{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,28]],"date-time":"2026-08-28T03:23:19Z","timestamp":1787887399849,"version":"build-2784847793"},"reference-count":60,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000006","name":"Office of Naval Research","doi-asserted-by":"publisher","award":["N00014-19-1-2621"],"award-info":[{"award-number":["N00014-19-1-2621"]}],"id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1837519"],"award-info":[{"award-number":["CNS-1837519"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1916902"],"award-info":[{"award-number":["CNS-1916902"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Virginia Commonwealth Cyber Initiative"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,3,1]]},"DOI":"10.1109\/tdsc.2022.3148990","type":"journal-article","created":{"date-parts":[[2022,2,10]],"date-time":"2022-02-10T15:24:49Z","timestamp":1644506689000},"page":"1139-1153","source":"Crossref","is-referenced-by-count":95,"title":["MANDA: On Adversarial Example Detection for Network Intrusion Detection System"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6224-8656","authenticated-orcid":false,"given":"Ning","family":"Wang","sequence":"first","affiliation":[{"name":"Department of Electrical and Computer Engineering, Virginia Tech, Blacksburg, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7452-2165","authenticated-orcid":false,"given":"Yimin","family":"Chen","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Virginia Tech, Blacksburg, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-0946-3197","authenticated-orcid":false,"given":"Yang","family":"Xiao","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Virginia Tech, Blacksburg, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Hu","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Virginia Tech, Blacksburg, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2421-4623","authenticated-orcid":false,"given":"Wenjing","family":"Lou","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Virginia Tech, Blacksburg, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3716-5768","authenticated-orcid":false,"given":"Y. Thomas","family":"Hou","sequence":"additional","affiliation":[{"name":"Department of Electrical and Computer Engineering, Virginia Tech, Blacksburg, VA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM42981.2021.9488874"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2012.09.004"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/382912.382923"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2008.08.003"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00908"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2018.8461870"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1162\/tacl_a_00065"},{"key":"ref8","article-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"ref9","article-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2014"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-05981-0_7"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2019.8761337"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00019"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/3395352.3402618"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23115"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140444"},{"key":"ref16","article-title":"Practical black-box attacks against deep learning systems using adversarial examples","author":"Papernot","year":"2016"},{"key":"ref17","article-title":"Ensemble adversarial training: Attacks and defenses","author":"Tram\u00e8r","year":"2017"},{"key":"ref18","article-title":"Detecting adversarial samples from artifacts","author":"Feinman","year":"2017"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2015.7218444"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2015.02.026"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2017.201"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM48880.2022.9796926"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/NCA.2019.8935039"},{"key":"ref24","first-page":"2705","article-title":"Defeating DNN-based traffic analysis systems in real-time with blind adversarial perturbations","volume-title":"Proc. 30th USENIX Secur. Symp. Secur.","author":"Nasr"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1201\/9781351251389-8"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2018.2874243"},{"key":"ref30","article-title":"Early methods for detecting adversarial images","author":"Hendrycks"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.615"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2019.2940533"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11828"},{"key":"ref34","article-title":"On the (statistical) detection of adversarial examples","author":"Grosse","year":"2017"},{"key":"ref35","article-title":"PixelDefend: Leveraging generative models to understand and defend against adversarial examples","volume-title":"Proc. 6th Int. Conf. Learn. Representations (Poster)","author":"Song"},{"key":"ref36","first-page":"7913","article-title":"Robust detection of adversarial attacks by modeling the intrinsic properties of deep neural networks","volume-title":"Proc. Adv. Neural Informat. Process. Syst.","author":"Zheng"},{"key":"ref37","article-title":"On detecting adversarial perturbations","volume-title":"Proc. 5th Int. Conf. Learn Representations (Poster)","author":"Metzen"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3593078.3593935"},{"key":"ref39","volume-title":"Cisco Security Professionals Guide to Secure Intrusion Detection Systems","author":"Burton","year":"2003"},{"key":"ref40","volume-title":"Eleventh Hour CISSP\u00ae: Study Guide","author":"Conrad","year":"2016"},{"key":"ref41","article-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00073"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s11075-015-0077-4"},{"key":"ref44","article-title":"Adversarial feature learning","author":"Donahue","year":"2016"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/ICTAI.2019.00179"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICPADS51040.2020.00064"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2007.70735"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2009.5206850"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1126\/science.290.5500.2319"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1126\/science.290.5500.2323"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.7551\/mitpress\/1120.003.0080"},{"key":"ref52","first-page":"321","article-title":"Learning with local and global consistency","volume-title":"Proc. Adv. Neural Informat. Process. Syst.","author":"Zhou"},{"key":"ref53","first-page":"1635","article-title":"A new defense against adversarial images: Turning a weakness into a strength","volume-title":"Proc. Adv. Neural Informat. Process. Syst.","author":"Hu"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.5220\/0006639801080116"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref57","first-page":"2825","article-title":"Scikit-learn: Machine learning in Python","volume":"12","author":"Pedregosa","year":"2011","journal-title":"J. Mach. Learn. Res."},{"key":"ref58","article-title":"Transferability in machine learning: From phenomena to black-box attacks using adversarial samples","author":"Papernot","year":"2016"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/34.206958"},{"issue":"6","key":"ref60","first-page":"446","article-title":"A study on NSL-KDD dataset for intrusion detection system based on classification algorithms","volume":"4","author":"Dhanabal","year":"2015","journal-title":"Int. J. Adv. Res. Comput. Commun. Eng."}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/8858\/10068314\/9709532-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10068314\/09709532.pdf?arnumber=9709532","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,17]],"date-time":"2024-01-17T18:27:05Z","timestamp":1705516025000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9709532\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,1]]},"references-count":60,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3148990","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3,1]]}}}