{"id":"https://openalex.org/W4381744981","doi":"https://doi.org/10.1109/noms56928.2023.10154453","title":"A Novel Poisoning Attack on Few-Shot based Network Intrusion Detection","display_name":"A Novel Poisoning Attack on Few-Shot based Network Intrusion Detection","publication_year":2023,"publication_date":"2023-05-08","ids":{"openalex":"https://openalex.org/W4381744981","doi":"https://doi.org/10.1109/noms56928.2023.10154453"},"language":"en","primary_location":{"id":"doi:10.1109/noms56928.2023.10154453","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms56928.2023.10154453","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2023-2023 IEEE/IFIP Network Operations and Management Symposium","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035755151","display_name":"Nour Alhussien","orcid":"https://orcid.org/0009-0001-4803-2744"},"institutions":[{"id":"https://openalex.org/I4210087454","display_name":"Augusta University Health","ror":"https://ror.org/007rawr89","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I4210087454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nour Alhussien","raw_affiliation_strings":["Augusta University,School of Computer and Cyber Sciences,Augusta,Georgia,USA","School of Computer and Cyber Sciences, Augusta University, Augusta, Georgia, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Augusta University,School of Computer and Cyber Sciences,Augusta,Georgia,USA","institution_ids":["https://openalex.org/I4210087454"]},{"raw_affiliation_string":"School of Computer and Cyber Sciences, Augusta University, Augusta, Georgia, USA","institution_ids":["https://openalex.org/I4210087454"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060546610","display_name":"Ahmed Aleroud","orcid":"https://orcid.org/0000-0003-4337-1488"},"institutions":[{"id":"https://openalex.org/I4210087454","display_name":"Augusta University Health","ror":"https://ror.org/007rawr89","country_code":"US","type":"healthcare","lineage":["https://openalex.org/I4210087454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmed Aleroud","raw_affiliation_strings":["Augusta University,School of Computer and Cyber Sciences,Augusta,Georgia,USA","School of Computer and Cyber Sciences, Augusta University, Augusta, Georgia, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Augusta University,School of Computer and Cyber Sciences,Augusta,Georgia,USA","institution_ids":["https://openalex.org/I4210087454"]},{"raw_affiliation_string":"School of Computer and Cyber Sciences, Augusta University, Augusta, Georgia, USA","institution_ids":["https://openalex.org/I4210087454"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4210087454"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.8123154640197754},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8027681112289429},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.6794528961181641},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6061496734619141},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5621891617774963},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5621556043624878},{"id":"https://openalex.org/keywords/shot","display_name":"Shot (pellet)","score":0.5345690846443176},{"id":"https://openalex.org/keywords/attack-patterns","display_name":"Attack patterns","score":0.531913697719574},{"id":"https://openalex.org/keywords/labeled-data","display_name":"Labeled data","score":0.47647401690483093},{"id":"https://openalex.org/keywords/cluster","display_name":"Cluster (spacecraft)","score":0.4605514109134674},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.4546416997909546},{"id":"https://openalex.org/keywords/one-shot","display_name":"One shot","score":0.4513413906097412},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.41613635420799255},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3836194574832916},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3642624020576477},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.1057150661945343},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.10258820652961731}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.8123154640197754},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8027681112289429},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.6794528961181641},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6061496734619141},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5621891617774963},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5621556043624878},{"id":"https://openalex.org/C2778344882","wikidata":"https://www.wikidata.org/wiki/Q278938","display_name":"Shot (pellet)","level":2,"score":0.5345690846443176},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.531913697719574},{"id":"https://openalex.org/C2776145971","wikidata":"https://www.wikidata.org/wiki/Q30673951","display_name":"Labeled