for intrusion detection. Journal of Information Assurance and Security 5:232\u2013239","journal-title":"Journal of Information Assurance and Security"},{"issue":"12","key":"1353_CR17","doi-asserted-by":"crossref","first-page":"1576","DOI":"10.1016\/j.jpdc.2012.09.004","volume":"72","author":"D Ippoliti","year":"2012","unstructured":"Ippoliti D, Zhou X (2012) A-GHSOM: an adaptive growing hierarchical self organizing map for network anomaly detection. J Parallel Distr Comput 72(12):1576\u20131590","journal-title":"J Parallel Distr Comput"},{"key":"1353_CR18","unstructured":"Fox KL, Henning RR, Reed JH (1990) A neural network approach towards intrusion detection. In: Proceedings of the 13th national computer security conference"},{"issue":"3","key":"1353_CR19","first-page":"324","volume":"71","author":"E De La Hoz","year":"2015","unstructured":"De La Hoz E, Ortiz A, Ortega J, De La Hoz E, Mendoza F (2015) Implementation of an intrusion detection system based on self-organizing map. J Theor Appl Inf Technol 71(3):324\u2013334","journal-title":"J Theor Appl Inf Technol"},{"key":"1353_CR20","doi-asserted-by":"crossref","unstructured":"McElwee S, Cannady J (2016) Improving the performance of self-organizing maps for intrusion detection. Southeastcon","DOI":"10.1109\/SECON.2016.7506766"},{"key":"1353_CR21","first-page":"1","volume":"1","author":"C Yin","year":"2017","unstructured":"Yin C, Zhang S, Kim K (2017) Mobile anomaly detection based on improved self-organizing maps. Mob Inf Syst 1:1\u20139","journal-title":"Mob Inf Syst"},{"issue":"3B","key":"1353_CR22","first-page":"1503","volume":"58","author":"SM Shareef","year":"2017","unstructured":"Shareef SM, Hashim SH (2017) An approach based on decision tree and self-organizing map for intrusion detection. Iraqi Journal of Science 58(3B):1503\u20131515","journal-title":"Iraqi Journal of Science"},{"key":"1353_CR23","doi-asserted-by":"crossref","first-page":"424","DOI":"10.1016\/j.asoc.2017.02.015","volume":"55","author":"M Vasighi","year":"2017","unstructured":"Vasighi M, Amini H (2017) A directed batch growing approach to enhance the topology preservation of self-organizing map[J]. Appl Soft Comput 55:424\u2013435","journal-title":"Appl Soft Comput"},{"key":"1353_CR24","doi-asserted-by":"crossref","unstructured":"Ullah I, Mahmoud QH (2017) A filter-based feature selection model for anomaly-based intrusion detection systems. IEEE international conference on big data (BIGDATA)","DOI":"10.1109\/BigData.2017.8258163"},{"key":"1353_CR25","doi-asserted-by":"crossref","unstructured":"Ichimura T, Yamaguchi T (2011) A proposal of interactive growing hierarchical SOM. Proc. of 2011 IEEE SMC2011, pp 3149\u20133154","DOI":"10.1109\/ICSMC.2011.6084144"},{"key":"1353_CR26","doi-asserted-by":"crossref","first-page":"74","DOI":"10.1016\/j.knosys.2016.10.030","volume":"116","author":"Y Zhu","year":"2017","unstructured":"Zhu Y, Liang J, Chen J, Ming Z (2017) An improved NSGA-iii algorithm for feature selection used in intrusion detection. Knowl.-Based Syst 116:74\u201385","journal-title":"Knowl.