{"id":"https://openalex.org/W4303022566","doi":"https://doi.org/10.1007/s10922-022-09691-3","title":"Cyber Threat Intelligence Sharing Scheme Based on Federated Learning for Network Intrusion Detection","display_name":"Cyber Threat Intelligence Sharing Scheme Based on Federated Learning for Network Intrusion Detection","publication_year":2022,"publication_date":"2022-10-07","ids":{"openalex":"https://openalex.org/W4303022566","doi":"https://doi.org/10.1007/s10922-022-09691-3"},"language":"en","primary_location":{"id":"doi:10.1007/s10922-022-09691-3","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10922-022-09691-3","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10922-022-09691-3.pdf","source":{"id":"https://openalex.org/S67072002","display_name":"Journal of Network and Systems Management","issn_l":"1064-7570","issn":["1064-7570","1573-7705"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Network and Systems Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10922-022-09691-3.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047926199","display_name":"Mohanad Sarhan","orcid":"https://orcid.org/0000-0001-8597-6042"},"institutions":[{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Mohanad Sarhan","raw_affiliation_strings":["University of Queensland, Brisbane, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Queensland, Brisbane, Australia","institution_ids":["https://openalex.org/I165143802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016369735","display_name":"Siamak Layeghy","orcid":"https://orcid.org/0000-0002-1229-2368"},"institutions":[{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Siamak Layeghy","raw_affiliation_strings":["University of Queensland, Brisbane, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Queensland, Brisbane, Australia","institution_ids":["https://openalex.org/I165143802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089327837","display_name":"Nour Moustafa","orcid":"https://orcid.org/0000-0001-6127-9349"},"institutions":[{"id":"https://openalex.org/I188329596","display_name":"University of Canberra","ror":"https://ror.org/04s1nv328","country_code":"AU","type":"education","lineage":["https://openalex.org/I188329596"]},{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Nour Moustafa","raw_affiliation_strings":["University of New South Wales, Canberra, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New South Wales, Canberra, Australia","institution_ids":["https://openalex.org/I188329596","https://openalex.org/I31746571"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078468070","display_name":"Marius Portmann","orcid":"https://orcid.org/0000-0003-1852-3961"},"institutions":[{"id":"https://openalex.org/I165143802","display_name":"The University of Queensland","ror":"https://ror.org/00rqy9422","country_code":"AU","type":"education","lineage":["https://openalex.org/I165143802"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Marius Portmann","raw_affiliation_strings":["University of Queensland, Brisbane, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Queensland, Brisbane, Australia","institution_ids":["https://openalex.org/I165143802"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5047926199"],"corresponding_institution_ids":["https://openalex.org/I165143802"],"apc_list":{"value":2790,"currency":"USD","value_usd":2790},"apc_paid":{"value":2790,"currency":"USD","value_usd":2790},"fwci":15.0012,"has_fulltext":true,"cited_by_count":152,"citation_normalized_percentile":{"value":0.99475959,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"31","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8958040475845337},{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.7100237011909485},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.651765763759613},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.6103141903877258},{"id":"https://openalex.org/keywords/data-sharing","display_name":"Data sharing","score":0.5464559197425842},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5415530204772949},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4959894120693207},{"id":"https://openalex.org/keywords/federated-learning","display_name":"Federated learning","score":0.44999682903289795},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.44755932688713074},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3803443908691406},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.32309889793395996},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2782866954803467}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8958040475845337},{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.7100237011909485},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.651765763759613},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.6103141903877258},{"id":"https://openalex.org/C2779965156","wikidata":"https://www.wikidata.org/wiki/Q5227350","display_name":"Data sharing","level":3,"score":0.5464559197425842},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5415530204772949},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4959894120693207},{"id":"https://openalex.org/C2992525071","wikidata":"https://www.wikidata.org/wiki/Q50818671","display_name":"Federated learning","level":2,"score":0.44999682903289795},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.44755932688713074},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3803443908691406},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.32309889793395996},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2782866954803467},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10922-022-09691-3","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10922-022-09691-3","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10922-022-09691-3.pdf","source":{"id":"https://openalex.org/S67072002","display_name":"Journal