data","level":2,"score":0.47647401690483093},{"id":"https://openalex.org/C164866538","wikidata":"https://www.wikidata.org/wiki/Q367351","display_name":"Cluster (spacecraft)","level":2,"score":0.4605514109134674},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.4546416997909546},{"id":"https://openalex.org/C2992734406","wikidata":"https://www.wikidata.org/wiki/Q413267","display_name":"One shot","level":2,"score":0.4513413906097412},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.41613635420799255},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3836194574832916},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3642624020576477},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.1057150661945343},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.10258820652961731},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C178790620","wikidata":"https://www.wikidata.org/wiki/Q11351","display_name":"Organic chemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/noms56928.2023.10154453","is_oa":false,"landing_page_url":"https://doi.org/10.1109/noms56928.2023.10154453","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"NOMS 2023-2023 IEEE/IFIP Network Operations and Management Symposium","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W1511700591","https://openalex.org/W2054425625","https://openalex.org/W2084085041","https://openalex.org/W2105037940","https://openalex.org/W2112507308","https://openalex.org/W2162552722","https://openalex.org/W2625602624","https://openalex.org/W2771362265","https://openalex.org/W2803831897","https://openalex.org/W2885832006","https://openalex.org/W2962763344","https://openalex.org/W2965561013","https://openalex.org/W2984488829","https://openalex.org/W2996458309","https://openalex.org/W3098276446","https://openalex.org/W3120658860","https://openalex.org/W3130704044","https://openalex.org/W3158507034","https://openalex.org/W3205985117","https://openalex.org/W3206667797","https://openalex.org/W3210361010","https://openalex.org/W4205093476","https://openalex.org/W4205569013","https://openalex.org/W4221148936","https://openalex.org/W6676935882","https://openalex.org/W6684011098","https://openalex.org/W6761076018","https://openalex.org/W6809905531"],"related_works":["https://openalex.org/W4317548404","https://openalex.org/W3022007134","https://openalex.org/W2949671220","https://openalex.org/W2130553454","https://openalex.org/W2033364610","https://openalex.org/W2797776314","https://openalex.org/W3163689946","https://openalex.org/W4390190783","https://openalex.org/W2153927146","https://openalex.org/W3104108945"],"abstract_inverted_index":{"With":[0],"the":[1,23,67,98,132,137,149,152,156,165,170],"advancement":[2],"of":[3,25,43,69,87,151,172],"Machine":[4,12],"Learning":[5,13],"(ML)":[6],"algorithms,":[7],"more":[8],"organizations":[9],"started":[10],"using":[11,37,60],"based":[14],"Intrusion":[15],"Detection":[16],"Systems":[17],"(ML-IDSs)":[18],"to":[19,55,103,147],"mitigate":[20],"cyberattacks.":[21],"However,":[22,59],"lack":[24],"training":[26,114],"datasets":[27,65],"is":[28,119,145,167],"a":[29,77,83,124,128],"major":[30],"challenge":[31],"when":[32],"creating":[33],"those":[34],"systems.":[35],"Therefore,":[36],"pre-trained":[38],"models":[39,62],"and":[40,89,131],"small":[41],"amount":[42],"labeled":[44,125,134],"network":[45],"data":[46,126],"or":[47,63],"few-shots":[48],"from":[49,127,136],"internal":[50],"sources":[51],"are":[52,110],"possible":[53],"solutions":[54],"overcome":[56],"this":[57],"challenge.":[58],"pretrained":[61],"external":[64],"introduces":[66],"risk":[68],"poisoned":[70,108,129],"machine":[71],"learning":[72],"models.":[73],"This":[74],"work":[75],"investigates":[76],"novel":[78],"poisoning":[79,158],"attack":[80,94,166],"that":[81,101,105,164],"creates":[82],"diverse":[84],"mini":[85],"cluster":[86,102],"attacks":[88],"normal":[90],"instances":[91,99,109],"around":[92],"an":[93],"instance,":[95],"then":[96,111,120],"use":[97],"in":[100,169],"poison":[104],"instance.":[106],"The":[107,160],"injected":[112],"into":[113],"data.":[115],"A":[116],"trained":[117],"model":[118,144],"created":[121],"by":[122],"projecting":[123],"source":[130],"few":[133],"shots":[135],"target":[138],"organization.":[139],"An":[140],"anomaly-based":[141],"intrusion":[142],"detection":[143],"utilized":[146],"examine":[148],"effectiveness":[150],"introduced":[153],"approach":[154],"under":[155],"proposed":[157],"attack.":[159],"results":[161],"have":[162],"shown":[163],"effective":[168],"context":[171],"few-shot":[173],"IDS":[174],"learning.":[175]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}