{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,8]],"date-time":"2026-08-08T16:02:56Z","timestamp":1786204976154,"version":"build-2736575974"},"reference-count":142,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2021,6,1]],"date-time":"2021-06-01T00:00:00Z","timestamp":1622505600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Systems Journal"],"published-print":{"date-parts":[[2021,6]]},"DOI":"10.1109\/jsyst.2020.2992966","type":"journal-article","created":{"date-parts":[[2020,5,26]],"date-time":"2020-05-26T19:36:52Z","timestamp":1590521812000},"page":"1717-1731","source":"Crossref","is-referenced-by-count":143,"title":["A Comprehensive Survey of Databases and Deep Learning Methods for Cybersecurity and Intrusion Detection Systems"],"prefix":"10.1109","volume":"15","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-0102-7825","authenticated-orcid":false,"given":"Dilara","family":"Gumusbas","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9993-5583","authenticated-orcid":false,"given":"Tulay","family":"Yldrm","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3683-4723","authenticated-orcid":false,"given":"Angelo","family":"Genovese","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4277-3701","authenticated-orcid":false,"given":"Fabio","family":"Scotti","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","article-title":"Rapidminer","year":"0"},{"key":"ref38","article-title":"Networkminer","year":"0"},{"key":"ref33","article-title":"WinPCAP","year":"0"},{"key":"ref32","article-title":"LibPCAP","year":"0"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2883147"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1201\/9781315154374"},{"key":"ref37","article-title":"TCPDump","year":"0"},{"key":"ref36","article-title":"TShark","year":"0"},{"key":"ref35","article-title":"Wireshark","year":"0"},{"key":"ref34","article-title":"Snort","year":"0"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/s11047-006-9026-4"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/LISAT.2016.7494100"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2872114"},{"key":"ref20","first-page":"1","article-title":"Shallow and deep networks intrusion detection system: A taxonomy and survey","author":"hodo","year":"2017"},{"key":"ref22","first-page":"1","article-title":"A taxonomy and survey of intrusion detection system design techniques, network threats and datasets","volume":"abs 1806 3517","author":"hindy","year":"2018","journal-title":"CoRRR"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2836950"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2017.02.009"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2870658"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1145\/3065386"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2854724"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2019.8762015"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.103013.00206"},{"key":"ref50","article-title":"Intrusion Detection Evaluation Dataset","year":"2017"},{"key":"ref51","article-title":"KDD Cup 1999","year":"1999"},{"key":"ref59","article-title":"DoS dataset (CIC DoS dataset 2017)","year":"2017"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.12.012"},{"key":"ref57","article-title":"Intrusion detection evaluation dataset (ISCXIDS2012)","year":"2012"},{"key":"ref56","first-page":"9","article-title":"Toward instrumenting network warfare competitions to generate labeled datasets","author":"sangster","year":"0","journal-title":"Proc Cyber Secur Exp Test"},{"key":"ref55","article-title":"1998 DARPA intrusion detection evaluation dataset","year":"1998"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.5220\/0006639801080116"},{"key":"ref53","first-page":"1","article-title":"UNSW-NB15: A comprehensive data set for network intrusion detection systems","author":"moustafa","year":"0","journal-title":"Proc Mil Commun Inf Syst Conf"},{"key":"ref52","article-title":"Traffic data from Kyoto University's Honeypots","year":"2015"},{"key":"ref40","article-title":"Scapy","year":"0"},{"key":"ref4","article-title":"McAfee labs threats report","year":"2019"},{"key":"ref3","article-title":"Hacked consumers don’t forgive companies who lose their data. Bad news for Yahoo","year":"0"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-4666-8853-7.ch012"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-5634-3.ch038"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2014.2322503"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1201\/b19206-23"},{"key":"ref49","article-title":"AWID2018 dataset","year":"2018"},{"key":"ref9","first-page":"1929","article-title":"Authentication, access control and intrusion detection","author":"sandhu","year":"1997","journal-title":"CRC Handbook of Computer Science and Engineering"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2863942"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-24230-9_2"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/PRDC.2007.55"},{"key":"ref42","article-title":"Nfdump","year":"0"},{"key":"ref41","article-title":"Cisco Netflow","year":"0"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2321898"},{"key":"ref43","author":"jurafsky","year":"2000","journal-title":"Speech and Language Processing An Introduction to Natural Language Processing Computational Linguistics and Speech Recognition"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/ICACCI.2017.8126009"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1109\/TSUSC.2018.2793284"},{"key":"ref125","first-page":"1","article-title":"LSTM-based system-call language modeling and robust ensemble method for designing host-based intrusion detection systems","volume":"abs 1611 1726","author":"kim","year":"2016"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1145\/3217871.3217872"},{"key":"ref73","article-title":"Autoencoders","author":"goodfellow","year":"2016","journal-title":"Deep Learning"},{"key":"ref72","first-page":"448","article-title":"Deep Boltzmann machines","author":"salakhutdinov","year":"0","journal-title":"Proc Int Conf Artif Intell Statist"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/WCNC.2013.6555301"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2905041"},{"key":"ref70","article-title":"Data collection, curation and sharing","year":"2018"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2780250"},{"key":"ref76","first-page":"2672","article-title":"Generative adversarial nets","author":"goodfellow","year":"0","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1162\/089976602760128018"},{"key":"ref130","first-page":"1","article-title":"Pervasive attention: 2D convolutional neural networks for sequence-to-sequence prediction","author":"elbayad","year":"0","journal-title":"Proc 22nd Conf Computat Natural Lang Learn"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1145\/3301282"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1109\/ICIP.2019.8803616"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1162\/neco.2006.18.7.1527"},{"key":"ref131","first-page":"1","article-title":"MobileNets: Efficient convolutional neural networks for mobile vision applications","author":"howard","year":"2017","journal-title":"ArXiv