{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,5]],"date-time":"2026-08-05T18:24:22Z","timestamp":1785954262494,"version":"3.56.0"},"reference-count":668,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"name":"Norwegian University of Science and Technology, Norway"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2020]]},"DOI":"10.1109\/access.2020.3041951","type":"journal-article","created":{"date-parts":[[2020,12,2]],"date-time":"2020-12-02T21:17:05Z","timestamp":1606943825000},"page":"222310-222354","source":"Crossref","is-referenced-by-count":463,"title":["A Survey on Machine Learning Techniques for Cyber Security in the Last Decade"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7412-6106","authenticated-orcid":false,"given":"Kamran","family":"Shaukat","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6185-6035","authenticated-orcid":false,"given":"Suhuai","family":"Luo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vijay","family":"Varadharajan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1252-260X","authenticated-orcid":false,"given":"Ibrahim A.","family":"Hameed","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2347-0374","authenticated-orcid":false,"given":"Min","family":"Xu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref275","doi-asserted-by":"publisher","DOI":"10.1016\/j.jksuci.2014.03.014"},{"key":"ref274","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-3376-6_29"},{"key":"ref277","doi-asserted-by":"publisher","DOI":"10.26483\/ijarcs.v9i2.5571"},{"key":"ref276","doi-asserted-by":"publisher","DOI":"10.1109\/ICCEEE.2013.6634013"},{"key":"ref271","year":"2020","journal-title":"NCNN"},{"key":"ref270","year":"2020","journal-title":"Core ML"},{"key":"ref170","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134601"},{"key":"ref273","doi-asserted-by":"publisher","DOI":"10.1109\/CISIS.2010.116"},{"key":"ref272","year":"2020","journal-title":"DeepSence"},{"key":"ref172","first-page":"436","article-title":"Droidkin: Lightweight detection of Android apps similarity","author":"gonzalez","year":"2014","journal-title":"Proc Int Conf Secur Privacy Commun Netw"},{"key":"ref171","first-page":"1","article-title":"Kharon dataset: Android malware under a microscope","author":"kiss","year":"2016","journal-title":"Proc LASER Workshop Learn Authoritative Secur Exp Results (LASER)"},{"key":"ref174","first-page":"23","article-title":"An anomaly-based Web application firewall","author":"torrano-gimenez","year":"2009","journal-title":"Proc SECRYPT"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSA49311.2020.9139664"},{"key":"ref176","year":"2020","journal-title":"The BoT-IoT Dataset"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.5220\/0006639801080116"},{"key":"ref178","first-page":"1","article-title":"Introducing the Enron corpus","author":"klimt","year":"2004","journal-title":"Proc CEAS"},{"key":"ref177","year":"2019","journal-title":"Center for Machine Learning and Intelligent Systems at UC Irvine"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1109\/ISCISC48546.2019.8985139"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1109\/HORA49412.2020.9152840"},{"key":"ref267","year":"2020","journal-title":"BlockScript"},{"key":"ref268","year":"2020","journal-title":"Deeplearning4j"},{"key":"ref269","year":"2020","journal-title":"CNKT"},{"key":"ref288","article-title":"Spam or not spam–that is the question","author":"kiran","year":"2009"},{"key":"ref287","first-page":"147","article-title":"Analysis and detection of modern spam techniques on social networking sites","author":"ponnapalli","year":"2012","journal-title":"Proc 3rd Int Conf Services Emerg Markets"},{"key":"ref286","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315288"},{"key":"ref285","first-page":"1","article-title":"Spam detection using clustering, random forests, and active learning","author":"debarr","year":"2009","journal-title":"Proc 6th Conf Email Anti-Spam"},{"key":"ref181","article-title":"A corpus linguistics study of SMS text messaging","author":"tagg","year":"2009"},{"key":"ref284","doi-asserted-by":"publisher","DOI":"10.1145\/1216295.1216307"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.1023\/A:1022948414856"},{"key":"ref283","first-page":"136","article-title":"A survey of modern spam tools","author":"stern","year":"2008","journal-title":"Proc CEAS"},{"key":"ref282","doi-asserted-by":"publisher","DOI":"10.1561\/1500000021"},{"key":"ref281","doi-asserted-by":"crossref","first-page":"283","DOI":"10.3844\/ajassp.2012.283.288","article-title":"Malware detection based on hybrid signature behaviour application programming interface call graph","volume":"9","author":"elhadi","year":"2012","journal-title":"Amer J Appl Sci"},{"key":"ref185","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3000179"},{"key":"ref280","first-page":"5","article-title":"Data pre-processing in spam detection","volume":"1","author":"manisha","year":"2015","journal-title":"Int J Sci Technol Eng"},{"key":"ref184","year":"2020","journal-title":"Kharon malware dataset"},{"key":"ref183","year":"2020","journal-title":"Android Malware Dataset (CICAndMal2017)"},{"key":"ref182","year":"2020","journal-title":"VirusShare"},{"key":"ref189","doi-asserted-by":"publisher","DOI":"10.1201\/b10867"},{"key":"ref188","article-title":"Machine learning","volume":"13","author":"michie","year":"1994","journal-title":"Neural and Statistical Classification"},{"key":"ref187","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2016.01.033"},{"key":"ref186","year":"2020","journal-title":"Android Adware and General Malware Dataset"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.1145\/345508.345569"},{"key":"ref278","doi-asserted-by":"publisher","DOI":"10.1145\/1028788.1028837"},{"key":"ref279","doi-asserted-by":"publisher","DOI":"10.1016\/j.ipm.2016.04.009"},{"key":"ref293","doi-asserted-by":"publisher","DOI":"10.1109\/HIS.2008.164"},{"key":"ref292","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCE.2012.6271302"},{"key":"ref295","doi-asserted-by":"publisher","DOI":"10.1108\/JSIT-11-2017-0105"},{"key":"ref294","article-title":"Modeling suspicious email detection using enhanced feature selection","author":"nizamani","year":"2013","journal-title":"arXiv 1312 1971"},{"key":"ref297","first-page":"2760","article-title":"Supervised learning approach for spam classification analysis using data mining tools","volume":"2","author":"scholar","year":"2010","journal-title":"Organization"},{"key":"ref296","doi-asserted-by":"publisher","DOI":"10.1109\/WI-IAT.2014.133"},{"key":"ref299","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2012.161"},{"key":"ref298","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4020-6264-3_67"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1109\/INTELLECT.2017.8277634"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.5121\/ijcsit.2011.3112"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1109\/WAINA.2016.127"},{"key":"ref155","article-title":"Semantic classification of tabular datasets via character-level convolutional neural networks","author":"azunre","year":"2019","journal-title":"arXiv 1901 08456"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2020.02.017"},{"key":"ref152","first-page":"171","article-title":"A hybrid ACO based feature selection method for email spam classification","volume":"14","author":"karthika","year":"2015","journal-title":"WSEAS Trans Comput"},{"key":"ref291","doi-asserted-by":"publisher","DOI":"10.1007\/978-81-322-2553-9_23"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1016\/j.aci.2018.01.004"},{"key":"ref290","first-page":"17","article-title":"Email spam classification using hybrid approach of RBF neural network and particle swarm optimization","volume":"8","author":"foqaha","year":"2016","journal-title":"Int J Netw Security Appl"},{"key":"ref146","first-page":"479","article-title":"A detailed analysis of CICIDS2017 dataset for designing intrusion detection systems","volume":"7","author":"panigrahi","year":"2018","journal-title":"Int J Eng Technol"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/1192\/1\/012018"},{"key":"ref148","doi-asserted-by":"crossref","first-page":"132911","DOI":"10.1109\/ACCESS.2020.3009843","article-title":"CICIDS-2017 dataset feature analysis with information gain for anomaly detection","volume":"8","author":"stiawan","year":"2020","journal-title":"IEEE Access"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.05.041"},{"key":"ref289","first-page":"23","article-title":"Adaptive approach for spam detection","volume":"10","author":"sharma","year":"2013","journal-title":"Int J Comput Sci Issues"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1109\/CCST.2018.8585560"},{"key":"ref166","article-title":"EXpose: A character-level convolutional neural network with embeddings for detecting malicious URLs, file paths and registry keys","author":"saxe","year":"2017","journal-title":"arXiv 1702 