{"id":"https://openalex.org/W4206375275","doi":"https://doi.org/10.1109/menacomm50742.2021.9678279","title":"Attack-Specific Feature Selection for Anomaly Detection in Software-Defined Networks","display_name":"Attack-Specific Feature Selection for Anomaly Detection in Software-Defined Networks","publication_year":2021,"publication_date":"2021-12-03","ids":{"openalex":"https://openalex.org/W4206375275","doi":"https://doi.org/10.1109/menacomm50742.2021.9678279"},"language":"en","primary_location":{"id":"doi:10.1109/menacomm50742.2021.9678279","is_oa":false,"landing_page_url":"https://doi.org/10.1109/menacomm50742.2021.9678279","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 3rd IEEE Middle East and North Africa COMMunications Conference (MENACOMM)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069942718","display_name":"Nadine Abbas","orcid":"https://orcid.org/0000-0003-3028-326X"},"institutions":[{"id":"https://openalex.org/I56306041","display_name":"Lebanese American University","ror":"https://ror.org/00hqkan37","country_code":"LB","type":"education","lineage":["https://openalex.org/I56306041"]}],"countries":["LB"],"is_corresponding":true,"raw_author_name":"Nadine Abbas","raw_affiliation_strings":["Lebanese American University, Beirut, Lebanon"],"affiliations":[{"raw_affiliation_string":"Lebanese American University, Beirut, Lebanon","institution_ids":["https://openalex.org/I56306041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083445806","display_name":"Youssef Nasser","orcid":"https://orcid.org/0000-0002-0112-3091"},"institutions":[{"id":"https://openalex.org/I56306041","display_name":"Lebanese American University","ror":"https://ror.org/00hqkan37","country_code":"LB","type":"education","lineage":["https://openalex.org/I56306041"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Youssef Nasser","raw_affiliation_strings":["Lebanese American University, Beirut, Lebanon"],"affiliations":[{"raw_affiliation_string":"Lebanese American University, Beirut, Lebanon","institution_ids":["https://openalex.org/I56306041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087101193","display_name":"Maryam Shehab","orcid":null},"institutions":[{"id":"https://openalex.org/I56306041","display_name":"Lebanese American University","ror":"https://ror.org/00hqkan37","country_code":"LB","type":"education","lineage":["https://openalex.org/I56306041"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Maryam Shehab","raw_affiliation_strings":["Lebanese American University, Beirut, Lebanon"],"affiliations":[{"raw_affiliation_string":"Lebanese American University, Beirut, Lebanon","institution_ids":["https://openalex.org/I56306041"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071725114","display_name":"Sanaa Sharafeddine","orcid":"https://orcid.org/0000-0001-6548-1624"},"institutions":[{"id":"https://openalex.org/I56306041","display_name":"Lebanese American University","ror":"https://ror.org/00hqkan37","country_code":"LB","type":"education","lineage":["https://openalex.org/I56306041"]}],"countries":["LB"],"is_corresponding":false,"raw_author_name":"Sanaa Sharafeddine","raw_affiliation_strings":["Lebanese American University, Beirut, Lebanon"],"affiliations":[{"raw_affiliation_string":"Lebanese American University, Beirut, Lebanon","institution_ids":["https://openalex.org/I56306041"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5069942718"],"corresponding_institution_ids":["https://openalex.org/I56306041"],"apc_list":null,"apc_paid":null,"fwci":7.1825,"has_fulltext":false,"cited_by_count":55,"citation_normalized_percentile":{"value":0.97390186,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"142","last_page":"146"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8247209787368774},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8241373300552368},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.7912928462028503},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.6505875587463379},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.6474654674530029},{"id":"https://openalex.org/keywords/software-defined-networking","display_name":"Software-defined networking","score":0.5581061244010925},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5324597954750061},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5196877121925354},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5170791149139404},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4813157320022583},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.47981858253479004},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.465257465839386},{"id":"https://openalex.org/keywords/big-data","display_name":"Big