{"id":"https://openalex.org/W3125641641","doi":"https://doi.org/10.1109/globecom42002.2020.9322187","title":"Griffin: An Ensemble of AutoEncoders for Anomaly Traffic Detection in SDN","display_name":"Griffin: An Ensemble of AutoEncoders for Anomaly Traffic Detection in SDN","publication_year":2020,"publication_date":"2020-12-01","ids":{"openalex":"https://openalex.org/W3125641641","doi":"https://doi.org/10.1109/globecom42002.2020.9322187","mag":"3125641641"},"language":"en","primary_location":{"id":"doi:10.1109/globecom42002.2020.9322187","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom42002.2020.9322187","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2020 - 2020 IEEE Global Communications Conference","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://ira.lib.polyu.edu.hk/bitstream/10397/105502/1/Gao_Griffin_Ensemble_Autoencoders.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071697357","display_name":"Liyan Yang","orcid":"https://orcid.org/0000-0003-0630-944X"},"institutions":[{"id":"https://openalex.org/I4210155350","display_name":"Purple Mountain Laboratories","ror":"https://ror.org/04zcbk583","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210155350"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liyan Yang","raw_affiliation_strings":["Purple Mountain Laboratories"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purple Mountain Laboratories","institution_ids":["https://openalex.org/I4210155350"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081876978","display_name":"Yubo Song","orcid":"https://orcid.org/0000-0002-1347-6126"},"institutions":[{"id":"https://openalex.org/I4210155350","display_name":"Purple Mountain Laboratories","ror":"https://ror.org/04zcbk583","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210155350"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yubo Song","raw_affiliation_strings":["Purple Mountain Laboratories"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purple Mountain Laboratories","institution_ids":["https://openalex.org/I4210155350"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076028438","display_name":"Shang Gao","orcid":"https://orcid.org/0000-0003-2692-057X"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Shang Gao","raw_affiliation_strings":["The Hong Kong Polytechnic University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100365935","display_name":"Bin Xiao","orcid":"https://orcid.org/0000-0003-4223-8220"},"institutions":[{"id":"https://openalex.org/I14243506","display_name":"Hong Kong Polytechnic University","ror":"https://ror.org/0030zas98","country_code":"HK","type":"education","lineage":["https://openalex.org/I14243506"]}],"countries":["HK"],"is_corresponding":false,"raw_author_name":"Bin Xiao","raw_affiliation_strings":["The Hong Kong Polytechnic University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Hong Kong Polytechnic University","institution_ids":["https://openalex.org/I14243506"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075678549","display_name":"Aiqun Hu","orcid":"https://orcid.org/0000-0002-0398-4899"},"institutions":[{"id":"https://openalex.org/I4210155350","display_name":"Purple Mountain Laboratories","ror":"https://ror.org/04zcbk583","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210155350"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Aiqun Hu","raw_affiliation_strings":["Purple Mountain Laboratories"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purple Mountain Laboratories","institution_ids":["https://openalex.org/I4210155350"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":47,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/griffin","display_name":"Griffin","score":0.8520030975341797},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7799009084701538},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6533286571502686},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.640022873878479},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6063582301139832},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.48562780022621155},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.483849436044693},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.45483914017677307},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.44114089012145996},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4215741455554962},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.39779722690582275},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.16094431281089783}],"concepts":[{"id":"https://openalex.org/C2775969163","wikidata":"https://www.wikidata.org/wiki/Q130223","display_name":"Griffin","level":2,"score":0.8520030975341797},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7799009084701538},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6533286571502686},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.640022873878479},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6063582301139832},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.48562780022621155},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.483849436044693},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.45483914017677307},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.44114089012145996},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4215741455554962},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.39779722690582275},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.16094431281089783},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C95457728","wikidata":"https://www.wikidata.org/wiki/Q309","display_name":"History","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/globecom42002.2020.9322187","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom42002.2020.9322187","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2020 - 2020 IEEE Global Communications Conference","raw_type":"proceedings-article"},{"id":"pmh:oai:ira.lib.polyu.edu.hk:10397/105502","is_oa":true,"landing_page_url":"http://hdl.handle.net/10397/105502","pdf_url":"http://ira.lib.polyu.edu.hk/bitstream/10397/105502/1/Gao_Griffin_Ensemble_Autoencoders.pdf","source":{"id":"https://openalex.org/S4306400205","display_name":"PolyU Institutional Research Archive (Hong Kong Polytechnic University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I14243506","host_organization_name":"Hong Kong Polytechnic University","host_organization_lineage":["https://openalex.org/I14243506"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference Paper"}],"best_oa_location":{"id":"pmh:oai:ira.lib.polyu.edu.hk:10397/105502","is_oa":true,"landing_page_url":"http://hdl.handle.net/10397/105502","pdf_url":"http://ira.lib.polyu.edu.hk/bitstream/10397/105502/1/Gao_Griffin_Ensemble_Autoencoders.pdf","source":{"id":"https://openalex.org/S4306400205","display_name":"PolyU Institutional Research Archive (Hong Kong Polytechnic University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I14243506","host_organization_name":"Hong Kong Polytechnic University","host_organization_lineage":["https://openalex.org/I14243506"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference Paper"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3125641641.pdf"},"referenced_works_count":12,"referenced_works":["https://openalex.org/W42722137","https://openalex.org/W2163375756","https://openalex.org/W2399941526","https://openalex.org/W2548037070","https://openalex.org/W2560162835","https://openalex.org/W2605873363","https://openalex.org/W2785495041","https://openalex.org/W2890805529","https://openalex.org/W2963197901","https://openalex.org/W2973080612","https://openalex.org/W4244657151","https://openalex.org/W6712640429"],"related_works":["https://openalex.org/W588680182","https://openalex.org/W2093304180","https://openalex.org/W2276557871","https://openalex.org/W3024933229","https://openalex.org/W145413986","https://openalex.org/W2414931473","https://openalex.org/W3124843757","https://openalex.org/W2038894842","https://openalex.org/W4230535072","https://openalex.org/W3120800009"],"abstract_inverted_index":{"The":[0,108,147],"Network":[1],"Intrusion":[2],"Detection":[3],"Systems":[4],"(NIDS)":[5],"with":[6,174,201],"machine":[7],"learning":[8],"in":[9,40,112,151,213],"SDN":[10,113],"become":[11],"increasingly":[12],"popular":[13],"solutions.":[14],"NIDS":[15],"uses":[16],"abnormal":[17,28,125],"traffic":[18,29,126,163],"detection":[19,30,95],"to":[20,34,50,68,79,121,142,159,170],"identify":[21,52],"unknown":[22,53],"network":[23,54,162],"attacks.":[24],"Most":[25],"of":[26,66,84,119,215],"today's":[27],"systems":[31],"are":[32,133],"supposed":[33],"continuously":[35],"update":[36,100,165],"the":[37,44,70,82,101,131,137,144,161,166,175,211],"recognition":[38,71],"model":[39,72,103,167],"time":[41,169,185],"based":[42,104,135],"on":[43,105,136],"features":[45],"from":[46,127,168],"newly":[47],"collected":[48],"packets":[49,67],"accurately":[51,80],"attack":[55],"behaviors.":[56],"However,":[57],"those":[58],"existing":[59],"solutions":[60],"always":[61],"require":[62],"a":[63,92,116],"large":[64],"number":[65],"train":[69],"offline.":[73],"That":[74],"means":[75],"it":[76],"is":[77,110,149,187,194],"impossible":[78],"detect":[81],"emergence":[83],"new":[85],"cyber-attacks":[86],"immediately.":[87],"This":[88],"paper":[89],"proposes":[90],"Griffin,":[91],"per-packet":[93],"anomaly":[94],"system":[96],"that":[97,183,208],"can":[98],"dynamically":[99],"training":[102,145],"neural":[106],"networks.":[107],"Griffin":[109,200,209],"executed":[111],"environment,":[114],"utilizing":[115],"novel":[117],"ensemble":[118],"autoencoders":[120,132],"collectively":[122],"filter":[123],"out":[124],"normal":[128],"traffic.":[129],"Meanwhile,":[130],"updated":[134],"root":[138],"mean":[139],"square":[140],"error":[141],"adjust":[143],"model.":[146],"adjustment":[148],"done":[150],"an":[152],"unsupervised":[153],"manner,":[154],"which":[155],"needs":[156],"no":[157],"expert":[158],"label":[160],"or":[164],"time.":[171],"Our":[172],"evaluations,":[173],"open":[176],"Datasets":[177],"provided":[178],"by":[179],"Yisroel":[180],"Mirsky,":[181],"show":[182],"Griffin's":[184],"delay":[186],"around":[188],"0.":[189],"1s":[190],"and":[191,206,219],"its":[192],"accuracy":[193],"98%.":[195],"Moreover,":[196],"we":[197],"also":[198],"compare":[199],"other":[202],"four":[203],"similar":[204],"NIDSs":[205],"find":[207],"performs":[210],"best":[212],"terms":[214],"Matthews":[216],"Correlation":[217],"Coefficient":[218],"complexity.":[220]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":16},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":9}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}