{"id":"https://openalex.org/W2941898360","doi":"https://doi.org/10.1109/access.2019.2912115","title":"Network Anomaly Intrusion Detection Using a Nonparametric Bayesian Approach and Feature Selection","display_name":"Network Anomaly Intrusion Detection Using a Nonparametric Bayesian Approach and Feature Selection","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2941898360","doi":"https://doi.org/10.1109/access.2019.2912115","mag":"2941898360"},"language":"en","primary_location":{"id":"doi:10.1109/access.2019.2912115","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2912115","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08693712.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08693712.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003710841","display_name":"Wajdi Alhakami","orcid":"https://orcid.org/0000-0003-1230-9470"},"institutions":[{"id":"https://openalex.org/I179331831","display_name":"Taif University","ror":"https://ror.org/014g1a453","country_code":"SA","type":"education","lineage":["https://openalex.org/I179331831"]}],"countries":["SA"],"is_corresponding":true,"raw_author_name":"Wajdi Alhakami","raw_affiliation_strings":["College of Computers and Information Technology, Taif University, Taif, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computers and Information Technology, Taif University, Taif, Saudi Arabia","institution_ids":["https://openalex.org/I179331831"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010706593","display_name":"Abdullah Alharbi","orcid":"https://orcid.org/0000-0001-8617-1430"},"institutions":[{"id":"https://openalex.org/I179331831","display_name":"Taif University","ror":"https://ror.org/014g1a453","country_code":"SA","type":"education","lineage":["https://openalex.org/I179331831"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Abdullah ALharbi","raw_affiliation_strings":["College of Computers and Information Technology, Taif University, Taif, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computers and Information Technology, Taif University, Taif, Saudi Arabia","institution_ids":["https://openalex.org/I179331831"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024097894","display_name":"Sami Bourouis","orcid":"https://orcid.org/0000-0002-6638-7039"},"institutions":[{"id":"https://openalex.org/I108714496","display_name":"Tunis University","ror":"https://ror.org/02q1spa57","country_code":"TN","type":"education","lineage":["https://openalex.org/I108714496"]},{"id":"https://openalex.org/I63596082","display_name":"Tunis El Manar University","ror":"https://ror.org/029cgt552","country_code":"TN","type":"education","lineage":["https://openalex.org/I63596082"]}],"countries":["TN"],"is_corresponding":false,"raw_author_name":"Sami Bourouis","raw_affiliation_strings":["LR-SITI Laboratoire Signal Image et Technologies de l\u2019Information, Universit\u00e9 de Tunis El Manar, Tunis, Tunisia","LR-SITI Laboratoire Signal Image et Technologies de l'Information, Universit\u00e9 de Tunis El Manar, Tunis, Tunisia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"LR-SITI Laboratoire Signal Image et Technologies de l\u2019Information, Universit\u00e9 de Tunis El Manar, Tunis, Tunisia","institution_ids":["https://openalex.org/I108714496","https://openalex.org/I63596082"]},{"raw_affiliation_string":"LR-SITI Laboratoire Signal Image et Technologies de l'Information, Universit\u00e9 de Tunis El Manar, Tunis, Tunisia","institution_ids":["https://openalex.org/I108714496","https://openalex.org/I63596082"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021988081","display_name":"Roobaea Alroobaea","orcid":"https://orcid.org/0000-0003-1585-2962"},"institutions":[{"id":"https://openalex.org/I179331831","display_name":"Taif University","ror":"https://ror.org/014g1a453","country_code":"SA","type":"education","lineage":["https://openalex.org/I179331831"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Roobaea Alroobaea","raw_affiliation_strings":["College of Computers and Information Technology, Taif University, Taif, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computers and Information Technology, Taif University, Taif, Saudi Arabia","institution_ids":["https://openalex.org/I179331831"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090600716","display_name":"Nizar Bouguila","orcid":"https://orcid.org/0000-0001-7224-7940"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Nizar Bouguila","raw_affiliation_strings":["Concordia Institute for Information Systems Engineering (CIISE), Concordia