{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,30]],"date-time":"2026-09-30T17:06:31Z","timestamp":1790787991087,"version":"4.1.0"},"reference-count":65,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"8","license":[{"start":{"date-parts":[[2019,8,1]],"date-time":"2019-08-01T00:00:00Z","timestamp":1564617600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2019,8,1]],"date-time":"2019-08-01T00:00:00Z","timestamp":1564617600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,8,1]],"date-time":"2019-08-01T00:00:00Z","timestamp":1564617600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"Cloud Technology Endowed Professorship"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2019,8]]},"DOI":"10.1109\/tifs.2018.2890808","type":"journal-article","created":{"date-parts":[[2019,1,3]],"date-time":"2019-01-03T19:42:56Z","timestamp":1546544576000},"page":"1975-1987","source":"Crossref","is-referenced-by-count":112,"title":["Outlier Dirichlet Mixture Mechanism: Adversarial Statistical Learning for Anomaly Detection in the Fog"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6127-9349","authenticated-orcid":false,"given":"Nour","family":"Moustafa","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9208-5336","authenticated-orcid":false,"given":"Kim-Kwang Raymond","family":"Choo","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8170-5058","authenticated-orcid":false,"given":"Ibrahim","family":"Radwan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6353-8359","authenticated-orcid":false,"given":"Seyit","family":"Camtepe","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","first-page":"308","article-title":"Internet intrusion detection system service in a cloud","volume":"9","author":"zarrabi","year":"2012","journal-title":"Int J Comput Sci Issues"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1504\/IJCC.2012.046711"},{"key":"ref33","first-page":"390","article-title":"DDoS attacks detection and prevention techniques in cloud computing: A systematic review","volume":"14","author":"amir","year":"2016","journal-title":"Int J Comput Sci Inf Secur"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1201\/b10867"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-24965-5_85"},{"key":"ref30","doi-asserted-by":"crossref","first-page":"447","DOI":"10.1109\/TPDS.2013.146","article-title":"A system for denial-of-service attack detection based on multivariate correlation analysis","volume":"25","author":"tan","year":"2014","journal-title":"IEEE Trans Parallel Distrib Syst"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/MITP.2009.89"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICISS.2010.5656789"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2010.07.006"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/DASC.2011.128"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.18637\/jss.v021.i07"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2014.2375218"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2007.896065"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2009.05.017"},{"key":"ref28","first-page":"204","article-title":"Creating novel features to anomaly network detection using DARPA-2009 data set","author":"moustaf","year":"2015","journal-title":"Proc 14th Eur Conf Cyber Warfare Secur"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2016.03.042"},{"key":"ref27","author":"moustafa","year":"2017","journal-title":"A hybrid feature selection for network intrusion detection systems Central points"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2016.2519914"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-010-5188-5"},{"key":"ref2","first-page":"67","article-title":"Intrusion detection system for cloud computing","volume":"1","author":"shelke","year":"2012","journal-title":"Int J Sci Technol Res"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2018.1081072"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-59439-2_5"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"ref21","year":"2017","journal-title":"The NSL-KDD Data Set"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1080\/19393555.2015.1125974"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2046684.2046692"},{"key":"ref25","year":"2017","journal-title":"UNSW-NB15 dataset"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1002\/widm.2"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.4324\/9781315716831"},{"key":"ref59","year":"2018","journal-title":"MySQL Cluster CGE"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1186\/1471-2288-14-135"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-87811-9_3"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/ICIT.2017.7915513"},{"key":"ref55","first-page":"1","article-title":"Finite mixture models","author":"gensler","year":"2017","journal-title":"The Handbook of Marketing Research"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1080\/01621459.1995.10476550"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2011.152"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2012.2190298"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2010.12.006"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/MilCIS.2017.8190421"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CCGrid.2012.81"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2017.2703626"},{"key":"ref13","author":"paudice","year":"2018","journal-title":"Detection of adversarial training examples in poisoning attacks through anomaly detection"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2018.07.023"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2017.2715166"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/DSNW.2011.5958858"},{"key":"ref17","first-page":"552","article-title":"Multi-level intrusion detection system and log management in cloud computing","author":"lee","year":"2011","journal-title":"Proc 13rd Int Conf Adv Commun Technol (ICACT)"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2871719"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TIP.2004.834664"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2757384.2757397"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/MCC.2014.53"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/FMEC.2017.7946412"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2015.09.004"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2016.2613054"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2018.08.045"},{"key":"ref49","first-page":"1689","article-title":"Is feature selection secure against training data poisoning?","author":"xiao","year":"2015","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2016.08.016"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1002\/ett.3183"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/MobileCloud.2015.15"},{"key":"ref48","first-page":"2871","article-title":"Using machine teaching to identify optimal training-set attacks on machine learners","author":"mei","year":"2015","journal-title":"Proc AAAI"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1080\/19393555.2017.1334843"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2014.6785472"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2015.04.189"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/HotWeb.2015.22"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/CIACS.2015.7395559"}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/8710012\/08600389.pdf?arnumber=8600389","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,13]],"date-time":"2022-07-13T21:16:23Z","timestamp":1657746983000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8600389\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,8]]},"references-count":65,"journal-issue":{"issue":"8"},"URL":"https:\/\/doi.org\/10.1109\/tifs.2018.2890808","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,8]]}}}