{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,19]],"date-time":"2026-08-19T19:26:35Z","timestamp":1787167595197,"version":"3.56.0"},"reference-count":77,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100004410","name":"Scientific and Technological Research Council of Turkey (TUBITAK) Frontier R&D Laboratories Support Program 1515","doi-asserted-by":"publisher","award":["5239902"],"award-info":[{"award-number":["5239902"]}],"id":[{"id":"10.13039\/501100004410","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2024]]},"DOI":"10.1109\/access.2024.3367004","type":"journal-article","created":{"date-parts":[[2024,2,19]],"date-time":"2024-02-19T15:16:35Z","timestamp":1708355795000},"page":"27237-27266","source":"Crossref","is-referenced-by-count":94,"title":["A Systematic Literature Review on Host-Based Intrusion Detection Systems"],"prefix":"10.1109","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6611-7549","authenticated-orcid":false,"given":"Hami","family":"Satilmi\u015f","sequence":"first","affiliation":[{"name":"Department of Computer Engineering, Ondokuz Mayıs University, Samsun, Turkey"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7005-6489","authenticated-orcid":false,"given":"Sedat","family":"Akleylek","sequence":"additional","affiliation":[{"name":"Department of Computer Engineering, İstinye University, Istanbul, Turkey"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zaliha Y\u00fcce","family":"Tok","sequence":"additional","affiliation":[{"name":"ASELSAN, Ankara, Turkey"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2012.09.004"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2022.03.001"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-021-10037-9"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-021-06093-5"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102961"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2013.03.022"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2022.3233793"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/s11276-020-02529-3"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/s12083-017-0630-0"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.5120\/3399-4730"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-32287-7_9"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/1000\/1\/012049"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.14569\/IJACSA.2020.0110233"},{"issue":"1","key":"ref14","first-page":"1","article-title":"Importance of intrusion detection system (IDS)","volume":"2","author":"Ashoor","year":"2011","journal-title":"Int. J. Sci. Eng. Res."},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-020-00382-x"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/s00500-021-05893-0"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.3389\/fcomp.2021.567873"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-022-10069-6"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-022-03776-z"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3539605"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/s11831-023-09943-8"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2023.103761"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2895334"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-7998-2460-2.ch053"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-9611-0.ch010"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-019-0038-7"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2021.102828"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2017.02.009"},{"key":"ref29","volume-title":"Computer and Information Security Handbook","author":"Vacca","year":"2012"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICSNC.2008.44"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2015.08.220"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3000179"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2018.02.028"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2494502"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2019.2922584"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/s11036-019-01220-y"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2020.03.048"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1186\/s13677-020-00206-6"},{"key":"ref39","first-page":"209","article-title":"The LTTng tracer: A low impact performance and behavior monitor for GNU\/Linux","volume-title":"Proc. Ottawa Linux Symp.","author":"Desnoyers"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.3390\/math9070751"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-021-05994-9"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-021-00448-4"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s11036-019-01505-2"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.102084"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/3461462"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.21437\/SSW.2016"},{"key":"ref47","article-title":"LSTM-based system-call language modeling and robust ensemble method for designing host-based intrusion detection systems","author":"Kim","year":"2016","journal-title":"arXiv:1611.01726"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-13453-2_12"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2022.108266"},{"key":"ref50","volume-title":"Cuckoo Sandbox","year":"2024"},{"key":"ref51","volume-title":"VirusTotal","year":"2024"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1111\/exsy.13029"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-022-03621-3"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.3390\/info10110356"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-021-00410-1"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.3390\/s22176505"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/s00500-023-08737-1"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-023-08592-z"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/s11036-023-02223-6"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1016\/j.jss.2023.111745"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103298"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-023-04162-z"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3159580"},{"key":"ref64","first-page":"366","article-title":"An application of machine learning to anomaly detection","volume-title":"Proc. 20th Nat. Inf. Syst. Secur. Conf.","volume":"377","author":"Lane"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1155\/2018\/9327215"},{"key":"ref66","volume-title":"KDD Cup 1999 Data","year":"2024"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.12.012"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.5220\/0006639801080116"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/WCNC.2013.6555301"},{"key":"ref71","article-title":"Developing a high-accuracy cross platform host-based intrusion detection system capable of reliably detecting zero-day attacks","author":"Creech","year":"2014"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1002\/ett.4287"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1145\/1978672.1978676"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.05.041"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-47358-7_52"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1016\/j.scs.2021.102994"},{"key":"ref77","volume-title":"ISCX-URL2016","year":"2024"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/10380310\/10439152.pdf?arnumber=10439152","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,3,13]],"date-time":"2024-03-13T16:46:53Z","timestamp":1710348413000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10439152\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"references-count":77,"URL":"https:\/\/doi.org\/10.1109\/access.2024.3367004","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]}}}