-Based Syst"},{"key":"1353_CR27","doi-asserted-by":"publisher","first-page":"334","DOI":"10.1007\/s12209-016-2737-4","volume":"22","author":"Z Yaping","year":"2016","unstructured":"Yaping Z, Wenxiu B, Chang S, Luyao W, Han X (2016) Intrusion detection method based on improved growing hierarchical self-organizing map. Transactions of Tianjin University 22:334\u2013338. https:\/\/doi.org\/10.1007\/s12209-016-2737-4","journal-title":"Transactions of Tianjin University"},{"key":"1353_CR28","doi-asserted-by":"crossref","unstructured":"Landress AD (2016) A hybrid approach to reducing the false positive rate in unsupervised machine learning intrusion detection. In: Southeastcon, pp 1\u20136","DOI":"10.1109\/SECON.2016.7506773"},{"key":"1353_CR29","first-page":"11","volume":"3","author":"J Vesanto","year":"2000","unstructured":"Vesanto J, Alhoniemi E (2000) Clustering of the self-organizing map. IEEE Trans Neural Netw 3:11","journal-title":"IEEE Trans Neural Netw"},{"key":"1353_CR30","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/S0925-2312(98)00030-7","volume":"21","author":"T Kohonen","year":"1998","unstructured":"Kohonen T (1998) The self-organizing map. Neurocomputing 21:1\u20136","journal-title":"Neurocomputing"},{"key":"1353_CR31","doi-asserted-by":"crossref","unstructured":"Kohonen T (1993) Things you haven\u2019t heard about the self-organizing map. In: IEEE international conference on neural networks, 1993, pp 1147\u20131156","DOI":"10.1109\/ICNN.1993.298719"},{"key":"1353_CR32","doi-asserted-by":"crossref","unstructured":"Tang A, Sethumadhavan S, Stolfo SJ (2014) Unsupervised anomaly-based malware detection using hardware features. In: 17th international symposium on research in attacks intrusions and defenses (RAID)","DOI":"10.1007\/978-3-319-11379-1_6"},{"key":"1353_CR33","doi-asserted-by":"crossref","unstructured":"Alsulaiman MM, Alyahya AN, Alkharboush RA, Alghafis NS (2009) Intrusion detection system using self organizing maps. In: International conference on network & system security","DOI":"10.1109\/NSS.2009.62"},{"key":"1353_CR34","doi-asserted-by":"crossref","first-page":"64","DOI":"10.1007\/s11801-009-8142-7","volume":"5","author":"C Wang","year":"2009","unstructured":"Wang C, Yu H, Wang H (2009) Grey self-organizing map based intrusion detection. Optoelectron Lett 5:64\u201368","journal-title":"Optoelectron Lett"},{"key":"1353_CR35","unstructured":"Ryan W, Obimbo C (2011) Self-organizing feature maps for user-to-root and remote-to-local network intrusion detection on the KDD cup 1999 dataset. In: 2011 World congress on internet security (WorldCIS). IEEE"},{"key":"1353_CR36","doi-asserted-by":"publisher","unstructured":"Xue B, Zhang M, Yao X, Browne WN A survey on evolutionary computation approaches to feature selection. IEEE transactions on evolutionary computation. https:\/\/doi.org\/10.1109\/TEVC.2015.2504420","DOI":"10.1109\/TEVC.2015.2504420"},{"issue":"4","key":"1353_CR37","doi-asserted-by":"crossref","first-page":"887","DOI":"10.1109\/TSMCB.2006.870629","volume":"36","author":"ST Sarasamma","year":"2006","unstructured":"Sarasamma ST, Zhu QA (2006) MinCMax hyperellipsoidal clustering for anomaly detection in network security. IEEE Transactions on Systems Man & Cybernetics Part B Cybernetics A Publication of the IEEE Systems Man & Cybernetics Society 36(4):887\u2013901","journal-title":"IEEE Transactions on Systems Man & Cybernetics Part B Cybernetics A Publication of the IEEE Systems Man & Cybernetics Society"},{"issue":"1","key":"1353_CR38","first-page":"36","volume":"2820","author":"M Ramadas","year":"2003","unstructured":"Ramadas M, Ostermann S, Tjaden B (2003) Detecting anomalous network traffic with self-organizing maps. International Workshop on Recent Advances in Intr 2820(1):36\u201354","journal-title":"International Workshop on Recent Advances in