{"id":"https://openalex.org/W3112126031","doi":"https://doi.org/10.1109/csnet50428.2020.9265461","title":"Unsupervised Machine Learning Techniques for Network Intrusion Detection on Modern Data","display_name":"Unsupervised Machine Learning Techniques for Network Intrusion Detection on Modern Data","publication_year":2020,"publication_date":"2020-10-21","ids":{"openalex":"https://openalex.org/W3112126031","doi":"https://doi.org/10.1109/csnet50428.2020.9265461","mag":"3112126031"},"language":"en","primary_location":{"id":"doi:10.1109/csnet50428.2020.9265461","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csnet50428.2020.9265461","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 4th Cyber Security in Networking Conference (CSNet)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041516255","display_name":"Miel Verkerken","orcid":"https://orcid.org/0000-0002-1781-900X"},"institutions":[{"id":"https://openalex.org/I32597200","display_name":"Ghent University","ror":"https://ror.org/00cv9y106","country_code":"BE","type":"education","lineage":["https://openalex.org/I32597200"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Miel Verkerken","raw_affiliation_strings":["Ghent University - imec,IDLab,Department of Information Technology,Ghent,Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ghent University - imec,IDLab,Department of Information Technology,Ghent,Belgium","institution_ids":["https://openalex.org/I32597200"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062378693","display_name":"Laurens D\u2019hooge","orcid":"https://orcid.org/0000-0001-5086-6361"},"institutions":[{"id":"https://openalex.org/I32597200","display_name":"Ghent University","ror":"https://ror.org/00cv9y106","country_code":"BE","type":"education","lineage":["https://openalex.org/I32597200"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Laurens D'hooge","raw_affiliation_strings":["Ghent University - imec,IDLab,Department of Information Technology,Ghent,Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ghent University - imec,IDLab,Department of Information Technology,Ghent,Belgium","institution_ids":["https://openalex.org/I32597200"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5078209506","display_name":"Tim Wauters","orcid":"https://orcid.org/0000-0003-2618-3311"},"institutions":[{"id":"https://openalex.org/I32597200","display_name":"Ghent University","ror":"https://ror.org/00cv9y106","country_code":"BE","type":"education","lineage":["https://openalex.org/I32597200"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Tim Wauters","raw_affiliation_strings":["Ghent University - imec,IDLab,Department of Information Technology,Ghent,Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ghent University - imec,IDLab,Department of Information Technology,Ghent,Belgium","institution_ids":["https://openalex.org/I32597200"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061693660","display_name":"Bruno Volckaert","orcid":"https://orcid.org/0000-0003-0575-5894"},"institutions":[{"id":"https://openalex.org/I32597200","display_name":"Ghent University","ror":"https://ror.org/00cv9y106","country_code":"BE","type":"education","lineage":["https://openalex.org/I32597200"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Bruno Volckaert","raw_affiliation_strings":["Ghent University - imec,IDLab,Department of Information Technology,Ghent,Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ghent University - imec,IDLab,Department of Information Technology,Ghent,Belgium","institution_ids":["https://openalex.org/I32597200"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051784384","display_name":"Filip De Turck","orcid":"https://orcid.org/0000-0003-4824-1199"},"institutions":[{"id":"https://openalex.org/I32597200","display_name":"Ghent University","ror":"https://ror.org/00cv9y106","country_code":"BE","type":"education","lineage":["https://openalex.org/I32597200"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Filip De Turck","raw_affiliation_strings":["Ghent University - imec,IDLab,Department of Information Technology,Ghent,Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ghent University - imec,IDLab,Department of Information Technology,Ghent,Belgium","institution_ids":["https://openalex.org/I32597200"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.7552,"has_fulltext":false,"cited_by_count":45,"citation_normalized_percentile":{"value":0.9102423,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.779685378074646},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7233739495277405},{"id":"https://openalex.org/keywords/unsupervised-learning","display_name":"Unsupervised learning","score":0.626135528087616},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5670876502990723},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.48243841528892517}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.779685378074646},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7233739495277405},{"id":"https://openalex.org/C8038995","wikidata":"https://www.wikidata.org/wiki/Q1152135","display_name":"Unsupervised