{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,24]],"date-time":"2026-08-24T13:45:32Z","timestamp":1787579132265,"version":"build-2736575974"},"reference-count":31,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2020,10,16]],"date-time":"2020-10-16T00:00:00Z","timestamp":1602806400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2020,10,16]],"date-time":"2020-10-16T00:00:00Z","timestamp":1602806400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Supercomput"],"published-print":{"date-parts":[[2021,5]]},"DOI":"10.1007\/s11227-020-03447-z","type":"journal-article","created":{"date-parts":[[2020,10,16]],"date-time":"2020-10-16T10:02:51Z","timestamp":1602842571000},"page":"4618-4638","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":20,"title":["Multi-level Gaussian mixture modeling for detection of malicious network traffic"],"prefix":"10.1007","volume":"77","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0237-0617","authenticated-orcid":false,"given":"Radhika","family":"Chapaneri","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Seema","family":"Shah","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2020,10,16]]},"reference":[{"key":"3447_CR1","doi-asserted-by":"crossref","unstructured":"McAfee Labs (2019) McAfee Labs threats report, pp. 1\u201360. https:\/\/www.mcafee.com\/enterprise\/en-us\/assets\/reports\/rp-quarterly-threats-aug-2019.pdf. Accessed 14 May 2020","DOI":"10.1016\/S1361-3723(19)30004-1"},{"key":"3447_CR2","doi-asserted-by":"publisher","unstructured":"Truong D, Tran D, Nguyen L, Mac H, Tran H, Bui T (2019) Detecting web attacks using stacked denoising autoencoder and ensemble learning methods. In: ACM Int. Conf. Proceeding Series pp 267\u2013272. https:\/\/doi.org\/10.1145\/3368926.3369715","DOI":"10.1145\/3368926.3369715"},{"key":"3447_CR3","doi-asserted-by":"publisher","first-page":"157","DOI":"10.1016\/j.future.2017.10.016","volume":"80","author":"S Shah","year":"2018","unstructured":"Shah S, Issac B (2018) Performance comparison of intrusion detection systems and application of machine learning to Snort system. Future Generation Computer Systems 80:157\u2013170. https:\/\/doi.org\/10.1016\/j.future.2017.10.016","journal-title":"Future Generation Computer Systems"},{"key":"3447_CR4","doi-asserted-by":"publisher","unstructured":"Tavallaee M, Bagheri E, Lu W, Ghorbani A (2009) A detailed analysis of the KDD CUP 99 dataset. In: Proc. of IEEE Symposium on Computational Intelligence in Security and Defense Applications (CISDA), Ottawa, Canada. https:\/\/doi.org\/10.1109\/CISDA.2009.5356528","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"3447_CR5","doi-asserted-by":"publisher","unstructured":"Moustafa N, Slay J (2015) UNSW-NB15: a comprehensive data set for network intrusion detection systems. In: Proc. of IEEE Military Communications and Information Systems Conference (MilCIS), Canberra, Australia, pp 10\u201315. https:\/\/doi.org\/10.1109\/MilCIS.2015.7348942","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"3447_CR6","unstructured":"CVE Identifiers https:\/\/cve.mitre.org\/cve\/ Accessed 4 Jan 2020"},{"key":"3447_CR7","doi-asserted-by":"publisher","first-page":"177","DOI":"10.13052\/jsn2445-9739.2017.009","volume":"1","author":"I Sharafaldin","year":"2017","unstructured":"Sharafaldin I, Gharib A, Lashkari A, Ghorbani A (2017) Towards a reliable intrusion detection benchmark dataset. Softw Netw 1:177\u2013200. https:\/\/doi.org\/10.13052\/jsn2445-9739.2017.009","journal-title":"Softw Netw"},{"key":"3447_CR8","doi-asserted-by":"publisher","first-page":"178","DOI":"10.1016\/j.asoc.2014.01.028","volume":"18","author":"F Kuang","year":"2014","unstructured":"Kuang F, Xu W, Zhang S (2014) A novel hybrid KPCA and SVM with GA model for intrusion detection. Appl Soft Comput 18:178\u2013184. https:\/\/doi.org\/10.1016\/j.asoc.2014.01.028","journal-title":"Appl Soft Comput"},{"key":"3447_CR9","doi-asserted-by":"publisher","first-page":"240217","DOI":"10.1155\/2014\/240217","volume":"2014","author":"W Li","year":"2014","unstructured":"Li W, Yi P, Wu Y, Pan L, Li J (2014) A new intrusion detection system based on KNN classification algorithm in wireless sensor network. J Electr Computer Eng 2014:240217. https:\/\/doi.org\/10.1155\/2014\/240217","journal-title":"J Electr Computer Eng"},{"key":"3447_CR10","doi-asserted-by":"publisher","unstructured":"Ingre B, Yadav A (2015) Performance analysis of NSL-KDD dataset using ANN. In: IEEE Intl. Conf. on Signal Processing and