{"id":"https://openalex.org/W2590222861","doi":"https://doi.org/10.1109/cns.2016.7860494","title":"Automated cross layer feature selection for effective intrusion detection in networked systems","display_name":"Automated cross layer feature selection for effective intrusion detection in networked systems","publication_year":2016,"publication_date":"2016-10-01","ids":{"openalex":"https://openalex.org/W2590222861","doi":"https://doi.org/10.1109/cns.2016.7860494","mag":"2590222861"},"language":"en","primary_location":{"id":"doi:10.1109/cns.2016.7860494","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2016.7860494","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069402162","display_name":"Azeem Aqil","orcid":null},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Azeem Aqil","raw_affiliation_strings":["UC Riverside"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081739245","display_name":"Ahmed Fathy Atya","orcid":null},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmed Fathy Atya","raw_affiliation_strings":["UC Riverside"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086268637","display_name":"Srikanth V. Krishnamurthy","orcid":"https://orcid.org/0000-0002-6533-4381"},"institutions":[{"id":"https://openalex.org/I103635307","display_name":"University of California, Riverside","ror":"https://ror.org/03nawhv43","country_code":"US","type":"education","lineage":["https://openalex.org/I103635307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Srikanth V. Krishnamurthy","raw_affiliation_strings":["UC Riverside"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Riverside","institution_ids":["https://openalex.org/I103635307"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000981358","display_name":"Paul Yu","orcid":"https://orcid.org/0000-0003-1577-3914"},"institutions":[{"id":"https://openalex.org/I166416128","display_name":"DEVCOM Army Research Laboratory","ror":"https://ror.org/011hc8f90","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I166416128","https://openalex.org/I2802705668","https://openalex.org/I4210154437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Paul Yu","raw_affiliation_strings":["U.S. Army Research Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"U.S. Army Research Laboratory","institution_ids":["https://openalex.org/I166416128"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113663310","display_name":"Ananthram Swami","orcid":null},"institutions":[{"id":"https://openalex.org/I166416128","display_name":"DEVCOM Army Research Laboratory","ror":"https://ror.org/011hc8f90","country_code":"US","type":"government","lineage":["https://openalex.org/I1304082316","https://openalex.org/I1330347796","https://openalex.org/I166416128","https://openalex.org/I2802705668","https://openalex.org/I4210154437"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ananthram Swami","raw_affiliation_strings":["U.S. Army Research Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"U.S. Army Research Laboratory","institution_ids":["https://openalex.org/I166416128"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037582591","display_name":"Jeff Rowe","orcid":null},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jeff Rowe","raw_affiliation_strings":["UC Davis"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Davis","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009965537","display_name":"Karl Levitt","orcid":"https://orcid.org/0000-0002-1464-2966"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Karl Levitt","raw_affiliation_strings":["UC Davis"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Davis","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044186254","display_name":"Alexander Poylisher","orcid":null},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alexander Poylisher","raw_affiliation_strings":["UC Davis"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Davis","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006514612","display_name":"Constantin Serban","orcid":"https://orcid.org/0009-0000-7259-9460"},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Constantin Serban","raw_affiliation_strings":["UC Davis"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Davis","institution_ids":["https://openalex.org/I84218800"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103911831","display_name":"Ritu Chadha","orcid":null},"institutions":[{"id":"https://openalex.org/I84218800","display_name":"University of California, Davis","ror":"https://ror.org/05rrcem69","country_code":"US","type":"education","lineage":["https://openalex.org/I84218800"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ritu Chadha","raw_affiliation_strings":["UC Davis"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UC Davis","institution_ids":["https://openalex.org/I84218800"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.20070364,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"270","last_page":"278"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12391","display_name":"Artificial Immune Systems Applications","score":0.993399977684021,"subfield":{"id":"https://openalex.org/subfields/2204","display_name":"Biomedical Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7123687863349915},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7027105689048767},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.6105904579162598},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.5349719524383545},{"id":"https://openalex.org/keywords/layer","display_name":"Layer (electronics)","score":0.5083803534507751},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.43728089332580566},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3058374226093292},{"id":"https://openalex.org/keywords/nanotechnology","display_name":"Nanotechnology","score":0.07210758328437805},{"id":"https://openalex.org/keywords/materials-science","display_name":"Materials science","score":0.06500348448753357}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7123687863349915},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7027105689048767},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.6105904579162598},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.5349719524383545},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.5083803534507751},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.43728089332580566},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3058374226093292},{"id":"https://openalex.org/C171250308","wikidata":"https://www.wikidata.org/wiki/Q11468","display_name":"Nanotechnology","level":1,"score":0.07210758328437805},{"id":"https://openalex.org/C192562407","wikidata":"https://www.wikidata.org/wiki/Q228736","display_name":"Materials science","level":0,"score":0.06500348448753357},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cns.2016.7860494","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns.2016.7860494","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.4300000071525574}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W1495061682","https://openalex.org/W1541288193","https://openalex.org/W1559956479","https://openalex.org/W1577117059","https://openalex.org/W1600834507","https://openalex.org/W1608531776","https://openalex.org/W1677315679","https://openalex.org/W2016070752","https://openalex.org/W2021308105","https://openalex.org/W2059648384","https://openalex.org/W2076758681","https://openalex.org/W2096081771","https://openalex.org/W2100594342","https://openalex.org/W2105779206","https://openalex.org/W2114834796","https://openalex.org/W2122646361","https://openalex.org/W2140836726","https://openalex.org/W2162466345","https://openalex.org/W2164641162","https://openalex.org/W2200019417","https://openalex.org/W2536534367","https://openalex.org/W4301347335","https://openalex.org/W6634531175","https://openalex.org/W6636374816"],"related_works":["https://openalex.org/W2357468538","https://openalex.org/W1577110157","https://openalex.org/W2355007334","https://openalex.org/W2390009783","https://openalex.org/W4254602698","https://openalex.org/W2394461323","https://openalex.org/W2349441905","https://openalex.org/W2361044160","https://openalex.org/W4386564352","https://openalex.org/W2952668426"],"abstract_inverted_index":{"Traditionally,":[0],"anomaly":[1],"detection":[2,163,177,208],"mechanisms":[3],"have":[4],"relied":[5],"on":[6],"the":[7,31,52,59,134,176,187,191,202,225],"inspection":[8],"of":[9,61,71,100,137,143,147,151,157,179,190,197,221,223],"certain":[10],"manually":[11],"(by":[12],"domain":[13],"experts)":[14],"chosen":[15,214],"features":[16,105,138,158,170,222],"in":[17,36,58,108,210],"order":[18],"to":[19,97,123,185,212],"determine":[20,98,124],"if":[21],"a":[22,69,141,155],"networked":[23],"system":[24,172],"is":[25,94],"under":[26],"attack":[27],"or":[28,46,57,104,218],"not.":[29],"Unfortunately,":[30],"approach,":[32],"while":[33],"somewhat":[34],"effective":[35],"flagging":[37],"known":[38],"attacks,":[39],"yields":[40,154],"either":[41],"low":[42],"true":[43],"positive":[44,49],"rates":[45,50],"high":[47],"false":[48],"when":[51],"attacks":[53,144],"are":[54,106],"mutated":[55],"slightly":[56],"presence":[60],"zero":[62],"day":[63],"attacks.":[64,198],"One":[65],"can":[66,130,204],"traditionally":[67],"gather":[68],"lot":[70],"data":[72],"at":[73],"different":[74],"layers":[75,173],"(packet":[76],"contents,":[77],"application":[78],"logs,":[79],"OS":[80],"behaviors,":[81],"etc.)":[82],"as":[83],"evidence":[84,102],"that":[85,159,201],"could":[86],"be":[87],"used":[88],"for":[89,139,194],"intrusion":[90,112],"detection.":[91,113],"However,":[92],"it":[93],"not":[95],"easy":[96],"which":[99],"these":[101],"vectors":[103],"useful":[107],"facilitating":[109],"highly":[110],"accurate":[111],"In":[114],"this":[115,166],"paper,":[116],"we":[117,167],"undertake":[118],"an":[119],"in-depth":[120],"experimental":[121],"study":[122],"whether":[125],"appropriately":[126],"trained":[127],"search":[128],"algorithms":[129,153,184,226],"help":[131],"us":[132],"find":[133,200],"right":[135],"set":[136,156,193],"detecting":[140],"class":[142],"(e.g.,":[145],"denial":[146],"service).":[148],"The":[149],"output":[150],"such":[152],"should":[160],"potentially":[161],"improve":[162],"accuracy.":[164],"Towards":[165],"monitor":[168],"365":[169],"across":[171],"and":[174],"compare":[175],"performance":[178],"3":[180],"popular":[181],"feature":[182,192],"selection":[183],"reduce":[186],"state":[188],"space":[189],"two":[195],"classes":[196],"We":[199],"approach":[203],"yield":[205],"significantly":[206],"improved":[207],"accuracy":[209],"comparison":[211],"statically":[213],"single":[215],"features,":[216],"sub":[217],"super":[219],"sets":[220],"what":[224],"yield.":[227]},"counts_by_year":[{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
