{"id":"https://openalex.org/W4385668098","doi":"https://doi.org/10.1109/contel58387.2023.10198912","title":"Detecting Anomalies in Firewall Logs Using Artificially Generated Attacks","display_name":"Detecting Anomalies in Firewall Logs Using Artificially Generated Attacks","publication_year":2023,"publication_date":"2023-07-11","ids":{"openalex":"https://openalex.org/W4385668098","doi":"https://doi.org/10.1109/contel58387.2023.10198912"},"language":"en","primary_location":{"id":"doi:10.1109/contel58387.2023.10198912","is_oa":false,"landing_page_url":"https://doi.org/10.1109/contel58387.2023.10198912","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 17th International Conference on Telecommunications (ConTEL)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064558200","display_name":"Adrian Komadina","orcid":"https://orcid.org/0000-0003-1243-7149"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Adrian Komadina","raw_affiliation_strings":["University of Zagreb,Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing,Zagreb,Croatia","Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0000-0003-1243-7149","affiliations":[{"raw_affiliation_string":"University of Zagreb,Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing,Zagreb,Croatia","institution_ids":["https://openalex.org/I181343428"]},{"raw_affiliation_string":"Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103132847","display_name":"Ivan Kova\u010devi\u0107","orcid":"https://orcid.org/0000-0003-1090-9018"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Ivan Kova\u010devi\u0107","raw_affiliation_strings":["University of Zagreb,Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing,Zagreb,Croatia","Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0000-0003-1090-9018","affiliations":[{"raw_affiliation_string":"University of Zagreb,Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing,Zagreb,Croatia","institution_ids":["https://openalex.org/I181343428"]},{"raw_affiliation_string":"Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017512952","display_name":"Bruno \u0160tengl","orcid":"https://orcid.org/0009-0009-9785-2069"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Bruno \u0160tengl","raw_affiliation_strings":["University of Zagreb,Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing,Zagreb,Croatia","Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0009-0009-9785-2069","affiliations":[{"raw_affiliation_string":"University of Zagreb,Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing,Zagreb,Croatia","institution_ids":["https://openalex.org/I181343428"]},{"raw_affiliation_string":"Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5023734196","display_name":"Stjepan Gro\u0161","orcid":"https://orcid.org/0000-0001-6619-2859"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Stjepan Gro\u0161","raw_affiliation_strings":["University of Zagreb,Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing,Zagreb,Croatia","Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0000-0001-6619-2859","affiliations":[{"raw_affiliation_string":"University of Zagreb,Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing,Zagreb,Croatia","institution_ids":["https://openalex.org/I181343428"]},{"raw_affiliation_string":"Laboratory for Information Security and Privacy, Faculty of Electrical Engineering and Computing, University of Zagreb, Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I181343428"],"apc_list":null,"apc_paid":null,"fwci":2.9026,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.92149582,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8045766353607178},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6887058615684509},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6725642085075378},{"id":"https://openalex.org/keywords/unsupervised-learning","display_name":"Unsupervised learning","score":0.5556921362876892},{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.5547755360603333},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4382714331150055},{"id":"https://openalex.org/keywords/supervised-learning","display_name":"Supervised learning","score":0.43733274936676025},{"id":"https://openalex.org/keywords/feature-engineering","display_name":"Feature engineering","score":0.43715229630470276},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3275315761566162},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.20167285203933716},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.15680178999900818}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8045766353607178},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6887058615684509},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6725642085075378},{"id":"https://openalex.org/C8038995","wikidata":"https://www.wikidata.org/wiki/Q1152135","display_name":"Unsupervised