Communication Engineering Systems pp. 92\u201396. https:\/\/doi.org\/10.1109\/SPACES.2015.7058223","DOI":"10.1109\/SPACES.2015.7058223"},{"key":"3447_CR11","doi-asserted-by":"publisher","first-page":"213","DOI":"10.1016\/j.procs.2016.06.047","volume":"89","author":"N Farnaaz","year":"2016","unstructured":"Farnaaz N, Jabbar M (2016) Random forest modeling for network intrusion detection system. Procedia Comput Sci 89:213\u2013217","journal-title":"Procedia Comput Sci"},{"key":"3447_CR12","doi-asserted-by":"publisher","first-page":"385","DOI":"10.1016\/j.neucom.2015.04.101","volume":"172","author":"A Saied","year":"2016","unstructured":"Saied A, Overill R, Radzik T (2016) Detection of known and unknown DDoS attacks using artificial neural networks. Neurocomputing 172:385\u2013393. https:\/\/doi.org\/10.1016\/j.neucom.2015.04.101","journal-title":"Neurocomputing"},{"key":"3447_CR13","doi-asserted-by":"publisher","first-page":"303","DOI":"10.1109\/SURV.2013.052213.00046","volume":"16","author":"M Bhuyan","year":"2013","unstructured":"Bhuyan M, Bhattacharyya D, Kalita J (2013) Network anomaly detection: methods, systems and tools. IEEE Commun Surv Tutor 16:303\u2013336. https:\/\/doi.org\/10.1109\/SURV.2013.052213.00046","journal-title":"IEEE Commun Surv Tutor"},{"key":"3447_CR14","doi-asserted-by":"publisher","first-page":"345","DOI":"10.1007\/978-981-13-1921-1_35","volume":"104","author":"R Chapaneri","year":"2018","unstructured":"Chapaneri R, Shah S (2018) A comprehensive survey of machine learning-based network intrusion detection. Smart Intell Comput Appl 104:345\u2013356. https:\/\/doi.org\/10.1007\/978-981-13-1921-1_35","journal-title":"Smart Intell Comput Appl"},{"key":"3447_CR15","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/1541880.1541882","volume":"41","author":"V Chandola","year":"2009","unstructured":"Chandola V, Banerjee A, Kumar V (2009) Anomaly detection: a survey. ACM Comput Surv 41:1\u201358. https:\/\/doi.org\/10.1145\/1541880.1541882","journal-title":"ACM Comput Surv"},{"key":"3447_CR16","doi-asserted-by":"publisher","first-page":"185496","DOI":"10.1109\/ACCESS.2019.2960633","volume":"7","author":"K Haseeb","year":"2019","unstructured":"Haseeb K, Islam N, Almogren A, Ud Din I (2019) Intrusion prevention framework for secure routing in WSN-based mobile Internet of things. IEEE Access 7:185496\u2013185505. https:\/\/doi.org\/10.1109\/ACCESS.2019.2960633","journal-title":"IEEE Access"},{"key":"3447_CR17","doi-asserted-by":"publisher","first-page":"45","DOI":"10.1016\/j.trc.2016.01.007","volume":"64","author":"L Li","year":"2016","unstructured":"Li L, Hansman R, Palacios R, Welsch R (2016) Anomaly detection via a Gaussian mixture model for flight operation and safety monitoring. Transp Res Part C Emerg Technol 64:45\u201357. https:\/\/doi.org\/10.1016\/j.trc.2016.01.007","journal-title":"Transp Res Part C Emerg Technol"},{"key":"3447_CR18","doi-asserted-by":"publisher","unstructured":"Chapaneri R, Shah S (2019) Detection of malicious network traffic using convolutional neural networks. In: IEEE 10th Intl. Conf. on Computing, Communication and Networking Technologies (ICCCNT), Kanpur, India. https:\/\/doi.org\/10.1109\/ICCCNT45670.2019.8944814","DOI":"10.1109\/ICCCNT45670.2019.8944814"},{"key":"3447_CR19","doi-asserted-by":"publisher","first-page":"21954","DOI":"10.1109\/ACCESS.2017.2762418","volume":"5","author":"C Yin","year":"2017","unstructured":"Yin C, Zhu Y, Fei J, He X (2017) A deep learning approach for intrusion detection using recurrent neural networks. IEEE Access 5:21954\u201321961. https:\/\/doi.org\/10.1109\/ACCESS.2017.2762418","journal-title":"IEEE Access"},{"key":"3447_CR20","doi-asserted-by":"publisher","unstructured":"Kim J, Thu H, Kim H (2017) Long short term memory recurrent neural network classifier for intrusion detection. In: IEEE Intl. Conf. Platform Technology and Service, South Korea. https:\/\/doi.org\/10.1109\/PlatCon.2016.7456805","DOI":"10.1109\/PlatCon.2016.7456805"},{"key":"3447_CR21","doi-asserted-by":"publisher","unstructured":"Wu P, Guo H, Moustafa N (2020) Pelican: a deep residual network for network intrusion detection. In: 50th Annual IEEE\/IFIP International Conference on Dependable Systems and Networks Workshops (DSN-W). https:\/\/doi.org\/10.1109\/DSN-W50199.2020.00018","DOI":"10.1109\/DSN-W50199.2020.00018"},{"key":"3447_CR22","doi-asserted-by":"publisher","unstructured":"Dutta V, Chora\u015b M, Kozik R, Pawlicki M (2020) Hybrid model for improving the classification