{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,24]],"date-time":"2026-03-24T00:33:07Z","timestamp":1774312387579,"version":"3.50.1"},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2019,2,21]],"date-time":"2019-02-21T00:00:00Z","timestamp":1550707200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["EURASIP J. on Info. Security"],"published-print":{"date-parts":[[2019,12]]},"DOI":"10.1186\/s13635-019-0084-4","type":"journal-article","created":{"date-parts":[[2019,2,21]],"date-time":"2019-02-21T15:04:33Z","timestamp":1550761473000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":108,"title":["Transfer learning for detecting unknown network attacks"],"prefix":"10.1186","volume":"2019","author":[{"given":"Juan","family":"Zhao","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sachin","family":"Shetty","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jan Wei","family":"Pan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Charles","family":"Kamhoua","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kevin","family":"Kwiat","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2019,2,21]]},"reference":[{"key":"84_CR1","first-page":"14","volume-title":"NSDI, vol. 10","author":"R. Perdisci","year":"2010","unstructured":"R. Perdisci, W. Lee, N. Feamster, in NSDI, vol. 10. Behavioral clustering of http-based malware and signature generation using malicious network traces (USENIX AssociationBerkeley, 2010), p. 14."},{"key":"84_CR2","unstructured":"C. Rossow, C. Dietrich, H. Bos, L. Cavallaro, M. V. Steen, F. C. Freiling, N. Pohlmann, in BADGERS \u201911 Prof. of the First Workshop on Building Analysis Datasets and Gathering Experience Returns for Security. Sandnet: Network traffic analysis of malicious software, (2011), pp. 78\u201388."},{"key":"84_CR3","first-page":"14","volume-title":"Prof. of the 2011 6th International Conf. on Malicious and Unwanted Software, Malware 2011","author":"N. Stakhanova","year":"2011","unstructured":"N. Stakhanova, M. Couture, A. A. Ghorbani, in Prof. of the 2011 6th International Conf. on Malicious and Unwanted Software, Malware 2011. Exploring network-based malware classification (IEEE Computer SocietyWashington, DC, 2011), pp. 14\u201319."},{"key":"84_CR4","doi-asserted-by":"publisher","first-page":"134","DOI":"10.1109\/CNS.2015.7346821","volume-title":"Communications and Network Security (CNS), 2015 IEEE Conference On","author":"D. Bekerman","year":"2015","unstructured":"D. Bekerman, B. Shapira, L. Rokach, A. Bar, in Communications and Network Security (CNS), 2015 IEEE Conference On. Unknown malware detection using network traffic classification (IEEELos Alamitos, 2015), pp. 134\u2013142."},{"key":"84_CR5","first-page":"807","volume-title":"USENIX Security 2016","author":"K. Bartos","year":"2016","unstructured":"K. Bartos, M. Sofka, V. Franc, in USENIX Security 2016. Optimized invariant representation of network traffic for detecting unseen malware variants (USENIX AssociationAustin, 2016), pp. 807\u2013822."},{"key":"84_CR6","volume-title":"Military Communications Conference, (MILCOM)","author":"J. Zhao","year":"2017","unstructured":"J. Zhao, S. Shetty, J. W. Pan, in Military Communications Conference, (MILCOM). Feature-based transfer learning for network security (IEEELos Alamitos, 2017)."},{"key":"84_CR7","doi-asserted-by":"crossref","unstructured":"A. Javaid, Q. Niyaz, W. Sun, M. Alam, in Proceedings of the 9th EAI International Conf. on Bio-inspired Information and Communications Technologies (Formerly BIONETICS), BICT\u201915. A deep learning approach for network intrusion detection system (ICST, ICST, 2016), pp. 21\u201326.","DOI":"10.4108\/eai.3-12-2015.2262516"},{"key":"84_CR8","unstructured":"F. Zhuang, X. Cheng, P. Luo, S. J. Pan, Q. He, in Proceedings of the 24th International Conference on Artificial Intelligence, IJCAI\u201915. Supervised representation learning: transfer learning with deep autoencoders (AAAI Press, 2015), pp. 4119\u20134125."},{"issue":"1","key":"84_CR9","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1145\/2629528","volume":"6","author":"K. D. Feuz","year":"2015","unstructured":"K. D. Feuz, D. J. Cook, Transfer learning across feature-rich heterogeneous feature spaces via feature-space remapping (FSR). ACM Trans. Intell. Syst. Technol.6(1), 3\u20131327 (2015).","journal-title":"ACM Trans. Intell. Syst. Technol."},{"key":"84_CR10","unstructured":"D. Lin, Network intrusion detection and mitigation against denial of service attack. Technical Report MS-CIS-13-04 (Department of Computer and Information Science Technical, University of Pennsylvania, 2013)."