of Network and Systems Management","issn_l":"1064-7570","issn":["1064-7570","1573-7705"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Network and Systems Management","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10922-022-09691-3","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10922-022-09691-3","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10922-022-09691-3.pdf","source":{"id":"https://openalex.org/S67072002","display_name":"Journal of Network and Systems Management","issn_l":"1064-7570","issn":["1064-7570","1573-7705"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Network and Systems Management","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320984","display_name":"University of Queensland","ror":"https://ror.org/00rqy9422"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4303022566.pdf","grobid_xml":"https://content.openalex.org/works/W4303022566.grobid-xml"},"referenced_works_count":35,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W1742813727","https://openalex.org/W1901616594","https://openalex.org/W1966809779","https://openalex.org/W2004360894","https://openalex.org/W2013640190","https://openalex.org/W2101109743","https://openalex.org/W2111779554","https://openalex.org/W2142889610","https://openalex.org/W2148066263","https://openalex.org/W2296509296","https://openalex.org/W2470240102","https://openalex.org/W2533698187","https://openalex.org/W2566425973","https://openalex.org/W2774980074","https://openalex.org/W2903872466","https://openalex.org/W2922628727","https://openalex.org/W2963748489","https://openalex.org/W2970606380","https://openalex.org/W2971615586","https://openalex.org/W2999074226","https://openalex.org/W3000716014","https://openalex.org/W3008856552","https://openalex.org/W3040552057","https://openalex.org/W3082551002","https://openalex.org/W3102359135","https://openalex.org/W3127161477","https://openalex.org/W3157680283","https://openalex.org/W3163848339","https://openalex.org/W3185987447","https://openalex.org/W3205070445","https://openalex.org/W4285127639","https://openalex.org/W4297846671","https://openalex.org/W4400134761","https://openalex.org/W6600140940"],"related_works":["https://openalex.org/W2134539183","https://openalex.org/W2359209543","https://openalex.org/W2370801098","https://openalex.org/W2380475535","https://openalex.org/W2377112249","https://openalex.org/W4320027669","https://openalex.org/W3199479007","https://openalex.org/W2611702147","https://openalex.org/W4289655086","https://openalex.org/W4320017490"],"abstract_inverted_index":{"Abstract":[0],"The":[1,105,237],"uses":[2],"of":[3,11,66,70,97,119,132,141,150,166,173,244],"machine":[4],"learning":[5,144],"(ML)":[6],"technologies":[7],"in":[8,91,123,191,208],"the":[9,29,64,92,117,130,139,148,164,171,180,209,240,245,267],"detection":[10,43,103],"network":[12,47,101,120],"attacks":[13],"have":[14],"been":[15,36,183],"proven":[16],"to":[17,39,60,84,88,127,146],"be":[18],"effective":[19],"when":[20],"designed":[21,184],"and":[22,54,63,95,138,185,198,226,242,258],"evaluated":[23,186],"using":[24,45,187],"data":[25,48,121,136,175,218,271],"samples":[26,49,219],"originating":[27,50,262],"from":[28,51,163,263],"same":[30],"organisational":[31],"network.":[32],"However,":[33],"it":[34],"has":[35,182],"very":[37],"challenging":[38],"design":[40],"an":[41],"ML-based":[42,100],"system":[44],"heterogeneous":[46],"different":[52],"sources":[53,137],"organisations.":[55,156],"This":[56],"is":[57,235],"mainly":[58],"due":[59],"privacy":[61,172],"concerns":[62],"lack":[65],"a":[67,77,98,124,142,158,192,212,227,250],"universal":[68,251],"format":[69,126,194],"datasets.":[71],"In":[72,177,200],"this":[73,178],"paper,":[74,179],"we":[75],"propose":[76],"collaborative":[78],"cyber":[79],"threat":[80,106,233],"intelligence":[81,107,165,234],"sharing":[82,108,151],"scheme":[83,109],"allow":[85,128],"multiple":[86,264],"organisations":[87,168,225,265],"join":[89],"forces":[90],"design,":[93],"training,":[94],"evaluation":[96,210],"robust":[99],"intrusion":[102],"system.":[104],"utilises":[110],"two":[111,188,202],"critical":[112],"aspects":[113],"for":[114,129,269],"its":[115,174],"application;":[116],"availability":[118],"traffic":[122,260],"common":[125,204],"extraction":[131],"meaningful":[133],"patterns":[134],"across":[135],"adoption":[140],"federated":[143],"mechanism":[145],"avoid":[147],"necessity":[149],"sensitive":[152],"users\u2019":[153],"information":[154],"between":[155],"As":[157],"result,":[159],"each":[160],"organisation":[161],"benefits":[162],"other":[167,203,224],"while":[169],"maintaining":[170],"internally.":[176],"framework":[181,247],"key":[189],"datasets":[190],"NetFlow":[193],"known":[195],"as":[196],"NF-UNSW-NB15-v2":[197],"NF-BoT-IoT-v2.":[199],"addition,":[201],"scenarios":[205],"are":[206,220],"considered":[207],"process;":[211],"centralised":[213],"training":[214,229],"method":[215,230],"where":[216,231],"local":[217],"directly":[221],"shared":[222],"with":[223],"localised":[228],"no":[232],"shared.":[236],"results":[238],"demonstrate":[239],"efficiency":[241],"effectiveness":[243],"proposed":[246],"by":[248],"designing":[249],"ML":[252],"model":[253],"effectively":[254],"classifying":[255],"various":[256],"benign":[257],"intrusive":[259],"types":[261],"without":[266],"need":[268],"inter-organisational":[270],"exchange.":[272]},"counts_by_year":[{"year":2026,"cited_by_count":20},{"year":2025,"cited_by_count":70},{"year":2024,"cited_by_count":42},{"year":2023,"cited_by_count":20}],"updated_date":"2026-08-01T09:00:35.917206","created_date":"2022-10-07T00:00:00"}