{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,20]],"date-time":"2026-05-20T16:29:04Z","timestamp":1779294544896,"version":"3.51.4"},"reference-count":49,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2023,1,1]],"date-time":"2023-01-01T00:00:00Z","timestamp":1672531200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62002009"],"award-info":[{"award-number":["62002009"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Tsinghua University-China Telecom Joint Research Institute for Next Generation Internet Technology"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans.Inform.Forensic Secur."],"published-print":{"date-parts":[[2023]]},"DOI":"10.1109\/tifs.2023.3262121","type":"journal-article","created":{"date-parts":[[2023,3,27]],"date-time":"2023-03-27T18:43:56Z","timestamp":1679942636000},"page":"2076-2090","source":"Crossref","is-referenced-by-count":45,"title":["Real-Time Malicious Traffic Detection With Online Isolation Forest Over SD-WAN"],"prefix":"10.1109","volume":"18","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-9789-7277","authenticated-orcid":false,"given":"Pei","family":"Zhang","sequence":"first","affiliation":[{"name":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fangzhou","family":"He","sequence":"additional","affiliation":[{"name":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4429-9959","authenticated-orcid":false,"given":"Han","family":"Zhang","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace (INSC), Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0230-1432","authenticated-orcid":false,"given":"Jiankun","family":"Hu","sequence":"additional","affiliation":[{"name":"School of Engineering and Information Technology, University of New South Wales at the Australian Defence Force Academy (UNSW@ADFA), ACT, Canberra, Australia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7275-2274","authenticated-orcid":false,"given":"Xiaohong","family":"Huang","sequence":"additional","affiliation":[{"name":"School of Computer Science (National Pilot Software Engineering School), Beijing University of Posts and Telecommunications, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4493-5145","authenticated-orcid":false,"given":"Jilong","family":"Wang","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace (INSC), Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xia","family":"Yin","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Technology (DCST), Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1931-6481","authenticated-orcid":false,"given":"Huahong","family":"Zhu","sequence":"additional","affiliation":[{"name":"Research Institute, China Telecom Corporation Ltd., Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yahui","family":"Li","sequence":"additional","affiliation":[{"name":"Institute for Network Sciences and Cyberspace (INSC), Tsinghua University, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3465481.3469190"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/BDS\/HPSC\/IDS18.2018.00016"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ICTAACS48474.2019.8988138"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.08.006"},{"issue":"3","key":"ref5","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1961189.1961199","article-title":"LIBSVM: A library for support vector machines","volume":"2","author":"Chang","year":"2011","journal-title":"ACM Trans. Intell. Syst. Technol."},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.3182\/20130902-3-cn-3020.00044"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2020.2986957"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-017-4961-1"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2016.03.028"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484585"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TMM.2019.2893549"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2934872.2934891"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2018.8462261"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2021.3053371"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2486001.2486012"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3230543.3230545"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2486001.2486019"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2017.01.029"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2020.105659"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ICACI.2012.6463163"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/2785956.2787478"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1145\/1015467.1015492"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2017.42"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2019.8737507"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/2619239.2626314"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/WCICA.2008.4593458"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23204"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2019.8847011"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2021.3050400"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2016.23477"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.5555\/1953048.2078195"},{"key":"ref34","article-title":"Network traffic anomaly detection using recurrent neural networks","author":"Radford","year":"2018","journal-title":"arXiv:1803.10769"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1145\/3416013.3426457"},{"key":"ref36","volume-title":"Survey of current network intrusion detection techniques","author":"Kumar","year":"2007"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.5220\/0006639801080116"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.12.012"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/PESGM.2018.8586159"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2020.3041385"},{"issue":"11","key":"ref41","first-page":"1","article-title":"Visualizing data using t-SNE","volume":"9","author":"Maaten","year":"2008","journal-title":"J. Mach. Learn. Res."},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2017.8004872"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102542"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOMWKSHPS50562.2020.9162940"},{"issue":"1","key":"ref45","first-page":"20","article-title":"New traffic classification method for imbalanced network data","volume":"38","author":"Yan","year":"2018","journal-title":"J. Comput. Appl."},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2019.8847124"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1145\/3485983.3494843"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1145\/2535372.2535411"},{"issue":"6","key":"ref49","first-page":"1697","article-title":"Anomaly detection over concept drifting data streams","volume":"5","author":"Zhou","year":"2009","journal-title":"J. Comput. Inf. Syst."}],"container-title":["IEEE Transactions on Information Forensics and Security"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10206\/9970396\/10081489.pdf?arnumber=10081489","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,2,13]],"date-time":"2024-02-13T15:23:10Z","timestamp":1707837790000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10081489\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023]]},"references-count":49,"URL":"https:\/\/doi.org\/10.1109\/tifs.2023.3262121","relation":{},"ISSN":["1556-6013","1556-6021"],"issn-type":[{"value":"1556-6013","type":"print"},{"value":"1556-6021","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023]]}}}