learning","level":2,"score":0.626135528087616},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5670876502990723},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.48243841528892517}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/csnet50428.2020.9265461","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csnet50428.2020.9265461","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 4th Cyber Security in Networking Conference (CSNet)","raw_type":"proceedings-article"},{"id":"pmh:oai:archive.ugent.be:8682348","is_oa":false,"landing_page_url":"http://hdl.handle.net/1854/LU-8682348","pdf_url":null,"source":{"id":"https://openalex.org/S4306400478","display_name":"Ghent University Academic Bibliography (Ghent University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I32597200","host_organization_name":"Ghent University","host_organization_lineage":["https://openalex.org/I32597200"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ISBN: 9780738142920","raw_type":"info:eu-repo/semantics/publishedVersion"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W1966809779","https://openalex.org/W1978845641","https://openalex.org/W2007087405","https://openalex.org/W2016647367","https://openalex.org/W2036350498","https://openalex.org/W2041855183","https://openalex.org/W2045517003","https://openalex.org/W2066832805","https://openalex.org/W2097998348","https://openalex.org/W2099940443","https://openalex.org/W2100215068","https://openalex.org/W2101234009","https://openalex.org/W2106411961","https://openalex.org/W2113207845","https://openalex.org/W2122301654","https://openalex.org/W2122646361","https://openalex.org/W2142889610","https://openalex.org/W2342408547","https://openalex.org/W2343828539","https://openalex.org/W2732560875","https://openalex.org/W2789828921","https://openalex.org/W2799152591","https://openalex.org/W2924689635","https://openalex.org/W2945660495","https://openalex.org/W2949676527","https://openalex.org/W2955155733","https://openalex.org/W3002583844","https://openalex.org/W3033213260","https://openalex.org/W3035311645","https://openalex.org/W3035510612","https://openalex.org/W3131541364","https://openalex.org/W6674385629","https://openalex.org/W6675021112","https://openalex.org/W6675354045","https://openalex.org/W6676179485","https://openalex.org/W6677088747","https://openalex.org/W6750692614","https://openalex.org/W6772974105","https://openalex.org/W6779011633"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W3046775127","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W3107602296","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347"],"abstract_inverted_index":{"The":[0,34,113],"rapid":[1],"growth":[2],"of":[3,8,18,65,80,107,123,135],"the":[4,69,102,121,126,130],"internet,":[5],"connecting":[6],"billions":[7],"people":[9],"and":[10,110,151],"businesses,":[11],"brings":[12],"with":[13],"it":[14],"an":[15,117,139],"increased":[16],"risk":[17],"misuse.":[19],"Handling":[20],"this":[21,59],"misuse":[22],"requires":[23],"adaptive":[24],"techniques":[25,46],"detecting":[26,49],"known":[27,50],"as":[28,30],"well":[29],"unknown,":[31],"zero-day,":[32],"attacks.":[33],"latter":[35],"proved":[36],"most":[37],"challenging":[38],"in":[39,105],"recent":[40],"studies,":[41],"where":[42],"supervised":[43],"machine":[44],"learning":[45,86],"excelled":[47],"at":[48],"attacks,":[51],"but":[52],"failed":[53],"to":[54,100],"recognize":[55],"unknown":[56],"patterns.":[57],"Therefore,":[58],"paper":[60],"focuses":[61],"on":[62,68],"anomaly-based":[63],"detection":[64],"malicious":[66],"behavior":[67],"network":[70],"by":[71,144],"using":[72],"flow-based":[73],"features.":[74],"Four":[75],"unsupervised":[76],"methods":[77],"are":[78],"evaluated":[79],"which":[81],"two":[82],"employ":[83],"a":[84],"self-supervised":[85],"approach.":[87],"A":[88],"realistic":[89],"modern":[90],"dataset,":[91],"CIC-IDS-2017,":[92],"containing":[93],"multiple":[94],"different":[95],"attack":[96],"types":[97],"is":[98],"used":[99],"evaluate":[101],"proposed":[103],"models":[104],"terms":[106],"classification":[108],"performance":[109],"computational":[111,141],"complexity.":[112],"results":[114],"show":[115],"that":[116],"autoencoder,":[118],"obtained":[119],"from":[120],"field":[122],"deep-learning,":[124],"yields":[125],"highest":[127],"area":[128],"under":[129],"Receiver":[131],"Operating":[132],"Characteristics":[133],"(AUROC)":[134],"0.978":[136],"while":[137],"maintaining":[138],"acceptable":[140],"complexity,":[142],"followed":[143],"one-class":[145],"support":[146],"vector":[147],"machine,":[148],"isolation":[149],"forest":[150],"principal":[152],"components":[153],"analysis.":[154]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":12},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}