08568"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46298-1_30"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2017.07.030"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-017-4756-0"},{"key":"ref162","author":"ayala","year":"2017","journal-title":"An Automated Behaviour-Based Malware Analysis Method Based on Free Open Source Software"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-017-3100-y"},{"key":"ref160","year":"2020","journal-title":"Spam Email Datasets"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1145\/2034691.2034742"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1109\/ICRIIS.2017.8002481"},{"key":"ref158","year":"2020","journal-title":"SMS Spam Collection Dataset"},{"key":"ref197","doi-asserted-by":"publisher","DOI":"10.1109\/MCSE.2016.74"},{"key":"ref198","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2015.09.017"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-018-9639-x"},{"key":"ref193","doi-asserted-by":"publisher","DOI":"10.14569\/IJACSA.2019.0100702"},{"key":"ref194","first-page":"1","article-title":"Phishing Websites detection using machine learning based classification techniques","author":"islam","year":"2016","journal-title":"Proc 1ST Int Conf Adv Inf Commun Technol"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.1201\/b17476"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.5858\/arpa.2016-0471-ED"},{"key":"ref190","doi-asserted-by":"publisher","DOI":"10.1109\/ICBDACI.2017.8070809"},{"key":"ref191","doi-asserted-by":"publisher","DOI":"10.1093\/comjnl\/bxaa056"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.1109\/SECON.2017.7925283"},{"key":"ref526","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.2016.1172440"},{"key":"ref527","author":"reports","year":"2020","journal-title":"McAfee Labs Threats Report August 2019"},{"key":"ref524","year":"2020","journal-title":"Psafe Electronic Security Systems"},{"key":"ref525","first-page":"46","article-title":"Cybercrime: A global threat to cybercommunity","volume":"7","author":"pathak","year":"2016","journal-title":"Int J Comput Sci Eng Technol"},{"key":"ref522","year":"2020","journal-title":"SOPHOS"},{"key":"ref523","year":"2020","journal-title":"Trustlook"},{"key":"ref520","year":"2020","journal-title":"Trends in Microbiology"},{"key":"ref521","year":"2020","journal-title":"BullGuard"},{"key":"ref528","year":"2012","journal-title":"The 2012 Norton Cybercrime Report"},{"key":"ref529","year":"2007","journal-title":"Malware Report The Economic Impact of Viruses Spyware Adware Botnets and Other Malicious Code"},{"key":"ref530","doi-asserted-by":"publisher","DOI":"10.1126\/science.339.6123.1026"},{"key":"ref535","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2821095"},{"key":"ref536","doi-asserted-by":"publisher","DOI":"10.1109\/TNET.2019.2899124"},{"key":"ref537","first-page":"66","author":"govindaraju","year":"2010","journal-title":"Exhaustive statistical analysis for detection of metamorphic malware"},{"key":"ref538","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-011-0152-x"},{"key":"ref531","first-page":"1","article-title":"CSI computer crime and security survey","volume":"1","author":"richardson","year":"2008","journal-title":"Comput Secur Inst"},{"key":"ref532","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-2010-0410"},{"key":"ref533","doi-asserted-by":"publisher","DOI":"10.1145\/2557547.2557587"},{"key":"ref534","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-54525-2_39"},{"key":"ref539","doi-asserted-by":"publisher","DOI":"10.1109\/CIS.2011.226"},{"key":"ref200","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.939038"},{"key":"ref541","doi-asserted-by":"publisher","DOI":"10.1109\/ICNC.2012.6234576"},{"key":"ref540","first-page":"1013","article-title":"The effects of training set size for performance of support vector machines and decision trees","author":"kavzoglu","year":"2012","journal-title":"Proc 10th Int Symp Spatial Accuracy Assessment Natural Resour Environ Sci"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1162\/artl.1994.1.3.249"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2015.04.001"},{"key":"ref500","year":"2020","journal-title":"Security Onion"},{"key":"ref501","year":"2020","journal-title":"THE SAGAN LOG ANALYSIS ENGINE"},{"key":"ref209","doi-asserted-by":"publisher","DOI":"10.1016\/j.cor.2004.03.019"},{"key":"ref409","doi-asserted-by":"publisher","DOI":"10.1145\/967900.967989"},{"key":"ref504","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-33112-6_8"},{"key":"ref505","first-page":"358","article-title":"Distributed approach of intrusion detection system: Survey","volume":"2","author":"richariya","year":"2012","journal-title":"Int J Adv Comput Res"},{"key":"ref407","doi-asserted-by":"publisher","DOI":"10.1109\/IKT.2013.6620045"},{"key":"ref502","year":"2020","journal-title":"What Are STIX\/TAXII"},{"key":"ref408","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89900-6_20"},{"key":"ref503","first-page":"666","article-title":"Towards adaptive anomaly detection in cellular mobile networks","volume":"2","author":"sun","year":"2006","journal-title":"Proc IEEE Consum Commun Netw Conf (CCNC)"},{"key":"ref203","doi-asserted-by":"publisher","DOI":"10.1109\/TNN.2006.879766"},{"key":"ref405","doi-asserted-by":"publisher","DOI":"10.1109\/SISY.2017.8080566"},{"key":"ref508","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.1998.738558"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2803446"},{"key":"ref406","article-title":"Deep learning for anomaly detection: A survey","author":"chalapathy","year":"2019","journal-title":"arXiv 1901 03407"},{"key":"ref509","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0020294"},{"key":"ref201","doi-asserted-by":"publisher","DOI":"10.1561\/9781601982957"},{"key":"ref403","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2895334"},{"key":"ref506","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-33112-6_5"},{"key":"ref202","first-page":"2493","article-title":"Natural language processing (almost) from scratch","volume":"12","author":"collobert","year":"2011","journal-title":"J Mach Learn Res"},{"key":"ref404","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2016.04.019"},{"key":"ref507","first-page":"693","article-title":"Survey of routing attacks and countermeasures in mobile ad hoc networks","author":"korba","year":"2013","journal-title":"Proc 15th Int Conf Comput Modeling Simulation (UKSim)"},{"key":"ref207","doi-asserted-by":"publisher","DOI":"10.1016\/j.jbi.2018.04.007"},{"key":"ref401","article-title":"Network intrusion classification employing machine learning: A survey","author":"akhi","year":"2019"},{"key":"ref208","doi-asserted-by":"publisher","DOI":"10.1016\/j.matdes.2018.11.060"},{"key":"ref402","first-page":"257","article-title":"Survey of deep learning based intrusion detection systems for cyber security","volume":"6","author":"jamadar","year":"2019","journal-title":"Int J Res Anal Rev"},{"key":"ref205","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2018.1700332"},{"key":"ref206","doi-asserted-by":"publisher","DOI":"10.1109\/NAECON.2017.8268747"},{"key":"ref400","article-title":"Evaluating machine learning classifiers for hybrid network intrusion detection systems","author":"rich","year":"2015"},{"key":"ref604","author":"huang","year":"2018","journal-title":"Towards Robust Malware Detection"},{"key":"ref603","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-37231-6_22"},{"key":"ref602","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-8407-0.ch007"},{"key":"ref601","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00020"},{"key":"ref211","doi-asserted-by":"publisher","DOI":"10.1007\/PL00011678"},{"key":"ref600","doi-asserted-by":"publisher","DOI":"10.1145\/3134600.3134642"},{"key":"ref210","first-page":"582","article-title":"Support vector method for novelty detection","author":"sch\u00f6lkopf","year":"2000","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref609","year":"2020","journal-title":"AVG"},{"key":"ref608","year":"2020","journal-title":"Norton Power Eraser"},{"key":"ref607","year":"2020","journal-title":"MALWARE"},{"key":"ref606","year":"2020","journal-title":"10 BEST Free Malware Removal Software Of 2020"},{"key":"ref605","year":"2020","journal-title":"Avast Internet Security"},{"key":"ref510","author":"hollm\u00e9n","year":"2000","journal-title":"User profiling and classification for fraud detection in mobile Communications networks"},{"key":"ref511","doi-asserted-by":"publisher","DOI":"10.1006\/jpdc.2000.1720"},{"key":"ref512","doi-asserted-by":"publisher","DOI":"10.1006\/jpdc.2002.1857"},{"key":"ref418","doi-asserted-by":"publisher","DOI":"10.1109\/DISCEX.2003.1194894"},{"key":"ref513","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04342-0_13"},{"key":"ref419","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2008.12.001"},{"key":"ref514","author":"kumpulainen","year":"2008","journal-title":"Anomaly Detection Algorithm Test Bench for Mobile Network