{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,10]],"date-time":"2026-08-10T17:55:25Z","timestamp":1786384525528,"version":"build-2736575974"},"reference-count":204,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2020,12,1]],"date-time":"2020-12-01T00:00:00Z","timestamp":1606780800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,12,1]],"date-time":"2020-12-01T00:00:00Z","timestamp":1606780800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,12,1]],"date-time":"2020-12-01T00:00:00Z","timestamp":1606780800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100003086","name":"Eusko Jaurlaritza","doi-asserted-by":"publisher","award":["IT-1244-19"],"award-info":[{"award-number":["IT-1244-19"]}],"id":[{"id":"10.13039\/501100003086","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003086","name":"Eusko Jaurlaritza","doi-asserted-by":"publisher","award":["PRE_2019_2_0022"],"award-info":[{"award-number":["PRE_2019_2_0022"]}],"id":[{"id":"10.13039\/501100003086","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Spanish Ministry of Economy Industry and Competitiveness","award":["TIN2016-78365-R"],"award-info":[{"award-number":["TIN2016-78365-R"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Serv. Manage."],"published-print":{"date-parts":[[2020,12]]},"DOI":"10.1109\/tnsm.2020.3016246","type":"journal-article","created":{"date-parts":[[2020,8,12]],"date-time":"2020-08-12T20:38:18Z","timestamp":1597264698000},"page":"2451-2479","source":"Crossref","is-referenced-by-count":106,"title":["Survey of Network Intrusion Detection Methods From the Perspective of the Knowledge Discovery in Databases Process"],"prefix":"10.1109","volume":"17","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-9372-5219","authenticated-orcid":false,"given":"Borja","family":"Molina-Coronado","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2057-1770","authenticated-orcid":false,"given":"Usue","family":"Mori","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7271-1931","authenticated-orcid":false,"given":"Alexander","family":"Mendiburu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4616-322X","authenticated-orcid":false,"given":"Jose","family":"Miguel-Alonso","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref170","doi-asserted-by":"publisher","DOI":"10.1016\/j.sigpro.2013.12.026"},{"key":"ref172","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-09823-4_1"},{"key":"ref171","first-page":"3575","article-title":"Analyzing rare event, anomaly, novelty and outlier detection terms under the supervised classification framework","volume":"55","author":"carre\u00f1o","year":"2019","journal-title":"Artif Intell Rev"},{"key":"ref174","author":"chapelle","year":"2010","journal-title":"Semi-Supervised Learning"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.1016\/j.patrec.2015.10.008"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2002.1007774"},{"key":"ref175","article-title":"One-class classification. Concept-learning in the absence of counter-examples","author":"tax","year":"2001"},{"key":"ref178","volume":"8","author":"kohonen","year":"2012","journal-title":"Self-Organization and Associative Memory"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2013.08.066"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1145\/3338468.3356829"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1023\/B:AIRE.0000045502.10941.a9"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/382912.382914"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.12"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3954"},{"key":"ref32","first-page":"2070","author":"claise","year":"2013","journal-title":"Specification of the IP Flow Information Export (IPFIX) protocol for the exchange of flow information"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.17487\/rfc6071"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/2063348.2063367"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2011.11.017"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/1177080.1177102"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1214\/088342304000000206"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.17487\/rfc3917"},{"key":"ref181","doi-asserted-by":"publisher","DOI":"10.1007\/s10618-005-0014-6"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.1109\/TVCG.2018.2865029"},{"key":"ref185","author":"kearns","year":"1990","journal-title":"The Computational Complexity of Machine Learning"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2336610"},{"key":"ref183","first-page":"139","article-title":"Aberrant behavior detection in time series for network monitoring","volume":"14","author":"brutlag","year":"2000","journal-title":"Proc LISA"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1007\/s10618-009-0148-z"},{"key":"ref189","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-012-5320-9"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1007\/s10115-014-0808-1"},{"key":"ref187","doi-asserted-by":"publisher","DOI":"10.1145\/2523813"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1145\/2522968.2522981"},{"key":"ref28","volume":"143","author":"jacobson","year":"1989","journal-title":"The tcpdump manual page"},{"key":"ref27","article-title":"Distributed network traffic data collection and storage","author":"degioanni","year":"2015"},{"key":"ref179","doi-asserted-by":"publisher","DOI":"10.2200\/S00240ED1V01Y200912DMK002"},{"key":"ref29","author":"satten","year":"2008","journal-title":"Lossless gigabit remote packet capture with linux"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2004.06.011"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2013.08.001"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/TSP.2003.814797"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/2347736.2347755"},{"key":"ref23","author":"piateski","year":"1991","journal-title":"Knowledge Discovery in Databases"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2321898"},{"key":"ref25","author":"stallings","year":"2004","journal-title":"Computer Networking With Internet Protocols And Technology"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23456"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-32287-7_9"},{"key":"ref154","first-page":"725","article-title":"Boosting, bagging, and C4.5","author":"quinlan","year":"1996","journal-title":"Proc 13th Nat Conf Artif Intell"},{"key":"ref153","author":"quinlan","year":"1993","journal-title":"C4 5 Programs for Machine Learning"},{"key":"ref156","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2006.255127"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2005.06.003"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1016\/S0004-3702(03)00079-1"},{"key":"ref152","author":"devore","year":"2011","journal-title":"Probability and Statistics for Engineering and the Sciences"},{"key":"ref151","first-page":"1156","article-title":"Searching for interacting features","author":"zhao","year":"2007","journal-title":"Proc Intern Joint Conf Artificial