{"id":"https://openalex.org/W4411095308","doi":"https://doi.org/10.1007/s10791-025-09641-y","title":"A systematic literature review on intrusion detection techniques in cloud computing","display_name":"A systematic literature review on intrusion detection techniques in cloud computing","publication_year":2025,"publication_date":"2025-06-06","ids":{"openalex":"https://openalex.org/W4411095308","doi":"https://doi.org/10.1007/s10791-025-09641-y"},"language":"en","primary_location":{"id":"doi:10.1007/s10791-025-09641-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10791-025-09641-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10791-025-09641-y.pdf","source":{"id":"https://openalex.org/S5407036663","display_name":"Discover Computing","issn_l":"2948-2992","issn":["2948-2992"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discover Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://link.springer.com/content/pdf/10.1007/s10791-025-09641-y.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068350251","display_name":"Shamma Shabnam Nasim","orcid":null},"institutions":[{"id":"https://openalex.org/I115715567","display_name":"Birla Institute of Technology, Mesra","ror":"https://ror.org/028vtqb15","country_code":"IN","type":"education","lineage":["https://openalex.org/I115715567"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Shamma Shabnam Nasim","raw_affiliation_strings":["Department of Computer Science and Engineering, Birla Institute of Technology, Mesra, Jharkhand, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Birla Institute of Technology, Mesra, Jharkhand, India","institution_ids":["https://openalex.org/I115715567"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029155610","display_name":"Prashant Pranav","orcid":"https://orcid.org/0000-0002-3932-3048"},"institutions":[{"id":"https://openalex.org/I115715567","display_name":"Birla Institute of Technology, Mesra","ror":"https://ror.org/028vtqb15","country_code":"IN","type":"education","lineage":["https://openalex.org/I115715567"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Prashant Pranav","raw_affiliation_strings":["Department of Computer Science and Engineering, Birla Institute of Technology, Mesra, Jharkhand, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Birla Institute of Technology, Mesra, Jharkhand, India","institution_ids":["https://openalex.org/I115715567"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034803221","display_name":"Sandip Dutta","orcid":"https://orcid.org/0000-0002-3540-5572"},"institutions":[{"id":"https://openalex.org/I115715567","display_name":"Birla Institute of Technology, Mesra","ror":"https://ror.org/028vtqb15","country_code":"IN","type":"education","lineage":["https://openalex.org/I115715567"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sandip Dutta","raw_affiliation_strings":["Department of Computer Science and Engineering, Birla Institute of Technology, Mesra, Jharkhand, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Birla Institute of Technology, Mesra, Jharkhand, India","institution_ids":["https://openalex.org/I115715567"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5029155610"],"corresponding_institution_ids":["https://openalex.org/I115715567"],"apc_list":null,"apc_paid":null,"fwci":6.7248,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.96783393,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":"28","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.7451897859573364},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.62094646692276},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5304721593856812},{"id":"https://openalex.org/keywords/systematic-review","display_name":"Systematic review","score":0.4632177948951721},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.4380101263523102},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4087185263633728},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.12581276893615723},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09221133589744568},{"id":"https://openalex.org/keywords/medline","display_name":"MEDLINE","score":0.06678515672683716}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.7451897859573364},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.62094646692276},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5304721593856812},{"id":"https://openalex.org/C189708586","wikidata":"https://www.wikidata.org/wiki/Q1504425","display_name":"Systematic