{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T16:11:40Z","timestamp":1781194300644,"version":"3.54.1"},"reference-count":21,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2018,10,22]],"date-time":"2018-10-22T00:00:00Z","timestamp":1540166400000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"crossref","award":["2017YFB0701900"],"award-info":[{"award-number":["2017YFB0701900"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["61100053"],"award-info":[{"award-number":["61100053"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"CCF-Venustech Hongyan Research Initiative","award":["2016-013"],"award-info":[{"award-number":["2016-013"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Vis"],"published-print":{"date-parts":[[2019,2]]},"DOI":"10.1007\/s12650-018-0525-z","type":"journal-article","created":{"date-parts":[[2018,10,22]],"date-time":"2018-10-22T11:02:05Z","timestamp":1540206125000},"page":"215-229","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":14,"title":["A real-time network security visualization system based on incremental learning (ChinaVis 2018)"],"prefix":"10.1007","volume":"22","author":[{"given":"Xin","family":"Fan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chenlu","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7151-2407","authenticated-orcid":false,"given":"Xiaoju","family":"Dong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2018,10,22]]},"reference":[{"key":"525_CR1","doi-asserted-by":"crossref","unstructured":"Ali SHA, Ozawa S, Ban T, Nakazato J, Shimamura J (2016) A neural network model for detecting ddos attacks using darknet traffic features. In: Neural networks (IJCNN), 2016 international joint conference on, pp. 2979\u20132985. IEEE","DOI":"10.1109\/IJCNN.2016.7727577"},{"key":"525_CR2","doi-asserted-by":"crossref","unstructured":"Boschetti A, Salgarelli L, Muelder C, Ma K-L (2011) TVi: a visual querying system for network monitoring and anomaly detection. In: Proceedings of the 8th international symposium on visualization for cyber security, p\u00a01. ACM","DOI":"10.1145\/2016904.2016905"},{"key":"525_CR3","doi-asserted-by":"crossref","unstructured":"Bruns-Smith D, Baskaran MM, Ezick J, Henretty T, Lethin R (2016) Cyber security through multidimensional data decompositions. In: Cybersecurity symposium (CYBERSEC), 2016, pp. 59\u201367. IEEE","DOI":"10.1109\/CYBERSEC.2016.017"},{"issue":"2","key":"525_CR4","doi-asserted-by":"publisher","first-page":"1153","DOI":"10.1109\/COMST.2015.2494502","volume":"18","author":"AL Buczak","year":"2016","unstructured":"Buczak AL, Guven E (2016) A survey of data mining and machine learning methods for cyber security intrusion detection. IEEE Commun Surv Tutor 18(2):1153\u20131176","journal-title":"IEEE Commun Surv Tutor"},{"key":"525_CR5","doi-asserted-by":"crossref","unstructured":"Chen W, Kong F, Mei F, Yuan G, Li B (2017) A novel unsupervised anomaly detection approach for intrusion detection system. In: Big data security on cloud (BigDataSecurity), IEEE international conference on high performance and smart computing (HPSC), and IEEE international conference on intelligent data and security (IDS), 2017 IEEE 3rd international conference on, pp 69\u201373. IEEE","DOI":"10.1109\/BigDataSecurity.2017.56"},{"issue":"1","key":"525_CR6","doi-asserted-by":"publisher","first-page":"90","DOI":"10.1016\/j.neunet.2005.04.006","volume":"19","author":"S Furao","year":"2006","unstructured":"Furao S, Hasegawa O (2006) An incremental network for on-line unsupervised classification and topology learning. Neural Netw 19(1):90\u2013106","journal-title":"Neural Netw"},{"key":"525_CR7","unstructured":"Hajar AAS, Fukase K, Ozawa S (2013) A neural network model for large-scale stream data learning using locally sensitive hashing. In: International conference on neural information processing. Springer, Berlin, pp 369\u2013376"},{"key":"525_CR8","doi-asserted-by":"crossref","unstructured":"Hao L, Healey CG, Hutchinson SE (2015) Ensemble visualization for cyber situation awareness of network security data. In: Visualization for cyber security (VizSec), 2015 IEEE symposium on, pp 1\u20138. IEEE","DOI":"10.1109\/VIZSEC.2015.7312766"},{"issue":"5786","key":"525_CR9","doi-asserted-by":"publisher","first-page":"504","DOI":"10.1126\/science.1127647","volume":"313","author":"G\u00a0E Hinton","year":"2006","unstructured":"Hinton G\u00a0E, Salakhutdinov R\u00a0R (2006) Reducing the dimensionality of data with neural networks. Science 313(5786):504\u2013507","journal-title":"Science"},{"key":"525_CR10","doi-asserted-by":"crossref","unstructured":"Huang S-Y, Yu F, Tsaih R-H, Huang Y (2015) Network-traffic anomaly detection with incremental majority