Intel (IJCAI)"},{"key":"ref146","doi-asserted-by":"crossref","first-page":"148","DOI":"10.1016\/j.cose.2018.11.005","article-title":"Firefly algorithm based feature selection for network intrusion detection","volume":"81","author":"selvakumar","year":"2019","journal-title":"Comput Security"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2012.05.004"},{"key":"ref148","author":"hall","year":"1999","journal-title":"Correlation-based feature selection for machine learning"},{"key":"ref149","author":"cover","year":"2012","journal-title":"Elements of Information Theory"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2893871"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/s12559-018-9564-y"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1137\/1.9781611972719.28"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2016.2627340"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-20757-0_4"},{"key":"ref53","author":"llc","year":"2019","journal-title":"Argus - Auditing Network Activity"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(99)00112-7"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/508791.508835"},{"key":"ref167","article-title":"Intrusion detection systems: A survey and taxonomy","author":"axelsson","year":"2000"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2009.05.017"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2012.147"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1145\/1273496.1273592"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2007.4371391"},{"key":"ref162","volume":"1","author":"goodfellow","year":"2016","journal-title":"Deep Learning"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1016\/S0893-6080(00)00026-5"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2018.11.010"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.25"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.2172\/425295"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2008.08.003"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2016.2597125"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-04898-2_455"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.05.008"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2010.032210.00054"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2953715"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2017.8254495"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1023\/A:1010933404324"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.052213.00046"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.10.011"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2010.12.004"},{"key":"ref48","article-title":"Intercepting encrypted network traffic for Internet usage monitoring","author":"rubin","year":"2014"},{"key":"ref47","article-title":"White paper: Network encryption and its impact on network security","author":"oltsik","year":"2019"},{"key":"ref42","first-page":"43","author":"nenkova","year":"2012","journal-title":"A Survey of Text Summarization Techniques"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2003.1250987"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2008.11.011"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1145\/1654988.1655002"},{"key":"ref73","author":"jensen","year":"2001","journal-title":"Ripples in Mathematics The Discrete Wavelet Transform"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2015.12.004"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCA.2006.889480"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2006.12.010"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.11.004"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2017.08.013"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2011.12.012"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/CSFW.2004.1310734"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/CSCloud.2017.26"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/1921168.1921179"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.3061"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-46301-8_23"},{"key":"ref61","first-page":"4e","article-title":"Improving network intrusion detection classifiers by non-payload-based exploit-independent obfuscations: An adversarial approach","volume":"5","author":"homoliak","year":"2018","journal-title":"EAI Endorsed Trans on Sec and Safety"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1109\/AINAW.2007.212"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/MCOM.2014.6852093"},{"key":"ref65","article-title":"Method and apparatus for preventing network traffic analysis","author":"stytz","year":"2005"},{"key":"ref66","article-title":"Insertion, evasion, and denial of service: Eluding network intrusion detection","author":"ptacek","year":"1998"},{"key":"ref67","first-page":"1","article-title":"Traffic morphing: An efficient defense against statistical traffic analysis","volume":"9","author":"wright","year":"2009","journal-title":"Proc NDSS"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/1090191.1080118"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-24712-5_18"},{"key":"ref197","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-015-9433-y"},{"key":"ref198","author":"homoliak","year":"2019","journal-title":"ASNM Datasets A Collection of Network Traffic Features for Testing of Adversarial Classifiers and Network Intrusion Detectors"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.1145\/2674026.2674028"},{"key":"ref193","doi-asserted-by":"publisher","DOI":"10.1145\/322510.322526"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1145\/2783258.2783372"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.1145\/1557019.1557060"},{"key":"ref196","doi-asserted-by":"publisher","DOI":"10.1177\/001316446002000104"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1145\/382912.382923"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/SAI.2015.7237310"},{"key":"ref190","first-page":"405","article-title":"Online anomaly detection under adversarial impact","author":"kloft","year":"2010","journal-title":"Proc 13th Int Conf Artif Intell Stat"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2017.03.018"},{"key":"ref191","doi-asserted-by":"publisher","DOI":"10.1145\/502512.502529"},{"key":"ref92","first-page":"683","article-title":"Towards generating real-life datasets for network intrusion detection","volume":"17","author":"bhuyan","year":"2015","journal-title":"Int J Netw Security"},{"key":"ref192","first-page":"892","article-title":"Active learning by querying informative and representative examples","author":"huang","year":"2010","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1145\/1978672.1978676"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2018.2888764"},{"key":"ref99","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2011.02.021"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-45248-5_13"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/CISDA.2009.5356522"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCC.2008.923876"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2008.239"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4615-0953-0_4"},{"key":"ref83","first-page":"1","article-title":"Intrusion