{"id":"https://openalex.org/W4384499388","doi":"https://doi.org/10.1007/s10207-023-00718-7","title":"Effective network intrusion detection using stacking-based ensemble approach","display_name":"Effective network intrusion detection using stacking-based ensemble approach","publication_year":2023,"publication_date":"2023-07-17","ids":{"openalex":"https://openalex.org/W4384499388","doi":"https://doi.org/10.1007/s10207-023-00718-7"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-023-00718-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-023-00718-7","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-023-00718-7.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10207-023-00718-7.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5110479197","display_name":"Muhammad Ali","orcid":"https://orcid.org/0009-0002-8931-0576"},"institutions":[{"id":"https://openalex.org/I134276161","display_name":"Pakistan Institute of Engineering and Applied Sciences","ror":"https://ror.org/04d4mbk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I134276161"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Muhammad Ali","raw_affiliation_strings":["Critical Infrastructure Protection and Malware Analysis Lab, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan","Department of Computer and Information Sciences, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Critical Infrastructure Protection and Malware Analysis Lab, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan","institution_ids":["https://openalex.org/I134276161"]},{"raw_affiliation_string":"Department of Computer and Information Sciences, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan","institution_ids":["https://openalex.org/I134276161"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101224359","display_name":"Mansoor-ul- Haque","orcid":null},"institutions":[{"id":"https://openalex.org/I134276161","display_name":"Pakistan Institute of Engineering and Applied Sciences","ror":"https://ror.org/04d4mbk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I134276161"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Mansoor-ul- Haque","raw_affiliation_strings":["Critical Infrastructure Protection and Malware Analysis Lab, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan","Department of Computer and Information Sciences, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Critical Infrastructure Protection and Malware Analysis Lab, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan","institution_ids":["https://openalex.org/I134276161"]},{"raw_affiliation_string":"Department of Computer and Information Sciences, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan","institution_ids":["https://openalex.org/I134276161"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021414760","display_name":"Muhammad Hanif Durad","orcid":"https://orcid.org/0000-0002-8026-1045"},"institutions":[{"id":"https://openalex.org/I134276161","display_name":"Pakistan Institute of Engineering and Applied Sciences","ror":"https://ror.org/04d4mbk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I134276161"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Muhammad Hanif Durad","raw_affiliation_strings":["Critical Infrastructure Protection and Malware Analysis Lab, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan","Department of Computer and Information Sciences, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Critical Infrastructure Protection and Malware Analysis Lab, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan","institution_ids":["https://openalex.org/I134276161"]},{"raw_affiliation_string":"Department of Computer and Information Sciences, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan","institution_ids":["https://openalex.org/I134276161"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103578133","display_name":"Anila Usman","orcid":null},"institutions":[{"id":"https://openalex.org/I134276161","display_name":"Pakistan Institute of Engineering and Applied Sciences","ror":"https://ror.org/04d4mbk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I134276161"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Anila Usman","raw_affiliation_strings":["Department of Computer and Information Sciences, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Information Sciences, Pakistan Institute of Engineering and Applied Sciences, Islamabad, 45650, Pakistan","institution_ids":["https://openalex.org/I134276161"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037090300","display_name":"Syed Muhammad Mohsin","orcid":"https://orcid.org/0000-0003-0886-9061"},"institutions":[{"id":"https://openalex.org/I16076960","display_name":"COMSATS University Islamabad","ror":"https://ror.org/00nqqvk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I16076960"]},{"id":"https://openalex.org/I79571142","display_name":"Virtual University of Pakistan","ror":"https://ror.org/00ya1zd25","country_code":"PK","type":"education","lineage":["https://openalex.org/I79571142"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Syed Muhammad