abs\/1704 04861"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-20505-7_26"},{"key":"ref132","first-page":"1","article-title":"An empirical evaluation of generic convolutional and recurrent networks for sequence modeling","author":"bai","year":"2018","journal-title":"arXiv abs\/1803 01271"},{"key":"ref136","first-page":"1","article-title":"Efficient GAN-based anomaly detection","author":"zenati","year":"2018","journal-title":"arXiv abs\/1802 06222"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-59050-9_12"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2011.5995347"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1109\/ICISSEC.2016.7885840"},{"key":"ref60","article-title":"Gure-KDDCUP dataset","year":"2008"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-58347-1_2"},{"key":"ref62","article-title":"Cyber Defense Exercise (CDX)","year":"2001"},{"key":"ref61","first-page":"171","article-title":"Service-independent payload analysis to improve intrusion detection in network traffic","author":"perona","year":"0","journal-title":"Proc 7th Australas Data Mining Conf"},{"key":"ref63","first-page":"350","article-title":"ASNM: Advanced security network metrics for attack vector description","author":"homoliak","year":"0","journal-title":"Proc Secur Manage"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1145\/1111322.1111330"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1145\/382912.382923"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2011.5971980"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2011.06.019"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/1921168.1921179"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1109\/SIU.2013.6531200"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.05.011"},{"key":"ref68","article-title":"UMassTraceRepository","year":"2018"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04968-2_4"},{"key":"ref2","article-title":"WannaCry ransomware attack","year":"0"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.3233\/AIC-130579"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2018.8622568"},{"key":"ref95","first-page":"178","article-title":"A deep auto-encoder based approach for intrusion detection system","author":"farahnakian","year":"0","journal-title":"Proc Int Conf Adv Commun Technol"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2018.8328749"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2017.2772792"},{"key":"ref107","article-title":"One-hot encoding","year":"2020"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.4108\/eai.28-12-2017.153515"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-70139-4_87"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1155\/2017\/4184196"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-75181-8_2"},{"key":"ref91","first-page":"3371","article-title":"Stacked denoising autoencoders: Learning useful representations in a deep network with a local denoising criterion","volume":"11","author":"vincent","year":"2010","journal-title":"J Mach Learn Res"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/CIVEMSA45640.2019.9071620"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.4108\/eai.3-12-2015.2262516"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1016\/j.patrec.2017.04.001"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2911165"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298594"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1109\/PATMOS.2018.8463997"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2019.8802833"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.11.004"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1145\/3339252.3340497"},{"key":"ref97","first-page":"1","article-title":"Auto-encoding variational Bayes","author":"kingma","year":"0","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2013.2257594"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2008.080406"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-14350-3_6"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/I2MTC.2019.8827110"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2017.2707140"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3234150"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/NAECON.2015.7443094"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.052213.00046"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2904620"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/CBD.2014.41"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2494502"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2018.8488987"},{"key":"ref84","doi-asserted-by":"crossref","first-page":"147","DOI":"10.1016\/j.neunet.2018.09.013","article-title":"Weighted contrastive divergence","volume":"114","author":"merino","year":"2019","journal-title":"Neural Netw"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2847722"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2016.0040"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/s10586-017-1117-8"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/ICSPCC.2018.8567781"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2868993"},{"key":"ref113","first-page":"1","article-title":"Very deep convolutional networks for large-scale image recognition","author":"simonyan","year":"0","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/CSE-EUC.2017.119"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1109\/CSPA.2018.8368694"},{"key":"ref115","first-page":"1","article-title":"Network anomaly detection with deep learning","author":"\u00e7ekmez","year":"0","journal-title":"Proc 26th Signal Process Commun Appl Conf"},{"key":"ref89","first-page":"1","article-title":"Deep autoencoding Gaussian mixture model for unsupervised anomaly detection","author":"zong","year":"0","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref120","first-page":"1","article-title":"Microsoft malware classification challenge","author":"ronen","year":"2018","journal-title":"arXiv abs\/1802 10135"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1145\/3184066.3184089"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2881003"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4471-7296-3"},{"key":"ref85","article-title":"CUDA","year":"2020"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/IKT.2015.7288799"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2017.7966342"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-45823-6_67"}],"container-title":["IEEE Systems Journal"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4267003\/9447942\/09099844.pdf?arnumber=9099844","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,10]],"date-time":"2022-05-10T14:52:44Z","timestamp":1652194364000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9099844\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021,6]]},"references-count":142,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/jsyst.2020.2992966","relation":{},"ISSN":["1932-8184","1937-9234","2373-7816"],"issn-type":[{"value":"1932-8184","type":"print"},{"value":"1937-9234","type":"electronic"},{"value":"2373-7816","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,6]]}}}