{"id":"https://openalex.org/W2892556724","doi":"https://doi.org/10.1109/jiot.2018.2871719","title":"An Ensemble Intrusion Detection Technique Based on Proposed Statistical Flow Features for Protecting Network Traffic of Internet of Things","display_name":"An Ensemble Intrusion Detection Technique Based on Proposed Statistical Flow Features for Protecting Network Traffic of Internet of Things","publication_year":2018,"publication_date":"2018-09-24","ids":{"openalex":"https://openalex.org/W2892556724","doi":"https://doi.org/10.1109/jiot.2018.2871719","mag":"2892556724"},"language":"en","primary_location":{"id":"doi:10.1109/jiot.2018.2871719","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2018.2871719","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5089327837","display_name":"Nour Moustafa","orcid":"https://orcid.org/0000-0001-6127-9349"},"institutions":[{"id":"https://openalex.org/I188329596","display_name":"University of Canberra","ror":"https://ror.org/04s1nv328","country_code":"AU","type":"education","lineage":["https://openalex.org/I188329596"]},{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Nour Moustafa","raw_affiliation_strings":["Australian Centre for Cyber Security, University of New South Wales, Canberra Campus, Canberra, ACT, Australia"],"raw_orcid":"https://orcid.org/0000-0001-6127-9349","affiliations":[{"raw_affiliation_string":"Australian Centre for Cyber Security, University of New South Wales, Canberra Campus, Canberra, ACT, Australia","institution_ids":["https://openalex.org/I188329596","https://openalex.org/I31746571"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022626159","display_name":"Benjamin Turnbull","orcid":"https://orcid.org/0000-0003-0440-5032"},"institutions":[{"id":"https://openalex.org/I188329596","display_name":"University of Canberra","ror":"https://ror.org/04s1nv328","country_code":"AU","type":"education","lineage":["https://openalex.org/I188329596"]},{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Benjamin Turnbull","raw_affiliation_strings":["Australian Centre for Cyber Security, University of New South Wales, Canberra Campus, Canberra, ACT, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Australian Centre for Cyber Security, University of New South Wales, Canberra Campus, Canberra, ACT, Australia","institution_ids":["https://openalex.org/I188329596","https://openalex.org/I31746571"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001746807","display_name":"Kim\u2010Kwang Raymond Choo","orcid":"https://orcid.org/0000-0001-9208-5336"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kim-Kwang Raymond Choo","raw_affiliation_strings":["Department of Information Systems and Cyber Security and the Department of Electrical and Computer Engineering, University of Texas at San Antonio, San Antonio, TX, USA"],"raw_orcid":"https://orcid.org/0000-0001-9208-5336","affiliations":[{"raw_affiliation_string":"Department of Information Systems and Cyber Security and the Department of Electrical and Computer Engineering, University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":34.1202,"has_fulltext":false,"cited_by_count":567,"citation_normalized_percentile":{"value":0.99827938,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"6","issue":"3","first_page":"4815","last_page":"4830"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8736617565155029},{"id":"https://openalex.org/keywords/mqtt","display_name":"MQTT","score":0.7981400489807129},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.5852717757225037},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5139843821525574},{"id":"https://openalex.org/keywords/naive-bayes-classifier","display_name":"Naive Bayes classifier","score":0.4980199337005615},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4934028685092926},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.47404882311820984},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.46623891592025757},{"id":"https://openalex.org/keywords/message-queue","display_name":"Message queue","score":0.4314936399459839},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.42791634798049927},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4111866056919098},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.38613054156303406},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3675628900527954},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.29113829135894775},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.26338934898376465},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.22034260630607605}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8736617565155029},{"id":"https://openalex.org/C132868160","wikidata":"https://www.wikidata.org/wiki/Q10322548","display_name":"MQTT","level":3,"score":0.7981400489807129},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.5852717757225037},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5139843821525574},{"id":"https://openalex.org/C52001869","wikidata":"https://www.wikidata.org/wiki/Q812530","display_name":"Naive Bayes classifier","level":3,"score":0.4980199337005615},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4934028685092926},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.47404882311820984},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.46623891592025757},{"id":"https://openalex.org/C26324664","wikidata":"https://www.wikidata.org/wiki/Q1065525","display_name":"Message