{"id":"https://openalex.org/W4401691527","doi":"https://doi.org/10.1109/tnet.2024.3413789","title":"FOSS: Towards Fine-Grained Unknown Class Detection Against the Open-Set Attack Spectrum With Variable Legitimate Traffic","display_name":"FOSS: Towards Fine-Grained Unknown Class Detection Against the Open-Set Attack Spectrum With Variable Legitimate Traffic","publication_year":2024,"publication_date":"2024-08-19","ids":{"openalex":"https://openalex.org/W4401691527","doi":"https://doi.org/10.1109/tnet.2024.3413789"},"language":"en","primary_location":{"id":"doi:10.1109/tnet.2024.3413789","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnet.2024.3413789","pdf_url":null,"source":{"id":"https://openalex.org/S62238642","display_name":"IEEE/ACM Transactions on Networking","issn_l":"1063-6692","issn":["1063-6692","1558-2566"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE/ACM Transactions on Networking","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101902155","display_name":"Ziming Zhao","orcid":"https://orcid.org/0000-0003-1455-4330"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Ziming Zhao","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022409306","display_name":"Zhaoxuan Li","orcid":"https://orcid.org/0000-0002-2195-0799"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaoxuan Li","raw_affiliation_strings":["State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084396416","display_name":"Xiaofei Xie","orcid":"https://orcid.org/0000-0002-1288-6502"},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Xiaofei Xie","raw_affiliation_strings":["School of Computing and Information Systems, Singapore Management University, Bras Basah, Singapore"],"affiliations":[{"raw_affiliation_string":"School of Computing and Information Systems, Singapore Management University, Bras Basah, Singapore","institution_ids":["https://openalex.org/I79891267"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058013874","display_name":"Jiongchi Yu","orcid":"https://orcid.org/0000-0002-2888-4499"},"institutions":[{"id":"https://openalex.org/I79891267","display_name":"Singapore Management University","ror":"https://ror.org/050qmg959","country_code":"SG","type":"education","lineage":["https://openalex.org/I79891267"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jiongchi Yu","raw_affiliation_strings":["School of Computing and Information Systems, Singapore Management University, Bras Basah, Singapore"],"affiliations":[{"raw_affiliation_string":"School of Computing and Information Systems, Singapore Management University, Bras Basah, Singapore","institution_ids":["https://openalex.org/I79891267"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100403380","display_name":"Fan Zhang","orcid":"https://orcid.org/0000-0001-6087-8243"},"institutions":[{"id":"https://openalex.org/I168879160","display_name":"Zhejiang University of Science and Technology","ror":"https://ror.org/05mx0wr29","country_code":"CN","type":"education","lineage":["https://openalex.org/I168879160"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fan Zhang","raw_affiliation_strings":["College of Computer Science and Technology, Zhejiang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Zhejiang University, Hangzhou, China","institution_ids":["https://openalex.org/I168879160"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040976660","display_name":"Rui Zhang","orcid":"https://orcid.org/0000-0003-0002-5593"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Rui Zhang","raw_affiliation_strings":["State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100687673","display_name":"Binbin Chen","orcid":"https://orcid.org/0000-0002-9584-0082"},"institutions":[{"id":"https://openalex.org/I4210108443","display_name":"Advanced Digital Sciences Center","ror":"https://ror.org/01xaqx887","country_code":"SG","type":"facility","lineage":["https://openalex.org/I4210108443"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Binbin Chen","raw_affiliation_strings":["Advanced Digital Sciences Center, Create Tower, Singapore"],"affiliations":[{"raw_affiliation_string":"Advanced Digital Sciences Center, Create Tower, Singapore","institution_ids":["https://openalex.org/I4210108443"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102018721","display_name":"Xiangyang Luo","orcid":"https://orcid.org/0000-0001-6062-2950"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiangyang Luo","raw_affiliation_strings":["Henan Province Key Laboratory of Cyberspace Situation Awareness, Zhengzhou, China"],"affiliations":[{"raw_affiliation_string":"Henan Province Key Laboratory of Cyberspace Situation Awareness, Zhengzhou, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017425520","display_name":"Ming Hu","orcid":"https://orcid.org/0000-0002-5058-4660"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Ming Hu","raw_affiliation_strings":["School of Computer Science and Engineering, Nanyang Technological University, Jurong West, Singapore"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Nanyang Technological University, Jurong West, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101337304","display_name":"Wenrui Ma","orcid":"https://orcid.org/0009-0003-9649-1499"},"institutions":[{"id":"https://openalex.org/I75059550","display_name":"Zhejiang Gongshang University","ror":"https://ror.org/0569mkk41","country_code":"CN","type":"education","lineage":["https://openalex.org/I75059550"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenrui Ma","raw_affiliation_strings":["School of Computer Science and Technology, Zhejiang Gongshang University, Hangzhou, China"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Zhejiang Gongshang