{"id":"https://openalex.org/W4205717613","doi":"https://doi.org/10.1109/tnet.2021.3138536","title":"Leveraging a Probabilistic PCA Model to Understand the Multivariate Statistical Network Monitoring Framework for Network Security Anomaly Detection","display_name":"Leveraging a Probabilistic PCA Model to Understand the Multivariate Statistical Network Monitoring Framework for Network Security Anomaly Detection","publication_year":2022,"publication_date":"2022-01-04","ids":{"openalex":"https://openalex.org/W4205717613","doi":"https://doi.org/10.1109/tnet.2021.3138536"},"language":"en","primary_location":{"id":"doi:10.1109/tnet.2021.3138536","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnet.2021.3138536","pdf_url":null,"source":{"id":"https://openalex.org/S62238642","display_name":"IEEE/ACM Transactions on Networking","issn_l":"1063-6692","issn":["1063-6692","1558-2566"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE/ACM Transactions on Networking","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2302.01759","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001343843","display_name":"Fernando P\u00e9rez-Bueno","orcid":"https://orcid.org/0000-0002-7404-794X"},"institutions":[{"id":"https://openalex.org/I173304897","display_name":"Universidad de Granada","ror":"https://ror.org/04njjy449","country_code":"ES","type":"education","lineage":["https://openalex.org/I173304897"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Fernando Perez-Bueno","raw_affiliation_strings":["Departamento de Ciencias de la Computación e Inteligencia Artificial, Universidad de Granada, Granada, Spain"],"raw_orcid":"https://orcid.org/0000-0002-7404-794X","affiliations":[{"raw_affiliation_string":"Departamento de Ciencias de la Computación e Inteligencia Artificial, Universidad de Granada, Granada, Spain","institution_ids":["https://openalex.org/I173304897"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013746163","display_name":"Luz Garc\u00eda","orcid":"https://orcid.org/0000-0001-5904-5412"},"institutions":[{"id":"https://openalex.org/I173304897","display_name":"Universidad de Granada","ror":"https://ror.org/04njjy449","country_code":"ES","type":"education","lineage":["https://openalex.org/I173304897"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Luz Garcia","raw_affiliation_strings":["Departamento de Teoria de la Señal, Telematica y Comunicaciones, Universidad de Granada, Granada, Spain"],"raw_orcid":"https://orcid.org/0000-0001-5904-5412","affiliations":[{"raw_affiliation_string":"Departamento de Teoria de la Señal, Telematica y Comunicaciones, Universidad de Granada, Granada, Spain","institution_ids":["https://openalex.org/I173304897"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070751422","display_name":"Gabriel Maci\u00e1\u2010Fern\u00e1ndez","orcid":"https://orcid.org/0000-0001-9256-453X"},"institutions":[{"id":"https://openalex.org/I173304897","display_name":"Universidad de Granada","ror":"https://ror.org/04njjy449","country_code":"ES","type":"education","lineage":["https://openalex.org/I173304897"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Gabriel Macia-Fernandez","raw_affiliation_strings":["Departamento de Teoria de la Señal, Telematica y Comunicaciones, Universidad de Granada, Granada, Spain"],"raw_orcid":"https://orcid.org/0000-0001-9256-453X","affiliations":[{"raw_affiliation_string":"Departamento de Teoria de la Señal, Telematica y Comunicaciones, Universidad de Granada, Granada, Spain","institution_ids":["https://openalex.org/I173304897"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5023830568","display_name":"Rafael Molina","orcid":"https://orcid.org/0000-0003-4694-8588"},"institutions":[{"id":"https://openalex.org/I173304897","display_name":"Universidad de Granada","ror":"https://ror.org/04njjy449","country_code":"ES","type":"education","lineage":["https://openalex.org/I173304897"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Rafael Molina","raw_affiliation_strings":["Departamento de Ciencias de la Computación e Inteligencia Artificial, Universidad de Granada, Granada, Spain"],"raw_orcid":"https://orcid.org/0000-0003-4694-8588","affiliations":[{"raw_affiliation_string":"Departamento de Ciencias de la Computación e Inteligencia Artificial, Universidad de Granada, Granada, Spain","institution_ids":["https://openalex.org/I173304897"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.139,"has_fulltext":true,"cited_by_count":16,"citation_normalized_percentile":{"value":0.87265175,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"30","issue":"3","first_page":"1217","last_page":"1229"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12205","display_name":"Time