University, Montreal, QC, Canada"],"raw_orcid":"https://orcid.org/0000-0001-7224-7940","affiliations":[{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering (CIISE), Concordia University, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5003710841"],"corresponding_institution_ids":["https://openalex.org/I179331831"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":15.0524,"has_fulltext":true,"cited_by_count":132,"citation_normalized_percentile":{"value":0.99216114,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"7","issue":null,"first_page":"52181","last_page":"52190"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.7248054146766663},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7079115509986877},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6640868782997131},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6435810923576355},{"id":"https://openalex.org/keywords/nonparametric-statistics","display_name":"Nonparametric statistics","score":0.5952193737030029},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5350689888000488},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5057477951049805},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.505652666091919},{"id":"https://openalex.org/keywords/bayesian-probability","display_name":"Bayesian probability","score":0.4846401810646057},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.47444236278533936},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4592795670032501},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.44622063636779785},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.33738282322883606},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.18830269575119019},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.14152514934539795}],"concepts":[{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.7248054146766663},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7079115509986877},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6640868782997131},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6435810923576355},{"id":"https://openalex.org/C102366305","wikidata":"https://www.wikidata.org/wiki/Q1097688","display_name":"Nonparametric statistics","level":2,"score":0.5952193737030029},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5350689888000488},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5057477951049805},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.505652666091919},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.4846401810646057},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.47444236278533936},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4592795670032501},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.44622063636779785},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33738282322883606},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.18830269575119019},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.14152514934539795},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2019.2912115","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2912115","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08693712.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:bb53d16d8d5e48a19826bc3c1c2e4086","is_oa":true,"landing_page_url":"https://doaj.org/article/bb53d16d8d5e48a19826bc3c1c2e4086","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 7, Pp 52181-52190 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2019.2912115","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2912115","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08693712.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Sustainable cities and communities","id":"https://metadata.un.org/sdg/11","score":0.7200000286102295}],"awards":[{"id":"https://openalex.org/G4791304237","display_name":null,"funder_award_id":"1-439-6115","funder_id":"https://openalex.org/F4320323722","funder_display_name":"Taif University"}],"funders":[{"id":"https://openalex.org/F4320323722","display_name":"Taif