{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,18]],"date-time":"2026-06-18T04:21:58Z","timestamp":1781756518768,"version":"3.54.5"},"reference-count":22,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2022,5,7]],"date-time":"2022-05-07T00:00:00Z","timestamp":1651881600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2022,5,7]],"date-time":"2022-05-07T00:00:00Z","timestamp":1651881600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"name":"National Science Fund of ChinaNational Science Fund of China, QingLan Project of Jiangsu Province","award":["Nos.61806088"],"award-info":[{"award-number":["Nos.61806088"]}]},{"name":"National Science Fund of ChinaNational Science Fund of China, QingLan Project of Jiangsu Province","award":["61902160"],"award-info":[{"award-number":["61902160"]}]},{"name":"Natural Science Research Project of Higher Education Institutions in Jiangsu Province","award":["No. 20KJA520007"],"award-info":[{"award-number":["No. 20KJA520007"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["EURASIP J. Adv. Signal Process."],"published-print":{"date-parts":[[2022,12]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>Network security is subject to malicious attacks from multiple sources, and intrusion detection systems play a key role in maintaining network security. During the training of intrusion detection models, the detection results generally have relatively large false detection rates due to the shortage of training data caused by data imbalance. To address the existing sample imbalance problem, this paper proposes a network intrusion detection algorithm based on the enhanced random forest and synthetic minority oversampling technique (SMOTE) algorithm. First, the method used a hybrid algorithm combining the K-means clustering algorithm with the SMOTE sampling algorithm to increase the number of minor samples and thus achieved a balanced dataset, by which the sample features of minor samples could be learned more effectively. Second, preliminary prediction results were obtained by using enhanced random forest, and then the similarity matrix of network attacks was used to correct the prediction results of voting processing by analyzing the type of network attacks. In this paper, the performance was tested using the NSL-KDD dataset with a classification accuracy of 99.72% on the training set and 78.47% on the test set. Compared with other related papers, our method has some improvement in the classification accuracy of detection.<\/jats:p>","DOI":"10.1186\/s13634-022-00871-6","type":"journal-article","created":{"date-parts":[[2022,5,7]],"date-time":"2022-05-07T12:05:08Z","timestamp":1651925108000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":78,"title":["Intrusion detection system combined enhanced random forest with SMOTE algorithm"],"prefix":"10.1186","volume":"2022","author":[{"given":"Tao","family":"Wu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Honghui","family":"Fan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongjin","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Congzhe","family":"You","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hongyan","family":"Zhou","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Xianzhen","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2022,5,7]]},"reference":[{"issue":"3","key":"871_CR1","doi-asserted-by":"publisher","first-page":"447","DOI":"10.1007\/s11235-018-0475-8","volume":"70","author":"G Fernandes","year":"2019","unstructured":"G. Fernandes, J.J.P.C. Rodrigues, L.F. Carvalho, A comprehensive survey on network anomaly detection. Telecommun. Syst. 70(3), 447\u2013489 (2019). https:\/\/doi.org\/10.1007\/s11235-018-0475-8","journal-title":"Telecommun. Syst."},{"issue":"8","key":"871_CR2","doi-asserted-by":"publisher","first-page":"2491","DOI":"10.3390\/s18082491","volume":"18","author":"D Ramotsoela","year":"2018","unstructured":"D. Ramotsoela, A. Abu-Mahfouz, G. Hancke, A survey of anomaly detection in industrial wireless sensor networks with critical water system infrastructure as a case study. Sensors 18(8), 2491 (2018). https:\/\/doi.org\/10.3390\/s18082491","journal-title":"Sensors"},{"key":"871_CR3","doi-asserted-by":"publisher","first-page":"222","DOI":"10.1109\/TSE.1987.232894","volume":"2","author":"DE Denning","year":"1987","unstructured":"D.E. Denning, An intrusion\u2013detection model. IEEE Trans. Softw. Eng. 2, 222\u2013232 (1987). https:\/\/doi.org\/10.1109\/TSE.1987.232894","journal-title":"IEEE Trans. Softw. Eng."