{"id":"https://openalex.org/W2808472075","doi":"https://doi.org/10.1109/tcyb.2018.2838668","title":"Learning Neural Representations for Network Anomaly Detection","display_name":"Learning Neural Representations for Network Anomaly Detection","publication_year":2018,"publication_date":"2018-06-15","ids":{"openalex":"https://openalex.org/W2808472075","doi":"https://doi.org/10.1109/tcyb.2018.2838668","mag":"2808472075","pmid":"https://pubmed.ncbi.nlm.nih.gov/29994493"},"language":"en","primary_location":{"id":"doi:10.1109/tcyb.2018.2838668","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcyb.2018.2838668","pdf_url":null,"source":{"id":"https://openalex.org/S4210191041","display_name":"IEEE Transactions on Cybernetics","issn_l":"2168-2267","issn":["2168-2267","2168-2275"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cybernetics","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082857079","display_name":"Van Loi Cao","orcid":"https://orcid.org/0000-0002-3637-9230"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":true,"raw_author_name":"Van Loi Cao","raw_affiliation_strings":["School of Computer Science, University College Dublin, 4 Dublin, Ireland"],"affiliations":[{"raw_affiliation_string":"School of Computer Science, University College Dublin, 4 Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085107807","display_name":"Miguel Nicolau","orcid":"https://orcid.org/0000-0002-1981-1300"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Miguel Nicolau","raw_affiliation_strings":["Quinn School of Business, University College Dublin, 4 Dublin, Ireland"],"affiliations":[{"raw_affiliation_string":"Quinn School of Business, University College Dublin, 4 Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067381332","display_name":"James McDermott","orcid":"https://orcid.org/0000-0002-1402-6995"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"James McDermott","raw_affiliation_strings":["Michael Smurfit Graduate Business School, University College Dublin, 4 Dublin, Ireland"],"affiliations":[{"raw_affiliation_string":"Michael Smurfit Graduate Business School, University College Dublin, 4 Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5082857079"],"corresponding_institution_ids":["https://openalex.org/I100930933"],"apc_list":null,"apc_paid":null,"fwci":14.5781,"has_fulltext":false,"cited_by_count":180,"citation_normalized_percentile":{"value":0.99147772,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"49","issue":"8","first_page":"3074","last_page":"3087"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hyperparameter","display_name":"Hyperparameter","score":0.8412922024726868},{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.7801618576049805},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7368409037590027},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6400448083877563},{"id":"https://openalex.org/keywords/bottleneck","display_name":"Bottleneck","score":0.6042075753211975},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.5508766174316406},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.529128909111023},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.48572593927383423},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4775579571723938},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.44531068205833435},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4450058937072754},{"id":"https://openalex.org/keywords/model-selection","display_name":"Model selection","score":0.43809252977371216},{"id":"https://openalex.org/keywords/dimensionality-reduction","display_name":"Dimensionality reduction","score":0.43153226375579834},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.41620007157325745},{"id":"https://openalex.org/keywords/feature-learning","display_name":"Feature learning","score":0.41442781686782837},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.405312180519104}],"concepts":[{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.8412922024726868},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.7801618576049805},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7368409037590027},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6400448083877563},{"id":"https://openalex.org/C2780513914","wikidata":"https://www.wikidata.org/wiki/Q18210350","display_name":"Bottleneck","level":2,"score":0.6042075753211975},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.5508766174316406},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.529128909111023},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48572593927383423},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4775579571723938},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.44531068205833435},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4450058937072754},{"id":"https://openalex.org/C93959086","wikidata":"https://www.wikidata.org/wiki/Q6888345","display_name":"Model selection","level":2,"score":0.43809252977371216},{"id":"https://openalex.org/C70518039","wikidata":"https://www.wikidata.org/wiki/Q16000077","display_name":"Dimensionality reduction","level":2,"score":0.43153226375579834},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.41620007157325745},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.41442781686782837},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.405312180519104},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tcyb.2018.2838668","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tcyb.2018.2838668","pdf_url":null,"source":{"id":"https://openalex.org/S4210191041","display_name":"IEEE Transactions on