{"id":"https://openalex.org/W3038112596","doi":"https://doi.org/10.1109/access.2020.3004699","title":"CBFS: A Clustering-Based Feature Selection Mechanism for Network Anomaly Detection","display_name":"CBFS: A Clustering-Based Feature Selection Mechanism for Network Anomaly Detection","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3038112596","doi":"https://doi.org/10.1109/access.2020.3004699","mag":"3038112596"},"language":"en","primary_location":{"id":"doi:10.1109/access.2020.3004699","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2020.3004699","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/09123904.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/09123904.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040861218","display_name":"Jiewen Mao","orcid":"https://orcid.org/0000-0002-7533-7885"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jiewen Mao","raw_affiliation_strings":["School of Computer Science and Technology, East China Normal University, Shanghai, China"],"raw_orcid":"https://orcid.org/0000-0002-7533-7885","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109933687","display_name":"Yongquan Hu","orcid":null},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yongquan Hu","raw_affiliation_strings":["School of Computer Science and Technology, East China Normal University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103244554","display_name":"Dong Jiang","orcid":"https://orcid.org/0000-0001-5833-241X"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dong Jiang","raw_affiliation_strings":["School of Computer Science and Technology, East China Normal University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042163232","display_name":"Tongquan Wei","orcid":"https://orcid.org/0000-0002-7421-1711"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tongquan Wei","raw_affiliation_strings":["School of Computer Science and Technology, East China Normal University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051550601","display_name":"Fuke Shen","orcid":null},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fuke Shen","raw_affiliation_strings":["School of Computer Science and Technology, East China Normal University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5040861218"],"corresponding_institution_ids":["https://openalex.org/I66867065"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":1.9432,"has_fulltext":true,"cited_by_count":16,"citation_normalized_percentile":{"value":0.8703964,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"8","issue":null,"first_page":"116216","last_page":"116225"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.7485601902008057},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6918323040008545},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.6567447185516357},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5506085157394409},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.5457682609558105},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5417109727859497},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.524577796459198},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5172722935676575},{"id":"https://openalex.org/keywords/feature-vector","display_name":"Feature vector","score":0.5120161175727844},{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.49375447630882263},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.4911622703075409}],"concepts":[{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.7485601902008057},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6918323040008545},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.6567447185516357},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5506085157394409},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.5457682609558105},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5417109727859497},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.524577796459198},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5172722935676575},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.5120161175727844},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.49375447630882263},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.4911622703075409},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2020.3004699","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2020.3004699","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/09123904.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:465fc0081ac34463a28b0d9caf3733a7","is_oa":true,"landing_page_url":"https://doaj.org/article/465fc0081ac34463a28b0d9caf3733a7","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 8, Pp 116216-116225 (2020)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2020.3004699","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2020.3004699","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/09123904.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3038112596.pdf","grobid_xml":"https://content.openalex.org/works/W3038112596.grobid-xml"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W33196642","https://openalex.org/W56793145","https://openalex.org/W273955616","https://openalex.org/W1196375415","https://openalex.org/W1678356000","https://openalex.org/W1977366836","https://openalex.org/W1980945904","https://openalex.org/W1995875735","https://openalex.org/W2071251600","https://openalex.org/W2076758681","https://openalex.org/W2089468765","https://openalex.org/W2099940443","https://openalex.org/W2101234009","https://openalex.org/W2125055259","https://openalex.org/W2143426320","https://openalex.org/W2156758690","https://openalex.org/W2165250079","https://openalex.org/W2167101736","https://openalex.org/W2235005688","https://openalex.org/W2248387459","https://openalex.org/W2277561952","https://openalex.org/W2296509296","https://openalex.org/W2346331195","https://openalex.org/W2608839702","https://openalex.org/W2789654058","https://openalex.org/W2789828921","https://openalex.org/W2791315675","https://openalex.org/W2898978532","https://openalex.org/W2903452648","https://openalex.org/W2920086614","https://openalex.org/W3099514962","https://openalex.org/W6610017368","https://openalex.org/W6691661739","https://openalex.org/W6756409578"],"related_works":["https://openalex.org/W4238897586","https://openalex.org/W435179959","https://openalex.org/W2619091065","https://openalex.org/W2059640416","https://openalex.org/W1490753184","https://openalex.org/W2284465472","https://openalex.org/W2291782699","https://openalex.org/W1993948687","https://openalex.org/W2011676020","https://openalex.org/W2000169967"],"abstract_inverted_index":{"Network":[0],"traffic":[1,134],"flows":[2,135],"contain":[3],"a":[4,27,84],"large":[5],"number":[6,106],"of":[7,17,53,80,100,107,112,128,165,171],"correlated":[8],"and":[9,30,51,76,97,169],"redundant":[10,40],"features":[11,41,101,108,129],"that":[12,131,142],"significantly":[13],"degrade":[14],"the":[15,49,64,78,94,105,110,116,121,125,132],"performance":[16],"data-driven":[18],"network":[19,43,55],"anomaly":[20,56],"detection.":[21,57],"In":[22],"this":[23],"paper,":[24],"we":[25],"propose":[26],"novel":[28],"clustering":[29,113],"ranking-based":[31],"feature":[32,67,71,86,151,162],"selection":[33],"scheme,":[34],"termed":[35],"as":[36,83,175],"CBFS,":[37],"to":[38,102,124,167,173,177],"reduce":[39],"in":[42,149],"traffic,":[44],"which":[45],"can":[46,160],"greatly":[47],"improve":[48],"efficiency":[50],"accuracy":[52],"feature-based":[54],"Our":[58],"proposed":[59,89,117,144,157],"CBFS":[60,90,118,145,158],"scheme":[61,91,119,146,159],"first":[62],"calculates":[63],"distance":[65],"between":[66],"vectors,":[68],"merges":[69],"these":[70],"vectors":[72],"into":[73],"different":[74,154],"clusters,":[75],"selects":[77],"center":[79],"each":[81],"cluster":[82],"representative":[85],"vector.":[87],"The":[88,138,156],"then":[92],"integrates":[93],"information":[95],"gain":[96,98],"rate":[99],"further":[103],"streamline":[104],"on":[109],"basis":[111],"generation.":[114],"Finally,":[115],"applies":[120],"decision-tree-based":[122],"classifier":[123],"generated":[126],"subset":[127],"so":[130],"abnormal":[133],"are":[136],"detected.":[137],"experimental":[139],"results":[140],"show":[141],"our":[143],"is":[147],"effective":[148],"reducing":[150],"dimensions":[152],"across":[153],"datasets.":[155],"achieve":[161],"reduction":[163],"rates":[164],"20%":[166],"70%,":[168],"cost-performance":[170],"up":[172],"70%":[174],"compared":[176],"benchmarking":[178],"methods.":[179]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":4},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1}],"updated_date":"2026-05-06T08:25:59.206177","created_date":"2025-10-10T00:00:00"}