Intr"},{"key":"1353_CR39","unstructured":"Kaski S (1997) Data exploration using self-organizing maps. Acta polytechnica scandinavica mathematics, computing and management in engineering series, no. 82"},{"key":"1353_CR40","doi-asserted-by":"crossref","unstructured":"Sarasamma ST, Zhu QA, Julie H (2005) Hierarchical Kohonenen net for anomaly detection in network security. IEEE Transactions on Systems Man & Cybernetics Part B Cybernetics A Publication of the IEEE Systems Man & Cybernetics Society vol 35, no 2","DOI":"10.1109\/TSMCB.2005.843274"},{"key":"1353_CR41","unstructured":"Lichodzijewski P (2002) Network based anomaly detection using self organizing maps. Technical Report, Nova Scotia, Dalhousie University, Halifax"},{"key":"1353_CR42","doi-asserted-by":"crossref","unstructured":"Huai-bin W, Hong-liang Y, Zhi-jian X, Zheng Y (2010) A clustering algorithm use SOM and k-means in intrusion detection. In: Proceedings of 2010 international conference on E-business and Egovernment. IEEE, pp 1281\u20131284","DOI":"10.1109\/ICEE.2010.327"},{"key":"1353_CR43","doi-asserted-by":"crossref","first-page":"411","DOI":"10.1109\/IJCNN.2000.861504","volume":"5","author":"AJ Hoglund","year":"2000","unstructured":"Hoglund AJ, Hatonen K, Sorvari AS (2000) A computer host based user anomaly detection system using the self-organizing map. Proc Int Joint Conf Neural Netw 5:411\u2013416","journal-title":"Proc Int Joint Conf Neural Netw"},{"key":"1353_CR44","doi-asserted-by":"crossref","first-page":"713","DOI":"10.1016\/j.eswa.2005.05.002","volume":"29","author":"O Depren","year":"2005","unstructured":"Depren O, Topallar M, Anarim E, Ciliz MK (2005) An intelligent intrusion detection system (IDS) for anomaly and misuse detection in computer networks. Expert Systems with Applications 29:713\u2013722","journal-title":"Expert Systems with Applications"},{"issue":"1","key":"1353_CR45","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1016\/j.cose.2008.08.003","volume":"28","author":"P Garcia-Teodoro","year":"2009","unstructured":"Garcia-Teodoro P, Diaz-Verdejo J, Macia-Fernandez G, Vazquez E (2009) Anomaly-based network intrusion detection. Techniques, systems and challenges, Computers & Security 28(1):18\u201328","journal-title":"Techniques, systems and challenges, Computers & Security"},{"issue":"12","key":"1353_CR46","doi-asserted-by":"crossref","first-page":"3448","DOI":"10.1016\/j.comnet.2007.02.001","volume":"51","author":"A Patcha","year":"2007","unstructured":"Patcha A, Park J-M (2007) An overview of anomaly detection techniques: Existing solutions and latest technological trends. Comput Netw 51(12):3448\u20133470","journal-title":"Comput Netw"},{"key":"1353_CR47","doi-asserted-by":"crossref","first-page":"261","DOI":"10.1007\/BF00118594","volume":"2","author":"J Lampinen","year":"1992","unstructured":"Lampinen J, Oja E (1992) Clustering properties of hierarchical self-organizing maps. J Math Imaging Vision 2:261\u2013272","journal-title":"J Math Imaging Vision"},{"issue":"17","key":"1353_CR48","first-page":"112","volume":"49","author":"W Zhisheng","year":"2013","unstructured":"Zhisheng W, Xiaobing X (2013) Improved SOM-based high-dimensional data visualization algorithm. Comput Eng Appl 49(17):112\u2013115","journal-title":"Comput Eng Appl"},{"issue":"2","key":"1353_CR49","first-page":"15","volume":"6","author":"M Dittenbach","year":"2000","unstructured":"Dittenbach M, Merkl D, Rauber A (2000) Growing hierarchical