{"id":"https://openalex.org/W2975370684","doi":"https://doi.org/10.1109/access.2019.2943249","title":"An Empirical Evaluation of Deep Learning for Network Anomaly Detection","display_name":"An Empirical Evaluation of Deep Learning for Network Anomaly Detection","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2975370684","doi":"https://doi.org/10.1109/access.2019.2943249","mag":"2975370684"},"language":"en","primary_location":{"id":"doi:10.1109/access.2019.2943249","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2943249","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08846674.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08846674.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009512062","display_name":"Ritesh K. Malaiya","orcid":"https://orcid.org/0000-0002-1300-7768"},"institutions":[{"id":"https://openalex.org/I206651237","display_name":"East Texas A&M University","ror":"https://ror.org/01red3556","country_code":"US","type":"education","lineage":["https://openalex.org/I206651237"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ritesh K. Malaiya","raw_affiliation_strings":["Computer Science Department, Texas A&M University-Commerce, Commerce, TX, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department, Texas A&M University-Commerce, Commerce, TX, USA","institution_ids":["https://openalex.org/I206651237"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042608888","display_name":"Donghwoon Kwon","orcid":"https://orcid.org/0000-0001-7048-3579"},"institutions":[{"id":"https://openalex.org/I192972912","display_name":"Rockford University","ror":"https://ror.org/05vd6ad22","country_code":"US","type":"education","lineage":["https://openalex.org/I192972912"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Donghwoon Kwon","raw_affiliation_strings":["Department of Math, CSCI, and Physics, Rockford University, Rockford, IL, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Math, CSCI, and Physics, Rockford University, Rockford, IL, USA","institution_ids":["https://openalex.org/I192972912"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112052924","display_name":"Sang C. Suh","orcid":null},"institutions":[{"id":"https://openalex.org/I206651237","display_name":"East Texas A&M University","ror":"https://ror.org/01red3556","country_code":"US","type":"education","lineage":["https://openalex.org/I206651237"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sang C. Suh","raw_affiliation_strings":["Computer Science Department, Texas A&M University-Commerce, Commerce, TX, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department, Texas A&M University-Commerce, Commerce, TX, USA","institution_ids":["https://openalex.org/I206651237"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100753445","display_name":"Hyunjoo Kim","orcid":"https://orcid.org/0000-0002-6716-7740"},"institutions":[{"id":"https://openalex.org/I142401562","display_name":"Electronics and Telecommunications Research Institute","ror":"https://ror.org/03ysstz10","country_code":"KR","type":"facility","lineage":["https://openalex.org/I142401562","https://openalex.org/I2801339556","https://openalex.org/I4210144908","https://openalex.org/I4387152098"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Hyunjoo Kim","raw_affiliation_strings":["Information Security Research Division, ETRI, Daejeon, South Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Security Research Division, ETRI, Daejeon, South Korea","institution_ids":["https://openalex.org/I142401562"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084546292","display_name":"Ikkyun Kim","orcid":"https://orcid.org/0000-0001-8915-3270"},"institutions":[{"id":"https://openalex.org/I142401562","display_name":"Electronics and Telecommunications Research Institute","ror":"https://ror.org/03ysstz10","country_code":"KR","type":"facility","lineage":["https://openalex.org/I142401562","https://openalex.org/I2801339556","https://openalex.org/I4210144908","https://openalex.org/I4387152098"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Ikkyun Kim","raw_affiliation_strings":["Information Security Research Division, ETRI, Daejeon, South Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Security Research Division, ETRI, Daejeon, South Korea","institution_ids":["https://openalex.org/I142401562"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101877231","display_name":"Jinoh Kim","orcid":"https://orcid.org/0000-0002-9835-1866"},"institutions":[{"id":"https://openalex.org/I206651237","display_name":"East Texas A&M University","ror":"https://ror.org/01red3556","country_code":"US","type":"education","lineage":["https://openalex.org/I206651237"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jinoh Kim","raw_affiliation_strings":["Computer Science Department, Texas A&M University-Commerce, Commerce, TX, USA"],"raw_orcid":"https://orcid.org/0000-0002-9835-1866","affiliations":[{"raw_affiliation_string":"Computer Science Department, Texas A&M University-Commerce, Commerce, TX, USA","institution_ids":["https://openalex.org/I206651237"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":7.996,"has_fulltext":true,"cited_by_count":87,"citation_normalized_percentile":{"value":0.97770808,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"7","issue":null,"first_page":"140806","last_page":"140817"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.8459532260894775},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8260205984115601},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.755534827709198},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.7255151271820068},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6430044770240784},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5728259086608887},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.5181540250778198},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.44676434993743896},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38632136583328247},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3774920403957367}],"concepts":[{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.8459532260894775},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8260205984115601},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.755534827709198},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7255151271820068},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6430044770240784},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5728259086608887},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.5181540250778198},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.44676434993743896},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38632136583328247},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3774920403957367},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2019.2943249","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2943249","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08846674.