{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,18]],"date-time":"2026-07-18T16:27:24Z","timestamp":1784392044011,"version":"3.55.0"},"reference-count":39,"publisher":"Springer Science and Business Media LLC","issue":"5","license":[{"start":{"date-parts":[[2019,9,3]],"date-time":"2019-09-03T00:00:00Z","timestamp":1567468800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"},{"start":{"date-parts":[[2019,9,3]],"date-time":"2019-09-03T00:00:00Z","timestamp":1567468800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"crossref","award":["2016QY02D0304"],"award-info":[{"award-number":["2016QY02D0304"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100012166","name":"National Key Research and Development Program of China","doi-asserted-by":"crossref","award":["2017YFB0701900"],"award-info":[{"award-number":["2017YFB0701900"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Vis"],"published-print":{"date-parts":[[2019,10]]},"DOI":"10.1007\/s12650-019-00580-7","type":"journal-article","created":{"date-parts":[[2019,9,3]],"date-time":"2019-09-03T08:20:41Z","timestamp":1567498841000},"page":"955-971","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":20,"title":["An interactive visual analytics approach for network anomaly detection through smart labeling"],"prefix":"10.1007","volume":"22","author":[{"given":"Xin","family":"Fan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chenlu","family":"Li","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xiaoru","family":"Yuan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7151-2407","authenticated-orcid":false,"given":"Xiaoju","family":"Dong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jie","family":"Liang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2019,9,3]]},"reference":[{"key":"580_CR1","doi-asserted-by":"publisher","first-page":"19","DOI":"10.1016\/j.jnca.2015.11.016","volume":"60","author":"M Ahmed","year":"2016","unstructured":"Ahmed M, Mahmood AN, Hu J (2016) A survey of network anomaly detection techniques. J Netw Comput Appl 60:19\u201331","journal-title":"J Netw Comput Appl"},{"key":"580_CR2","doi-asserted-by":"publisher","first-page":"152","DOI":"10.1016\/j.jocs.2017.03.006","volume":"25","author":"S Aljawarneh","year":"2018","unstructured":"Aljawarneh S, Aldwairi M, Yassein MB (2018) Anomaly-based intrusion detection system through feature selection analysis and building hybrid efficient model. J Comput Sci 25:152\u2013160","journal-title":"J Comput Sci"},{"key":"580_CR3","doi-asserted-by":"crossref","unstructured":"Almgren M, Jonsson E (2004) Using active learning in intrusion detection. In: Proceedings. 17th IEEE Computer Security Foundations Workshop, 2004. IEEE, pp 88\u201398","DOI":"10.1109\/CSFW.2004.1310734"},{"key":"580_CR5","doi-asserted-by":"crossref","unstructured":"Bernard J, Sessler D, Bannach A, May T, Kohlhammer J (2015) A visual active learning system for the assessment of patient well-being in prostate cancer research. In: Proceedings of the 2015 workshop on visual analytics in healthcare. ACM, p\u00a01","DOI":"10.1145\/2836034.2836035"},{"issue":"1","key":"580_CR4","doi-asserted-by":"publisher","first-page":"298","DOI":"10.1109\/TVCG.2017.2744818","volume":"24","author":"J Bernard","year":"2018","unstructured":"Bernard J, Hutter M, Zeppelzauer M, Fellner D, Sedlmair M (2018a) Comparing visual-interactive labeling with active learning: an experimental study. IEEE Trans Vis Comput Graph 24(1):298\u2013308","journal-title":"IEEE Trans Vis Comput Graph"},{"issue":"9","key":"580_CR6","doi-asserted-by":"publisher","first-page":"1189","DOI":"10.1007\/s00371-018-1500-3","volume":"34","author":"J Bernard","year":"2018","unstructured":"Bernard J, Zeppelzauer M, Sedlmair M, Aigner W (2018b) VIAL: a unified process for visual interactive labeling. Vis Comput 34(9):1189\u20131207","journal-title":"Vis Comput"},{"issue":"1","key":"580_CR7","doi-asserted-by":"publisher","first-page":"303","DOI":"10.1109\/SURV.2013.052213.00046","volume":"16","author":"MH