{"id":"https://openalex.org/W4205559658","doi":"https://doi.org/10.1109/access.2021.3139835","title":"Intrusion Detection Using Payload Embeddings","display_name":"Intrusion Detection Using Payload Embeddings","publication_year":2021,"publication_date":"2021-12-30","ids":{"openalex":"https://openalex.org/W4205559658","doi":"https://doi.org/10.1109/access.2021.3139835"},"language":"en","primary_location":{"id":"doi:10.1109/access.2021.3139835","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3139835","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09666913.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09666913.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5060080291","display_name":"Mehedi Hassan","orcid":"https://orcid.org/0000-0002-6285-8825"},"institutions":[{"id":"https://openalex.org/I79516672","display_name":"University of Louisiana at Lafayette","ror":"https://ror.org/01x8rc503","country_code":"US","type":"education","lineage":["https://openalex.org/I2799628689","https://openalex.org/I79516672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mehedi Hassan","raw_affiliation_strings":["School of Computing and Informatics, University of Louisiana at Lafayette, Lafayette, LA, USA"],"raw_orcid":"https://orcid.org/0000-0002-6285-8825","affiliations":[{"raw_affiliation_string":"School of Computing and Informatics, University of Louisiana at Lafayette, Lafayette, LA, USA","institution_ids":["https://openalex.org/I79516672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100694312","display_name":"Md. Enamul Haque","orcid":"https://orcid.org/0000-0002-0702-9688"},"institutions":[{"id":"https://openalex.org/I97018004","display_name":"Stanford University","ror":"https://ror.org/00f54p054","country_code":"US","type":"education","lineage":["https://openalex.org/I97018004"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Md Enamul Haque","raw_affiliation_strings":["School of Medicine, Stanford University, Stanford, CA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Medicine, Stanford University, Stanford, CA, USA","institution_ids":["https://openalex.org/I97018004"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078387637","display_name":"Mehmet Engin Tozal","orcid":"https://orcid.org/0000-0003-2157-2780"},"institutions":[{"id":"https://openalex.org/I79516672","display_name":"University of Louisiana at Lafayette","ror":"https://ror.org/01x8rc503","country_code":"US","type":"education","lineage":["https://openalex.org/I2799628689","https://openalex.org/I79516672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mehmet Engin Tozal","raw_affiliation_strings":["School of Computing and Informatics, University of Louisiana at Lafayette, Lafayette, LA, USA"],"raw_orcid":"https://orcid.org/0000-0003-2157-2780","affiliations":[{"raw_affiliation_string":"School of Computing and Informatics, University of Louisiana at Lafayette, Lafayette, LA, USA","institution_ids":["https://openalex.org/I79516672"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023699325","display_name":"Vijay V. Raghavan","orcid":"https://orcid.org/0000-0001-7224-7828"},"institutions":[{"id":"https://openalex.org/I79516672","display_name":"University of Louisiana at Lafayette","ror":"https://ror.org/01x8rc503","country_code":"US","type":"education","lineage":["https://openalex.org/I2799628689","https://openalex.org/I79516672"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vijay Raghavan","raw_affiliation_strings":["School of Computing and Informatics, University of Louisiana at Lafayette, Lafayette, LA, USA"],"raw_orcid":"https://orcid.org/0000-0001-7224-7828","affiliations":[{"raw_affiliation_string":"School of Computing and Informatics, University of Louisiana at Lafayette, Lafayette, LA, USA","institution_ids":["https://openalex.org/I79516672"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016702627","display_name":"Rajeev Agrawal","orcid":"https://orcid.org/0000-0002-5415-5230"},"institutions":[{"id":"https://openalex.org/I1306490931","display_name":"United States Army Corps of Engineers","ror":"https://ror.org/05w4e8v21","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1306490931","https://openalex.org/I1330347796"]},{"id":"https://openalex.org/I4210126846","display_name":"Information Technology Laboratory","ror":"https://ror.org/0440c3437","country_code":"US","type":"government","lineage":["https://openalex.org/I1321296531","https://openalex.org/I1343035065","https://openalex.org/I4210126846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rajeev Agrawal","raw_affiliation_strings":["Information Technology Laboratory, U.S. Army Corps of Engineers, Vicksburg, MS, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Technology Laboratory, U.S. Army Corps of Engineers, Vicksburg, MS, USA","institution_ids":["https://openalex.org/I1306490931","https://openalex.org/I4210126846"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":5.0649,"has_fulltext":true,"cited_by_count":54,"citation_normalized_percentile":{"value":0.95447814,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"10","issue":null,"first_page":"4015","last_page":"4030"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.9144593477249146},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7929337024688721},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.785117506980896},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.7494818568229675},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.7486293315887451},{"id":"https://openalex.org/keywords/notation","display_name":"Notation","score":0.512813150882721},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.506679117679596},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.5018558502197266},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4666310250759125},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.37094923853874207},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.326943039894104},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.30985987186431885},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.1297847032546997},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.12743529677391052},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.08907106518745422}],"concepts":[{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.9144593477249146},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7929337024688721},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.785117506980896},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.7494818568