self-organizing map. Neural Netw 6 (2):15\u201319","journal-title":"Neural Netw"},{"key":"1353_CR50","unstructured":"KDDCUP 99 Accessed 11 Nov (2011), [Online]. Available: https:\/\/blog.csdn.net\/com_stu_zhang\/article\/details\/6987632"},{"key":"1353_CR51","doi-asserted-by":"crossref","unstructured":"Almi\u2019ani M, Ghazleh AA, Al-Rahayfeh A, Razaque A (2018) Intelligent intrusion detection system using clustered self organized map. In: 2018 Fifth international conference on software defined systems (SDS), pp 138\u2013144","DOI":"10.1109\/SDS.2018.8370435"},{"issue":"12","key":"1353_CR52","doi-asserted-by":"crossref","first-page":"3448","DOI":"10.1016\/j.comnet.2007.02.001","volume":"51","author":"A Patcha","year":"2007","unstructured":"Patcha A, Park JM (2007) An overview of anomaly detection techniques: Existing solutions and latest technological trends. Comput Netw 51(12):3448\u20133470","journal-title":"Comput Netw"},{"key":"1353_CR53","doi-asserted-by":"crossref","first-page":"381","DOI":"10.1007\/978-3-319-19578-0_31","volume":"456","author":"I Brahmi","year":"2015","unstructured":"Brahmi I, Brahmi H, Ben Yahia S (2015) A multi-agents intrusion detection system using ontology and clustering techniques. IFIP Advances in Information and Communication Technology 456:381\u2013393","journal-title":"IFIP Advances in Information and Communication Technology"},{"issue":"2","key":"1353_CR54","doi-asserted-by":"crossref","first-page":"257","DOI":"10.1007\/s10922-010-9176-7","volume":"19","author":"C Fung","year":"2011","unstructured":"Fung C, Zhang J, Aib I, Boutaba R (2011) Trust management and admission control for host-based collaborative intrusion detection. J Netw Syst Manag 19(2):257\u2013277","journal-title":"J Netw Syst Manag"},{"key":"1353_CR55","doi-asserted-by":"crossref","unstructured":"Perez MG, Marmol FG, Perez GM (2015) Improving attack detection in self-organizing networks: a trust-based approach toward alert satisfaction. International Conference on Advances in Computing, pp 1945\u20131951","DOI":"10.1109\/ICACCI.2015.7275903"},{"key":"1353_CR56","unstructured":"Bashir U, Chachoo M (2014) Intrusion detection and prevention system. In: International conference on computing for sustainable global development (INDIACom). IEEE"},{"key":"1353_CR57","unstructured":"Anomaly Detection Accessed 17 Nov, 2015 [Online]. Available: https:\/\/iwringer.wordpress.com\/2015\/11\/17\/anomaly-detection-concepts-and-techniques\/"},{"issue":"4","key":"1353_CR58","doi-asserted-by":"crossref","first-page":"369","DOI":"10.1007\/s10462-010-9179-5","volume":"34","author":"G Kumar","year":"2010","unstructured":"Kumar G, Kumar K, Sachdeva M (2010) The use of artificial intelligence based techniques for intrusion detection: a review. Artif Intell Rev 34(4):369\u2013387","journal-title":"Artif Intell Rev"},{"key":"1353_CR59","first-page":"1","volume":"6","author":"A Prez-Surez","year":"2018","unstructured":"Prez-Surez A, Martnez-Trinidad JF, Carrasco-Ochoa JA (2018) A review of conceptual clustering algorithms. Artif Intell Rev 6:1\u201330","journal-title":"Artif Intell Rev"},{"key":"1353_CR60","doi-asserted-by":"crossref","unstructured":"Salem M, Buehler U (2013) An enhanced GHSOM for IDS. In: Proc iEEE SMC: cybernetic, October","DOI":"10.1109\/SMC.2013.198"},{"issue":"5","key":"1353_CR61","first-page":"1064","volume":"36","author":"M Li","year":"2015","unstructured":"Li M, Tian X, Sun Y, Yang J (2015) Adaptive recognition method based on improved-GHSOM for motor imagery EEG. Chin J Sci Instrum 36(5):1064\u20131071","journal-title":"Chin J Sci Instrum"},{"key":"1353_CR62","volume-title":"Self-organizing maps. Volume 30 of Springer series in information sciences","author":"T Kohonen","year":"2001","unstructured":"Kohonen T (2001) Self-organizing maps. Volume 30 of Springer series in information sciences, 3rd edn. Springer, Berlin","edition":"3rd edn."