queue","level":2,"score":0.4314936399459839},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.42791634798049927},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4111866056919098},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.38613054156303406},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3675628900527954},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.29113829135894775},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.26338934898376465},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.22034260630607605},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2018.2871719","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2018.2871719","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/11","score":0.47999998927116394,"display_name":"Sustainable cities and communities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W1657049324","https://openalex.org/W1963669090","https://openalex.org/W2004918970","https://openalex.org/W2021137987","https://openalex.org/W2022350629","https://openalex.org/W2032477387","https://openalex.org/W2035408731","https://openalex.org/W2085196969","https://openalex.org/W2105779206","https://openalex.org/W2143325120","https://openalex.org/W2168248885","https://openalex.org/W2296509296","https://openalex.org/W2331488455","https://openalex.org/W2342690304","https://openalex.org/W2528500008","https://openalex.org/W2557450880","https://openalex.org/W2565045400","https://openalex.org/W2593129427","https://openalex.org/W2792450155","https://openalex.org/W2796624525"],"related_works":["https://openalex.org/W2594893198","https://openalex.org/W2808909086","https://openalex.org/W2920851310","https://openalex.org/W3191127435","https://openalex.org/W4379141734","https://openalex.org/W4296712975","https://openalex.org/W2782567402","https://openalex.org/W4214846370","https://openalex.org/W2953647658","https://openalex.org/W2340181556"],"abstract_inverted_index":{"Internet":[0],"of":[1,45,91,96,100,152,183,226],"Things":[2],"(IoT)":[3],"plays":[4],"an":[5,114,150,157],"increasingly":[6],"significant":[7],"role":[8],"in":[9,59,105,125,136,260],"our":[10],"daily":[11],"activities,":[12],"connecting":[13],"physical":[14],"objects":[15],"around":[16],"us":[17],"into":[18],"digital":[19],"services.":[20,52,93],"In":[21,111],"other":[22,265],"words,":[23],"IoT":[24,49,92,137,199],"is":[25,119,162],"the":[26,43,146,181,206,211,219,223,232,239,261],"driving":[27],"force":[28],"behind":[29],"home":[30],"automation,":[31],"smart":[32],"cities,":[33],"modern":[34],"health":[35],"systems,":[36],"and":[37,51,72,85,108,132,175,186,193,209,228,234,248,263],"advanced":[38],"manufacturing.":[39],"This":[40],"also":[41],"increases":[42],"likelihood":[44],"cyber":[46],"threats":[47],"against":[48,129],"devices":[50],"Attackers":[53],"may":[54],"attempt":[55],"to":[56,88,121,179,204],"exploit":[57],"vulnerabilities":[58],"application":[60],"protocols,":[61],"including":[62],"Domain":[63],"Name":[64],"System":[65],"(DNS),":[66],"Hyper":[67],"Text":[68],"Transfer":[69],"Protocol":[70],"(HTTP)":[71],"Message":[73],"Queue":[74],"Telemetry":[75],"Transport":[76],"(MQTT)":[77],"that":[78,218],"interact":[79],"directly":[80],"with":[81,197,255],"backend":[82],"database":[83],"systems":[84],"client-server":[86],"applications":[87],"store":[89],"data":[90,106,201],"Successful":[94],"exploitation":[95],"one":[97],"or":[98],"more":[99],"these":[101,184],"protocols":[102,134,147],"can":[103],"result":[104],"leakage":[107],"security":[109],"breaches.":[110],"this":[112],"paper,":[113],"ensemble":[115,159,212,241],"intrusion":[116],"detection":[117,246],"technique":[118,242,258],"proposed":[120,207,220,240],"mitigate":[122],"malicious":[123,188,229],"events,":[124],"particular":[126],"botnet":[127,195],"attacks":[128],"DNS,":[130],"HTTP,":[131],"MQTT":[133],"utilized":[135],"networks.":[138],"New":[139],"statistical":[140],"flow":[141],"features":[142,185,208,221],"are":[143,202],"generated":[144],"from":[145],"based":[148],"on":[149],"analysis":[151],"their":[153],"potential":[154,224],"properties.":[155],"Then,":[156],"AdaBoost":[158],"learning":[160,167],"method":[161],"developed":[163],"using":[164,231],"three":[165,264],"machine":[166],"techniques,":[168],"namely":[169],"decision":[170],"tree,":[171],"Naive":[172],"Bayes":[173],"(NB),":[174],"artificial":[176],"neural":[177],"network,":[178],"evaluate":[180,210],"effect":[182],"detect":[187],"events":[189],"effectively.":[190],"The":[191,214],"UNSW-NB15":[192],"NIMS":[194],"datasets":[196],"simulated":[198],"sensors'":[200],"used":[203],"extract":[205],"technique.":[213],"experimental":[215],"results":[216],"show":[217],"have":[222],"characteristics":[225],"normal":[227],"activity":[230],"correntropy":[233],"correlation":[235],"coefficient":[236],"measures.":[237],"Moreover,":[238],"provides":[243],"a":[244,249],"higher":[245],"rate":[247,253],"lower":[250],"false":[251],"positive":[252],"compared":[254],"each":[256],"classification":[257],"included":[259],"framework":[262],"state-of-the-art":[266],"techniques.":[267]},"counts_by_year":[{"year":2026,"cited_by_count":30},{"year":2025,"cited_by_count":64},{"year":2024,"cited_by_count":85},{"year":2023,"cited_by_count":91},{"year":2022,"cited_by_count":97},{"year":2021,"cited_by_count":109},{"year":2020,"cited_by_count":66},{"year":2019,"cited_by_count":23},{"year":2018,"cited_by_count":1},{"year":2013,"cited_by_count":1}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}