},{"key":"871_CR4","first-page":"027","volume":"21","author":"F Zhao","year":"2015","unstructured":"F. Zhao, Detection method of LSSVM network intrusion based on hybrid kernel function. Mod. Electron. Tech. 21, 027 (2015)","journal-title":"Mod. Electron. Tech."},{"issue":"1","key":"871_CR5","doi-asserted-by":"publisher","first-page":"306","DOI":"10.1016\/j.eswa.2010.06.066","volume":"38","author":"SJ Horng","year":"2011","unstructured":"S.J. Horng, M.Y. Su, Y.H. Chen, A novel intrusion detection system based on hierarchical clustering and support vector machines. Expert Syst. Appl. 38(1), 306\u2013313 (2011). https:\/\/doi.org\/10.1016\/j.eswa.2010.06.066","journal-title":"Expert Syst. Appl."},{"key":"871_CR6","doi-asserted-by":"publisher","first-page":"13624","DOI":"10.1109\/ACCESS.2018.2810198","volume":"6","author":"P Tao","year":"2018","unstructured":"P. Tao, Z. Sun, Z. Sun, An improved intrusion detection algorithm based on GA and SVM. IEEE Access 6, 13624\u201313631 (2018). https:\/\/doi.org\/10.1109\/ACCESS.2018.2810198","journal-title":"IEEE Access"},{"key":"871_CR7","doi-asserted-by":"publisher","first-page":"11897","DOI":"10.1109\/ACCESS.2018.2810267","volume":"6","author":"K Peng","year":"2018","unstructured":"K. Peng, V.C.M. Leung, Q. Huang, Clustering approach based on mini batch kmeans for intrusion detection system over big data. IEEE Access 6, 11897\u201311906 (2018). https:\/\/doi.org\/10.1109\/ACCESS.2018.2810267","journal-title":"IEEE Access"},{"issue":"4","key":"871_CR8","doi-asserted-by":"publisher","first-page":"753","DOI":"10.1016\/j.asej.2013.01.003","volume":"4","author":"RM Elbasiony","year":"2013","unstructured":"R.M. Elbasiony, E.A. Sallam, T.E. Eltobely, A hybrid network intrusion detection framework based on random forests and weighted K-means. Ain Shams Eng. J. 4(4), 753\u2013762 (2013). https:\/\/doi.org\/10.1016\/j.asej.2013.01.003","journal-title":"Ain Shams Eng. J."},{"issue":"1","key":"871_CR9","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/s40537-018-0151-6","volume":"5","author":"JL Leevy","year":"2018","unstructured":"J.L. Leevy, T.M. Khoshgoftaar, R.A. Bauder, A survey on addressing high-class imbalance in big data. J. Big Data 5(1), 1\u201330 (2018). https:\/\/doi.org\/10.1186\/s40537-018-0151-6","journal-title":"J. Big Data"},{"key":"871_CR10","doi-asserted-by":"publisher","first-page":"88","DOI":"10.1016\/j.neucom.2017.03.011","volume":"243","author":"N Ofek","year":"2017","unstructured":"N. Ofek, L. Rokach, R. Stern, Fast-CBUS: a fast clustering-based undersampling method for addressing the class imbalance problem. Neurocomputing 243, 88\u2013102 (2017). https:\/\/doi.org\/10.1016\/j.neucom.2017.03.011","journal-title":"Neurocomputing"},{"key":"871_CR11","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2020.3004312","author":"X Ma","year":"2020","unstructured":"X. Ma, W. Shi, AESMOTE: adversarial reinforcement learning with SMOTE for anomaly detection. IEEE Trans. Netw. Sci. Eng. (2020). https:\/\/doi.org\/10.1109\/TNSE.2020.3004312","journal-title":"IEEE Trans. Netw. Sci. Eng."},{"issue":"1","key":"871_CR12","first-page":"20","volume":"38","author":"B Yan","year":"2018","unstructured":"B. Yan, G. Han, Y. Huang, New traffic classification method for imbalanced network data. J. Comput. Appl. 38(1), 20\u201325 (2018)","journal-title":"J. Comput. Appl."},{"issue":"1","key":"871_CR13","doi-asserted-by":"publisher","first-page":"20","DOI":"10.1145\/1007730.1007735","volume":"6","author":"GE Batista","year":"2004","unstructured":"G.E. Batista, R.C. Prati, M.C. Monard, A study of the behavior of several methods for balancing machine learning training data. ACM SIGKDD Explor. Newsl. 6(1), 20\u201329 (2004). https:\/\/doi.org\/10.1145\/1007730.1007735","journal-title":"ACM SIGKDD Explor. Newsl."},{"key":"871_CR14","doi-asserted-by":"publisher","unstructured":"H. Han, W. Wang, B. Mao, in International Conference on Intelligent Computing. Borderline-SMOTE: A New Over-Sampling Method in Imbalanced Data Sets Learning, vol. 3644 (Springer, 2015), pp. 878\u2013887. https:\/\/doi.org\/10.1007\/11538059_9","DOI":"10.1007\/11538059_9"},{"issue":"1","key":"871_CR15","doi-asserted-by":"publisher","first-page":"108","DOI":"10.3906\/elk-1504-234","volume":"25","author":"G Bakirli","year":"2017","unstructured":"G. Bakirli, D. Birant, DTreeSim: a new approach to compute decision tree similarity using re-mining. Turk. J. Electr. Eng. Comput. Sci. 25(1), 108\u2013125 (2017). https:\/\/doi.org\/10.3906\/elk-1504-234","journal-title":"Turk. J. Electr. Eng. Comput. Sci."