Series Analysis and Forecasting","score":0.9915000200271606,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8770068883895874},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.7272019386291504},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7200003862380981},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.6033321619033813},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5837825536727905},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.5586783289909363},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.5523602366447449},{"id":"https://openalex.org/keywords/statistical-model","display_name":"Statistical model","score":0.5252875089645386},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.47032225131988525},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.41023173928260803},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.09318974614143372},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.06761863827705383}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8770068883895874},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.7272019386291504},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7200003862380981},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6033321619033813},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5837825536727905},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.5586783289909363},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5523602366447449},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.5252875089645386},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47032225131988525},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.41023173928260803},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09318974614143372},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.06761863827705383},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/tnet.2021.3138536","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnet.2021.3138536","pdf_url":null,"source":{"id":"https://openalex.org/S62238642","display_name":"IEEE/ACM Transactions on Networking","issn_l":"1063-6692","issn":["1063-6692","1558-2566"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE/ACM Transactions on Networking","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2302.01759","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2302.01759","pdf_url":"https://arxiv.org/pdf/2302.01759","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:digibug.ugr.es:10481/99755","is_oa":false,"landing_page_url":"https://hdl.handle.net/10481/99755","pdf_url":null,"source":{"id":"https://openalex.org/S4306400567","display_name":"Institutional Repository of the University of Granada (University of Granada)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I173304897","host_organization_name":"Universidad de Granada","host_organization_lineage":["https://openalex.org/I173304897"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"AM"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2302.01759","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2302.01759","pdf_url":"https://arxiv.org/pdf/2302.01759","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.5299999713897705}],"awards":[{"id":"https://openalex.org/G1655855741","display_name":null,"funder_award_id":"BES-2017-081584","funder_id":"https://openalex.org/F4320326262","funder_display_name":"Ministerio de Asuntos Econ\u00f3micos y Transformaci\u00f3n Digital, Gobierno de Espa\u00f1a"},{"id":"https://openalex.org/G2262748287","display_name":null,"funder_award_id":"501100011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G3480869486","display_name":null,"funder_award_id":"13039","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G421834825","display_name":null,"funder_award_id":"A-TIC-215-UGR18","funder_id":"https://openalex.org/F4320321837","funder_display_name":"Ministerio de Econom\u00eda y Competitividad"},{"id":"https://openalex.org/G5332122942","display_name":null,"funder_award_id":"TIN2017-83494-R","funder_id":"https://openalex.org/F4320321837","funder_display_name":"Ministerio de Econom\u00eda y Competitividad"},{"id":"https://openalex.org/G6924926864","display_name":null,"funder_award_id":"PID2019-105142RBC22/ AEI/10.13039/501100011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G7084143925","display_name":null,"funder_award_id":"AEI/10","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G7266728691","display_name":null,"funder_award_id":"13039/501100011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G8430294048","display_name":null,"funder_award_id":"13039/501100011033","funder_id":"https://openalex.org/F4320321837","funder_display_name":"Ministerio