{"id":"https://openalex.org/W4400489928","doi":"https://doi.org/10.1109/netsoft60951.2024.10588909","title":"Hierarchical Multiclass Continual Learning for Network Intrusion Detection","display_name":"Hierarchical Multiclass Continual Learning for Network Intrusion Detection","publication_year":2024,"publication_date":"2024-06-24","ids":{"openalex":"https://openalex.org/W4400489928","doi":"https://doi.org/10.1109/netsoft60951.2024.10588909"},"language":"en","primary_location":{"id":"doi:10.1109/netsoft60951.2024.10588909","is_oa":false,"landing_page_url":"https://doi.org/10.1109/netsoft60951.2024.10588909","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE 10th International Conference on Network Softwarization (NetSoft)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://boa.unimib.it/bitstream/10281/483239/1/Talpini-2024-NetSoft-AAM.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020418683","display_name":"Jacopo Talpini","orcid":"https://orcid.org/0000-0003-1556-6296"},"institutions":[{"id":"https://openalex.org/I66752286","display_name":"University of Milano-Bicocca","ror":"https://ror.org/01ynf4891","country_code":"IT","type":"education","lineage":["https://openalex.org/I66752286"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Jacopo Talpini","raw_affiliation_strings":["University of Milano-Bicocca,Department of Informatics, Systems and Communication (DISCo),Italy","Department of Informatics, Systems and Communication (DISCo), University of Milano-Bicocca, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Milano-Bicocca,Department of Informatics, Systems and Communication (DISCo),Italy","institution_ids":["https://openalex.org/I66752286"]},{"raw_affiliation_string":"Department of Informatics, Systems and Communication (DISCo), University of Milano-Bicocca, Italy","institution_ids":["https://openalex.org/I66752286"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053982410","display_name":"F\u00e1bio Sartori","orcid":"https://orcid.org/0000-0002-5038-9785"},"institutions":[{"id":"https://openalex.org/I66752286","display_name":"University of Milano-Bicocca","ror":"https://ror.org/01ynf4891","country_code":"IT","type":"education","lineage":["https://openalex.org/I66752286"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Fabio Sartori","raw_affiliation_strings":["University of Milano-Bicocca,Department of Informatics, Systems and Communication (DISCo),Italy","Department of Informatics, Systems and Communication (DISCo), University of Milano-Bicocca, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Milano-Bicocca,Department of Informatics, Systems and Communication (DISCo),Italy","institution_ids":["https://openalex.org/I66752286"]},{"raw_affiliation_string":"Department of Informatics, Systems and Communication (DISCo), University of Milano-Bicocca, Italy","institution_ids":["https://openalex.org/I66752286"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084595174","display_name":"Marco Savi","orcid":"https://orcid.org/0000-0002-8193-0597"},"institutions":[{"id":"https://openalex.org/I66752286","display_name":"University of Milano-Bicocca","ror":"https://ror.org/01ynf4891","country_code":"IT","type":"education","lineage":["https://openalex.org/I66752286"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Marco Savi","raw_affiliation_strings":["University of Milano-Bicocca,Department of Informatics, Systems and Communication (DISCo),Italy","Department of Informatics, Systems and Communication (DISCo), University of Milano-Bicocca, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Milano-Bicocca,Department of Informatics, Systems and Communication (DISCo),Italy","institution_ids":["https://openalex.org/I66752286"]},{"raw_affiliation_string":"Department of Informatics, Systems and Communication (DISCo), University of Milano-Bicocca, Italy","institution_ids":["https://openalex.org/I66752286"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I66752286"],"apc_list":null,"apc_paid":null,"fwci":2.7686,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.90541082,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"263","last_page":"267"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9847000241279602,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9847000241279602,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7383735179901123},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6788979172706604},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5488321781158447},{"id":"https://openalex.org/keywords/multiclass-classification","display_name":"Multiclass classification","score":0.44314995408058167},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.43743014335632324},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.13034021854400635}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7383735179901123},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6788979172706604},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5488321781158447},{"id":"https://openalex.org/C123860398","wikidata":"https://www.wikidata.org/wiki/Q6934605","display_name":"Multiclass