Management"},{"key":"ref515","doi-asserted-by":"publisher","DOI":"10.1002\/sec.341"},{"key":"ref516","first-page":"251","article-title":"A study of machine learning classifiers for anomaly-based mobile botnet detection","volume":"26","author":"feizollah","year":"2013","journal-title":"Malaysian J Comput Sci"},{"key":"ref212","author":"quinlan","year":"2014","journal-title":"C4 5 Programs for Machine Learning"},{"key":"ref414","first-page":"12","article-title":"A study in using neural networks for anomaly and misuse detection","volume":"99","author":"ghosh","year":"1999","journal-title":"Proc Usenix Secur Symp"},{"key":"ref517","doi-asserted-by":"publisher","DOI":"10.1007\/s11276-016-1439-0"},{"key":"ref213","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-34749-3_34"},{"key":"ref415","first-page":"443","article-title":"Artificial neural networks for misuse detection","volume":"26","author":"cannady","year":"1998","journal-title":"Proc Nat Inf Syst Secur Conf"},{"key":"ref518","doi-asserted-by":"publisher","DOI":"10.1109\/WCNC.2018.8376973"},{"key":"ref214","year":"2020","journal-title":"WEKA Packages"},{"key":"ref416","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2004.09.008"},{"key":"ref519","year":"2020","journal-title":"Bitdefender"},{"key":"ref215","doi-asserted-by":"publisher","DOI":"10.1145\/1541880.1541882"},{"key":"ref417","first-page":"38","article-title":"Data mining methods for detection of new malicious executables","author":"schultz","year":"2000","journal-title":"Proc IEEE Symp Secur Privacy (S P)"},{"key":"ref216","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2015.10.011"},{"key":"ref410","first-page":"29","article-title":"Neural networks vs. decision trees for intrusion detection","volume":"28","author":"bouzida","year":"2006","journal-title":"Proc IEEE\/IST Workshop Monitor Attack Detection Mitigation (MonAM)"},{"key":"ref217","doi-asserted-by":"publisher","DOI":"10.1093\/cybsec\/tyw011"},{"key":"ref411","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45235-5_73"},{"key":"ref218","doi-asserted-by":"publisher","DOI":"10.1145\/3036290.3036303"},{"key":"ref412","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2008.06.001"},{"key":"ref219","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-9611-0.ch015"},{"key":"ref413","first-page":"120","article-title":"A data mining framework for building intrusion detection models","author":"lee","year":"1999","journal-title":"Proc IEEE Symp Secur Privacy"},{"key":"ref613","article-title":"Deep transfer learning for static malware classification","author":"chen","year":"2018","journal-title":"arXiv 1812 07606"},{"key":"ref612","doi-asserted-by":"publisher","DOI":"10.1109\/NGMAST.2014.57"},{"key":"ref615","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2016.7906947"},{"key":"ref420","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-4048(02)00514-X"},{"key":"ref614","doi-asserted-by":"publisher","DOI":"10.1109\/ICCTICT.2016.7514657"},{"key":"ref220","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2008.234"},{"key":"ref611","doi-asserted-by":"publisher","DOI":"10.1007\/11527923_16"},{"key":"ref222","author":"frank","year":"2011","journal-title":"Data Mining Practical Machine Learning Tools and Techniques"},{"key":"ref610","year":"2020","journal-title":"Bitdefender Antivirus"},{"key":"ref221","doi-asserted-by":"publisher","DOI":"10.1023\/A:1009715923555"},{"key":"ref617","first-page":"807","article-title":"Optimized invariant representation of network traffic for detecting unseen malware variants","author":"bartos","year":"2016","journal-title":"Proc 25th USENIX Secur Symp (USENIX Security)"},{"key":"ref616","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOMW.2018.8406963"},{"key":"ref619","first-page":"490","article-title":"Analysis of Android malware detection performance using machine learning classifiers","author":"ham","year":"2013","journal-title":"Proc Int Conf ICT Converg (ICTC)"},{"key":"ref618","doi-asserted-by":"publisher","DOI":"10.1016\/j.jcss.2014.12.014"},{"key":"ref229","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7299173"},{"key":"ref228","doi-asserted-by":"publisher","DOI":"10.5539\/mas.v2n3p57"},{"key":"ref227","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-020-01694-4"},{"key":"ref226","author":"jain","year":"1988","journal-title":"Algorithms for clustering data"},{"key":"ref225","author":"ross","year":"1993","journal-title":"C4 5 Programs for Machine Learning"},{"key":"ref224","doi-asserted-by":"publisher","DOI":"10.1109\/2.485891"},{"key":"ref223","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.1995.380415"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/ICISSEC.2016.7885853"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1016\/j.patrec.2014.07.019"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/FSKD.2014.6980972"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/FSKD.2014.6980972"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-73676-1_13"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-16184-2_51"},{"key":"ref629","first-page":"255","article-title":"Android malware detection: A survey","volume":"942","author":"shobayo","year":"2018","journal-title":"Proc 1st Int Conf Appl Inform (ICAI)"},{"key":"ref130","first-page":"12","article-title":"Evaluating intrusion detection systems: The 1998 DARPA off-line intrusion detection evaluation","author":"lippmann","year":"2000","journal-title":"Proc DARPA Inf Survivability Conf Expo (DISCEX)"},{"key":"ref627","doi-asserted-by":"publisher","DOI":"10.1109\/CCNC.2012.6181075"},{"key":"ref628","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-01535-0_19"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.20533\/ijicr.2042.4655.2014.0060"},{"key":"ref134","first-page":"1","article-title":"Network intrusion detection: Half a kingdom for a good dataset","author":"ma?owidzki","year":"2015","journal-title":"Proc NATO STO SAS Workshop"},{"key":"ref131","first-page":"1","article-title":"Performance of snort on Darpa dataset and diferent false alert reduction techniques","author":"chahal","year":"2016","journal-title":"Proc 3rd Int Conf Elect Electron Eng Trends Commun Optim Sci (EEECOS)"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/CISDA.2009.5356522"},{"key":"ref621","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-2035-3_20"},{"key":"ref232","first-page":"338","article-title":"Estimating continuous distributions in Bayesian classifiers","author":"john","year":"1995","journal-title":"Proc 11th Conf Uncertainty Artif Intell San Mateo"},{"key":"ref622","doi-asserted-by":"publisher","DOI":"10.1109\/ISDFS.2018.8355377"},{"key":"ref233","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.1991.155491"},{"key":"ref230","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30549-1_43"},{"key":"ref620","doi-asserted-by":"publisher","DOI":"10.1109\/ICTAI.2013.53"},{"key":"ref231","first-page":"41","article-title":"A comparison of event models for naive bayes text classification","volume":"752","author":"mccallum","year":"1998","journal-title":"Proc Workshop Learn Text Categorization (AAAI)"},{"key":"ref625","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2014.2302293"},{"key":"ref626","doi-asserted-by":"publisher","DOI":"10.1109\/IMCCC.2013.297"},{"key":"ref623","doi-asserted-by":"publisher","DOI":"10.1109\/UEMCON.2018.8796795"},{"key":"ref624","first-page":"1","article-title":"Behavioural analysis of Android malware using machine learning","volume":"6","author":"vaishanav","year":"2017","journal-title":"International Journal of Computational Engineering Science"},{"key":"ref239","first-page":"818","article-title":"Visualizing and understanding convolutional networks","author":"zeiler","year":"2014","journal-title":"Proc Eur Conf Comput Vis"},{"key":"ref238","doi-asserted-by":"publisher","DOI":"10.1016\/0893-6080(88)90014-7"},{"key":"ref235","doi-asserted-by":"publisher","DOI":"10.1109\/72.661127"},{"key":"ref234","doi-asserted-by":"publisher","DOI":"10.1080\/01431160110055804"},{"key":"ref640","doi-asserted-by":"publisher","DOI":"10.1109\/IMIS.2013.111"},{"key":"ref237","doi-asserted-by":"publisher","DOI":"10.1145\/1166160.1166191"},{"key":"ref236","first-page":"1","article-title":"Supervised machine learning techniques, cybersecurity habits and human generated password entropy for hacking prediction","volume":"38","author":"taveras","year":"2018","journal-title":"Proc MWAIS"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.05.011"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-017-0074-7"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-19713-5_18"},{"key":"ref137","author":"gim\u00e9nez","year":"2010","journal-title":"HTTP data set CSIC 2010"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.4236\/jis.2016.73009"},{"key":"ref638","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-014-0250-0"},{"key":"ref639","first-page":"438","article-title":"DeepFlow: Deep learning-based malware detection by mining