review","level":3,"score":0.4632177948951721},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4380101263523102},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4087185263633728},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.12581276893615723},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09221133589744568},{"id":"https://openalex.org/C2779473830","wikidata":"https://www.wikidata.org/wiki/Q1540899","display_name":"MEDLINE","level":2,"score":0.06678515672683716},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10791-025-09641-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10791-025-09641-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10791-025-09641-y.pdf","source":{"id":"https://openalex.org/S5407036663","display_name":"Discover Computing","issn_l":"2948-2992","issn":["2948-2992"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discover Computing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10791-025-09641-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10791-025-09641-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10791-025-09641-y.pdf","source":{"id":"https://openalex.org/S5407036663","display_name":"Discover Computing","issn_l":"2948-2992","issn":["2948-2992"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discover Computing","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4411095308.pdf","grobid_xml":"https://content.openalex.org/works/W4411095308.grobid-xml"},"referenced_works_count":84,"referenced_works":["https://openalex.org/W2566147219","https://openalex.org/W2604105233","https://openalex.org/W2619690290","https://openalex.org/W2751279089","https://openalex.org/W2754338111","https://openalex.org/W2756488506","https://openalex.org/W2760883461","https://openalex.org/W2785495041","https://openalex.org/W2790372823","https://openalex.org/W2791756253","https://openalex.org/W2799664252","https://openalex.org/W2803217416","https://openalex.org/W2883506667","https://openalex.org/W2887408574","https://openalex.org/W2892336822","https://openalex.org/W2897600072","https://openalex.org/W2899651170","https://openalex.org/W2904613432","https://openalex.org/W2921871306","https://openalex.org/W2923773322","https://openalex.org/W2930312809","https://openalex.org/W2943427313","https://openalex.org/W2955739827","https://openalex.org/W2959716986","https://openalex.org/W2963366538","https://openalex.org/W2981470791","https://openalex.org/W2982375055","https://openalex.org/W2995691346","https://openalex.org/W3012382091","https://openalex.org/W3013386139","https://openalex.org/W3027095011","https://openalex.org/W3035254752","https://openalex.org/W3035311645","https://openalex.org/W3036351926","https://openalex.org/W3042722309","https://openalex.org/W3042855339","https://openalex.org/W3082815760","https://openalex.org/W3093802222","https://openalex.org/W3094908868","https://openalex.org/W3112746081","https://openalex.org/W3118808706","https://openalex.org/W3119889024","https://openalex.org/W3136238191","https://openalex.org/W3150770307","https://openalex.org/W3157841691","https://openalex.org/W3168933781","https://openalex.org/W3168987488","https://openalex.org/W3174602001","https://openalex.org/W3186653824","https://openalex.org/W3200845768","https://openalex.org/W3201510831","https://openalex.org/W3217755988","https://openalex.org/W4205433433","https://openalex.org/W4206536706","https://openalex.org/W4224211479","https://openalex.org/W4242864473","https://openalex.org/W4283213314","https://openalex.org/W4283794109","https://openalex.org/W4285739250","https://openalex.org/W4292411761","https://openalex.org/W4296020854","https://openalex.org/W4297146604","https://openalex.org/W4307200651","https://openalex.org/W4311462070","https://openalex.org/W4313029187","https://openalex.org/W4319965142","https://openalex.org/W4362009315","https://openalex.org/W4362703719","https://openalex.org/W4366149293","https://openalex.org/W4377943494","https://openalex.org/W4382138812","https://openalex.org/W4383609895","https://openalex.org/W4386134148","https://openalex.org/W4386255686","https://openalex.org/W4387423597","https://openalex.org/W4389558582","https://openalex.org/W4391813440","https://openalex.org/W4396578638","https://openalex.org/W4396679692","https://openalex.org/W4399887369","https://openalex.org/W4400737507","https://openalex.org/W4402451295","https://openalex.org/W4403389808","https://openalex.org/W4404004386"],"related_works":["https://openalex.org/W4244478748","https://openalex.org/W3150465815","https://openalex.org/W4223488648","https://openalex.org/W2134969820","https://