},{"key":"1353_CR63","doi-asserted-by":"crossref","first-page":"259","DOI":"10.1016\/S0888-613X(02)00086-5","volume":"32","author":"AL Hsu","year":"2003","unstructured":"Hsu AL, Halgamuge SK (2003) Enhancement of topology preservation and hierarchical dynamic self organizing maps for data visualistion. Int J Approx Reason 32:259\u2013279","journal-title":"Int J Approx Reason"},{"key":"1353_CR64","unstructured":"Roberto H, Victor L, Fernando B (2012) Spatial clustering using hierarchical SOM. Chapter 12: applications of self-organizing maps, pp 231\u2013250"},{"issue":"1","key":"1353_CR65","doi-asserted-by":"crossref","first-page":"89","DOI":"10.1109\/JCN.2008.6388332","volume":"10","author":"Y Kopylova","year":"2008","unstructured":"Kopylova Y, Buell DA, Huang CT, et al. (2008) Mutual information applied to anomaly detection[J]. J Commun Networks 10(1):89\u201397","journal-title":"J Commun Networks"},{"key":"1353_CR66","doi-asserted-by":"crossref","unstructured":"Huai-bin W, Hong-liang Y, Zhi-jian X (2010) A clustering algorithm use SOM and k-means in intrusion detection[C]. In: International conference on E-business and E-government, pp 1281\u20131284","DOI":"10.1109\/ICEE.2010.327"},{"key":"1353_CR67","doi-asserted-by":"crossref","unstructured":"Saraswati A, Nguyen VT, Hagenbuchner M, Tsoi AC (2018) High-resolution self-organizing maps for advanced visualization and dimension reduction. Neural networks the official journal of the international neural network society 105\u2013166","DOI":"10.1016\/j.neunet.2018.04.011"},{"key":"1353_CR68","doi-asserted-by":"publisher","unstructured":"Kohonen T (1982) Self-organized formation of topologically correct feature maps. T Biol Cybern, pp 43\u201359. [Online] Available: https:\/\/doi.org\/10.1007\/BF00337288","DOI":"10.1007\/BF00337288"},{"key":"1353_CR69","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1109\/DISCEX.2000.821506","volume":"2","author":"RP LippMann","year":"2000","unstructured":"LippMann RP, Fried DJ, Graf I, Haines JW, Kendall KR, McClung D, Weber D, Webster SE, Wyschogrod D, Cunningham RK, Zissman MA (2000) Evaluating intrusion detection systems: the 1998 DARPA off-line intrusion detection evaluation. Proc DARPA Information Survivability Conf and Expo 2:12\u201326","journal-title":"Proc DARPA Information Survivability Conf and Expo"},{"issue":"9","key":"1353_CR70","first-page":"22","volume":"36","author":"M Guo","year":"2008","unstructured":"Guo M, Huafu D (2008) Clustering algorithm based on SOM network and K-means. Computer & Digital Engineering 36(9):22\u201336","journal-title":"Computer & Digital Engineering"},{"key":"1353_CR71","first-page":"42","volume":"5","author":"L Hou","year":"2011","unstructured":"Hou L, Wang W (2011) Improved K-Means clustering algorithm based on SOM. Journal of Inner Mongolia University (Natural Science Edition) 5:42","journal-title":"Journal of Inner Mongolia University (Natural Science Edition)"},{"key":"1353_CR72","doi-asserted-by":"crossref","unstructured":"Almi\u2019ani