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:cec41745ee18433ab25ae0edb7e04a93","is_oa":true,"landing_page_url":"https://doaj.org/article/cec41745ee18433ab25ae0edb7e04a93","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 7, Pp 140806-140817 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2019.2943249","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2019.2943249","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8600701/08846674.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3528774675","display_name":null,"funder_award_id":"2016-0-00078","funder_id":"https://openalex.org/F4320335489","funder_display_name":"Institute for Information and Communications Technology Promotion"},{"id":"https://openalex.org/G4765404679","display_name":null,"funder_award_id":"2016-0-00078","funder_id":"https://openalex.org/F4320322030","funder_display_name":"Ministry of Science, ICT and Future Planning"}],"funders":[{"id":"https://openalex.org/F4320322030","display_name":"Ministry of Science, ICT and Future Planning","ror":"https://ror.org/032e49973"},{"id":"https://openalex.org/F4320335489","display_name":"Institute for Information and Communications Technology Promotion","ror":"https://ror.org/01g0hqq23"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2975370684.pdf","grobid_xml":"https://content.openalex.org/works/W2975370684.grobid-xml"},"referenced_works_count":50,"referenced_works":["https://openalex.org/W1913855765","https://openalex.org/W1959608418","https://openalex.org/W1972980389","https://openalex.org/W1997415712","https://openalex.org/W2020240663","https://openalex.org/W2021347322","https://openalex.org/W2026453187","https://openalex.org/W2027968571","https://openalex.org/W2031163547","https://openalex.org/W2040333627","https://openalex.org/W2099940443","https://openalex.org/W2107432340","https://openalex.org/W2118023920","https://openalex.org/W2122646361","https://openalex.org/W2130942839","https://openalex.org/W2133564696","https://openalex.org/W2157331557","https://openalex.org/W2172166488","https://openalex.org/W2223640994","https://openalex.org/W2225156818","https://openalex.org/W2296509296","https://openalex.org/W2531239968","https://openalex.org/W2531448500","https://openalex.org/W2554518797","https://openalex.org/W2560162835","https://openalex.org/W2756489700","https://openalex.org/W2762776925","https://openalex.org/W2766315530","https://openalex.org/W2789828921","https://openalex.org/W2885478531","https://openalex.org/W2902455138","https://openalex.org/W2919115771","https://openalex.org/W2951305674","https://openalex.org/W2952956474","https://openalex.org/W2962829655","https://openalex.org/W2963842982","https://openalex.org/W2982514609","https://openalex.org/W3153872861","https://openalex.org/W4205947740","https://openalex.org/W6640963894","https://openalex.org/W6679434410","https://openalex.org/W6679436768","https://openalex.org/W6685145238","https://openalex.org/W6685405536","https://openalex.org/W6729216784","https://openalex.org/W6729786518","https://openalex.org/W6755443475","https://openalex.org/W6756753118","https://openalex.org/W6769794509","https://openalex.org/W7016021835"],"related_works":["https://openalex.org/W3186512740","https://openalex.org/W2669956259","https://openalex.org/W4249005693","https://openalex.org/W3194885736","https://openalex.org/W4363671829","https://openalex.org/W4392946183","https://openalex.org/W3088732000","https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258"],"abstract_inverted_index":{"Deep":[0],"learning":[1,59,75,127],"has":[2],"been":[3],"widely":[4],"studied":[5],"in":[6,157],"many":[7],"technical":[8],"domains":[9],"such":[10],"as":[11],"image":[12],"analysis":[13],"and":[14,25,64,72,87],"speech":[15],"recognition,":[16],"with":[17,23,104,119,137],"its":[18],"benefits":[19],"that":[20],"effectively":[21],"deal":[22],"complex":[24],"high-dimensional":[26],"data.":[27],"Our":[28,107],"preliminary":[29],"experiments":[30],"show":[31],"a":[32,97],"high":[33],"degree":[34],"of":[35,52,100,113,146],"non-linearity":[36],"from":[37,152],"the":[38,50,92,101,111,120,125,131,153,158],"network":[39,54,116,150],"connection":[40],"data,":[41],"which":[42],"explains":[43],"why":[44],"it":[45],"is":[46,139],"hard":[47],"to":[48,124,148],"improve":[49],"performance":[51,122],"identifying":[53],"anomalies":[55,151],"by":[56],"using":[57],"conventional":[58,126],"methods":[60],"(e.g.,":[61],"Adaboosting,":[62],"SVM,":[63],"Random":[65],"Forest).":[66],"In":[67,129],"this":[68],"study,":[69],"we":[70,95],"design":[71],"examine":[73],"deep":[74,114],"models":[76],"constructed":[77],"based":[78,134],"on":[79,135],"Fully":[80],"Connected":[81],"Networks":[82],"(FCNs),":[83],"Variational":[84],"AutoEncoder":[85],"(VAE),":[86],"Sequence-to-Sequence":[88],"(Seq2Seq)":[89],"structures.":[90],"For":[91],"extensive":[93],"evaluation,":[94],"employ":[96],"broad":[98],"range":[99],"public":[102],"datasets":[103,155],"unique":[105],"characteristics.":[106],"experimental":[108],"results":[109],"confirm":[110],"feasibility":[112],"learning-based":[115],"anomaly":[117],"detection,":[118],"improved":[121],"compared":[123],"techniques.":[128],"particular,":[130],"detection":[132],"model":[133],"Seq2Seq":[136],"LSTM":[138],"highly":[140],"promising,":[141],"consistently":[142],"yielding":[143],"over":[144],"99%":[145],"accuracy":[147],"identify":[149],"entire":[154],"employed":[156],"evaluation.":[159]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":17},{"year":2020,"cited_by_count":13},{"year":2019,"cited_by_count":6},{"year":2018,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}