{"id":"https://openalex.org/W4391944556","doi":"https://doi.org/10.1109/access.2024.3367004","title":"A Systematic Literature Review on Host-Based Intrusion Detection Systems","display_name":"A Systematic Literature Review on Host-Based Intrusion Detection Systems","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4391944556","doi":"https://doi.org/10.1109/access.2024.3367004"},"language":"en","primary_location":{"id":"doi:10.1109/access.2024.3367004","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3367004","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"review","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2024.3367004","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5051548126","display_name":"Hami Sat\u0131lm\u0131\u015f","orcid":"https://orcid.org/0000-0002-6611-7549"},"institutions":[{"id":"https://openalex.org/I227306068","display_name":"Ondokuz May\u0131s University","ror":"https://ror.org/028k5qw24","country_code":"TR","type":"education","lineage":["https://openalex.org/I227306068"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Hami Satilmi\u015f","raw_affiliation_strings":["Department of Computer Engineering, Ondokuz Mayıs University, Samsun, Turkey"],"raw_orcid":"https://orcid.org/0000-0002-6611-7549","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Ondokuz Mayıs University, Samsun, Turkey","institution_ids":["https://openalex.org/I227306068"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039513308","display_name":"Sedat Akleylek","orcid":"https://orcid.org/0000-0001-7005-6489"},"institutions":[{"id":"https://openalex.org/I4210121333","display_name":"Istinye University","ror":"https://ror.org/03081nz23","country_code":"TR","type":"education","lineage":["https://openalex.org/I4210121333"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Sedat Akleylek","raw_affiliation_strings":["Department of Computer Engineering, İstinye University, Istanbul, Turkey"],"raw_orcid":"https://orcid.org/0000-0001-7005-6489","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, İstinye University, Istanbul, Turkey","institution_ids":["https://openalex.org/I4210121333"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5114296943","display_name":"Zaliha Y\u00fcce Tok","orcid":"https://orcid.org/0000-0002-4145-0994"},"institutions":[{"id":"https://openalex.org/I56303344","display_name":"Aselsan (Turkey)","ror":"https://ror.org/04knh8e66","country_code":"TR","type":"company","lineage":["https://openalex.org/I56303344"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Zaliha Y\u00fcce Tok","raw_affiliation_strings":["ASELSAN, Ankara, Turkey"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ASELSAN, Ankara, Turkey","institution_ids":["https://openalex.org/I56303344"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":9.3019,"has_fulltext":false,"cited_by_count":94,"citation_normalized_percentile":{"value":0.98823529,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"12","issue":null,"first_page":"27237","last_page":"27266"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7214038968086243},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.7179142832756042},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6337102651596069},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3041210174560547},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.07412955164909363}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7214038968086243},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.7179142832756042},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6337102651596069},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3041210174560547},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.07412955164909363},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2024.3367004","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3367004","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:72805f5916474587bf7d4a7f0811fb9e","is_oa":true,"landing_page_url":"https://doaj.org/article/72805f5916474587bf7d4a7f0811fb9e","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 12, Pp 27237-27266 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2024.3367004","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3367004","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2151066379","display_name":null,"funder_award_id":"5239902","funder_id":"https://openalex.org/F4320322626","funder_display_name":"T\u00fcrkiye Bilimsel ve Teknolojik Ara\u015ft\u0131rma Kurumu"}],"funders":[{"id":"https://openalex.org/F4320322626","display_name":"T\u00fcrkiye Bilimsel ve Teknolojik Ara\u015ft\u0131rma