M, Ghazleh AA (2018) Intelligent intrusion detection system using clustered self organized map. In: Fifth international conference on software defined systems (SDS)","DOI":"10.1109\/SDS.2018.8370435"},{"key":"1353_CR73","unstructured":"Amini M, Jalili R (2004) Network-based intrusion detection using unsupervised adaptive resonance theory (ART). In: Proceedings of the fourth conference on engineering of intelligent systems (EIS 2004), Madeira, Portugal"},{"key":"1353_CR74","first-page":"4","volume":"12","author":"K Choksi","year":"2004","unstructured":"Choksi K, Shah B, Kale O (2004) Intrusion detection system using self organizing maps a survey. Int J Eng Res Appl 12:4","journal-title":"Int J Eng Res Appl"},{"issue":"2","key":"1353_CR75","doi-asserted-by":"crossref","first-page":"1153","DOI":"10.1109\/COMST.2015.2494502","volume":"18","author":"AL Buczak","year":"2017","unstructured":"Buczak AL, Guven E (2017) A survey of data mining and machine learning methods for cyber security intrusion Detection[J]. IEEE Commun Surv Tutorials 18(2):1153\u20131176","journal-title":"IEEE Commun Surv Tutorials"},{"key":"1353_CR76","doi-asserted-by":"crossref","unstructured":"Fernando ZT, Thaseen IS, Kumar CA (2014) Network attacks identification using consistency based feature selection and self-organizing maps. IEEE conference on N\/ws & soft computing","DOI":"10.1109\/CNSC.2014.6906666"},{"key":"1353_CR77","first-page":"71","volume":"3","author":"ED Franco","year":"2015","unstructured":"Franco ED, Garcia AO, Lopera JO, Correa ED, Palechor FM (2015) Implementation of an intrusion detection system based on self organizing map. J Theor Appl Inf Technol 3:71","journal-title":"J Theor Appl Inf Technol"},{"key":"1353_CR78","doi-asserted-by":"crossref","first-page":"279","DOI":"10.1109\/IJCNN.1990.137727","volume":"2","author":"P Koikkalainen","year":"1990","unstructured":"Koikkalainen P, Oja E (1990) Self-organizing hierarchical feature maps. IJCNN International Joint Conference on Neural Networks 2:279\u2013284","journal-title":"IJCNN International Joint Conference on Neural Networks"},{"key":"1353_CR79","doi-asserted-by":"crossref","unstructured":"Hu YC, Chen RS, Hsu YT, Tzeng GH (2002) Grey self-organizing feature maps 48(1-4):863\u2013877","DOI":"10.1016\/S0925-2312(01)00677-4"},{"issue":"10","key":"1353_CR80","doi-asserted-by":"crossref","first-page":"1568","DOI":"10.1016\/j.neunet.2006.02.009","volume":"19","author":"A Forti","year":"2006","unstructured":"Forti A, Foresti GL (2006) Growing hierarchical tree SOM: an unsupervised neural network with dynamic topology. Neural Netw 19(10):1568\u20131580","journal-title":"Neural Netw"},{"issue":"1","key":"1353_CR81","doi-asserted-by":"crossref","first-page":"64","DOI":"10.1007\/s11801-009-8142-7","volume":"5","author":"CD Wang","year":"2009","unstructured":"Wang CD, Yu HF, Wang HB (2009) Grey self-organizing map based intrusion detection[J]. Optoelectron Lett 5(1):64\u201368","journal-title":"Optoelectron Lett"},{"key":"1353_CR82","doi-asserted-by":"crossref","unstructured":"Le DC, Nur Zincir-Heywood A, Malcolm I, Wang HB (2019) Unsupervised monitoring of network and service behaviour using self organizing maps. Journal of Cyber Security and Mobility 8(1):15\u201352","DOI":"10.13052\/2245-1439.812"},{"key":"1353_CR83","doi-asserted-by":"publisher","unstructured":"Jing X, Yan Z, Liang X, Pedrycz W (2018) Network traffic fusion and analysis against DDoS flooding