learning. In: Neural networks (IJCNN), 2015 international joint conference on, pp. 1\u20138. IEEE","DOI":"10.1109\/IJCNN.2015.7280573"},{"issue":"2","key":"525_CR11","doi-asserted-by":"publisher","first-page":"119","DOI":"10.1007\/s10618-005-0031-5","volume":"13","author":"G Leban","year":"2006","unstructured":"Leban G, Zupan B, Vidmar G, Bratko I (2006) Vizrank: data visualization guided by machine learning. Data Min Knowl Discov 13(2):119\u2013136","journal-title":"Data Min Knowl Discov"},{"issue":"8","key":"525_CR12","doi-asserted-by":"publisher","first-page":"1313","DOI":"10.1109\/TVCG.2011.144","volume":"18","author":"H Shiravi","year":"2012","unstructured":"Shiravi H, Shiravi A, Ghorbani AA (2012) A survey of visualization systems for network security. IEEE Trans Vis Comput Graph 18(8):1313\u20131329","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"525_CR13","doi-asserted-by":"crossref","unstructured":"Sommer R, Paxson V (2010) Outside the closed world: on using machine learning for network intrusion detection. In: Security and privacy (SP), 2010 IEEE symposium on, pp 305\u2013316. IEEE","DOI":"10.1109\/SP.2010.25"},{"key":"525_CR14","doi-asserted-by":"crossref","unstructured":"Sultana A, Jabbar M (2016) Intelligent network intrusion detection system using data mining techniques. In: Applied and theoretical computing and communication technology (iCATccT), 2016 2nd international conference on, pp 329\u2013333. IEEE","DOI":"10.1109\/ICATCCT.2016.7912017"},{"key":"525_CR15","doi-asserted-by":"crossref","unstructured":"Talbot J, Lee B, Kapoor A, Tan DS (2009) Ensemblematrix: interactive visualization to support machine learning with multiple classifiers. In: Proceedings of the SIGCHI conference on human factors in computing systems, pp 1283\u20131292. ACM","DOI":"10.1145\/1518701.1518895"},{"key":"525_CR16","doi-asserted-by":"crossref","unstructured":"Theron R, Mag\u00e1n-Carri\u00f3n R, Camacho J, Fernndez GM (2017) Network-wide intrusion detection supported by multivariate analysis and interactive visualization. In: Visualization for cyber security (VizSec), 2017 IEEE symposium on, pp 1\u20138. IEEE","DOI":"10.1109\/VIZSEC.2017.8062198"},{"key":"525_CR17","unstructured":"Vast challenge 2013 homepage. http:\/\/www.vacommunity.org\/VAST+Challenge+2013 (2013)"},{"issue":"1","key":"525_CR18","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1007\/s10994-005-4258-6","volume":"58","author":"GI Webb","year":"2005","unstructured":"Webb GI, Boughton JR, Wang Z (2005) Not so naive bayes: aggregating one-dependence estimators. Mach Learn 58(1):5\u201324","journal-title":"Mach Learn"},{"key":"525_CR19","doi-asserted-by":"crossref","unstructured":"Yousefi-Azar M, Varadharajan V, Hamey L, Tupakula U (2017) Autoencoder-based feature learning for cyber security applications. In: Neural networks (IJCNN), 2017 international joint conference on, pp 3854\u20133861. IEEE","DOI":"10.1109\/IJCNN.2017.7966342"},{"key":"525_CR20","doi-asserted-by":"crossref","unstructured":"Zhang S, Fung C, Huang S, Luan Z, Qian D (2017) Psom: periodic self-organizing maps for unsupervised anomaly detection in periodic time series. In: Quality of service (IWQoS), 2017 IEEE\/ACM 25th international symposium on, pp 1\u20136. IEEE","DOI":"10.1109\/IWQoS.2017.7969174"},{"key":"525_CR21","doi-asserted-by":"crossref","unstructured":"Zhao S, Chandrashekar M, Lee Y, Medhi D (2015) Real-time network anomaly detection system using machine learning. In: Design of reliable communication networks (DRCN), 2015 11th international conference on the, pp 267\u2013270. IEEE","DOI":"10.1109\/DRCN.2015.7149025"}],"container-title":["Journal of Visualization"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s12650-018-0525-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s12650-018-0525-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s12650-018-0525-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,3]],"date-time":"2026-04-03T21:06:35Z","timestamp":1775250395000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s12650-018-0525-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,10,22]]},"references-count":21,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2019,2]]}},"alternative-id":["525"],"URL":"https:\/\/doi.org\/10.1007\/s12650-018-0525-z","relation":{},"ISSN":["1343-8875","1875-8975"],"issn-type":[{"value":"1343-8875","type":"print"},{"value":"1875-8975","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,10,22]]},"assertion":[{"value":"20 July 2018","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"7 September 2018","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"22 October 2018","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}