detection with unlabeled data using clustering","author":"portnoy","year":"2001","journal-title":"Proc Of ACM CSS Workshop on Data Mining Applied Security"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/IRI.2018.00041"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(00)00139-0"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1145\/2076623.2076647"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2006.10.002"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1109\/PlatCon.2016.7456805"},{"key":"ref88","author":"kendall","year":"1999","journal-title":"A Database of Computer Attacks for the Evaluation of Intrusion Detection Systems"},{"key":"ref200","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2016.02.023"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2017.11.023"},{"key":"ref203","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053009"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2013.57"},{"key":"ref201","doi-asserted-by":"publisher","DOI":"10.1007\/11856214_5"},{"key":"ref202","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/ICMLA.2016.0040"},{"key":"ref126","first-page":"447","article-title":"A system for denial-of-service attack detection based on multivariate correlation analysis","volume":"25","author":"tan","year":"2013","journal-title":"IEEE Trans Parallel Distrib Syst"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2011.01.002"},{"key":"ref124","first-page":"25","article-title":"Feature scaling in support vector data descriptions","author":"tax","year":"2000","journal-title":"Proc Learn Imbalanced Data"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1023\/A:1016304305535"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9780511810114"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1016\/B978-1-55860-377-6.50032-3"},{"key":"ref133","first-page":"159","article-title":"A comparative study of discretization methods for naive-bayes classifiers","author":"yang","year":"2002","journal-title":"Proceedings of PKAW"},{"key":"ref134","first-page":"1022","article-title":"Multi-interval discretization of continuous-valued attributes for classification learning","author":"fayyad","year":"1993","journal-title":"Proc IJCAI"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1613\/jair.279"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44795-4_48"},{"key":"ref136","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2012.07.009"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2009.5178622"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.03.008"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1145\/1141277.1141429"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1007\/1-84628-253-5_7"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.5121\/ijnsa.2012.4208"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1137\/1.9781611972818.57"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1145\/1321440.1321552"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2016.09.007"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/btm344"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1201\/9781482275445"},{"key":"ref145","first-page":"155","article-title":"Genetic algorithm to improve svm based network intrusion detection system","volume":"2","author":"kim","year":"2005","journal-title":"Proc IEEE 19th Int Conf Adv Inf Netw Appl (AINA)"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(98)00017-6"},{"key":"ref109","first-page":"1","article-title":"A novel anomaly detection scheme based on principal component classifier","author":"shyu","year":"2003","journal-title":"Proc Int Conf Data Min"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-004-0751-8"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2017.2772792"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2015.01.009"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCB.2005.843274"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2017.04.070"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1016\/j.jfranklin.2017.06.006"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/TCYB.2013.2247592"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2016.2519914"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1007\/s00778-006-0002-5"},{"key":"ref110","first-page":"1","article-title":"Adam: Detecting intrusions by data mining","author":"barbara","year":"2001","journal-title":"Proc IEEE Workshop Inf Assurance Security"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2015.11.016"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2494502"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.05.009"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2018.12.006"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-019-0038-7"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2012.35"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1109\/TCYB.2018.2838668"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.09.051"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2005.05.002"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/240455.240464"},{"key":"ref18","author":"maiwald","year":"2001","journal-title":"Network Security A Beginner's Guide"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2019.112963"},{"key":"ref19","author":"forouzan","year":"2007","journal-title":"Cryptography & Network Security"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2016.06.021"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2014.09.083"},{"key":"ref116","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-010-0487-0"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2762418"},{"key":"ref120","author":"aggarwal","year":"2015","journal-title":"Data Mining The Textbook"},{"key":"ref121","author":"hastie","year":"2009","journal-title":"The Elements of Statistical Learning Data Mining Inference and Prediction"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-49430-8_2"},{"key":"ref123","first-page":"657","article-title":"A convergence analysis of log-linear training","author":"wiesler","year":"2011","journal-title":"Proc Adv Neural Inf Process Syst"}],"container-title":["IEEE Transactions on Network and Service Management"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4275028\/9289053\/09165817.pdf?arnumber=9165817","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,27]],"date-time":"2022-04-27T17:05:34Z","timestamp":1651079134000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9165817\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,12]]},"references-count":204,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tnsm.2020.3016246","relation":{},"ISSN":["1932-4537","2373-7379"],"issn-type":[{"value":"1932-4537","type":"electronic"},{"value":"2373-7379","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,12]]}}}