{"id":"https://openalex.org/W2436017862","doi":"https://doi.org/10.1109/socpar.2015.7492778","title":"Automated generation of fuzzy rules from large-scale network traffic analysis in digital forensics investigations","display_name":"Automated generation of fuzzy rules from large-scale network traffic analysis in digital forensics investigations","publication_year":2015,"publication_date":"2015-11-01","ids":{"openalex":"https://openalex.org/W2436017862","doi":"https://doi.org/10.1109/socpar.2015.7492778","mag":"2436017862"},"language":"en","primary_location":{"id":"doi:10.1109/socpar.2015.7492778","is_oa":false,"landing_page_url":"https://doi.org/10.1109/socpar.2015.7492778","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 7th International Conference of Soft Computing and Pattern Recognition (SoCPaR)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5011052188","display_name":"Andrii Shalaginov","orcid":"https://orcid.org/0000-0003-1980-6875"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Andrii Shalaginov","raw_affiliation_strings":["Center for Cyber- and Information Security Norwegian Information Security Laboratory, Gj\u00f8vik University college, Gj\u00f8vik, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Cyber- and Information Security Norwegian Information Security Laboratory, Gj\u00f8vik University college, Gj\u00f8vik, Norway","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028698767","display_name":"Katrin Franke","orcid":"https://orcid.org/0000-0002-4899-9410"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Katrin Franke","raw_affiliation_strings":["Center for Cyber- and Information Security Norwegian Information Security Laboratory, Gj\u00f8vik University college, Gj\u00f8vik, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Cyber- and Information Security Norwegian Information Security Laboratory, Gj\u00f8vik University college, Gj\u00f8vik, Norway","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"3","issue":null,"first_page":"31","last_page":"36"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8059546947479248},{"id":"https://openalex.org/keywords/network-forensics","display_name":"Network forensics","score":0.7418929934501648},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.6961826682090759},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.6914645433425903},{"id":"https://openalex.org/keywords/fuzzy-logic","display_name":"Fuzzy logic","score":0.5638904571533203},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5473688244819641},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.5283706188201904},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.4943420886993408},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.4643213152885437},{"id":"https://openalex.org/keywords/computer-forensics","display_name":"Computer forensics","score":0.4501004219055176},{"id":"https://openalex.org/keywords/big-data","display_name":"Big data","score":0.4411829710006714},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3840653598308563},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.37897610664367676},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1455569863319397}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8059546947479248},{"id":"https://openalex.org/C50747538","wikidata":"https://www.wikidata.org/wiki/Q7001032","display_name":"Network forensics","level":3,"score":0.7418929934501648},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.6961826682090759},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6914645433425903},{"id":"https://openalex.org/C58166","wikidata":"https://www.wikidata.org/wiki/Q224821","display_name":"Fuzzy logic","level":2,"score":0.5638904571533203},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5473688244819641},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.5283706188201904},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.4943420886993408},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.4643213152885437},{"id":"https://openalex.org/C556601545","wikidata":"https://www.wikidata.org/wiki/Q878553","display_name":"Computer forensics","level":3,"score":0.4501004219055176},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.4411829710006714},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3840653598308563},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.37897610664367676},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1455569863319397},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/socpar.2015.7492778","is_oa":false,"landing_page_url":"https://doi.org/10.1109/socpar.2015.7492778","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2015 7th International Conference of Soft Computing and Pattern Recognition (SoCPaR)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6700000166893005,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W1480261419","https://openalex.org/W1517025776","https://openalex.org/W1787475144","https://openalex.org/W1991147747","https://openalex.org/W2002394060","https://openalex.org/W2016086965","https://openalex.org/W2107208924","https://openalex.org/W2110802877","https://openalex.org/W2118154362","https://openalex.org/W2140287033","https://openalex.org/W2294155244","https://openalex.org/W2484215240","https://openalex.org/W3140706010","https://openalex.org/W4253296898","https://openalex.org/W6792273215"],"related_works":["https://openalex.org/W2174009075","https://openalex.org/W3041426302","https://openalex.org/W2765947859","https://openalex.org/W4312824648","https://openalex.org/W4313164735","https://openalex.org/W2361499900","https://openalex.org/W2528158907","https://openalex.org/W3121448061","https://openalex.org/W4313492257","https://openalex.org/W1985620065"],"abstract_inverted_index":{"This":[0,74],"paper":[1],"describes":[2],"ongoing":[3],"study":[4],"and":[5,33,65,134,181,191],"first":[6],"results":[7,53,90],"on":[8,29],"the":[9,20,49,71,102,141],"application":[10],"of":[11,22,31,57,63,70,79,99,116,165,179],"Neuro-Fuzzy":[12,171],"(NF)":[13],"to":[14,48,107,128,147,157,161],"support":[15],"large-scale":[16,58],"forensics":[17,129,149],"investigation":[18],"in":[19,40,54,105,151,187],"domain":[21],"Network":[23],"Forensics.":[24],"In":[25,110,123],"particular":[26],"we":[27,126],"focus":[28],"patterns":[30],"benign":[32],"malicious":[34],"activity":[35],"that":[36,52,92,153,170],"can":[37,154],"be":[38,155],"find":[39],"network":[41,148],"traffic":[42,189],"dumps.":[43],"We":[44],"propose":[45],"several":[46],"improvements":[47],"NF":[50],"algorithm":[51],"proper":[55],"handling":[56],"datasets,":[59],"significantly":[60],"reduces":[61],"number":[62,98],"rules":[64,80],"yields":[66],"a":[67,96,193],"decreased":[68],"complexity":[69],"classification":[72,177],"model.":[73],"includes":[75],"better":[76],"automated":[77],"extraction":[78],"parameters":[81],"as":[82,84],"well":[83],"bootstrap":[85],"aggregation":[86],"for":[87],"generalization.":[88],"Experimental":[89],"show":[91],"such":[93,169],"optimization":[94],"gives":[95],"smaller":[97],"rules,":[100],"while":[101],"accuracy":[103,115,178],"increases":[104],"comparison":[106],"existing":[108],"approaches.":[109],"particular,":[111],"it":[112],"showed":[113],"an":[114],"98%":[117],"when":[118],"using":[119],"only":[120,175],"39":[121],"rules.":[122,139],"our":[124],"research":[125],"contribute":[127],"science":[130],"by":[131],"increasing":[132],"awareness":[133],"bringing":[135],"more":[136],"comprehensive":[137],"fuzzy":[138],"During":[140],"last":[142],"decade":[143],"many":[144],"cases":[145],"related":[146,156],"resulted":[150],"data":[152],"Big":[158],"Data":[159],"due":[160],"its":[162],"complexity.":[163],"Application":[164],"Soft":[166],"Computing":[167],"methods,":[168],"may":[172],"bring":[173],"not":[174],"sufficient":[176],"normal":[180],"attack":[182],"traffic,":[183],"yet":[184],"also":[185],"facilitate":[186],"understanding":[188],"properties":[190],"developing":[192],"decision-support":[194],"mechanism.":[195]},"counts_by_year":[{"year":2022,"cited_by_count":3},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":3},{"year":2015,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}