Android application for abnormal usage of sensitive data","author":"zhu","year":"2017","journal-title":"Proc IEEE Symp Comput Commun (ISCC)"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.2172\/1113394"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1080\/19393555.2015.1125974"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/ISIE.2017.8001537"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.17148\/IJARCCE.2017.64102"},{"key":"ref2","year":"2017","journal-title":"Telecommunication development Bureau"},{"key":"ref145","first-page":"5094","article-title":"Multi-classification of UNSW-NB15 dataset for network anomaly detection system","volume":"96","author":"nawir","year":"2018","journal-title":"J Theor Appl Inf Technol"},{"key":"ref1","year":"2020","journal-title":"ICT Facts and Figures 2017"},{"key":"ref630","doi-asserted-by":"publisher","DOI":"10.1109\/ICCS1.2017.8325997"},{"key":"ref241","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref631","doi-asserted-by":"publisher","DOI":"10.1063\/1.4992953"},{"key":"ref242","doi-asserted-by":"publisher","DOI":"10.1109\/72.554195"},{"key":"ref632","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCS.2014.7068167"},{"key":"ref243","article-title":"AtomNet: A deep convolutional neural network for bioactivity prediction in structure-based drug discovery","author":"wallach","year":"2015","journal-title":"arXiv 1510 02855"},{"key":"ref633","doi-asserted-by":"publisher","DOI":"10.1109\/EISIC.2012.34"},{"key":"ref244","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330680"},{"key":"ref634","doi-asserted-by":"publisher","DOI":"10.1109\/CSCloud.2015.50"},{"key":"ref635","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2014.10.004"},{"key":"ref636","doi-asserted-by":"publisher","DOI":"10.1007\/978-94-017-8798-7_68"},{"key":"ref637","doi-asserted-by":"publisher","DOI":"10.1109\/ISSNIP.2014.6827639"},{"key":"ref240","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298594"},{"key":"ref651","doi-asserted-by":"publisher","DOI":"10.1109\/WI-IAT.2009.233"},{"key":"ref248","doi-asserted-by":"publisher","DOI":"10.1109\/ICOIN.2017.7899588"},{"key":"ref650","first-page":"10","article-title":"Evidentiality for text trustworthiness detection","author":"su","year":"2010","journal-title":"Proc Workshop NLP Linguistics Finding Common Ground Assoc Comput Linguistics"},{"key":"ref247","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-13057-2_5"},{"key":"ref246","doi-asserted-by":"publisher","DOI":"10.1109\/CCC.2019.000-6"},{"key":"ref245","doi-asserted-by":"publisher","DOI":"10.1109\/ICACCI.2017.8126009"},{"key":"ref249","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2017.8004872"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.4018\/AISPE"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.14257\/ijsia.2014.8.1.23"},{"key":"ref107","first-page":"80","article-title":"Enhancing spam detection on mobile phone short message service (SMS) performance using FP-growth and naive Bayes classifier","author":"arifin","year":"2016","journal-title":"Proc IEEE Asia Pacific Conf Wireless Mobile (APWiMob)"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2666785"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1145\/1242572.1242759"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/72.788645"},{"key":"ref103","author":"shelly","year":"2012","journal-title":"Discovering Computers"},{"key":"ref102","author":"shelly","year":"2010","journal-title":"Discovering Computers-Fundamentals 2011 Edition"},{"key":"ref111","first-page":"2","article-title":"AVOIDIT: A cyber attack taxonomy","author":"simmons","year":"2014","journal-title":"Proc 9th Annu Symp Inf Assurance (ASIA)"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1080\/09720510.2019.1580907"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1007\/11427995_82"},{"key":"ref649","doi-asserted-by":"publisher","DOI":"10.1109\/WI-IAT.2009.66"},{"key":"ref647","doi-asserted-by":"publisher","DOI":"10.1145\/1653771.1653810"},{"key":"ref250","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2016.2609437"},{"key":"ref648","doi-asserted-by":"publisher","DOI":"10.1145\/1016028.1016030"},{"key":"ref251","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-64701-2_8"},{"key":"ref645","article-title":"Trusted machine learning: Model repair and data repair for probabilistic models","author":"ghosh","year":"2017","journal-title":"Proc Workshops 31st AAAI Conf Artif Intell"},{"key":"ref646","author":"quionero-candela","year":"2009","journal-title":"Dataset Shift in Machine Learning"},{"key":"ref643","year":"2020","journal-title":"Avira Antivirus Security"},{"key":"ref254","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-71549-8_17"},{"key":"ref644","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939778"},{"key":"ref255","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2018.01.001"},{"key":"ref641","year":"2020","journal-title":"Kaspersky Mobile Antivirus"},{"key":"ref252","doi-asserted-by":"publisher","DOI":"10.1109\/ICTAI.2007.65"},{"key":"ref642","year":"2020","journal-title":"Norton Security and Antivirus"},{"key":"ref253","doi-asserted-by":"publisher","DOI":"10.1007\/11538059_103"},{"key":"ref660","doi-asserted-by":"publisher","DOI":"10.1609\/aimag.v40i2.2847"},{"key":"ref257","year":"2019","journal-title":"WEKA"},{"key":"ref256","doi-asserted-by":"publisher","DOI":"10.1109\/SSCI.2017.8285298"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/948005.948050"},{"key":"ref662","doi-asserted-by":"publisher","DOI":"10.1109\/TCYB.2015.2415032"},{"key":"ref259","year":"2019","journal-title":"Torch"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.22215\/timreview\/835"},{"key":"ref661","article-title":"The threat of adversarial attacks on machine learning in network security—A survey","author":"ibitoye","year":"2019","journal-title":"arXiv 1911 02621"},{"key":"ref258","year":"2019","journal-title":"Caffe"},{"key":"ref12","author":"szor","year":"2005","journal-title":"The Art of Computer Virus Research and Defense Art Comp Virus Res Defense_p1"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ACT.2010.33"},{"key":"ref14","article-title":"Empirical asset pricing via machine learning","author":"gu","year":"2019","journal-title":"Proc 31st Australas Finance Banking Conf"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4842-3787-8_13"},{"key":"ref118","first-page":"47","article-title":"Cybercrimes and the nigerian academic institution networks","volume":"7","author":"abdulhamid","year":"2011","journal-title":"IUP J Inf Technol"},{"key":"ref16","first-page":"1","article-title":"Trends and applications of machine learning in quantitative finance","author":"emerson","year":"2019","journal-title":"Proc 8th Int Conf Econ Finance Res (ICEFR)"},{"key":"ref117","first-page":"7","article-title":"Academic community cyber ca$\\acute{\\text{f}}$\nes—A Perpetration point for cyber crimes in Nigeria","volume":"2","author":"haruna","year":"2011","journal-title":"International Journal of Computational Engineering Science"},{"key":"ref17","article-title":"Student’s performance in the context of data mining","author":"shaukat","year":"2016","journal-title":"Proc 19th Int IEEE Multi-Topic Conf (INMIC)"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1001\/jama.2016.17438"},{"key":"ref119","article-title":"A review of KDD99 dataset usage in intrusion detection and machine learning between 2010 and 2015","volume":"4","author":"\u00f6zg\u00fcr","year":"2016","journal-title":"PeerJ PrePrints"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.14744\/AnatolJCardiol.2019.28661"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-8976-1.ch001"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1109\/AINA.2010.175"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2017.03.010"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2019.100199"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.5120\/17188-7369"},{"key":"ref122","first-page":"1848","article-title":"A detailed analysis on NSL-KDD dataset using various machine learning techniques for intrusion detection","volume":"2","author":"revathi","year":"2013","journal-title":"Int J Eng Res Technol"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1109\/SPACES.2015.7058223"},{"key":"ref656","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00016"},{"key":"ref657","article-title":"DeepCloak: Masking deep neural network models for robustness against adversarial samples","author":"gao","year":"2017","journal-title":"arXiv 1702 06763"},{"key":"ref260","year":"2019","journal-title":"Keras"},{"key":"ref658","doi-asserted-by":"publisher","DOI":"10.1145\/3134599"},{"key":"ref261","year":"2019","journal-title":"TensorFlow™"},{"key":"ref659","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-1706-8_10"},{"key":"ref262","year":"2019","journal-title":"Theano"},{"key":"ref652","doi-asserted-by":"publisher","DOI":"10.1145\/1791314.1791349"},{"key":"ref263","year":"2019","journal-title":"SHOGUN"},{"key":"ref653","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2015.176"},{"key":"ref264","year":"2019","journal-title":"Accord