Bhuyan","year":"2014","unstructured":"Bhuyan MH, Bhattacharyya DK, Kalita JK (2014) Network anomaly detection: methods, systems and tools. IEEE Commun Surv Tutor 16(1):303\u2013336","journal-title":"IEEE Commun Surv Tutor"},{"key":"580_CR8","doi-asserted-by":"crossref","unstructured":"Bruns-Smith D, Baskaran MM, Ezick J, Henretty T, Lethin R (2016) Cyber security through multidimensional data decompositions. In: Cybersecurity symposium (CYBERSEC), 2016. IEEE, pp 59\u201367","DOI":"10.1109\/CYBERSEC.2016.017"},{"issue":"2","key":"580_CR9","doi-asserted-by":"publisher","first-page":"1153","DOI":"10.1109\/COMST.2015.2494502","volume":"18","author":"AL Buczak","year":"2016","unstructured":"Buczak AL, Guven E (2016) A survey of data mining and machine learning methods for cyber security intrusion detection. IEEE Commun Surv Tutor 18(2):1153\u20131176","journal-title":"IEEE Commun Surv Tutor"},{"issue":"3","key":"580_CR10","doi-asserted-by":"publisher","first-page":"15","DOI":"10.1145\/1541880.1541882","volume":"41","author":"V Chandola","year":"2009","unstructured":"Chandola V, Banerjee A, Kumar V (2009) Anomaly detection: a survey. ACM Comput Surv (CSUR) 41(3):15","journal-title":"ACM Comput Surv (CSUR)"},{"key":"580_CR11","doi-asserted-by":"crossref","unstructured":"Chen W, Kong F, Mei F, Yuan G, Li B (2017) A novel unsupervised anomaly detection approach for intrusion detection system. In: Big data security on cloud (BigDataSecurity), IEEE international conference on high performance and smart computing (HPSC), and IEEE international conference on intelligent data and security (IDS). IEEE, pp 69\u201373","DOI":"10.1109\/BigDataSecurity.2017.56"},{"key":"580_CR12","doi-asserted-by":"crossref","unstructured":"Culotta A, Mccallum A (2005) Reducing labeling effort for structured prediction tasks. In: National conference on artificial intelligence, pp 746\u2013751","DOI":"10.21236\/ADA440382"},{"issue":"3","key":"580_CR13","doi-asserted-by":"publisher","first-page":"32","DOI":"10.1080\/01969727308546046","volume":"3","author":"JC Dunn","year":"1973","unstructured":"Dunn JC (1973) A fuzzy relative of the isodata process and its use in detecting compact well-separated clusters. J Cybern 3(3):32\u201357","journal-title":"J Cybern"},{"key":"580_CR14","doi-asserted-by":"crossref","unstructured":"Fischer F, Mansmann F, Keim DA, Pietzko S, Waldvogel M (2008) Large-scale network monitoring for visual analysis of attacks. In: International workshop on visualization for computer security. Springer, Berlin, pp 111\u2013118","DOI":"10.1007\/978-3-540-85933-8_11"},{"key":"580_CR15","unstructured":"Fritzke B (1995) A growing neural gas network learns topologies. In: International conference on neural information processing systems, pp 625\u2013632"},{"issue":"1","key":"580_CR16","doi-asserted-by":"publisher","first-page":"90","DOI":"10.1016\/j.neunet.2005.04.006","volume":"19","author":"S Furao","year":"2006","unstructured":"Furao S, Hasegawa O (2006) An incremental network for on-line unsupervised classification and topology learning. Neural Netw 19(1):90\u2013106","journal-title":"Neural Netw"},{"key":"580_CR17","doi-asserted-by":"crossref","unstructured":"G\u00f6rnitz N, Kloft M, Rieck K, Brefeld U (2009) Active learning for network intrusion detection. In: Proceedings of the 2nd ACM workshop on security and artificial intelligence. ACM, New York, pp 47\u201354","DOI":"10.1145\/1654988.1655002"},{"key":"580_CR18","doi-asserted-by":"publisher","first-page":"2839","DOI":"10.1109\/TVCG.2012.277","volume":"12","author":"F Heimerl","year":"2012","unstructured":"Heimerl F, Koch S, Bosch H, Ertl T (2012) Visual classifier training for text document retrieval. IEEE Trans Vis Comput Graph 12:2839\u20132848","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"580_CR19","doi-asserted-by":"crossref","unstructured":"H\u00f6ferlin B, Netzel R, H\u00f6ferlin M, Weiskopf D, Heidemann G (2012) Inter-active