Kurumu","ror":"https://ror.org/04w9kkr77"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":74,"referenced_works":["https://openalex.org/W433644524","https://openalex.org/W1883667914","https://openalex.org/W1981738628","https://openalex.org/W2008224380","https://openalex.org/W2026258420","https://openalex.org/W2031163547","https://openalex.org/W2099940443","https://openalex.org/W2133590498","https://openalex.org/W2136520403","https://openalex.org/W2153843135","https://openalex.org/W2342408547","https://openalex.org/W2551087083","https://openalex.org/W2590373591","https://openalex.org/W2613480438","https://openalex.org/W2782735691","https://openalex.org/W2789654058","https://openalex.org/W2789828921","https://openalex.org/W2801256139","https://openalex.org/W2885245002","https://openalex.org/W2914521857","https://openalex.org/W2926701059","https://openalex.org/W2951105308","https://openalex.org/W2958285686","https://openalex.org/W2963748489","https://openalex.org/W2964593576","https://openalex.org/W2986887468","https://openalex.org/W2996814446","https://openalex.org/W3010323679","https://openalex.org/W3014260086","https://openalex.org/W3022604549","https://openalex.org/W3033213260","https://openalex.org/W3092977967","https://openalex.org/W3107607987","https://openalex.org/W3108630703","https://openalex.org/W3120973779","https://openalex.org/W3147751175","https://openalex.org/W3154196099","https://openalex.org/W3157814027","https://openalex.org/W3159364646","https://openalex.org/W3161576650","https://openalex.org/W3162956350","https://openalex.org/W3164999323","https://openalex.org/W3165569404","https://openalex.org/W3174223893","https://openalex.org/W3186172578","https://openalex.org/W3193335766","https://openalex.org/W3215802769","https://openalex.org/W4206038856","https://openalex.org/W4210756680","https://openalex.org/W4220693827","https://openalex.org/W4226060502","https://openalex.org/W4232546416","https://openalex.org/W4237805297","https://openalex.org/W4252337780","https://openalex.org/W4280535449","https://openalex.org/W4281295043","https://openalex.org/W4293546648","https://openalex.org/W4306827119","https://openalex.org/W4306931429","https://openalex.org/W4309637071","https://openalex.org/W4311703141","https://openalex.org/W4313591247","https://openalex.org/W4366548666","https://openalex.org/W4375951735","https://openalex.org/W4377022569","https://openalex.org/W4377142552","https://openalex.org/W4381510813","https://openalex.org/W4385740179","https://openalex.org/W4387394709","https://openalex.org/W4388453755","https://openalex.org/W6607494380","https://openalex.org/W6729739840","https://openalex.org/W6927331436","https://openalex.org/W7039235811"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"With":[0],"the":[1,8,47,122,145,153],"advancements":[2],"in":[3,126],"computer":[4],"networks":[5],"and":[6,13,35,55,98,116,134,137,159],"systems,":[7],"number":[9],"of":[10],"security":[11],"vulnerabilities":[12,18],"cyber":[14,33],"attacks":[15,34],"targeting/using":[16],"these":[17,132],"continues":[19],"to":[20,31,78,85,164],"increase.":[21],"Consequently,":[22],"various":[23,108],"intrusion":[24,51,57],"detection":[25,52,58],"systems":[26],"(IDS)":[27],"have":[28],"been":[29],"developed":[30],"detect":[32],"ensure":[36],"information":[37],"security.":[38],"IDSs":[39,86],"are":[40,68,100,139,150,166],"categorized":[41],"into":[42,91],"two":[43],"classes":[44],"based":[45,112],"on":[46,72,113],"data":[48],"sources:":[49],"Network-based":[50],"system":[53,59],"(NIDS)":[54],"host-based":[56],"(HIDS).":[60],"In":[61,141],"this":[62],"systematic":[63],"literature":[64],"review":[65],"(SLR),":[66],"studies":[67,94,128,133],"examined":[69],"that":[70,87],"focus":[71],"HIDS":[73],"or":[74],"propose":[75],"methods":[76],"applicable":[77],"HIDS,":[79],"as":[80,82],"well":[81],"those":[83],"related":[84,163],"can":[88],"be":[89],"converted":[90],"HIDSs.":[92],"The":[93],"published":[95],"between":[96],"2020":[97],"2023":[99],"collected":[101,123],"from":[102],"widely":[103],"used":[104],"academic":[105],"databases":[106],"through":[107],"query":[109],"statements.":[110],"Filtering":[111],"specific":[114],"selection":[115],"elimination":[117],"criteria":[118],"is":[119],"undergone":[120],"by":[121],"studies,":[124,146],"resulting":[125],"21":[127],"for":[129,157],"examination.":[130],"Subsequently,":[131],"their":[135],"advantages":[136],"disadvantages":[138],"discussed.":[140,167],"addition,":[142],"while":[143],"examining":[144],"five":[147],"research":[148,161],"questions":[149],"addressed.":[151],"Finally,":[152],"defects,":[154],"potential":[155],"areas":[156],"improvement,":[158],"future":[160],"directions":[162],"HIDSs":[165]},"counts_by_year":[{"year":2026,"cited_by_count":28},{"year":2025,"cited_by_count":47},{"year":2024,"cited_by_count":19}],"updated_date":"2026-08-19T15:00:24.278416","created_date":"2025-10-10T00:00:00"}