Net"},{"key":"ref654","doi-asserted-by":"publisher","DOI":"10.1109\/CIC.2015.7408644"},{"key":"ref265","year":"2020","journal-title":"MXNET An Efficient Library for Deep Learning"},{"key":"ref655","doi-asserted-by":"publisher","DOI":"10.23940\/ijpe.18.06.p18.12751282"},{"key":"ref266","year":"2020","journal-title":"Lasagne"},{"key":"ref365","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2016.02.018"},{"key":"ref364","year":"2020","journal-title":"ZEROSPAM"},{"key":"ref559","doi-asserted-by":"publisher","DOI":"10.1088\/1757-899X\/242\/1\/012124"},{"key":"ref363","year":"2020","journal-title":"SPAMfighter"},{"key":"ref558","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0150077"},{"key":"ref362","year":"2020","journal-title":"SpamTitan"},{"key":"ref557","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-015-0244-0"},{"key":"ref361","year":"2020","journal-title":"SolarWinds MSP Mail Assure"},{"key":"ref556","first-page":"61","article-title":"DL4MD: A deep learning framework for intelligent malware detection","author":"hardy","year":"2016","journal-title":"Proc Int Conf Data Mining Steering Committee World Congr Comput Sci (DMIN)"},{"key":"ref360","first-page":"167","article-title":"Recognize and evaluate security framework of classifier under attack","volume":"6","author":"tai","year":"2019","journal-title":"Int J Res Anal Rev"},{"key":"ref555","doi-asserted-by":"publisher","DOI":"10.1109\/TST.2016.7399288"},{"key":"ref554","doi-asserted-by":"publisher","DOI":"10.1109\/INTECH.2016.7845073"},{"key":"ref553","doi-asserted-by":"publisher","DOI":"10.1109\/COMPSAC.2015.241"},{"key":"ref39","first-page":"704","article-title":"Machine learning versus deep learning for malware detection","author":"jain","year":"2019"},{"key":"ref498","year":"2020","journal-title":"Suricata | Open source IDS \/ IPS \/ NSM engine"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.5220\/0007470705280535"},{"key":"ref499","year":"2020","journal-title":"The SAMHAIN File Integrity \/ Host-Based Intrusion Detection System"},{"key":"ref33","first-page":"1","article-title":"Credit card fraud detection by implementing machine learning techniques","author":"prusti","year":"2019"},{"key":"ref562","doi-asserted-by":"publisher","DOI":"10.1109\/NAS.2017.8026853"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-019-06734-y"},{"key":"ref563","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2017.7966078"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.heliyon.2019.e01802"},{"key":"ref359","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-5780-9_2"},{"key":"ref560","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-015-1604-8"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1201\/9780429440953-10"},{"key":"ref561","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-67208-3_11"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2896003"},{"key":"ref357","first-page":"1115","article-title":"A multiple instance learning strategy for combating good word attacks on spam filters","volume":"9","author":"jorgensen","year":"2008","journal-title":"J Mach Learn Res"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/UBMK.2018.8566574"},{"key":"ref358","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2014.12.034"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1108\/AJAR-09-2018-0032"},{"key":"ref355","doi-asserted-by":"publisher","DOI":"10.48084\/etasr.1171"},{"key":"ref34","first-page":"257","article-title":"Credit card fraud detection using machine learning methodology","volume":"8","author":"shukur","year":"2019","journal-title":"Int J Comput Sci Mob Comput"},{"key":"ref356","first-page":"118","article-title":"Firefly and Bayes classifier for email spam classification in a distributed environment","volume":"8","author":"dhanaraj","year":"2014","journal-title":"Aust J Basic Appl Sci"},{"key":"ref352","first-page":"14","article-title":"Comparative study on email spam classifier using data mining techniques","volume":"1","author":"kumar","year":"2012","journal-title":"Proc Int MultiConf Eng Comput Scientists"},{"key":"ref547","first-page":"56","article-title":"Machine learning approach for intrusion detection on cloud virtual machines","volume":"2","author":"bhat","year":"2013","journal-title":"Int J Appl Innov Eng Manage"},{"key":"ref351","doi-asserted-by":"publisher","DOI":"10.1166\/asl.2012.1768"},{"key":"ref546","doi-asserted-by":"publisher","DOI":"10.1109\/ICIEA.2013.6566472"},{"key":"ref354","doi-asserted-by":"publisher","DOI":"10.1109\/PDGC.2016.7913250"},{"key":"ref549","doi-asserted-by":"publisher","DOI":"10.1109\/NGMAST.2014.23"},{"key":"ref353","doi-asserted-by":"publisher","DOI":"10.1109\/NCC.2015.7084879"},{"key":"ref548","doi-asserted-by":"publisher","DOI":"10.1016\/S1361-3723(14)70531-7"},{"key":"ref543","doi-asserted-by":"publisher","DOI":"10.1145\/2487788.2488056"},{"key":"ref542","doi-asserted-by":"publisher","DOI":"10.1186\/2190-8532-1-1"},{"key":"ref350","first-page":"2024","article-title":"Prevention of spammers and Promoters in Video Social Networks using SVM-KNN","volume":"6","author":"indira","year":"2014","journal-title":"Int J Eng Technol"},{"key":"ref545","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2012.10.004"},{"key":"ref544","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2011.08.020"},{"key":"ref491","year":"2020","journal-title":"McAfee Network Security Platform"},{"key":"ref490","doi-asserted-by":"publisher","DOI":"10.1155\/2020\/5287684"},{"key":"ref493","year":"2020","journal-title":"NIP2000\/5000 Intrusion Prevention System"},{"key":"ref492","year":"2020","journal-title":"Hillstone S-Series Network Intrusion Prevention System (NIPS)"},{"key":"ref495","year":"2020","journal-title":"Dark Trace—Cyber AI Security"},{"key":"ref494","year":"2020","journal-title":"Palo Alto Networks Completes Acquisition of The Crypsis Group"},{"key":"ref497","year":"2020","journal-title":"Snort 2 9 15 1"},{"key":"ref496","year":"2020","journal-title":"Next-Generation Intrusion Prevention System (NGIPS)"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.3390\/en13102509"},{"key":"ref487","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-48386-2_49"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.3390\/electronics9010097"},{"key":"ref488","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-08624-8_8"},{"key":"ref489","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00261"},{"key":"ref29","article-title":"Applying of machine learning for spam classification","author":"selvaraj","year":"2019"},{"key":"ref20","article-title":"Dengue fever in perspective of clustering algorithms","author":"shaukat","year":"2015","journal-title":"arXiv 1511 07353"},{"key":"ref348","doi-asserted-by":"publisher","DOI":"10.1145\/1277741.1277813"},{"key":"ref349","doi-asserted-by":"publisher","DOI":"10.1145\/1451983.1451996"},{"key":"ref550","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2015.02.149"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1631\/FITEE.1601885"},{"key":"ref551","doi-asserted-by":"publisher","DOI":"10.14257\/ijsia.2015.9.5.21"},{"key":"ref21","first-page":"1","article-title":"Dengue fever prediction: A data mining problem","volume":"6","author":"dar","year":"2015","journal-title":"Data Mining for Genomics and Proteomics"},{"key":"ref552","doi-asserted-by":"publisher","DOI":"10.11113\/jt.v77.3558"},{"key":"ref24","article-title":"The benefits of artificial intelligence in cybersecurity","author":"calderon","year":"2019"},{"key":"ref344","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15111-8_4"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-9611-0.ch005"},{"key":"ref345","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.113"},{"key":"ref26","first-page":"4187","article-title":"A socio-technological analysis of cyber crime and cyber security in Pakistan","volume":"1","author":"shaukat","year":"2017","journal-title":"Transylvanian Review"},{"key":"ref346","first-page":"1351","article-title":"Detecting spam blogs: A machine learning approach","volume":"21","author":"kolari","year":"2006","journal-title":"Proc Nat Conf Artif Intell"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/s11023-019-09495-6"},{"key":"ref347","first-page":"88","article-title":"A user-oriented splog filtering based on a machine learning","author":"yoshinaka","year":"2008","journal-title":"Recent Trends and Developments in Social Software"},{"key":"ref50","first-page":"87","article-title":"Predicting enterprise cyber incidents using social network analysis on dark Web hacker forums","author":"sarkar","year":"2019","journal-title":"Cyber Defense Rev"},{"key":"ref383","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00034"},{"key":"ref578","article-title":"Droidetec: Android malware detection and malicious code localization through