229675},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.7486293315887451},{"id":"https://openalex.org/C45357846","wikidata":"https://www.wikidata.org/wiki/Q2001982","display_name":"Notation","level":2,"score":0.512813150882721},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.506679117679596},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.5018558502197266},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4666310250759125},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.37094923853874207},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.326943039894104},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.30985987186431885},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.1297847032546997},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.12743529677391052},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.08907106518745422},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2021.3139835","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3139835","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09666913.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:ca84dbb3e80243499e5ab5575ce955fb","is_oa":true,"landing_page_url":"https://doaj.org/article/ca84dbb3e80243499e5ab5575ce955fb","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 10, Pp 4015-4030 (2022)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2021.3139835","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3139835","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/9668973/09666913.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4205559658.pdf","grobid_xml":"https://content.openalex.org/works/W4205559658.grobid-xml"},"referenced_works_count":49,"referenced_works":["https://openalex.org/W363934082","https://openalex.org/W1594536929","https://openalex.org/W1614298861","https://openalex.org/W1623006543","https://openalex.org/W1952056635","https://openalex.org/W1988918299","https://openalex.org/W1999427165","https://openalex.org/W2031163547","https://openalex.org/W2073089243","https://openalex.org/W2074255923","https://openalex.org/W2077488147","https://openalex.org/W2093331366","https://openalex.org/W2099452399","https://openalex.org/W2099940443","https://openalex.org/W2110890874","https://openalex.org/W2116065364","https://openalex.org/W2121035740","https://openalex.org/W2131744502","https://openalex.org/W2154376209","https://openalex.org/W2185583596","https://openalex.org/W2187089797","https://openalex.org/W2296509296","https://openalex.org/W2501244995","https://openalex.org/W2535968152","https://openalex.org/W2597472767","https://openalex.org/W2766849988","https://openalex.org/W2772317693","https://openalex.org/W2782614128","https://openalex.org/W2786515081","https://openalex.org/W2789828921","https://openalex.org/W2840169530","https://openalex.org/W2890507837","https://openalex.org/W2904360034","https://openalex.org/W2905236934","https://openalex.org/W2924689635","https://openalex.org/W2980576170","https://openalex.org/W2983109779","https://openalex.org/W3099708035","https://openalex.org/W4282975758","https://openalex.org/W4287810298","https://openalex.org/W4294170691","https://openalex.org/W6634531175","https://openalex.org/W6636510571","https://openalex.org/W6636749155","https://openalex.org/W6679775712","https://openalex.org/W6682691769","https://openalex.org/W6686446330","https://openalex.org/W6747435960","https://openalex.org/W6772517362"],"related_works":["https://openalex.org/W1535080110","https://openalex.org/W1574986946","https://openalex.org/W1497214516","https://openalex.org/W1971040605","https://openalex.org/W1523103140","https://openalex.org/W4293863310","https://openalex.org/W3160314615","https://openalex.org/W1488288477","https://openalex.org/W2171331105","https://openalex.org/W2144312996"],"abstract_inverted_index":{"Attacks":[0],"launched":[1],"over":[2,184],"the":[3,9,43,51,59,76,104,116,185,191],"Internet":[4],"often":[5],"degrade":[6],"or":[7,20,30,122],"disrupt":[8],"quality":[10],"of":[11,37,75,78,118,190],"online":[12],"services.":[13],"Various":[14],"Intrusion":[15],"Detection":[16],"Systems":[17],"(IDSs),":[18],"with":[19,103],"without":[21],"prevention":[22],"capabilities,":[23],"have":[24],"been":[25],"proposed":[26],"to":[27,46,87,142,168],"defend":[28],"networks":[29],"hosts":[31],"against":[32],"such":[33],"attacks.":[34],"While":[35],"most":[36,189],"these":[38],"IDSs":[39],"extract":[40],"features":[41],"from":[42],"packet":[44],"headers":[45],"detect":[47],"any":[48],"irregularities":[49],"in":[50],"network":[52,79,86],"traffic,":[53],"some":[54],"others":[55],"use":[56],"payloads":[57,77],"alongside":[58],"headers.":[60],"In":[61,124],"this":[62],"study,":[63],"we":[64,127,164],"propose":[65],"a":[66,83],"payload-based":[67],"intrusion":[68,139,173],"detection":[69,140,174],"scheme,":[70],"<monospace>PayloadEmbeddings</monospace>,":[71],"using":[72],"byte":[73],"embeddings":[74],"packets.":[80],"We":[81],"employ":[82],"shallow":[84],"neural":[85],"generate":[88],"vector":[89],"representations":[90],"for":[91,115],"bytes":[92],"and":[93,133,144,157,171],"their":[94],"corresponding":[95],"payloads.":[96],"Our":[97,148,176],"feature":[98],"extraction":[99],"technique":[100],"is":[101],"coupled":[102],"<inline-formula>":[105],"<tex-math":[106,111],"notation=\"LaTeX\">$k$":[107,112],"</tex-math></inline-formula>-Nearest":[108],"Neighbours":[109],"(<inline-formula>":[110],"</tex-math></inline-formula>NN)":[113],"algorithm":[114],"classification":[117],"packets":[119],"as":[120],"intrusive":[121],"non-intrusive.":[123],"our":[125,146,166],"experiments,":[126],"evaluated":[128],"34":[129],"publicly":[130],"available":[131],"datasets,":[132],"used":[134],"ten":[135],"distinct":[136],"payload-based,":[137],"labeled":[138],"datasets":[141],"train":[143],"evaluate":[145],"approach.":[147],"empirical":[149],"results":[150],"show":[151],"that":[152,179],"<monospace>PayloadEmbeddings</monospace>":[153,180],"reaches":[154],"between":[155],"75&#x0025;":[156],"99&#x0025;":[158],"accuracy":[159],"across":[160],"all":[161],"datasets.":[162,192],"Finally,":[163],"compare":[165],"approach":[167],"other":[169,186],"state-of-the-art":[170],"traditional":[172],"techniques.":[175],"findings":[177],"suggest":[178],"demonstrates":[181],"significant":[182],"advantages":[183],"techniques":[187],"on":[188]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":17},{"year":2023,"cited_by_count":13},{"year":2022,"cited_by_count":9}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}