openalex.org/W2251605416","https://openalex.org/W1997222214","https://openalex.org/W2560439919","https://openalex.org/W4389340727","https://openalex.org/W2802581102","https://openalex.org/W4205786897"],"abstract_inverted_index":{"Intrusion":[0,107,257],"Detection":[1,108,258],"and":[2,23,47,78,109,162,190,245,252,274,286,312,327,350,359],"Prevention":[3,110],"Systems":[4,259],"(IDPS)":[5,112],"play":[6],"a":[7,91,114,130,325,343],"key":[8],"role":[9],"in":[10,63,85,117,125,175,300],"protecting":[11],"networks":[12],"by":[13,223],"keeping":[14],"an":[15],"eye":[16],"out":[17],"for":[18,34,142,230,270],"suspicious":[19],"activity,":[20],"spotting":[21],"threats,":[22],"taking":[24],"action":[25],"to":[26,41,76,104,182,204,263,323,354,356],"stop":[27],"them.":[28],"These":[29,289],"systems":[30,136,296],"were":[31],"originally":[32],"designed":[33],"traditional,":[35],"fixed":[36],"networks,":[37,178],"but":[38],"they":[39],"struggle":[40],"keep":[42],"up":[43,192],"with":[44,256,333],"the":[45,71,86,99,119,167,211,334],"fast-paced":[46],"constantly":[48,154],"changing":[49,155,335],"nature":[50,336],"of":[51,73,151,213,317,337,346],"cloud":[52,74,87,100,120,143,146,231,338,361],"computing":[53,56,88,197,232],"environments.":[54,233,339],"Cloud":[55,196],"has":[57,198,261],"revolutionized":[58],"technology,":[59],"bringing":[60],"many":[61,160],"innovations":[62],"how":[64],"organizations":[65],"operate.":[66],"Organizations":[67],"rely":[68],"heavily":[69],"on":[70,293],"use":[72],"storage":[75],"store":[77],"retrieve":[79],"their":[80],"sensitive":[81],"data.":[82],"Security":[83],"issues":[84],"environment":[89,101,121],"are":[90,139,320],"big":[92],"challenge":[93],"as,":[94],"despite":[95],"various":[96],"protection":[97],"measures,":[98],"is":[102,113,235,307],"vulnerable":[103],"security":[105,362],"threats.":[106],"System":[111],"significant":[115],"component":[116],"securing":[118],"against":[122],"emerging":[123],"threats":[124],"cyber-attacks.":[126],"This":[127,217,340],"paper":[128],"takes":[129],"close":[131],"look":[132],"at":[133],"intrusion":[134,214],"detection":[135,273],"(IDS)":[137,260],"that":[138,173,185,209,297,330],"specifically":[140],"built":[141],"computing.":[144,314],"The":[145,315],"brings":[147],"its":[148],"own":[149],"set":[150],"challenges":[152,279,290],"like":[153],"resources,":[156],"sharing":[157],"space":[158],"between":[159,187],"users,":[161],"limited":[163],"visibility":[164],"into":[165,238],"all":[166],"network":[168],"traffic.":[169],"Unlike":[170],"traditional":[171],"IDS":[172,180,329],"work":[174],"fixed,":[176],"local":[177],"cloud-based":[179],"have":[181],"handle":[183],"traffic":[184],"moves":[186],"virtual":[188],"machines":[189],"scale":[191],"or":[193,215],"down":[194],"quickly.":[195],"transformed":[199],"over":[200],"time,":[201],"improving":[202],"access":[203],"scalability":[205],"while":[206],"offering":[207],"vulnerabilities":[208],"increase":[210],"probability":[212],"attacks.":[216],"review":[218],"addresses":[219],"these":[220,318],"research":[221],"gaps":[222],"comprehensively":[224],"surveying":[225],"state-of-the-art":[226],"IDPS":[227,234,348],"techniques":[228],"tailored":[229],"further":[236],"classified":[237],"different":[239],"categories,":[240],"such":[241],"as":[242,267],"signature-based,":[243],"anomaly-based,":[244],"hybrid-based.":[246],"Recently,":[247],"combining":[248],"Machine":[249],"Learning":[250,254],"(ML)":[251],"Deep":[253],"(DL)":[255],"shown":[262],"be":[264],"very":[265],"effective,":[266],"it":[268],"allows":[269],"more":[271],"precise":[272],"large-scale":[275],"use.":[276],"However,":[277],"notable":[278],"include":[280],"small":[281],"dataset":[282],"sizes,":[283],"imbalanced":[284],"datasets,":[285],"high":[287],"expenses.":[288],"mainly":[291],"focus":[292],"creating":[294],"adaptive":[295],"identify":[298],"intrusions":[299],"real":[301],"time.":[302],"To":[303],"tackle":[304],"this,":[305],"attention":[306],"directed":[308],"towards":[309],"ensemble":[310],"learning":[311],"edge":[313],"outcomes":[316],"initiatives":[319],"being":[321],"used":[322],"create":[324],"strong":[326],"efficient":[328,360],"fits":[331],"well":[332],"survey":[341],"provides":[342],"comprehensive":[344],"analysis":[345],"current":[347],"methodologies":[349],"future":[351],"perspectives,":[352],"aiming":[353],"contribute":[355],"developing":[357],"robust":[358],"solutions.":[363]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-05T07:55:05.734416","created_date":"2025-10-10T00:00:00"}