learning of ad-hoc classifiers for video visual analytics. In: Visual analytics science and technology (VAST). IEEE, pp 23\u201332","DOI":"10.1109\/VAST.2012.6400492"},{"issue":"9","key":"580_CR20","doi-asserted-by":"publisher","first-page":"1464","DOI":"10.1109\/5.58325","volume":"78","author":"T Kohonen","year":"1990","unstructured":"Kohonen T (1990) The self-organizing map. Proc IEEE 78(9):1464\u20131480","journal-title":"Proc IEEE"},{"issue":"7","key":"580_CR21","doi-asserted-by":"publisher","first-page":"2223","DOI":"10.1109\/TVCG.2017.2711030","volume":"24","author":"H Lin","year":"2018","unstructured":"Lin H, Gao S, Gotz D, Du F, He J, Cao N (2018) Rclens: interactive rare category exploration and identification. IEEE Trans Vis Comput Graph 24(7):2223\u20132237","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"580_CR22","doi-asserted-by":"crossref","unstructured":"Livnat Y, Agutter J, Moon S, Foresti S (2005) Visual correlation for situational awareness. In: IEEE Symposium on information visualization, 2005. INFOVIS 2005. IEEE, pp 95\u2013102","DOI":"10.1109\/INFVIS.2005.1532134"},{"issue":"Nov","key":"580_CR23","first-page":"2579","volume":"9","author":"M Lvd","year":"2008","unstructured":"Lvd M, Hinton G (2008) Visualizing data using t-SNE. J Mach Learn Res 9(Nov):2579\u20132605","journal-title":"J Mach Learn Res"},{"issue":"6","key":"580_CR24","doi-asserted-by":"publisher","first-page":"1105","DOI":"10.1109\/TVCG.2007.70522","volume":"13","author":"F Mansmann","year":"2007","unstructured":"Mansmann F, Keim DA, North SC, Rexroad B, Sheleheda D (2007) Visual analysis of network traffic for resource planning, interactive monitoring, and interpretation of security threats. IEEE Trans Vis Comput Graph 13(6):1105\u20131112","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"580_CR25","doi-asserted-by":"crossref","unstructured":"McPherson J, Ma K-L, Krystosk P, Bartoletti T, Christensen M (2004) Portvis: a tool for port-based detection of security events. In:Proceedings of the 2004 ACM workshop on Visualization and data mining for computer security. ACM, New York, pp 73\u201381","DOI":"10.1145\/1029208.1029220"},{"issue":"3","key":"580_CR26","doi-asserted-by":"publisher","first-page":"26","DOI":"10.1109\/65.283931","volume":"8","author":"B Mukherjee","year":"1994","unstructured":"Mukherjee B, Heberlein LT, Levitt KN (1994) Network intrusion detection. IEEE Netw 8(3):26\u201341","journal-title":"IEEE Netw"},{"key":"580_CR27","doi-asserted-by":"publisher","first-page":"309","DOI":"10.1007\/3-540-44816-0_31","volume-title":"Advances in Intelligent Data Analysis","author":"Tobias Scheffer","year":"2001","unstructured":"Scheffer T, Decomain C, Wrobel S (2001) Active hidden Markov models for information extraction. In: International symposium on intelligent data analysis. Springer, Berlin, pp 309\u2013318"},{"key":"580_CR28","unstructured":"Settles B (2009) Active learning literature survey. Technical report, University of Wisconsin-Madison Department of Computer Sciences"},{"key":"580_CR29","doi-asserted-by":"crossref","unstructured":"Settles B, Craven M (2008) An analysis of active learning strategies for sequence labeling tasks. In: Proceedings of the conference on empirical methods in natural language processing. Association for Computational Linguistics, pp 1070\u20131079","DOI":"10.3115\/1613715.1613855"},{"issue":"4","key":"580_CR30","doi-asserted-by":"publisher","first-page":"1350","DOI":"10.1109\/JSYST.2014.2358997","volume":"10","author":"R Shi","year":"2015","unstructured":"Shi R, Yang M, Zhao Y, Zhou F, Huang W, Zhang S (2015) A matrix-based visualization system for network traffic forensics. IEEE Syst J 10(4):1350\u20131360","journal-title":"IEEE Syst J"},{"issue":"6","key":"580_CR31","doi-asserted-by":"publisher","first-page":"83","DOI":"10.1109\/MCG.2018.2879067","volume":"38","author":"Y Shi","year":"2018","unstructured":"Shi Y, Zhao Y, Zhou F, Shi R, Zhang Y (2018) A novel radial