Mohsin","raw_affiliation_strings":["College of Intellectual Novitiates (COIN), Virtual University of Pakistan, Lahore, 55150, Pakistan","Department of Computer Science, COMSATS University Islamabad, Islamabad, 45550, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Intellectual Novitiates (COIN), Virtual University of Pakistan, Lahore, 55150, Pakistan","institution_ids":["https://openalex.org/I79571142"]},{"raw_affiliation_string":"Department of Computer Science, COMSATS University Islamabad, Islamabad, 45550, Pakistan","institution_ids":["https://openalex.org/I16076960"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018027357","display_name":"Hana Mujlid","orcid":"https://orcid.org/0000-0001-9645-6827"},"institutions":[{"id":"https://openalex.org/I179331831","display_name":"Taif University","ror":"https://ror.org/014g1a453","country_code":"SA","type":"education","lineage":["https://openalex.org/I179331831"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Hana Mujlid","raw_affiliation_strings":["Department of Computer Engineering, Taif University, Taif, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Taif University, Taif, Saudi Arabia","institution_ids":["https://openalex.org/I179331831"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5080175512","display_name":"Carsten Maple","orcid":"https://orcid.org/0000-0002-4715-212X"},"institutions":[{"id":"https://openalex.org/I39555362","display_name":"University of Warwick","ror":"https://ror.org/01a77tt86","country_code":"GB","type":"education","lineage":["https://openalex.org/I39555362"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Carsten Maple","raw_affiliation_strings":["Cyber Security Centre, University of Warwick, Coventry, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber Security Centre, University of Warwick, Coventry, UK","institution_ids":["https://openalex.org/I39555362"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5080175512"],"corresponding_institution_ids":["https://openalex.org/I39555362"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":6.9295,"has_fulltext":true,"cited_by_count":52,"citation_normalized_percentile":{"value":0.97594421,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"22","issue":"6","first_page":"1781","last_page":"1798"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8413223028182983},{"id":"https://openalex.org/keywords/intranet","display_name":"Intranet","score":0.7233039140701294},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6963880062103271},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5958995223045349},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4975173771381378},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4773804545402527},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.4702932834625244},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.46064287424087524},{"id":"https://openalex.org/keywords/stacking","display_name":"Stacking","score":0.4569873809814453},{"id":"https://openalex.org/keywords/network-topology","display_name":"Network topology","score":0.45348331332206726},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.425446480512619},{"id":"https://openalex.org/keywords/network-simulation","display_name":"Network simulation","score":0.4106519818305969},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3664743900299072},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.32621273398399353},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3245786428451538},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1844778060913086},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09929358959197998}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8413223028182983},{"id":"https://openalex.org/C2778059363","wikidata":"https://www.wikidata.org/wiki/Q483426","display_name":"Intranet","level":3,"score":0.7233039140701294},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6963880062103271},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5958995223045349},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4975173771381378},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4773804545402527},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.4702932834625244},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.46064287424087524},{"id":"https://openalex.org/C33347731","wikidata":"https://www.wikidata.org/wiki/Q285210","display_name":"Stacking","level":2,"score":0.4569873809814453},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.45348331332206726},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.425446480512619},{"id":"https://openalex.org/C139940560","wikidata":"https://www.wikidata.org/wiki/Q290036","display_name":"Network simulation","level":2,"score":0.4106519818305969},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3664743900299072},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.32621273398399353},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3245786428451538},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1844778060913086},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09929358959197998},{"id":"https://openalex.org/C46141821","wikidata":"https://www.wikidata.org/wiki/Q209402","display_name":"Nuclear magnetic resonance","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10207-023-00718-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-023-00718-7","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-023-00718-7.