effectiveness of network intrusion detection. In: Intl. Conference on Complex, Intelligent, and Software Intensive Systems, Springer, Berlin https:\/\/doi.org\/10.1007\/978-3-030-57805-3_38","DOI":"10.1007\/978-3-030-57805-3_38"},{"key":"3447_CR23","doi-asserted-by":"publisher","first-page":"1017","DOI":"10.3390\/electronics9061017","volume":"9","author":"A Almalawi","year":"2020","unstructured":"Almalawi A, Fahad A, Tari Z, Khan A, Alzahrani N, Bakhsh S, Alassafi M, Alshdadi A, Qaiyum S (2020) Add-on anomaly threshold technique for improving unsupervised intrusion detection on SCADA data. Electronics 9:1017. https:\/\/doi.org\/10.3390\/electronics9061017","journal-title":"Electronics"},{"key":"3447_CR24","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2997327","author":"N Merrill","year":"2020","unstructured":"Merrill N, Eskandarian A (2020) Modified autoencoder training and scoring for robust unsupervised anomaly detection in deep learning. IEEE Access. https:\/\/doi.org\/10.1109\/ACCESS.2020.2997327","journal-title":"IEEE Access"},{"key":"3447_CR25","doi-asserted-by":"publisher","unstructured":"Chen X, Cao C, Mai J (2020) Network anomaly detection based on deep support vector data description. In: 5th IEEE International Conference on Big Data Analytics (ICBDA). https:\/\/doi.org\/10.1109\/ICBDA49040.2020.9101325","DOI":"10.1109\/ICBDA49040.2020.9101325"},{"key":"3447_CR26","first-page":"2579","volume":"9","author":"L Maaten","year":"2008","unstructured":"Maaten L, Hinton G (2008) Visualizing data using t-SNE. J Mach Learn Res 9:2579\u20132605","journal-title":"J Mach Learn Res"},{"key":"3447_CR27","doi-asserted-by":"publisher","unstructured":"P\u00e9rez D, Alonso S, Mor\u00e1n A, Prada M, Fuertes J, Dom\u00e1nguez M (2019) Comparison of network intrusion detection performance using feature representation. In: Intl. Conf. on Engineering Applications of Neural Networks pp 463\u2013475. https:\/\/doi.org\/10.1007\/978-3-030-20257-6_40","DOI":"10.1007\/978-3-030-20257-6_40"},{"key":"3447_CR28","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2875045","author":"N Marir","year":"2018","unstructured":"Marir N, Wang H, Feng G, Li B, Jia M (2018) Distributed abnormal behavior detection approach based on deep belief network and ensemble SVM using spark. IEEE Access. https:\/\/doi.org\/10.1109\/ACCESS.2018.2875045","journal-title":"IEEE Access"},{"key":"3447_CR29","doi-asserted-by":"publisher","unstructured":"Aksu D, Aydin M (2018) Detecting port scan attempts with comparative analysis of deep learning and support vector machine algorithms. In: IEEE Intl. Congress on Big Data, Deep Learning and Fighting Cyber Terrorism (IBIGDELFT) Turkey pp 77\u201380. https:\/\/doi.org\/10.1109\/IBIGDELFT.2018.8625370","DOI":"10.1109\/IBIGDELFT.2018.8625370"},{"key":"3447_CR30","doi-asserted-by":"publisher","unstructured":"Sharafaldin I, Habibi L, Ghorbani A (2018) A detailed analysis of the CICIDS2017 data set. In: Intl. Conf. on Information Systems Security and Privacy, Springer Cham.https:\/\/doi.org\/10.1007\/978-3-030-25109-3_9","DOI":"10.1007\/978-3-030-25109-3_9"},{"key":"3447_CR31","doi-asserted-by":"publisher","unstructured":"Yulianto A, Sukarno P, Suwastika N (2019) Improving AdaBoost-based intrusion detection system performance on CICIDS 2017 dataset. In: Journal of Physics: Conference Series, vol 1192, no. 1. https:\/\/doi.org\/10.1088\/1742-6596\/1192\/1\/012018","DOI":"10.1088\/1742-6596\/1192\/1\/012018"}],"container-title":["The Journal of Supercomputing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11227-020-03447-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s11227-020-03447-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s11227-020-03447-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,10,16]],"date-time":"2021-10-16T11:29:10Z","timestamp":1634383750000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s11227-020-03447-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,10,16]]},"references-count":31,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2021,5]]}},"alternative-id":["3447"],"URL":"https:\/\/doi.org\/10.1007\/s11227-020-03447-z","relation":{},"ISSN":["0920-8542","1573-0484"],"issn-type":[{"value":"0920-8542","type":"print"},{"value":"1573-0484","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,10,16]]},"assertion":[{"value":"1 October 2020","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"16 October 2020","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}