},{"key":"84_CR11","unstructured":"NSL-KDD, UNB IUNB ISCX NSL-KDD DataSet (2016). http:\/\/www.unb.ca\/research\/iscx\/dataset\/iscx-NSL-KDD-dataset.html . Accessed 01 May 2016."},{"key":"84_CR12","volume-title":"Adaptive, Model-Based Monitoring for Cyber Attack Detection","year":"2000","unstructured":"A. Valdes, K. Skinner, Adaptive, Model-Based Monitoring for Cyber Attack Detection. (H. Debar, L. M\u00e9, S. F. Wu, eds.) (Springer, Berlin, Heidelberg, 2000)."},{"key":"84_CR13","unstructured":"M. Hilker, C. Schommer, in Conf.s in Research and Practice in Information Technology Series, vol. 54. Description of bad-signatures for network intrusion detection (ACSW, 2006), pp. 175\u2013182."},{"key":"84_CR14","first-page":"13","volume-title":"Machine Learning and Cybernetics, 2002. Proceedings. 2002 International Conference On, vol. 1","author":"H. Han","year":"2002","unstructured":"H. Han, X. -L. Lu, L. -Y. Ren, in Machine Learning and Cybernetics, 2002. Proceedings. 2002 International Conference On, vol. 1. Using data mining to discover signatures in network-based intrusion detection (IEEELos Alamitos, 2002), pp. 13\u201317."},{"key":"84_CR15","first-page":"642","volume-title":"Prof. of the 2013 International Conf. on Computing, Networking and Communications (ICNC). ICNC \u201913","author":"S. Nari","year":"2013","unstructured":"S. Nari, A. A. Ghorbani, in Prof. of the 2013 International Conf. on Computing, Networking and Communications (ICNC). ICNC \u201913. Automated malware classification based on network behavior (IEEE Computer SocietyWashington, 2013), pp. 642\u2013647."},{"key":"84_CR16","doi-asserted-by":"crossref","first-page":"1167","DOI":"10.1145\/2576768.2598238","volume-title":"Prof. of the 2014 conference on Genetic and evolutionary computation - GECCO \u201914","author":"M. Z. Rafique","year":"2014","unstructured":"M. Z. Rafique, P. Chen, C. Huygens, W. Joosen, in Prof. of the 2014 conference on Genetic and evolutionary computation - GECCO \u201914. Evolutionary algorithms for classification of malware families through different network behaviors (ACMNew York, 2014), pp. 1167\u20131174."},{"issue":"1-3","key":"84_CR17","doi-asserted-by":"publisher","first-page":"59","DOI":"10.1007\/s10994-014-5473-9","volume":"101","author":"F. Iglesias","year":"2014","unstructured":"F. Iglesias, T. Zseby, Analysis of network traffic features for anomaly detection. Mach. Learn.101(1-3), 59\u201384 (2014).","journal-title":"Mach. Learn."},{"issue":"10","key":"84_CR18","doi-asserted-by":"publisher","first-page":"1345","DOI":"10.1109\/TKDE.2009.191","volume":"22","author":"S. J. Pan","year":"2010","unstructured":"S. J. Pan, Q. Yang, A survey on transfer learning. IEEE Trans. Knowl. Data Eng.22(10), 1345\u20131359 (2010).","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"84_CR19","first-page":"81","volume-title":"Prof. of the 24th International Conf. on Machine Learning. ICML \u201907","author":"S. Bickel","year":"2007","unstructured":"S. Bickel, M. Br\u00fcckner, T. Scheffer, in Prof. of the 24th International Conf. on Machine Learning. ICML \u201907. Discriminative learning for differing training and test distributions (ACMNew York, 2007), pp. 81\u201388."},{"key":"84_CR20","first-page":"193","volume-title":"Prof. of the 24th International Conf. on Machine Learning. ICML \u201907","author":"W. Dai","year":"2007","unstructured":"W. Dai, Q. Yang, G. -R. Xue, Y. Yu, in Prof. of the 24th International Conf. on Machine Learning. ICML \u201907. Boosting for transfer learning (ACMNew York, 2007), pp. 193\u2013200."},{"key":"84_CR21","first-page":"109","volume-title":"Prof. of the Tenth ACM SIGKDD International Conf. on Knowledge Discovery and Data Mining. KDD \u201904","author":"T. Evgeniou","year":"2004","unstructured":"T. Evgeniou, M. Pontil, in Prof. of the Tenth ACM SIGKDD International Conf. on Knowledge Discovery and Data Mining. KDD \u201904. Regularized multi\u2013task learning (ACMNew York, 2004), pp. 109\u2013117."},{"issue":"October","key":"84_CR22","first-page":"153","volume":"20","author":"E. Bonilla","year":"2008","unstructured":"E. Bonilla, K. M. Chai, C. Williams, Multi-task Gaussian process prediction. Adv. Neural Inf. Process. Syst.20(October), 153\u2013160 (2008).","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"84_CR23","unstructured":"B. Sun, J. Feng, K. Saenko, in Proceedings of the Thirtieth AAAI Conference on Artificial Intelligence. AAAI 16. Return of frustratingly easy domain adaptation (AAAI Press, 2016), pp. 2058\u20132065. http:\/\/dl.acm.org\/citation.cfm?id=3016100.3016186 ."