deep learning","author":"ma","year":"2020","journal-title":"arXiv 2002 03594"},{"key":"ref51","first-page":"174","article-title":"Cyber threat discovery from dark Web","volume":"64","author":"zenebe","year":"2019","journal-title":"Proc 28th Int Conf"},{"key":"ref382","doi-asserted-by":"publisher","DOI":"10.1109\/MLDS.2017.10"},{"key":"ref577","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-019-00346-7"},{"key":"ref381","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.3368109"},{"key":"ref576","doi-asserted-by":"publisher","DOI":"10.1007\/s11036-019-01248-0"},{"key":"ref380","doi-asserted-by":"publisher","DOI":"10.1007\/s00779-018-1168-8"},{"key":"ref575","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2019.8715080"},{"key":"ref387","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2014.08.002"},{"key":"ref386","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2012.05.004"},{"key":"ref385","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2011.01.002"},{"key":"ref384","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2011.07.001"},{"key":"ref579","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2020.102154"},{"key":"ref486","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.1996.569702"},{"key":"ref485","doi-asserted-by":"publisher","DOI":"10.1016\/S0933-3657(97)00038-9"},{"key":"ref484","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2009.06.019"},{"key":"ref483","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2008.080406"},{"key":"ref482","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2008.08.003"},{"key":"ref481","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2006.7"},{"key":"ref480","first-page":"1","article-title":"Learning program behavior profiles for intrusion detection","volume":"51462","author":"ghosh","year":"1999","journal-title":"Proc Workshop Intrusion Detection Netw Monitor"},{"key":"ref478","doi-asserted-by":"publisher","DOI":"10.1109\/ICSCN.2015.7219827"},{"key":"ref479","doi-asserted-by":"publisher","DOI":"10.1109\/ICSTM.2015.7225396"},{"key":"ref476","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2005.06.001"},{"key":"ref477","doi-asserted-by":"publisher","DOI":"10.1109\/TAI.2003.1250243"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-8681-6_67"},{"key":"ref379","article-title":"Machine learning for E-mail spam filtering: Review,Techniques and trends","author":"bhowmick","year":"2016","journal-title":"arXiv 1606 01042"},{"key":"ref580","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101792"},{"key":"ref58","year":"2020","journal-title":"Unified Threat Management"},{"key":"ref581","doi-asserted-by":"publisher","DOI":"10.5120\/15544-4098"},{"key":"ref57","year":"2020","journal-title":"Guide to intrusion detection and prevention systems (IDPS)"},{"key":"ref377","doi-asserted-by":"publisher","DOI":"10.1109\/ICIAP.2007.4362765"},{"key":"ref56","year":"2020","journal-title":"Security Information and event management (SIEM)"},{"key":"ref378","article-title":"DeepImageSpam: Deep learning based image spam detection","author":"kumar","year":"2018","journal-title":"arXiv 1810 03977"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-31703-4_16"},{"key":"ref584","doi-asserted-by":"publisher","DOI":"10.1145\/1569901.1570109"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-7998-2466-4.ch017"},{"key":"ref585","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014105"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2019.8823360"},{"key":"ref582","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2006.4"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2016.7745435"},{"key":"ref583","first-page":"48","article-title":"Detecting Internet worms using data mining techniques","volume":"6","author":"siddiqui","year":"2009","journal-title":"J Systemics Cybern Inform"},{"key":"ref370","doi-asserted-by":"publisher","DOI":"10.1109\/ICIECS.2009.5365176"},{"key":"ref565","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-017-2914-y"},{"key":"ref564","doi-asserted-by":"publisher","DOI":"10.1145\/3110025.3116211"},{"key":"ref372","doi-asserted-by":"publisher","DOI":"10.1109\/ETCS.2009.299"},{"key":"ref567","doi-asserted-by":"publisher","DOI":"10.1007\/s11219-017-9368-4"},{"key":"ref40","article-title":"Malicious URL detection using machine learning: A survey","author":"sahoo","year":"2017","journal-title":"arXiv 1701 07179"},{"key":"ref371","doi-asserted-by":"publisher","DOI":"10.4304\/jcp.5.6.844-851"},{"key":"ref566","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2844349"},{"key":"ref374","doi-asserted-by":"publisher","DOI":"10.1109\/ICACCI.2015.7275713"},{"key":"ref569","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2792941"},{"key":"ref373","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSNT.2011.6181918"},{"key":"ref568","doi-asserted-by":"publisher","DOI":"10.1002\/nem.2049"},{"key":"ref376","doi-asserted-by":"publisher","DOI":"10.1109\/IADCC.2018.8692097"},{"key":"ref375","doi-asserted-by":"publisher","DOI":"10.1109\/COMNETSAT.2018.8684085"},{"key":"ref668","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2013.138"},{"key":"ref473","doi-asserted-by":"publisher","DOI":"10.3390\/sym12020203"},{"key":"ref667","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.25"},{"key":"ref472","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-0637-6_40"},{"key":"ref475","first-page":"328","article-title":"Evolutionary design of intrusion detection programs","volume":"4","author":"abraham","year":"2007","journal-title":"IJ Netw Secur"},{"key":"ref474","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45248-5_10"},{"key":"ref664","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref663","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2014","journal-title":"arXiv 1412 6572"},{"key":"ref666","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134057"},{"key":"ref471","first-page":"49","article-title":"Leveraging machine learning approach to setup software-defined network (SDN) controller rules during DDoS attack","author":"sen","year":"2020","journal-title":"Proc Int Joint Conf Comput Intell"},{"key":"ref665","article-title":"Feature squeezing: Detecting adversarial examples in deep neural networks","author":"xu","year":"2017","journal-title":"arXiv 1704 01155"},{"key":"ref470","doi-asserted-by":"publisher","DOI":"10.1007\/s12046-019-1230-x"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-9611-0.ch007"},{"key":"ref469","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2018.11.010"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1201\/b15088"},{"key":"ref6","year":"2020","journal-title":"The Comprehensive National Cybersecurity Initiative"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-15-1706-8_3"},{"key":"ref8","year":"2020","journal-title":"10 Years After the Landmark Attack on Estonia Is the World Better Prepared for Cyber Threats?"},{"key":"ref465","article-title":"Building an efficient intrusion detection system based on feature selection and ensemble classifier","author":"zhou","year":"2019","journal-title":"arXiv 1904 01352"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-9866-4.ch026"},{"key":"ref7","year":"2019","journal-title":"The White House Remarks by APHSCT Lisa O Monaco at the International Conference on Cyber Security"},{"key":"ref466","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2903723"},{"key":"ref467","doi-asserted-by":"publisher","DOI":"10.3390\/computers8030059"},{"key":"ref9","year":"2008","journal-title":"Bucharest Summit Declaration Issued by the Heads of State and Government Participating in the Meeting of the North Atlantic Council in Bucharest"},{"key":"ref468","doi-asserted-by":"publisher","DOI":"10.1145\/3299815.3314439"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2019.01.023"},{"key":"ref366","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2012.02.053"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3145574.3145590"},{"key":"ref367","doi-asserted-by":"publisher","DOI":"10.7763\/IJMLC.2014.V4.409"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2019.102419"},{"key":"ref368","doi-asserted-by":"publisher","DOI":"10.1109\/AISP.2017.8515158"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2019.01.002"},{"key":"ref369","first-page":"1","article-title":"Improving static SMS spam detection by using new content-based features","author":"karami","year":"2014","journal-title":"Proc 12th Amer Conf Inf Syst"},{"key":"ref570","doi-asserted-by":"publisher","DOI":"10.1016\/j.diin.2018.01.007"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2018.09.029"},{"key":"ref571","doi-asserted-by":"publisher","DOI":"10.1109\/CSPA.2018.8368693"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-017-3305-0"},{"key":"ref572","doi-asserted-by":"publisher","DOI":"10.1109\/ICCE.2018.8326293"},{"key":"ref44","article-title":"Predicting cyber threats through the dynamics of user connectivity in darkweb and deepweb forums","author":"almukaynizi","year":"2017","journal-title":"ACM