learning","level":2,"score":0.5556921362876892},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.5547755360603333},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4382714331150055},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.43733274936676025},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.43715229630470276},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3275315761566162},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.20167285203933716},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.15680178999900818},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C104062141","wikidata":"https://www.wikidata.org/wiki/Q2601295","display_name":"Extremal black hole","level":3,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/contel58387.2023.10198912","is_oa":false,"landing_page_url":"https://doi.org/10.1109/contel58387.2023.10198912","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 17th International Conference on Telecommunications (ConTEL)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.44999998807907104,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W126266486","https://openalex.org/W187043655","https://openalex.org/W1242748811","https://openalex.org/W1516135399","https://openalex.org/W1530232915","https://openalex.org/W1576185228","https://openalex.org/W2007087405","https://openalex.org/W2019014808","https://openalex.org/W2043178675","https://openalex.org/W2046608104","https://openalex.org/W2049058890","https://openalex.org/W2056081083","https://openalex.org/W2069051541","https://openalex.org/W2092834372","https://openalex.org/W2105642232","https://openalex.org/W2113060550","https://openalex.org/W2158722884","https://openalex.org/W2263741877","https://openalex.org/W2296719434","https://openalex.org/W2336788611","https://openalex.org/W2585052423","https://openalex.org/W2766183090","https://openalex.org/W2795175906","https://openalex.org/W2797283471","https://openalex.org/W2911200746","https://openalex.org/W2914740624","https://openalex.org/W2940498460","https://openalex.org/W2942770187","https://openalex.org/W2952780781","https://openalex.org/W2958285686","https://openalex.org/W2966559104","https://openalex.org/W2989818618","https://openalex.org/W3082263548","https://openalex.org/W3092236832","https://openalex.org/W3111734087","https://openalex.org/W3128465814","https://openalex.org/W3171200908","https://openalex.org/W3195219267","https://openalex.org/W4224218212","https://openalex.org/W4226060502","https://openalex.org/W4254182148","https://openalex.org/W4368353239","https://openalex.org/W6676722156","https://openalex.org/W6703470281","https://openalex.org/W6749973653","https://openalex.org/W6770050038","https://openalex.org/W6784767544","https://openalex.org/W6810609903","https://openalex.org/W6852002333"],"related_works":["https://openalex.org/W4220926404","https://openalex.org/W3123344745","https://openalex.org/W3034267371","https://openalex.org/W3148060700","https://openalex.org/W3080681248","https://openalex.org/W4376646226","https://openalex.org/W4287685660","https://openalex.org/W3047177827","https://openalex.org/W2057778272","https://openalex.org/W4319302697"],"abstract_inverted_index":{"Detecting":[0],"anomalies":[1,64,152],"in":[2,57,69],"large":[3],"networks":[4],"is":[5],"often":[6,26],"a":[7,58,125],"difficult":[8,126],"task.":[9],"Nowadays,":[10],"many":[11],"works":[12],"employ":[13],"machine":[14,38],"learning":[15,39,78,99,122,158],"techniques":[16],"to":[17,128,155],"address":[18],"this":[19,24,42],"problem,":[20],"but":[21],"much":[22,169],"of":[23,76,84,97,114],"work":[25],"relies":[27],"on":[28,46,80,111],"synthetic":[29],"or":[30],"small":[31],"datasets":[32],"and":[33,91,160],"uses":[34],"only":[35],"some":[36],"specific":[37],"techniques.":[40],"In":[41],"research,":[43],"we":[44,117],"focus":[45],"analyzing":[47],"firewall":[48,144],"logs":[49],"obtained":[50],"from":[51],"an":[52],"industrial":[53],"control":[54],"network":[55],"used":[56],"production":[59],"environment":[60],"combined":[61],"with":[62,141],"generated":[63],"representing":[65],"real":[66],"attacker":[67],"steps":[68],"the":[70,74,95,112,120,142,147,150,161],"network.":[71],"We":[72],"compared":[73,101],"results":[75,96,113,162],"unsupervised":[77,121],"based":[79],"different":[81,104,107],"models,":[82],"subsets":[83],"attributes,":[85],"feature":[86],"construction":[87],"methods,":[88,90,159],"scaling":[89],"aggregation":[92,108],"levels,":[93],"while":[94],"supervised":[98,157],"were":[100],"by":[102],"using":[103,165],"classifiers":[105],"at":[106],"levels.":[109],"Based":[110],"our":[115,130],"experiments,":[116],"showed":[118,163],"that":[119,136,164],"method":[123],"had":[124],"task":[127],"detect":[129],"injected":[131,151],"anomalies,":[132],"which":[133],"shows":[134],"us":[135,154],"they":[137],"are":[138],"well":[139],"integrated":[140],"existing":[143],"logs.":[145],"On":[146],"other":[148],"hand,":[149],"allowed":[153],"use":[156],"these":[166],"methods":[167],"gave":[168],"better":[170],"results.":[171]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}