data","score":0.4162466526031494},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.41035839915275574},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.4002000689506531},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.38667479157447815},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.314004123210907},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.20411157608032227},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1836950182914734},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.14821290969848633}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8247209787368774},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8241373300552368},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.7912928462028503},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.6505875587463379},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.6474654674530029},{"id":"https://openalex.org/C77270119","wikidata":"https://www.wikidata.org/wiki/Q1655198","display_name":"Software-defined networking","level":2,"score":0.5581061244010925},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5324597954750061},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5196877121925354},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5170791149139404},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4813157320022583},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.47981858253479004},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.465257465839386},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.4162466526031494},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.41035839915275574},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4002000689506531},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38667479157447815},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.314004123210907},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.20411157608032227},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1836950182914734},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.14821290969848633},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/menacomm50742.2021.9678279","is_oa":false,"landing_page_url":"https://doi.org/10.1109/menacomm50742.2021.9678279","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2021 3rd IEEE Middle East and North Africa COMMunications Conference (MENACOMM)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6499999761581421,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2140190241","https://openalex.org/W2947041220","https://openalex.org/W3012454270","https://openalex.org/W3033801848","https://openalex.org/W3044605398","https://openalex.org/W3049277169","https://openalex.org/W3084346886","https://openalex.org/W3092815249","https://openalex.org/W3113798755","https://openalex.org/W3116034045","https://openalex.org/W3117041256","https://openalex.org/W3154724910","https://openalex.org/W3164506068","https://openalex.org/W3178766051"],"related_works":["https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4285325964","https://openalex.org/W2038807247","https://openalex.org/W2292210693","https://openalex.org/W2097156747","https://openalex.org/W2559738661","https://openalex.org/W2147314218","https://openalex.org/W2767068794","https://openalex.org/W2735897973"],"abstract_inverted_index":{"Due":[0],"to":[1,24,69,84,129,148,175],"the":[2,8,26,35,47,76,86,90,99,131,134,138,150,154,161,165,177,184],"rapid":[3],"advancement":[4],"of":[5,11,34,50,157,164],"technologies":[6,38],"including":[7,107],"tremendous":[9],"growth":[10],"multimedia":[12],"content,":[13],"cloud":[14],"computing":[15],"and":[16,66,79,116,124,169,180],"mobile":[17],"usage,":[18],"conventional":[19],"networks":[20],"are":[21,31,67,172],"not":[22,63],"able":[23],"meet":[25],"demands.":[27],"Software-Defined":[28],"Networks":[29],"(SDN)":[30],"considered":[32],"one":[33],"key":[36],"enabling":[37],"providing":[39],"a":[40,54],"new":[41],"powerful":[42],"network":[43],"architecture":[44],"that":[45,88,103],"allows":[46],"dynamic":[48],"operation":[49],"different":[51,105,139,185],"services":[52],"using":[53],"common":[55],"infrastructure.":[56],"Despite":[57],"their":[58,181],"notable":[59],"gains,":[60],"SDNs":[61],"may":[62],"be":[64,146],"secure":[65],"vulnerable":[68],"attacks.":[70,118,140,186],"In":[71],"this":[72],"paper,":[73],"we":[74],"address":[75],"SDN":[77],"vulnerabilities":[78],"present":[80],"attack-specific":[81],"feature":[82,127],"selection":[83,128],"identify":[85],"features":[87,132,143,179],"have":[89],"most":[91],"impact":[92,136,182],"on":[93,137,183],"anomaly":[94],"detection.":[95],"We":[96,119],"first":[97],"use":[98],"InSDN":[100],"intrusion":[101],"dataset":[102],"considers":[104],"attacks":[106],"Denial-of-Service":[108],"(DoS),":[109],"Distributed-DoS":[110],"(DDoS),":[111],"brute":[112],"force,":[113],"probe,":[114],"web":[115],"botnet":[117],"then":[120,145,173],"perform":[121],"data":[122],"pre-processing":[123],"apply":[125],"univariate":[126],"select":[130],"having":[133],"highest":[135],"These":[141],"selected":[142],"can":[144],"used":[147],"train":[149],"model":[151],"which":[152],"reduces":[153],"computational":[155],"cost":[156],"modeling":[158],"while":[159],"keeping":[160],"high":[162],"performance":[163],"model.":[166],"Detailed":[167],"analysis":[168],"simulation":[170],"results":[171],"presented":[174],"show":[176],"predominant":[178]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":20},{"year":2023,"cited_by_count":24},{"year":2022,"cited_by_count":3}],"updated_date":"2026-02-06T02:01:19.302388","created_date":"2025-10-10T00:00:00"}