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10207-023-00718-7","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-023-00718-7","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-023-00718-7.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7282611729","display_name":null,"funder_award_id":"EP/R007195/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G8079345471","display_name":null,"funder_award_id":"EP/N02298X/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4384499388.pdf"},"referenced_works_count":42,"referenced_works":["https://openalex.org/W50623932","https://openalex.org/W1582350176","https://openalex.org/W1780696074","https://openalex.org/W2133990480","https://openalex.org/W2161807639","https://openalex.org/W2597472767","https://openalex.org/W2678934292","https://openalex.org/W2789828921","https://openalex.org/W2801080689","https://openalex.org/W2891947567","https://openalex.org/W2908737782","https://openalex.org/W2919868916","https://openalex.org/W2922628727","https://openalex.org/W2946445608","https://openalex.org/W2958285686","https://openalex.org/W2979434725","https://openalex.org/W2980576170","https://openalex.org/W2991140181","https://openalex.org/W2991507433","https://openalex.org/W3002193070","https://openalex.org/W3009311085","https://openalex.org/W3020687048","https://openalex.org/W3033213260","https://openalex.org/W3038154406","https://openalex.org/W3082784289","https://openalex.org/W3102359135","https://openalex.org/W3106960257","https://openalex.org/W3118808706","https://openalex.org/W3119207006","https://openalex.org/W3119693685","https://openalex.org/W3121973162","https://openalex.org/W3126814579","https://openalex.org/W3133664817","https://openalex.org/W3133886843","https://openalex.org/W3145733289","https://openalex.org/W3149578452","https://openalex.org/W3180202571","https://openalex.org/W3196382900","https://openalex.org/W3200273708","https://openalex.org/W3205605959","https://openalex.org/W4319788371","https://openalex.org/W6713134421"],"related_works":["https://openalex.org/W2363296837","https://openalex.org/W2376886931","https://openalex.org/W2061466315","https://openalex.org/W2010561419","https://openalex.org/W2374845301","https://openalex.org/W2351448539","https://openalex.org/W1977863481","https://openalex.org/W2384741105","https://openalex.org/W1495178644","https://openalex.org/W2185594426"],"abstract_inverted_index":{"Abstract":[0],"The":[1,167],"increasing":[2],"demand":[3],"for":[4,20,108,137],"communication":[5],"between":[6],"networked":[7],"devices":[8],"connected":[9],"either":[10],"through":[11],"an":[12,44],"intranet":[13],"or":[14,39],"the":[15,18,57,75,102,106,121,155,159,171,176,181],"internet":[16],"increases":[17],"need":[19],"a":[21,80,96],"reliable":[22],"and":[23,140,162,179],"accurate":[24],"network":[25,41,48,62,122,127],"defense":[26],"mechanism.":[27],"Network":[28],"intrusion":[29,63],"detection":[30,64],"systems":[31],"(NIDSs),":[32],"which":[33,84],"are":[34,43,133,141,152],"used":[35],"to":[36,53,87,143,154],"detect":[37],"malicious":[38],"anomalous":[40],"traffic,":[42],"integral":[45],"part":[46],"of":[47,56,74,105,185],"defense.":[49],"This":[50],"research":[51],"aims":[52],"address":[54],"some":[55,72],"issues":[58],"faced":[59],"by":[60],"anomaly-based":[61],"systems.":[65],"In":[66],"this":[67],"research,":[68],"we":[69,94],"first":[70],"identify":[71],"limitations":[73],"legacy":[76],"NIDS":[77],"datasets,":[78],"including":[79],"recent":[81],"CICIDS2017":[82],"dataset,":[83,91],"lead":[85],"us":[86],"develop":[88],"our":[89],"novel":[90],"CIPMAIDS2023-1.":[92],"Then,":[93],"propose":[95],"stacking-based":[97,172],"ensemble":[98,173],"approach":[99,174],"that":[100,170],"outperforms":[101],"overall":[103],"state":[104],"art":[107],"NIDS.":[109],"Various":[110],"attack":[111,139],"scenarios":[112],"were":[113],"implemented":[114],"along":[115],"with":[116],"benign":[117],"user":[118],"traffic":[119,160],"on":[120],"topology":[123],"created":[124],"using":[125,135],"graphical":[126],"simulator-3":[128],"(GNS-3).":[129],"Key":[130],"flow":[131],"features":[132,156],"extracted":[134,157],"cicflowmeter":[136],"each":[138],"evaluated":[142],"analyze":[144],"their":[145,163],"behavior.":[146],"Several":[147],"different":[148],"machine":[149],"learning":[150],"approaches":[151],"applied":[153],"from":[158],"data,":[161],"performance":[164],"is":[165,175],"compared.":[166],"results":[168],"show":[169],"most":[177],"promising":[178],"achieves":[180],"highest":[182],"weighted":[183],"F1-score":[184],"98.24%.":[186]},"counts_by_year":[{"year":2026,"cited_by_count":9},{"year":2025,"cited_by_count":18},{"year":2024,"cited_by_count":22},{"year":2023,"cited_by_count":3}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}