University","ror":"https://ror.org/014g1a453"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2941898360.pdf","grobid_xml":"https://content.openalex.org/works/W2941898360.grobid-xml"},"referenced_works_count":46,"referenced_works":["https://openalex.org/W144252458","https://openalex.org/W433644524","https://openalex.org/W1556024794","https://openalex.org/W1918591755","https://openalex.org/W1966809779","https://openalex.org/W1969082358","https://openalex.org/W1972525513","https://openalex.org/W1975973384","https://openalex.org/W2008224380","https://openalex.org/W2009058336","https://openalex.org/W2031163547","https://openalex.org/W2035893370","https://openalex.org/W2054765427","https://openalex.org/W2071897576","https://openalex.org/W2080972498","https://openalex.org/W2099940443","https://openalex.org/W2100200066","https://openalex.org/W2107192713","https://openalex.org/W2120000263","https://openalex.org/W2120636621","https://openalex.org/W2123619513","https://openalex.org/W2137810704","https://openalex.org/W2139242328","https://openalex.org/W2139669429","https://openalex.org/W2142889610","https://openalex.org/W2146082061","https://openalex.org/W2153157120","https://openalex.org/W2278186031","https://openalex.org/W2342408547","https://openalex.org/W2425246132","https://openalex.org/W2488678869","https://openalex.org/W2527999453","https://openalex.org/W2590373591","https://openalex.org/W2756940441","https://openalex.org/W2793631173","https://openalex.org/W2804552401","https://openalex.org/W2804941162","https://openalex.org/W2810076684","https://openalex.org/W2888818931","https://openalex.org/W2903662607","https://openalex.org/W2913356243","https://openalex.org/W2914207527","https://openalex.org/W4231975640","https://openalex.org/W6633310491","https://openalex.org/W6678007500","https://openalex.org/W6680365729"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3120251014"],"abstract_inverted_index":{"Anomaly-based":[0],"intrusion":[1,87],"detection":[2,88,111],"systems":[3,15,31],"(IDSs)":[4],"have":[5],"been":[6],"deployed":[7],"to":[8,13,108,137,178,187,212,216,222],"monitor":[9],"network":[10,103],"activity":[11],"and":[12,16,48,73,83,102,105,116,143,163,210,218,231,239],"protect":[14],"the":[17,62,67,75,78,84,97,156,159,189,196,199,205,208,232,254],"Internet":[18],"of":[19,39,61,69,77,86,96,100,130,158,191,201,207,234,256],"Things":[20],"(IoT)":[21],"devices":[22],"from":[23],"attacks":[24],"(or":[25,119],"intrusions).":[26],"The":[27,58,128,241,250],"problem":[28],"with":[29],"these":[30],"is":[32],"that":[33],"they":[34,49],"generate":[35],"a":[36,55,110,123,166],"huge":[37],"amount":[38],"inappropriate":[40],"false":[41,64],"alarms":[42,65],"whenever":[43],"abnormal":[44],"activities":[45,160],"are":[46,50,236],"detected":[47],"not":[51,185],"too":[52],"flexible":[53],"for":[54,113,140,145,170,204],"complex":[56],"environment.":[57],"high-level":[59],"rate":[60],"generated":[63],"reduces":[66],"performance":[68],"IDS":[70],"against":[71],"cyber-attacks":[72],"makes":[74],"tasks":[76],"security":[79,104],"analyst":[80],"particularly":[81],"difficult":[82],"management":[85],"process":[89],"computationally":[90],"expensive.":[91],"We":[92],"study":[93],"here":[94],"one":[95],"challenging":[98],"aspects":[99],"computer":[101],"we":[106,154],"propose":[107],"build":[109],"model":[112],"both":[114],"known":[115],"unknown":[117],"intrusions":[118],"anomaly":[120],"detection)":[121],"via":[122,198],"novel":[124],"nonparametric":[125],"Bayesian":[126],"model.":[127],"design":[129],"our":[131,152,182,257],"framework":[132],"can":[133],"be":[134,138],"extended":[135],"easily":[136],"adequate":[139],"IoT":[141],"technology":[142],"notably":[144],"intelligent":[146],"smart":[147],"city":[148],"web-based":[149],"applications.":[150],"In":[151,220],"method,":[153],"learn":[155],"patterns":[157],"(both":[161],"normal":[162],"anomalous)":[164],"through":[165],"Bayesian-based":[167],"MCMC":[168],"inference":[169],"infinite":[171],"bounded":[172],"generalized":[173],"Gaussian":[174],"mixture":[175],"models.":[176],"Contrary":[177],"classic":[179],"clustering":[180,225],"methods,":[181],"approach":[183,243,258],"does":[184],"need":[186],"specify":[188],"number":[190,233],"clusters,":[192],"takes":[193],"into":[194],"consideration":[195],"uncertainty":[197],"introduction":[200],"prior":[202],"knowledge":[203],"parameters":[206],"model,":[209],"permits":[211],"solve":[213],"problems":[214],"related":[215],"over-":[217],"under-fitting.":[219],"order":[221],"get":[223],"better":[224],"performance,":[226],"feature":[227],"weights,":[228],"model\u2019s":[229],"parameters,":[230],"clusters":[235],"estimated":[237],"simultaneously":[238],"automatically.":[240],"developed":[242],"was":[244],"evaluated":[245],"using":[246],"popular":[247],"data":[248],"sets.":[249],"obtained":[251],"results":[252],"demonstrate":[253],"efficiency":[255],"in":[259],"detecting":[260],"various":[261],"attacks.":[262]},"counts_by_year":[{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":20},{"year":2023,"cited_by_count":20},{"year":2022,"cited_by_count":31},{"year":2021,"cited_by_count":25},{"year":2020,"cited_by_count":18},{"year":2019,"cited_by_count":7}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2025-10-10T00:00:00"}