Computational Social Science"},{"key":"ref573","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCNT45670.2019.8944796"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1201\/9780429504044-2"},{"key":"ref574","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecPODS.2019.8885196"},{"key":"ref460","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-017-0971-8"},{"key":"ref463","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2953095"},{"key":"ref464","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2018.11.007"},{"key":"ref461","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2018.05.002"},{"key":"ref462","doi-asserted-by":"publisher","DOI":"10.1109\/FUZZ-IEEE.2018.8491578"},{"key":"ref320","doi-asserted-by":"publisher","DOI":"10.1109\/ICBDA.2016.7509829"},{"key":"ref321","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLC.2016.7860934"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2494502"},{"key":"ref599","doi-asserted-by":"publisher","DOI":"10.23919\/EUSIPCO.2018.8553214"},{"key":"ref72","first-page":"1","article-title":"Applications of machine learning in cyber security","author":"ford","year":"2014","journal-title":"Proc 27th Int Conf Comput Appl Ind Eng"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.14445\/22312803\/IJCTT-V7P106"},{"key":"ref597","first-page":"1","article-title":"Malware detection by eating a whole exe","author":"raff","year":"2018","journal-title":"Proc Workshops 32nd AAAI Conf Artif Intell"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.4236\/jis.2014.52006"},{"key":"ref598","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_4"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/ICCECE.2017.8526232"},{"key":"ref318","doi-asserted-by":"publisher","DOI":"10.15866\/irecos.v11i2.8269"},{"key":"ref77","article-title":"Shallow and deep networks intrusion detection system: A taxonomy and survey","author":"hodo","year":"2017","journal-title":"arXiv 1701 02145"},{"key":"ref317","first-page":"45","article-title":"Text mining approach to detect spam in emails","author":"khan","year":"2016","journal-title":"Proc Int Conf Innov Intell Syst Comput Technol (ICIISCT)"},{"key":"ref74","article-title":"SoK: Applying machine learning in security—A survey","author":"jiang","year":"2016","journal-title":"arXiv 1611 03186"},{"key":"ref316","doi-asserted-by":"publisher","DOI":"10.1109\/ICECCT.2015.7226077"},{"key":"ref75","first-page":"265","article-title":"Combating cyber crime using artificial agent systems","volume":"6","author":"wijesinghe","year":"2016","journal-title":"J Int Research Publication"},{"key":"ref315","first-page":"22","article-title":"Improving E-mail spam classification using ant colony optimization algorithm","author":"renuka","year":"2015","journal-title":"Int J Comput Appl"},{"key":"ref314","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2016.2516039"},{"key":"ref313","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2014.03.015"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2836950"},{"key":"ref312","doi-asserted-by":"publisher","DOI":"10.1109\/MELCON.2014.6820574"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1631\/FITEE.1800573"},{"key":"ref311","first-page":"1","article-title":"Mobile sms spam filtering based on mixing classifiers","volume":"1","author":"najadat","year":"2014","journal-title":"Int J Adv Comput Res"},{"key":"ref457","doi-asserted-by":"publisher","DOI":"10.1109\/ICTS.2017.8265667"},{"key":"ref456","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-016-2418-1"},{"key":"ref455","first-page":"786","article-title":"Network intrusion detection system based on modified Random forest classifiers for KDD cup-99 and NSL-KDD dataset","volume":"4","author":"chandra","year":"2017","journal-title":"Int Res J Eng Technol (IRJET)"},{"key":"ref454","doi-asserted-by":"publisher","DOI":"10.1007\/978-81-322-2529-4_51"},{"key":"ref459","doi-asserted-by":"publisher","DOI":"10.1109\/PlatCon.2017.7883684"},{"key":"ref319","article-title":"Content based spam classification—A deep learning approach","author":"tyagi","year":"2016"},{"key":"ref458","doi-asserted-by":"publisher","DOI":"10.1109\/ICSESS.2017.8343013"},{"key":"ref450","article-title":"LSTM-based system-call language modeling and robust ensemble method for designing host-based intrusion detection systems","author":"kim","year":"2016","journal-title":"arXiv 1611 01726"},{"key":"ref451","doi-asserted-by":"publisher","DOI":"10.1109\/ACOSIS.2016.7843930"},{"key":"ref452","doi-asserted-by":"publisher","DOI":"10.1109\/ANTS.2016.7947776"},{"key":"ref453","first-page":"218","article-title":"Enhanced method for intrusion detection over KDD cup 99 dataset","volume":"2","author":"vivek","year":"2016","journal-title":"Int J Current Trends Eng Technol"},{"key":"ref310","first-page":"43","article-title":"Classifying unsolicited bulk email (UBE) using python machine learning techniques","volume":"6","author":"mohammed","year":"2013","journal-title":"Int J Hybrid Inf Technol"},{"key":"ref60","year":"2020","journal-title":"How Artificial Intelligence is Transforming Cybersecurity"},{"key":"ref586","doi-asserted-by":"publisher","DOI":"10.1145\/1599272.1599278"},{"key":"ref587","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2010.5501969"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/ISDFS.2016.7473509"},{"key":"ref588","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-19934-9_53"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2011.5958263"},{"key":"ref589","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2015.7280815"},{"key":"ref63","article-title":"Deep reinforcement learning for cyber security","author":"nguyen","year":"2019","journal-title":"arXiv 1906 05799"},{"key":"ref305","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23496-5_13"},{"key":"ref594","doi-asserted-by":"crossref","first-page":"50","DOI":"10.1016\/j.comcom.2019.08.003","article-title":"Malware traffic classification using principal component analysis and artificial neural network for extreme surveillance","volume":"147","author":"arivudainambi","year":"2019","journal-title":"Comput Commun"},{"key":"ref64","article-title":"Machine learning: Cybersecurity that can meet the demands of today as well as the demands of tomorrow","author":"geis","year":"2019"},{"key":"ref304","doi-asserted-by":"publisher","DOI":"10.7763\/IJCTE.2011.V3.287"},{"key":"ref593","doi-asserted-by":"publisher","DOI":"10.1186\/s13635-018-0074-y"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-9611-0.ch003"},{"key":"ref307","first-page":"23","article-title":"Adaptive approach for spam detection","volume":"10","author":"sharma","year":"2013","journal-title":"Int J Comput Sci Issues"},{"key":"ref596","article-title":"Semi-supervised deep neural network for network intrusion detection","volume":"2","author":"nadeem","year":"2016","journal-title":"Proc KSU Cybersecur Educ Res Pract"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1007\/978-90-481-3662-9_86"},{"key":"ref306","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2011.25"},{"key":"ref595","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2016.7727705"},{"key":"ref67","first-page":"54","article-title":"A review of intrusion detection system using neural network and machine learning","volume":"1","author":"vinchurkar","year":"2012","journal-title":"International Journal of Engineering and Innovative Technology"},{"key":"ref301","doi-asserted-by":"publisher","DOI":"10.1145\/2381896.2381907"},{"key":"ref590","doi-asserted-by":"publisher","DOI":"10.1109\/ICOIN.2018.8343255"},{"key":"ref68","first-page":"4349","article-title":"A survey on machine learning techniques for intrusion detection systems","volume":"2","author":"singh","year":"2013","journal-title":"Int J Adv Res Comput Commun Eng"},{"key":"ref300","doi-asserted-by":"publisher","DOI":"10.1016\/j.csda.2011.09.023"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/ICISA.2014.6847364"},{"key":"ref303","doi-asserted-by":"publisher","DOI":"10.47893\/IJCCT.2010.1053"},{"key":"ref592","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2017.00035"},{"key":"ref302","first-page":"1869","article-title":"Overview of textual anti-spam filtering techniques","volume":"5","author":"subramaniam","year":"2010","journal-title":"Int J Phys Sci"},{"key":"ref591","doi-asserted-by":"publisher","DOI":"10.14257\/ijsia.2016.10.4.24"},{"key":"ref444","article-title":"A new clustering approach for anomaly intrusion detection","author":"ranjan","year":"2014","journal-title":"arXiv 1404 2772"},{"key":"ref443","doi-asserted-by":"publisher","DOI":"10.5120\/17447-5392"},{"key":"ref446","doi-asserted-by":"publisher","DOI":"10.1109\/CSNT.2015.185"},{"key":"ref445","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2013.06.027"},{"key":"ref309","doi-asserted-by":"publisher","DOI":"10.5815\/ijmecs.2013.12.05"},{"key":"ref448","doi-asserted-by":"publisher","DOI":"10.1109\/QiR.2015.7374895"},{"key":"ref308","doi-asserted-by":"publisher","DOI":"10.1109\/ISDA.2013.6920760"},{"key":"ref447","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2014.11.009"},{"key":"ref449","doi-asserted-by":"publisher","DOI":"10.1109\/ICNTE.2015.7029925"},{"key":"ref441","doi-asserted-by":"publisher","DOI":"10.1109\/SKIMA.2014.7083539"},{"key":"ref442","doi-asserted-by":"publisher","DOI":"10.1109\/ICoAC.2014.7229711"},{"key":"ref440","doi-asserted-by":"publisher","DOI":"10.1016\/j.engappai.2013.03.008"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1016\/j.ejor.2019.10.019"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1080\/09700161.2014.918445"},{"key":"ref93","year":"2020","journal-title":"What is cyber security?"