{"id":"https://openalex.org/W3158835355","doi":"https://doi.org/10.1109/ciss50987.2021.9400241","title":"Deep Learning-Based Anomaly Detection in LAN from Raw Network Traffic Measurement","display_name":"Deep Learning-Based Anomaly Detection in LAN from Raw Network Traffic Measurement","publication_year":2021,"publication_date":"2021-03-24","ids":{"openalex":"https://openalex.org/W3158835355","doi":"https://doi.org/10.1109/ciss50987.2021.9400241","mag":"3158835355"},"language":"en","primary_location":{"id":"doi:10.1109/ciss50987.2021.9400241","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ciss50987.2021.9400241","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 55th Annual Conference on Information Sciences and Systems (CISS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041151881","display_name":"Yuwei Sun","orcid":"https://orcid.org/0000-0001-7315-8034"},"institutions":[{"id":"https://openalex.org/I74801974","display_name":"The University of Tokyo","ror":"https://ror.org/057zh3y96","country_code":"JP","type":"education","lineage":["https://openalex.org/I74801974"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Yuwei Sun","raw_affiliation_strings":["Graduate School of Information Science and Technology, The University of Tokyo, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of Information Science and Technology, The University of Tokyo, Tokyo, Japan","institution_ids":["https://openalex.org/I74801974"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045456657","display_name":"Hideya Ochiai","orcid":"https://orcid.org/0000-0002-4568-6726"},"institutions":[{"id":"https://openalex.org/I74801974","display_name":"The University of Tokyo","ror":"https://ror.org/057zh3y96","country_code":"JP","type":"education","lineage":["https://openalex.org/I74801974"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Hideya Ochiai","raw_affiliation_strings":["Graduate School of Information Science and Technology, The University of Tokyo, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of Information Science and Technology, The University of Tokyo, Tokyo, Japan","institution_ids":["https://openalex.org/I74801974"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5052106822","display_name":"Hiroshi Esaki","orcid":"https://orcid.org/0000-0001-5657-9216"},"institutions":[{"id":"https://openalex.org/I74801974","display_name":"The University of Tokyo","ror":"https://ror.org/057zh3y96","country_code":"JP","type":"education","lineage":["https://openalex.org/I74801974"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Hiroshi Esaki","raw_affiliation_strings":["Graduate School of Information Science and Technology, The University of Tokyo, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Graduate School of Information Science and Technology, The University of Tokyo, Tokyo, Japan","institution_ids":["https://openalex.org/I74801974"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I74801974"],"apc_list":null,"apc_paid":null,"fwci":2.1704,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.87229525,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7469630241394043},{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.6847856640815735},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6595550775527954},{"id":"https://openalex.org/keywords/raw-data","display_name":"Raw data","score":0.6364830732345581},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5721732974052429},{"id":"https://openalex.org/keywords/flooding","display_name":"Flooding (psychology)","score":0.5697315335273743},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.5327100157737732},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.49939417839050293},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.44787225127220154},{"id":"https://openalex.org/keywords/data-set","display_name":"Data set","score":0.4436863362789154},{"id":"https://openalex.org/keywords/network-monitoring","display_name":"Network monitoring","score":0.4434872269630432},{"id":"https://openalex.org/keywords/scheme","display_name":"Scheme (mathematics)","score":0.42010048031806946},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.4108530282974243},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.35379332304000854},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1790315806865692}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7469630241394043},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.6847856640815735},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6595550775527954},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.6364830732345581},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5721732974052429},{"id":"https://openalex.org/C186594467","wikidata":"https://www.wikidata.org/wiki/Q1429176","display_name":"Flooding (psychology)","level":2,"score":0.5697315335273743},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.5327100157737732},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.49939417839050293},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44787225127220154},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.4436863362789154},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.4434872269630432},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.42010048031806946},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4108530282974243},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.35379332304000854},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1790315806865692},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ciss50987.2021.9400241","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ciss50987.2021.9400241","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 55th Annual Conference on Information Sciences and Systems (CISS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W1893133781","https://openalex.org/W1966809779","https://openalex.org/W2016258134","https://openalex.org/W2076758681","https://openalex.org/W2147066793","https://openalex.org/W2155316900","https://openalex.org/W2342408547","https://openalex.org/W2597347390","https://openalex.org/W3009850146","https://openalex.org/W3090327961"],"related_works":["https://openalex.org/W2789663798","https://openalex.org/W2375896275","https://openalex.org/W2166943775","https://openalex.org/W2158007046","https://openalex.org/W2775236000","https://openalex.org/W2071426633","https://openalex.org/W2349754162","https://openalex.org/W1903420481","https://openalex.org/W4253323281","https://openalex.org/W3190796327"],"abstract_inverted_index":{"The":[0],"digitalization":[1],"occurring":[2],"in":[3,22,40,72],"various":[4],"industries":[5],"is":[6],"bringing":[7],"more":[8],"information":[9],"transmitted":[10],"through":[11],"networks.":[12],"More":[13],"resilient":[14],"and":[15,48,91,121,157],"efficient":[16],"network":[17,27,45,62,100],"traffic":[18,46,63,101],"monitoring":[19],"systems":[20],"are":[21],"high":[23],"demand":[24],"to":[25,55,97],"safeguard":[26],"flows.":[28],"In":[29],"this":[30],"article,":[31],"we":[32,95,137],"presented":[33],"a":[34,69,77,127,132,139,149,158],"combined":[35],"approach":[36],"of":[37,58,79,134,143,151,160],"anomaly":[38,104],"detection":[39],"LAN":[41,73],"based":[42,125],"on":[43,126],"raw":[44,99,106],"observation":[47],"measurement,":[49],"the":[50,86,116,123],"collected":[51],"data":[52,107],"being":[53],"converted":[54],"regulated":[56],"chunks":[57],"480":[59],"bits.":[60],"A":[61],"dataset":[64],"including":[65],"multi-type":[66],"anomalies":[67],"from":[68,105],"honeypot":[70],"device":[71],"was":[74],"employed,":[75],"with":[76,88],"total":[78],"two":[80],"weeks'":[81],"data.":[82],"By":[83],"further":[84],"integrating":[85],"representation":[87],"supervised":[89],"learning":[90],"knowledge-based":[92],"labeling":[93],"methods,":[94],"aim":[96],"classify":[98],"thus":[102],"detecting":[103,146,154,163],"measurement":[108],"without":[109],"using":[110],"manually":[111],"crafted":[112],"features.":[113],"We":[114],"conducted":[115],"model":[117],"training":[118],"against":[119,131],"accuracy":[120],"evaluated":[122],"scheme":[124],"separated":[128],"validation":[129,140],"set":[130],"metric":[133],"precision.":[135],"Finally,":[136],"achieved":[138],"precision":[141],"score":[142,150,159],"0.980":[144],"for":[145,153,162],"ARP":[147],"flooding,":[148],"0.801":[152],"malicious":[155],"SMB,":[156],"0.815":[161],"TCP":[164],"SYN":[165],"flooding":[166],"respectively.":[167]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}