classification","level":3,"score":0.44314995408058167},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.43743014335632324},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.13034021854400635}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/netsoft60951.2024.10588909","is_oa":false,"landing_page_url":"https://doi.org/10.1109/netsoft60951.2024.10588909","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE 10th International Conference on Network Softwarization (NetSoft)","raw_type":"proceedings-article"},{"id":"pmh:oai:boa.unimib.it:10281/483239","is_oa":true,"landing_page_url":"https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=10588909","pdf_url":"https://boa.unimib.it/bitstream/10281/483239/1/Talpini-2024-NetSoft-AAM.pdf","source":{"id":"https://openalex.org/S4306401259","display_name":"BOA (University of Milano-Bicocca)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66752286","host_organization_name":"University of Milano-Bicocca","host_organization_lineage":["https://openalex.org/I66752286"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:boa.unimib.it:10281/483239","is_oa":true,"landing_page_url":"https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=10588909","pdf_url":"https://boa.unimib.it/bitstream/10281/483239/1/Talpini-2024-NetSoft-AAM.pdf","source":{"id":"https://openalex.org/S4306401259","display_name":"BOA (University of Milano-Bicocca)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66752286","host_organization_name":"University of Milano-Bicocca","host_organization_lineage":["https://openalex.org/I66752286"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4400489928.pdf"},"referenced_works_count":22,"referenced_works":["https://openalex.org/W433644524","https://openalex.org/W1506806321","https://openalex.org/W1985987493","https://openalex.org/W2101234009","https://openalex.org/W2155653793","https://openalex.org/W2164411961","https://openalex.org/W2187089797","https://openalex.org/W2560647685","https://openalex.org/W2765101016","https://openalex.org/W2783741806","https://openalex.org/W2788388592","https://openalex.org/W2789828921","https://openalex.org/W2926701059","https://openalex.org/W2951694401","https://openalex.org/W2991140181","https://openalex.org/W3037484309","https://openalex.org/W3193759592","https://openalex.org/W3197914403","https://openalex.org/W3206894072","https://openalex.org/W4312889780","https://openalex.org/W4313152877","https://openalex.org/W4386211285"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W3046775127","https://openalex.org/W3107602296","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347"],"abstract_inverted_index":{"The":[0],"evolution":[1],"of":[2,14,87,102,131,164,176,185,196,200],"Internet":[3],"and":[4,36,56,85,133,146],"its":[5],"related":[6,191],"communication":[7],"technologies":[8],"have":[9,53],"consistently":[10],"increased":[11],"the":[12,43,61,100,104,169,174,183,198],"risk":[13],"cyber-attacks.":[15],"In":[16,42],"this":[17,74,118],"context,":[18],"a":[19,96,122,128,138],"crucial":[20],"role":[21],"is":[22,99,143,156],"played":[23],"by":[24,65,137,148],"Intrusion":[25],"Detection":[26],"Systems":[27],"(IDSs),":[28],"which":[29,109],"are":[30,76],"security":[31],"devices":[32],"designed":[33],"to":[34,39,159,168,192],"identify":[35],"mitigate":[37],"attacks":[38,83,89,165],"modern":[40],"networks.":[41],"last":[44],"decade,":[45],"data-driven":[46],"approaches":[47],"based":[48,126],"on":[49,127],"Machine":[50],"Learning":[51],"(ML)":[52],"gained":[54],"more":[55,57],"popularity":[58],"for":[59,73],"executing":[60],"classification":[62,130],"tasks":[63],"required":[64],"signature-based":[66],"IDSs.":[67],"However,":[68],"typical":[69],"ML":[70],"models":[71],"adopted":[72,158],"purpose":[75],"trained":[77,144],"in":[78,114],"static":[79],"settings":[80],"while":[81,202],"new":[82,162],"\u2013":[84,90],"variants":[86],"known":[88],"dynamically":[91],"emerge":[92],"over":[93],"time.":[94],"As":[95],"consequence,":[97],"there":[98],"need":[101,184],"keeping":[103],"IDS":[105],"capability":[106],"constantly":[107],"updated,":[108],"poses":[110],"peculiar":[111],"challenges":[112],"especially":[113],"resourced-constrained":[115],"scenarios.":[116],"To":[117],"end,":[119],"we":[120],"propose":[121],"novel":[123],"hierarchical":[124],"model":[125],"binary":[129],"benign":[132],"malicious":[134,170],"traffic":[135,188],"performed":[136],"Bayesian":[139],"Neural":[140],"Network":[141],"that":[142,180],"continuously":[145],"efficiently":[147],"exploiting":[149],"Continual":[150],"Learning.":[151],"A":[152],"generative":[153],"multiclass":[154],"classifier":[155],"then":[157],"incrementally":[160],"classify":[161],"kinds":[163,199],"with":[166],"respect":[167],"traffic.":[171],"We":[172],"prove":[173],"effectiveness":[175],"our":[177],"approach":[178],"showing":[179],"it":[181],"removes":[182],"storing":[186],"network":[187],"data":[189],"samples":[190],"historical":[193],"data,":[194],"representative":[195],"all":[197],"attacks,":[201],"ensuring":[203],"good":[204],"detection":[205],"capabilities.":[206]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3}],"updated_date":"2026-08-08T01:25:22.217667","created_date":"2025-10-10T00:00:00"}