},{"key":"ref92","year":"2020","journal-title":"Difference Between Threat and Attack"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2020.3016246"},{"key":"ref342","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-28699-5_18"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2020.2992966"},{"key":"ref343","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-011-9280-4"},{"key":"ref340","doi-asserted-by":"publisher","DOI":"10.1080\/02533839.2013.815005"},{"key":"ref341","doi-asserted-by":"publisher","DOI":"10.1109\/IAdCC.2014.6779387"},{"key":"ref336","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-27299-8_59"},{"key":"ref335","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2009.02.037"},{"key":"ref334","doi-asserted-by":"publisher","DOI":"10.1080\/19361610.2018.1463136"},{"key":"ref333","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2006.05.016"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1108\/09685221211286548"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1145\/1290958.1290968"},{"key":"ref339","first-page":"1","article-title":"A new efficient text detection method for image spam filtering","volume":"10","author":"al muataz","year":"2015","journal-title":"Int Rev Comput Softw"},{"key":"ref96","year":"2018","journal-title":"Cisco 2018 Annual Cybersecurity Report"},{"key":"ref338","doi-asserted-by":"publisher","DOI":"10.1016\/j.patrec.2011.03.022"},{"key":"ref97","article-title":"Creating a national framework for cybersecurity: An analysis of issues and options","author":"fischer","year":"2005"},{"key":"ref337","first-page":"779","article-title":"Integration of local and global features for image spam filtering","volume":"8","author":"li","year":"2012","journal-title":"J Comput Inf Syst"},{"key":"ref439","first-page":"1","article-title":"Anomaly-based intrusion detection through k-means clustering and Naives Bayes classification","volume":"49","author":"yassin","year":"2013","journal-title":"Proc 4th Int Conf Comput Inform (ICOCI)"},{"key":"ref438","first-page":"338","article-title":"Detection of accuracy for intrusion detection system using neural network classifier","volume":"3","author":"devaraju","year":"2013","journal-title":"Int J Emerg Technol Adv Eng"},{"key":"ref437","first-page":"1","article-title":"A hybrid framework based on neural network MLP and K-means clustering for intrusion detection system","author":"lisehroodi","year":"2013","journal-title":"Proc 4th Int Conf Comput Inform (ICOCI)"},{"key":"ref436","doi-asserted-by":"publisher","DOI":"10.5121\/ijnsa.2013.5106"},{"key":"ref435","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2011.07.032"},{"key":"ref434","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2011.06.013"},{"key":"ref433","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2012.07.009"},{"key":"ref432","first-page":"417","article-title":"An improved network intrusion detection technique based on k-means clustering via Naïve Bayes classification","author":"sharma","year":"2012","journal-title":"Proc IEEE Int Conf Adv Eng Sci Manage (ICAESM)"},{"key":"ref430","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2011.05.058"},{"key":"ref431","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-010-0487-0"},{"key":"ref82","article-title":"Applications of artificial intelligence to network security","author":"veiga","year":"2018","journal-title":"arXiv 1803 09992"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.23919\/CYCON.2018.8405026"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-73951-9_2"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/IISR.2018.8535799"},{"key":"ref330","doi-asserted-by":"publisher","DOI":"10.1155\/2020\/8873639"},{"key":"ref80","article-title":"Survey of machine learning techniques for malware analysis","author":"ucci","year":"2017","journal-title":"arXiv 1710 08189"},{"key":"ref331","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31284-7_27"},{"key":"ref332","doi-asserted-by":"publisher","DOI":"10.1145\/2487788.2488015"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1002\/widm.1306"},{"key":"ref323","doi-asserted-by":"publisher","DOI":"10.1080\/19361610.2018.1463136"},{"key":"ref322","doi-asserted-by":"publisher","DOI":"10.4018\/IJKDB.2018010102"},{"key":"ref325","first-page":"67","article-title":"Ransomware triage using deep learning: Twitter as a case study","author":"vinayakumar","year":"2019","journal-title":"Proc Cybersecurity Cyberforensics Conf (CCC)"},{"key":"ref324","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-016-0287-x"},{"key":"ref85","first-page":"717","article-title":"Providing cyber security using artificial intelligence—A survey","author":"sagar","year":"2019","journal-title":"Proc 3rd Int Conf Comput Methodol Commun (ICCMC)"},{"key":"ref327","doi-asserted-by":"publisher","DOI":"10.1007\/s41870-018-0157-5"},{"key":"ref86","first-page":"1","article-title":"A survey of deep learning-based network anomaly detection","volume":"22","author":"kwon","year":"2017","journal-title":"Cluster Comput"},{"key":"ref326","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2019.01.004"},{"key":"ref429","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2010.08.137"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.3390\/info10040122"},{"key":"ref329","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-020-09814-9"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1007\/s13042-018-00906-1"},{"key":"ref328","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.09.001"},{"key":"ref426","first-page":"87","article-title":"A new method of transductive SVM-based network intrusion detection","author":"yan","year":"2010","journal-title":"Proc Int Conf Comput Comput Technol Agricult"},{"key":"ref425","first-page":"285","article-title":"Design network intrusion detection system using hybrid fuzzy-neural network","volume":"4","author":"jawhar","year":"2010","journal-title":"Int J Comput Sci Secur"},{"key":"ref428","author":"rahman","year":"2011","journal-title":"Adaptive intrusion detection based on boosting and naive bayesian classifier"},{"key":"ref427","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-20757-0_3"},{"key":"ref422","doi-asserted-by":"publisher","DOI":"10.1145\/382912.382914"},{"key":"ref421","first-page":"268","article-title":"Applying machine learning to Solaris audit data","author":"endler","year":"1998","journal-title":"Proc Comput Secur Appl Conf"},{"key":"ref424","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2010.04.017"},{"key":"ref423","article-title":"Combining naive Bayes and decision tree for adaptive intrusion detection","author":"farid","year":"2010","journal-title":"arXiv 1005 4496"},{"key":"ref399","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2847722"},{"key":"ref389","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-34500-5_64"},{"key":"ref388","doi-asserted-by":"publisher","DOI":"10.1109\/ISTEL.2016.7881798"},{"key":"ref390","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2012.01.016"},{"key":"ref397","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2013.08.066"},{"key":"ref398","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.052213.00046"},{"key":"ref395","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2010.06.066"},{"key":"ref396","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCI.2013.6466310"},{"key":"ref393","doi-asserted-by":"publisher","DOI":"10.1007\/s00778-006-0002-5"},{"key":"ref394","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2010.02.102"},{"key":"ref391","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2015.01.009"},{"key":"ref392","first-page":"366","article-title":"An application of machine learning to anomaly detection","volume":"377","author":"lane","year":"1997","journal-title":"Proc 20th Nat Inf Syst Secur Conf"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8948470\/09277523.pdf?arnumber=9277523","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,12,17]],"date-time":"2021-12-17T19:55:20Z","timestamp":1639770920000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9277523\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"references-count":668,"URL":"https:\/\/doi.org\/10.1109\/access.2020.3041951","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]}}}