},{"key":"871_CR16","doi-asserted-by":"publisher","first-page":"80","DOI":"10.1016\/j.jisa.2018.11.007","volume":"44","author":"S Mohammadi","year":"2019","unstructured":"S. Mohammadi, H. Mirvaziri, M. Ghazizadeh-Ahsaee, Cyber intrusion detection by combined feature selection algorithm. J. Inf. Secur. Appl. 44, 80\u201388 (2019). https:\/\/doi.org\/10.1016\/j.jisa.2018.11.007","journal-title":"J. Inf. Secur. Appl."},{"key":"871_CR17","doi-asserted-by":"publisher","first-page":"148","DOI":"10.1016\/j.cose.2018.11.005","volume":"81","author":"B Selvakumar","year":"2019","unstructured":"B. Selvakumar, K. Muneeswaran, Firefly algorithm based feature selection for network intrusion detection. Comput. Secur. 81, 148\u2013155 (2019). https:\/\/doi.org\/10.1016\/j.cose.2018.11.005","journal-title":"Comput. Secur."},{"issue":"1","key":"871_CR18","doi-asserted-by":"publisher","first-page":"82","DOI":"10.18489\/sacj.v52i0.200","volume":"52","author":"RC Staudemeyer","year":"2014","unstructured":"R.C. Staudemeyer, C.W. Omlin, Extracting salient features for network intrusion detection using machine learning methods. S. Afr. Comput. J. 52(1), 82\u201396 (2014). https:\/\/doi.org\/10.18489\/sacj.v52i0.200","journal-title":"S. Afr. Comput. J."},{"issue":"4","key":"871_CR19","doi-asserted-by":"publisher","first-page":"577","DOI":"10.3390\/electronics9040577","volume":"9","author":"A Golrang","year":"2020","unstructured":"A. Golrang, A.M. Golrang, S.Y. Yayilgan, A novel hybrid IDS based on modified NSGAII-ANN and random forest. Electronics 9(4), 577 (2020). https:\/\/doi.org\/10.3390\/electronics9040577","journal-title":"Electronics"},{"issue":"7","key":"871_CR20","doi-asserted-by":"publisher","first-page":"1223","DOI":"10.3390\/en12071223","volume":"12","author":"J Gao","year":"2019","unstructured":"J. Gao, S. Chai, B. Zhang, Research on network intrusion detection based on incremental extreme learning machine and adaptive principal component analysis. Energies 12(7), 1223 (2019). https:\/\/doi.org\/10.3390\/en12071223","journal-title":"Energies"},{"issue":"6","key":"871_CR21","doi-asserted-by":"publisher","first-page":"389","DOI":"10.14569\/IJACSA.2017.080651","volume":"8","author":"M Belouch","year":"2017","unstructured":"M. Belouch, S. El Hadaj, M. Idhammad, A two-stage classifier approach using reptree algorithm for network intrusion detection. Int. J. Adv. Comput. Sci. Appl. 8(6), 389\u2013394 (2017). https:\/\/doi.org\/10.14569\/IJACSA.2017.080651","journal-title":"Int. J. Adv. Comput. Sci. Appl."},{"key":"871_CR22","doi-asserted-by":"publisher","first-page":"164","DOI":"10.1016\/j.comnet.2018.11.010","volume":"148","author":"F Salo","year":"2019","unstructured":"F. Salo, A.B. Nassif, A. Essex, Dimensionality reduction with IG-PCA and ensemble classifier for network intrusion detection. Comput. Netw. 148, 164\u2013175 (2019). https:\/\/doi.org\/10.1016\/j.comnet.2018.11.010","journal-title":"Comput. Netw."}],"container-title":["EURASIP Journal on Advances in Signal Processing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13634-022-00871-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1186\/s13634-022-00871-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1186\/s13634-022-00871-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,5,7]],"date-time":"2022-05-07T12:18:20Z","timestamp":1651925900000},"score":1,"resource":{"primary":{"URL":"https:\/\/asp-eurasipjournals.springeropen.com\/articles\/10.1186\/s13634-022-00871-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,5,7]]},"references-count":22,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2022,12]]}},"alternative-id":["871"],"URL":"https:\/\/doi.org\/10.1186\/s13634-022-00871-6","relation":{},"ISSN":["1687-6180"],"issn-type":[{"value":"1687-6180","type":"electronic"}],"subject":[],"published":{"date-parts":[[2022,5,7]]},"assertion":[{"value":"23 February 2021","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"15 April 2022","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"7 May 2022","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The author declares that they have no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"39"}}