visualization of intrusion detection alerts. IEEE Comput Graph Appl 38(6):83\u201395","journal-title":"IEEE Comput Graph Appl"},{"issue":"8","key":"580_CR32","doi-asserted-by":"publisher","first-page":"1313","DOI":"10.1109\/TVCG.2011.144","volume":"18","author":"H Shiravi","year":"2012","unstructured":"Shiravi H, Shiravi A, Ghorbani AA (2012) A survey of visualization systems for network security. IEEE Trans Vis Comput Graph 18(8):1313\u20131329","journal-title":"IEEE Trans Vis Comput Graph"},{"key":"580_CR33","doi-asserted-by":"crossref","unstructured":"Sommer R, Paxson V (2010) Outside the closed world: on using machine learning for network intrusion detection. In: 2010 IEEE symposium on security and privacy (SP). IEEE, pp 305\u2013316","DOI":"10.1109\/SP.2010.25"},{"issue":"6","key":"580_CR34","doi-asserted-by":"publisher","first-page":"964","DOI":"10.1109\/TNN.2009.2014374","volume":"20","author":"A Sudo","year":"2009","unstructured":"Sudo A, Sato A, Hasegawa O (2009) Associative memory for online learning in noisy environments using self-organizing incremental neural network. IEEE Trans Neural Netw 20(6):964\u2013972","journal-title":"IEEE Trans Neural Netw"},{"key":"580_CR35","doi-asserted-by":"crossref","unstructured":"Velea R, Ciobanu C, Gurzau F, Patriciu V-V (2017) Feature extraction and visualization for network PCAPNG traces. In: 2017 21st international conference on control systems and computer science (CSCS). IEEE, pp 311\u2013316","DOI":"10.1109\/CSCS.2017.49"},{"key":"580_CR36","doi-asserted-by":"crossref","unstructured":"Yousefi-Azar M, Varadharajan V, Hamey L, Tupakula U (2017) Autoencoder-based feature learning for cyber security applications. In: 2017 international joint conference on neural networks (IJCNN). IEEE, pp 3854\u20133861","DOI":"10.1109\/IJCNN.2017.7966342"},{"key":"580_CR37","unstructured":"Zhang S, Fung C, Huang S, Luan Z, Qian D (2017) Psom: periodic self-organizing maps for unsupervised anomaly detection in periodic time series. In: 2017 IEEE\/ACM 25th international symposium on quality of service (IWQoS). IEEE, pp 1\u20136"},{"issue":"3","key":"580_CR38","doi-asserted-by":"publisher","first-page":"181","DOI":"10.1007\/s12650-014-0213-6","volume":"17","author":"Y Zhao","year":"2014","unstructured":"Zhao Y, Liang X, Fan X, Wang Y, Yang M, Zhou F (2014) MVSec: multi-perspective and deductive visual analytics on heterogeneous network security data. J Vis 17(3):181\u2013196","journal-title":"J Vis"},{"issue":"1","key":"580_CR39","doi-asserted-by":"publisher","first-page":"12","DOI":"10.1109\/TVCG.2018.2865020","volume":"25","author":"Y Zhao","year":"2018","unstructured":"Zhao Y, Luo F, Chen M, Wang Y, Xia J, Zhou F, Wang Y, Chen Y, Chen W (2018) Evaluating multi-dimensional visualizations for understanding fuzzy clusters. IEEE Trans Vis Comput Graph 25(1):12\u201321","journal-title":"IEEE Trans Vis Comput Graph"}],"container-title":["Journal of Visualization"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s12650-019-00580-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s12650-019-00580-7\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s12650-019-00580-7.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,9,1]],"date-time":"2020-09-01T23:26:32Z","timestamp":1599002792000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s12650-019-00580-7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,9,3]]},"references-count":39,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2019,10]]}},"alternative-id":["580"],"URL":"https:\/\/doi.org\/10.1007\/s12650-019-00580-7","relation":{},"ISSN":["1343-8875","1875-8975"],"issn-type":[{"value":"1343-8875","type":"print"},{"value":"1875-8975","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,9,3]]},"assertion":[{"value":"7 July 2019","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"18 July 2019","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"3 September 2019","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}}]}}