attacks with a novel reversible sketch, information fusion(2018), 10(13). https:\/\/doi.org\/10.1016\/j.inffus","DOI":"10.1016\/j.inffus"},{"key":"1353_CR84","unstructured":"CSE-CIC-IDS2018 [Online]. Available: https:\/\/www.unb.ca\/cic\/datasets\/ids-2018.html"},{"key":"1353_CR85","doi-asserted-by":"crossref","first-page":"601","DOI":"10.1109\/72.846732","volume":"10","author":"D Alahakoon","year":"2000","unstructured":"Alahakoon D, Halgamuge SK, Srinivasan B (2000) Dynamic self-organizing maps with controlled growth for knowledge discover. IEEE Trans Neural Netw 10:601\u2013614","journal-title":"IEEE Trans Neural Netw"},{"key":"1353_CR86","doi-asserted-by":"crossref","unstructured":"Hsu AL, Saeed I, Halgamuge SK (2009) Dynamic self-organizing maps: theory, methods and applications. In: Foundations of computational intelligence volume 1, vol 201. pp 363-379","DOI":"10.1007\/978-3-642-01082-8_14"},{"key":"1353_CR87","unstructured":"Self-organizingmap [Online]. Available: https:\/\/en.wikipedia.org\/wiki\/Self-organizingmap"},{"key":"1353_CR88","doi-asserted-by":"crossref","unstructured":"Fontugne R, Borgnat P, Abry P (2010) MAWILAb: combining diverse anomaly detectors for automated anomaly labeling and performance benchmarking. International conference, ACM","DOI":"10.1145\/1921168.1921179"},{"key":"1353_CR89","unstructured":"Self-organizingmap Accessed 9 June (2018), [Online]. Available: https:\/\/commons.wikimedia.org\/wiki\/Category:Self-organizing-map"},{"key":"1353_CR90","doi-asserted-by":"crossref","unstructured":"Liukkonen M, Hiltunen Y (2018) Recognition of systematic spatial patterns in silicon wafers based on som and k-means. IFAC-PapersOnLine","DOI":"10.1016\/j.ifacol.2018.03.075"},{"issue":"9","key":"1353_CR91","doi-asserted-by":"crossref","first-page":"7698","DOI":"10.1109\/TVT.2015.2490679","volume":"65","author":"M Zhang","year":"2016","unstructured":"Zhang M, Yang P, Tian C, Tang S, Gao X, Wang B, Xiao F (2016) Quality-aware sensing coverage in budget-constrained mobile crowdsensing networks. IEEE Trans Veh Technol 65(9):7698\u20137707","journal-title":"IEEE Trans Veh Technol"},{"issue":"10","key":"1353_CR92","doi-asserted-by":"crossref","first-page":"5867","DOI":"10.1109\/TWC.2014.2332344","volume":"13","author":"X Wu","year":"2014","unstructured":"Wu X, Xiong Y, Yang P, Wan S, Huang W (2014) Sparsest random scheduling for compressive data gathering in wireless sensor networks. IEEE Trans Wirel Commun 13(10):5867\u20135877","journal-title":"IEEE Trans Wirel Commun"}],"container-title":["Mobile Networks and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11036-019-01353-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11036-019-01353-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11036-019-01353-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,5,8]],"date-time":"2021-05-08T17:27:00Z","timestamp":1620494820000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11036-019-01353-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,10,2]]},"references-count":92,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2021,4]]}},"alternative-id":["1353"],"URL":"https:\/\/doi.org\/10.1007\/s11036-019-01353-0","relation":{},"ISSN":["1383-469X","1572-8153"],"issn-type":[{"value":"1383-469X","type":"print"},{"value":"1572-8153","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,10,2]]},"assertion":[{"value":"2 October 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}