de Econom\u00eda y Competitividad"},{"id":"https://openalex.org/G8684520763","display_name":null,"funder_award_id":"PID2019","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"}],"funders":[{"id":"https://openalex.org/F4320321837","display_name":"Ministerio de Econom\u00eda y Competitividad","ror":"https://ror.org/034900433"},{"id":"https://openalex.org/F4320326262","display_name":"Ministerio de Asuntos Econ\u00f3micos y Transformaci\u00f3n Digital, Gobierno de Espa\u00f1a","ror":"https://ror.org/03sv46s19"},{"id":"https://openalex.org/F4320335598","display_name":"Agencia Estatal de Investigaci\u00f3n","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4205717613.pdf","grobid_xml":"https://content.openalex.org/works/W4205717613.grobid-xml"},"referenced_works_count":44,"referenced_works":["https://openalex.org/W195815859","https://openalex.org/W1506806321","https://openalex.org/W1959608418","https://openalex.org/W1963821364","https://openalex.org/W1965669468","https://openalex.org/W1976790773","https://openalex.org/W2007562169","https://openalex.org/W2028007625","https://openalex.org/W2077488147","https://openalex.org/W2118931532","https://openalex.org/W2125027820","https://openalex.org/W2144936818","https://openalex.org/W2157714983","https://openalex.org/W2169623711","https://openalex.org/W2171604933","https://openalex.org/W2278807966","https://openalex.org/W2286533962","https://openalex.org/W2402124760","https://openalex.org/W2574169068","https://openalex.org/W2749908420","https://openalex.org/W2756489700","https://openalex.org/W2770942607","https://openalex.org/W2778235027","https://openalex.org/W2785362611","https://openalex.org/W2910068345","https://openalex.org/W2924689635","https://openalex.org/W2954548827","https://openalex.org/W3009746682","https://openalex.org/W3035311645","https://openalex.org/W3089028909","https://openalex.org/W3098957257","https://openalex.org/W3129166376","https://openalex.org/W3138766067","https://openalex.org/W3153872861","https://openalex.org/W3161677312","https://openalex.org/W3164570145","https://openalex.org/W3164952570","https://openalex.org/W4212863985","https://openalex.org/W4248484754","https://openalex.org/W4300506038","https://openalex.org/W6640963894","https://openalex.org/W6695019709","https://openalex.org/W6758101687","https://openalex.org/W7016021835"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4377864969","https://openalex.org/W2972971679"],"abstract_inverted_index":{"Network":[0,117],"anomaly":[1,43,72,79,133,176],"detection":[2,80,134],"is":[3,167],"a":[4,37,86,95,127,153,168],"very":[5],"relevant":[6],"research":[7],"area":[8],"nowadays,":[9],"especially":[10],"due":[11],"to":[12,49,52,113,157,185,192],"its":[13,111],"multiple":[14],"applications":[15],"in":[16],"the":[17,58,61,105,114,137,144,160,164],"field":[18,138],"of":[19,24,39,60,66,91,129,139],"network":[20,68,174,193],"security.":[21],"The":[22,151],"boost":[23],"new":[25,55],"models":[26,56,191],"based":[27,82],"on":[28,83],"variational":[29],"autoencoders":[30],"and":[31,93,109,163],"generative":[32,88,190],"adversarial":[33],"networks":[34],"has":[35],"motivated":[36],"reevaluation":[38],"traditional":[40],"techniques":[41,81],"for":[42,71,173],"detection.":[44,73,177,195],"It":[45],"is,":[46],"however,":[47],"essential":[48],"be":[50,186],"able":[51],"understand":[53,159],"these":[54],"from":[57,64,85],"perspective":[59],"experience":[62,135],"attained":[63],"years":[65],"evaluating":[67],"security":[69,175,194],"data":[70],"In":[74],"this":[75],"paper,":[76],"we":[77,102,183],"revisit":[78],"PCA":[84,107],"probabilistic":[87,106],"model":[89,97,108,146],"point":[90],"view,":[92],"contribute":[94],"mathematical":[96,145],"that":[98,182],"relates":[99],"them.":[100],"Specifically,":[101],"start":[103],"with":[104],"explain":[110],"connection":[112],"Multivariate":[115],"Statistical":[116],"Monitoring":[118],"(MSNM)":[119],"framework.":[120],"MSNM":[121],"was":[122],"recently":[123],"successfully":[124],"proposed":[125],"as":[126],"means":[128],"incorporating":[130],"industrial":[131],"process":[132],"into":[136],"networking.":[140],"We":[141,178],"have":[142,179],"evaluated":[143],"using":[147],"two":[148],"different":[149],"datasets.":[150],"first,":[152],"synthetic":[154],"dataset":[155,172],"created":[156],"better":[158],"analysis":[161],"proposed,":[162],"second,":[165],"UGR\u201916,":[166],"specifically":[169],"designed":[170],"real-traffic":[171],"drawn":[180],"conclusions":[181],"consider":[184],"useful":[187],"when":[188],"applying":[189]},"counts_by_year":[{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}