Cybernetics","issn_l":"2168-2267","issn":["2168-2267","2168-2275"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cybernetics","raw_type":"journal-article"},{"id":"pmid:29994493","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/29994493","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on cybernetics","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320858","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":66,"referenced_works":["https://openalex.org/W6908809","https://openalex.org/W42722137","https://openalex.org/W1503432700","https://openalex.org/W1504289356","https://openalex.org/W1533861849","https://openalex.org/W1582774210","https://openalex.org/W1876967670","https://openalex.org/W1959608418","https://openalex.org/W1970088130","https://openalex.org/W1988918299","https://openalex.org/W2015887370","https://openalex.org/W2016258134","https://openalex.org/W2017257315","https://openalex.org/W2025768430","https://openalex.org/W2044861295","https://openalex.org/W2077488147","https://openalex.org/W2099940443","https://openalex.org/W2100495367","https://openalex.org/W2101234009","https://openalex.org/W2102409316","https://openalex.org/W2108665656","https://openalex.org/W2110798204","https://openalex.org/W2122646361","https://openalex.org/W2126652588","https://openalex.org/W2127979711","https://openalex.org/W2132870739","https://openalex.org/W2136922672","https://openalex.org/W2142047467","https://openalex.org/W2144182447","https://openalex.org/W2145094598","https://openalex.org/W2151662879","https://openalex.org/W2153743018","https://openalex.org/W2163922914","https://openalex.org/W2172174689","https://openalex.org/W2218318129","https://openalex.org/W2265497589","https://openalex.org/W2278186031","https://openalex.org/W2282861635","https://openalex.org/W2296509296","https://openalex.org/W2340896621","https://openalex.org/W2345951342","https://openalex.org/W2466206609","https://openalex.org/W2516866958","https://openalex.org/W2584462177","https://openalex.org/W2588857280","https://openalex.org/W2963557522","https://openalex.org/W2997574889","https://openalex.org/W3104422614","https://openalex.org/W3120740533","https://openalex.org/W4235667863","https://openalex.org/W4300174688","https://openalex.org/W6600284362","https://openalex.org/W6630210095","https://openalex.org/W6631943919","https://openalex.org/W6637215457","https://openalex.org/W6640963894","https://openalex.org/W6675354045","https://openalex.org/W6675401909","https://openalex.org/W6676231525","https://openalex.org/W6676481782","https://openalex.org/W6681096077","https://openalex.org/W6684753728","https://openalex.org/W6688386640","https://openalex.org/W6693260161","https://openalex.org/W6733655817","https://openalex.org/W6744803058"],"related_works":["https://openalex.org/W4310873165","https://openalex.org/W2355395139","https://openalex.org/W2002563186","https://openalex.org/W2983142544","https://openalex.org/W2891059443","https://openalex.org/W4281663961","https://openalex.org/W3208888551","https://openalex.org/W4313561566","https://openalex.org/W3208386644","https://openalex.org/W4220682630"],"abstract_inverted_index":{"This":[0],"paper":[1],"proposes":[2],"latent":[3,132],"representation":[4,133],"models":[5,110,172,196],"for":[6,35,162],"improving":[7],"network":[8,21,185],"anomaly":[9,12,33],"detection.":[10],"Well-known":[11],"detection":[13],"algorithms":[14,159],"often":[15],"suffer":[16],"from":[17,97,105,114],"challenges":[18],"posed":[19],"by":[20],"data,":[22,99],"such":[23],"as":[24,149],"high":[25],"dimension":[26],"and":[27,29,39,54,120,179,183],"sparsity,":[28],"a":[30,50,55,63,150,213],"lack":[31],"of":[32,75,138,156,201,216],"data":[34,61,85,152],"training,":[36],"model":[37,202],"selection,":[38],"hyperparameter":[40,217],"tuning.":[41],"Our":[42],"approach":[43],"is":[44,146,210],"to":[45,49,129,136,176,212],"introduce":[46],"new":[47,151],"regularizers":[48],"classical":[51],"autoencoder":[52],"(AE)":[53],"variational":[56],"AE,":[57,119,122],"which":[58,95,124],"force":[59],"normal":[60,84,88,98,107],"into":[62],"very":[64,112],"tight":[65],"area":[66,74],"centered":[67],"at":[68],"the":[69,72,76,91,106,125,139,164,195,199],"origin":[70],"in":[71,123],"nonsaturating":[73],"bottleneck":[77,143],"unit":[78],"activations.":[79],"These":[80],"trained":[81],"AEs":[82,127],"on":[83,181,204],"will":[86,100],"push":[87],"points":[89],"toward":[90],"origin,":[92],"whereas":[93],"anomalies,":[94],"differ":[96],"be":[101],"put":[102],"far":[103],"away":[104],"region.":[108],"The":[109,142,167],"are":[111,160],"different":[113],"common":[115],"regularized":[116,126],"AEs,":[117],"sparse":[118,184],"contractive":[121],"tend":[128],"make":[130],"their":[131,208],"less":[134],"sensitive":[135],"changes":[137],"input":[140],"data.":[141],"feature":[144],"space":[145],"now":[147],"used":[148,161],"representation.":[153],"A":[154],"number":[155],"one-class":[157],"learning":[158],"evaluating":[163],"proposed":[165],"models.":[166],"experiments":[168],"testify":[169],"that":[170],"our":[171],"help":[173],"these":[174,205],"classifiers":[175,206],"perform":[177],"efficiently":[178],"consistently":[180],"high-dimensional":[182],"datasets,":[186],"even":[187],"with":[188],"relatively":[189],"few":[190],"training":[191],"points.":[192],"More":[193],"importantly,":[194],"can":[197],"minimize":[198],"effect":[200],"selection":[203],"since":[207],"performance":[209],"insensitive":[211],"wide":[214],"range":[215],"settings.":[218]},"counts_by_year":[{"year":2025,"cited_by_count":19},{"year":2024,"cited_by_count":23},{"year":2023,"cited_by_count":30},{"year":2022,"cited_by_count":29},{"year":2021,"cited_by_count":40},{"year":2020,"cited_by_count":21},{"year":2019,"cited_by_count":15},{"year":2018,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