},{"issue":"2","key":"84_CR24","doi-asserted-by":"publisher","first-page":"199","DOI":"10.1109\/TNN.2010.2091281","volume":"22","author":"S. J. Pan","year":"2011","unstructured":"S. J. Pan, I. W. Tsang, J. T. Kwok, Q. Yang, Domain adaptation via transfer component analysis. IEEE Trans. Neural Netw.22(2), 199\u2013210 (2011).","journal-title":"IEEE Trans. Neural Netw."},{"key":"84_CR25","first-page":"1785","volume-title":"Computer Vision and Pattern Recognition (CVPR), 2011 IEEE Conf. On","author":"B. Kulis","year":"2011","unstructured":"B. Kulis, K. Saenko, T. Darrell, in Computer Vision and Pattern Recognition (CVPR), 2011 IEEE Conf. On. What you saw is not what you get: domain adaptation using asymmetric kernel transforms (IEEE Computer SocietyLos Alamitos, 2011), pp. 1785\u20131792."},{"key":"84_CR26","first-page":"1049","volume-title":"Prof. - IEEE International Conf. on Data Mining, ICDM","author":"X. Shi","year":"2010","unstructured":"X. Shi, Q. Liu, W. Fan, P. S. Yu, R. Zhu, in Prof. - IEEE International Conf. on Data Mining, ICDM. Transfer learning on heterogenous feature spaces via spectral transformation (IEEELos Alamitos, 2010), pp. 1049\u20131054."},{"key":"84_CR27","first-page":"382","volume-title":"Prof. of the 2013 International Conf. on Software Engineering. ICSE \u201913","author":"J. Nam","year":"2013","unstructured":"J. Nam, S. J. Pan, S. Kim, in Prof. of the 2013 International Conf. on Software Engineering. ICSE \u201913. Transfer defect learning (IEEE PressPiscataway, 2013), pp. 382\u2013391."},{"key":"84_CR28","doi-asserted-by":"publisher","first-page":"113","DOI":"10.1145\/2124295.2124311","volume-title":"WSDM","author":"B. Long","year":"2012","unstructured":"B. Long, Y. Chang, A. Dong, J. He, in WSDM. Pairwise cross-domain factor model for heterogeneous transfer ranking (ACMNew York, 2012), p. 113."},{"key":"84_CR29","doi-asserted-by":"publisher","first-page":"511","DOI":"10.1109\/ISPA.2009.92","volume-title":"2009 IEEE International Symposium on Parallel and Distributed Processing with Applications","author":"S. Gou","year":"2009","unstructured":"S. Gou, Y. Wang, L. Jiao, et al., in 2009 IEEE International Symposium on Parallel and Distributed Processing with Applications. Distributed transfer network learning based intrusion detection (IEEELos Alamitos, 2009), pp. 511\u2013515."},{"key":"84_CR30","doi-asserted-by":"crossref","first-page":"283","DOI":"10.1145\/1401890.1401928","volume-title":"Prof. of the 14th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining","author":"J. Gao","year":"2008","unstructured":"J. Gao, W. Fan, J. Jiang, J. Han, in Prof. of the 14th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining. Knowledge transfer via multiple model local structure mapping (ACMNew York, 2008), pp. 283\u2013291."},{"key":"84_CR31","unstructured":"D. Arthur, S. Vassilvitskii, in Proceedings of the Eighteenth Annual ACM-SIAM Symposium on Discrete Algorithms. SODA \u201907. K-means++: the advantages of careful seeding (Society for Industrial and Applied MathematicsPhiladelphia, 2007), pp. 1027\u20131035. http:\/\/dl.acm.org\/citation.cfm?id=1283383.1283494 ."},{"issue":"4","key":"84_CR32","doi-asserted-by":"publisher","first-page":"433","DOI":"10.1002\/wics.101","volume":"2","author":"H. Abdi","year":"2010","unstructured":"H. Abdi, L. J. Williams, Principal component analysis. Wiley Interdiscip. Rev. Comput. Stat.2(4), 433\u2013459 (2010).","journal-title":"Wiley Interdiscip. Rev. Comput. Stat."}],"container-title":["EURASIP Journal on Information Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13635-019-0084-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1186\/s13635-019-0084-4\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13635-019-0084-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,9,12]],"date-time":"2022-09-12T08:44:17Z","timestamp":1662972257000},"score":1,"resource":{"primary":{"URL":"https:\/\/jis-eurasipjournals.springeropen.com\/articles\/10.1186\/s13635-019-0084-4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,2,21]]},"references-count":32,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2019,12]]}},"alternative-id":["84"],"URL":"https:\/\/doi.org\/10.1186\/s13635-019-0084-4","relation":{},"ISSN":["2510-523X"],"issn-type":[{"value":"2510-523X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,2,21]]},"assertion":[{"value":"3 July 2018","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"18 January 2019","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"21 February 2019","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The authors declare that they have no competing interests.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}},{"value":"Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Publisher\u2019s Note"}}],"article-number":"1"}}