{"id":"https://openalex.org/W4297035176","doi":"https://doi.org/10.1109/icaic53980.2022.9897027","title":"Automated System-Level Anomaly Detection and Classification Using Modified Random Forest","display_name":"Automated System-Level Anomaly Detection and Classification Using Modified Random Forest","publication_year":2022,"publication_date":"2022-05-24","ids":{"openalex":"https://openalex.org/W4297035176","doi":"https://doi.org/10.1109/icaic53980.2022.9897027"},"language":"en","primary_location":{"id":"doi:10.1109/icaic53980.2022.9897027","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icaic53980.2022.9897027","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 1st International Conference on AI in Cybersecurity (ICAIC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043126234","display_name":"Nana Kwame Gyamfi","orcid":"https://orcid.org/0000-0002-3249-4493"},"institutions":[{"id":"https://openalex.org/I167420956","display_name":"Vilnius Gediminas Technical University","ror":"https://ror.org/02x3e4q36","country_code":"LT","type":"education","lineage":["https://openalex.org/I167420956"]}],"countries":["LT"],"is_corresponding":false,"raw_author_name":"Nana Kwame Gyamfi","raw_affiliation_strings":["Vilnius Gedimino Technical University,Department of Information Systems,10223"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vilnius Gedimino Technical University,Department of Information Systems,10223","institution_ids":["https://openalex.org/I167420956"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014515838","display_name":"Dainius \u010ceponis","orcid":"https://orcid.org/0000-0002-2796-9001"},"institutions":[{"id":"https://openalex.org/I167420956","display_name":"Vilnius Gediminas Technical University","ror":"https://ror.org/02x3e4q36","country_code":"LT","type":"education","lineage":["https://openalex.org/I167420956"]}],"countries":["LT"],"is_corresponding":false,"raw_author_name":"Dainius Ceponis","raw_affiliation_strings":["Vilnius Gedimino Technical University,Department of Information Systems,10223"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vilnius Gedimino Technical University,Department of Information Systems,10223","institution_ids":["https://openalex.org/I167420956"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032310562","display_name":"Nikolaj Goranin","orcid":"https://orcid.org/0000-0002-2263-3947"},"institutions":[{"id":"https://openalex.org/I167420956","display_name":"Vilnius Gediminas Technical University","ror":"https://ror.org/02x3e4q36","country_code":"LT","type":"education","lineage":["https://openalex.org/I167420956"]}],"countries":["LT"],"is_corresponding":false,"raw_author_name":"Nikolaj Goranin","raw_affiliation_strings":["Vilnius Gedimino Technical University,Department of Information Systems,10223"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vilnius Gedimino Technical University,Department of Information Systems,10223","institution_ids":["https://openalex.org/I167420956"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I167420956"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"2","issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.8258922100067139},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7449938058853149},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.6449399590492249},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.586592435836792},{"id":"https://openalex.org/keywords/histogram","display_name":"Histogram","score":0.5474302768707275},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.5399627089500427},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5345600843429565},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.5005083084106445},{"id":"https://openalex.org/keywords/fuzzy-logic","display_name":"Fuzzy logic","score":0.48562660813331604},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.46761617064476013},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.4517133831977844},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.44450050592422485},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4378725588321686},{"id":"https://openalex.org/keywords/sensitivity","display_name":"Sensitivity (control systems)","score":0.4362014830112457},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.34265702962875366},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.13945695757865906},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.1227826178073883}],"concepts":[{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.8258922100067139},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7449938058853149},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.6449399590492249},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.586592435836792},{"id":"https://openalex.org/C53533937","wikidata":"https://www.wikidata.org/wiki/Q185020","display_name":"Histogram","level":3,"score":0.5474302768707275},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.5399627089500427},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5345600843429565},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.5005083084106445},{"id":"https://openalex.org/C58166","wikidata":"https://www.wikidata.org/wiki/Q224821","display_name":"Fuzzy logic","level":2,"score":0.48562660813331604},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.46761617064476013},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.4517133831977844},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.44450050592422485},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4378725588321686},{"id":"https://openalex.org/C21200559","wikidata":"https://www.wikidata.org/wiki/Q7451068","display_name":"Sensitivity (control systems)","level":2,"score":0.4362014830112457},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.34265702962875366},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.13945695757865906},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.1227826178073883},{"id":"https://openalex.org/C24326235","wikidata":"https://www.wikidata.org/wiki/Q126095","display_name":"Electronic engineering","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icaic53980.2022.9897027","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icaic53980.2022.9897027","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 1st International Conference on AI in Cybersecurity (ICAIC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Life in Land","score":0.5699999928474426,"id":"https://metadata.un.org/sdg/15"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W26074071","https://openalex.org/W181041240","https://openalex.org/W574004345","https://openalex.org/W1519577016","https://openalex.org/W1529653385","https://openalex.org/W1578389446","https://openalex.org/W2026453187","https://openalex.org/W2030553727","https://openalex.org/W2107528096","https://openalex.org/W2112657736","https://openalex.org/W2141409867","https://openalex.org/W2371625969","https://openalex.org/W2542991588","https://openalex.org/W2560021099","https://openalex.org/W2613480438","https://openalex.org/W2756940441","https://openalex.org/W2802348331","https://openalex.org/W2899072250","https://openalex.org/W2934386458","https://openalex.org/W2945434604","https://openalex.org/W3009613264","https://openalex.org/W3091899017","https://openalex.org/W3093776759","https://openalex.org/W3104199920","https://openalex.org/W3126575732","https://openalex.org/W3134116407","https://openalex.org/W3152565958","https://openalex.org/W3153668390","https://openalex.org/W3173854166","https://openalex.org/W3190472034","https://openalex.org/W4200157816","https://openalex.org/W4200455075","https://openalex.org/W6616397531","https://openalex.org/W6630981830","https://openalex.org/W6794160720","https://openalex.org/W6941070129"],"related_works":["https://openalex.org/W4205958290","https://openalex.org/W2126100045","https://openalex.org/W2336974148","https://openalex.org/W3195168932","https://openalex.org/W2087874231","https://openalex.org/W2345184372","https://openalex.org/W2979979539","https://openalex.org/W3217110323","https://openalex.org/W2187500075","https://openalex.org/W2999548501"],"abstract_inverted_index":{"It":[0],"is":[1,27,102,110,119,131,145],"imperative":[2],"for":[3,135],"Internet-based":[4],"services":[5],"to":[6,23,47,58,79,113,124,133,167],"monitor":[7],"service":[8,26],"performance":[9],"closely":[10],"and":[11,37,44,60,85,156,162],"detect":[12,59],"anomalies":[13,62],"as":[14,16],"soon":[15],"possible.":[17],"Despite":[18],"this,":[19],"deploying":[20],"anomaly":[21,40,91],"detectors":[22,41],"a":[24,56,80,105],"particular":[25],"still":[28],"an":[29],"extremely":[30],"challenging":[31],"task,":[32],"requiring":[33],"that":[34],"the":[35,49,115,125,139],"parameters":[36],"thresholds":[38],"of":[39],"be":[42,120],"manually":[43],"iteratively":[45],"tuned":[46],"deliver":[48],"desired":[50],"behaviour.":[51],"Hence,":[52],"we":[53],"present":[54],"here":[55],"way":[57],"classify":[61],"using":[63,104],"Modified":[64],"Random":[65,71],"Forests":[66],"(M-RF).":[67],"We":[68],"have":[69],"selected":[70],"Forest":[72],"since":[73],"it":[74,130],"can":[75,86],"prevent":[76],"intrusions":[77],"up":[78],"good":[81],"extent":[82],"by":[83,175],"itself":[84],"automatically":[87],"improve":[88],"accuracy":[89],"on":[90,123],"detection.":[92],"AWSCTD":[93],"data":[94],"are":[95],"collected":[96],"in":[97],"this":[98],"section.":[99],"Initial":[100],"pre-processing":[101],"done":[103],"histogram":[106],"equalization":[107],"method.":[108],"GLCM":[109],"then":[111,121],"used":[112],"extract":[114],"required":[116],"features,":[117],"which":[118],"passed":[122],"feature":[126],"extraction":[127],"technique.":[128],"Finally,":[129],"sent":[132],"M-RF":[134],"effective":[136],"classification":[137],"before":[138],"inevitable":[140],"next":[141],"step.":[142],"The":[143],"model":[144,172],"evaluated":[146],"against":[147,159],"other":[148,168],"pre-trained":[149],"models":[150],"like":[151],"SVM,":[152],"KNN,":[153],"ANN,":[154],"GAN,":[155],"fuzzy":[157],"logic":[158],"accuracy,":[160],"sensitivity,":[161],"specificity":[163],"measures.":[164],"In":[165],"comparison":[166],"state-of-the-art":[169],"models,":[170],"our":[171],"outperformed":[173],"them":[174],"98%.":[176]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}