University, Hangzhou, China","institution_ids":["https://openalex.org/I75059550"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":10,"corresponding_author_ids":["https://openalex.org/A5101902155"],"corresponding_institution_ids":["https://openalex.org/I168879160"],"apc_list":null,"apc_paid":null,"fwci":4.9745,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.96512771,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"32","issue":"5","first_page":"3945","last_page":"3960"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10500","display_name":"Sparse and Compressive Sensing Techniques","score":0.9889000058174133,"subfield":{"id":"https://openalex.org/subfields/2206","display_name":"Computational Mechanics"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10500","display_name":"Sparse and Compressive Sensing Techniques","score":0.9889000058174133,"subfield":{"id":"https://openalex.org/subfields/2206","display_name":"Computational Mechanics"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12131","display_name":"Wireless Signal Modulation Classification","score":0.9745000004768372,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11498","display_name":"Security in Wireless Sensor Networks","score":0.9717000126838684,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.5533511638641357},{"id":"https://openalex.org/keywords/variable","display_name":"Variable (mathematics)","score":0.5196186900138855},{"id":"https://openalex.org/keywords/spectrum","display_name":"Spectrum (functional analysis)","score":0.5075656175613403},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.4928281605243683},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.46029528975486755},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.39397233724594116},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3109673261642456},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.3087354600429535},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.12230464816093445},{"id":"https://openalex.org/keywords/mathematical-analysis","display_name":"Mathematical analysis","score":0.06334325671195984},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.06298890709877014}],"concepts":[{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.5533511638641357},{"id":"https://openalex.org/C182365436","wikidata":"https://www.wikidata.org/wiki/Q50701","display_name":"Variable (mathematics)","level":2,"score":0.5196186900138855},{"id":"https://openalex.org/C156778621","wikidata":"https://www.wikidata.org/wiki/Q1365748","display_name":"Spectrum (functional analysis)","level":2,"score":0.5075656175613403},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4928281605243683},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.46029528975486755},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.39397233724594116},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3109673261642456},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3087354600429535},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.12230464816093445},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.06334325671195984},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.06298890709877014},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnet.2024.3413789","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnet.2024.3413789","pdf_url":null,"source":{"id":"https://openalex.org/S62238642","display_name":"IEEE/ACM Transactions on Networking","issn_l":"1063-6692","issn":["1063-6692","1558-2566"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE/ACM Transactions on Networking","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4013555790","display_name":null,"funder_award_id":"62072398","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6027343793","display_name":null,"funder_award_id":"62227805","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6487752525","display_name":null,"funder_award_id":"62172405","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7668319085","display_name":null,"funder_award_id":"BK20220075","funder_id":"https://openalex.org/F4320322769","funder_display_name":"Natural Science Foundation of Jiangsu Province"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320322769","display_name":"Natural Science Foundation of Jiangsu Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W1488996941","https://openalex.org/W1532554355","https://openalex.org/W1740377143","https://openalex.org/W1985987493","https://openalex.org/W1989454965","https://openalex.org/W2000756828","https://openalex.org/W2187089797","https://openalex.org/W2296719434","https://openalex.org/W2343828539","https://openalex.org/W2513948921","https://openalex.org/W2558600380","https://openalex.org/W2759431188","https://openalex.org/W2892214024","https://openalex.org/W2920544805","https://openalex.org/W2963183879","https://openalex.org/W2963197901","https://openalex.org/W2976836186","https://openalex.org/W2988337058","https://openalex.org/W3007237867","https://openalex.org/W3008207353","https://openalex.org/W3040389479","https://openalex.org/W3119160111","https://openalex.org/W3128341305","https://openalex.org/W3136284412","https://openalex.org/W3137832402","https://openalex.org/W3165871547","https://openalex.org/W3173170122","https://openalex.org/W3200583622","https://openalex.org/W3201894803","https://openalex.org/W4287644588","https://openalex.org/W4319994093","https://openalex.org/W4322706638","https://openalex.org/W4324007053","https://openalex.org/W4386363082","https://openalex.org/W4389937323","https://openalex.org/W4390571282","https://openalex.org/W4391558006","https://openalex.org/W4392529334","https://openalex.org/W4396757496","https://openalex.org/W4399303303","https://openalex.org/W6637131181","https://openalex.org/W6743618022","https://openalex.org/W6753153400","https://openalex.org/W6794006112","https://openalex.org/W6794840795","https://openalex.org/W6795076093"],"related_works":["https://openalex.org/W3018365851","https://openalex.org/W3207484021","https://openalex.org/W2368454205","https://openalex.org/W1041577264","https://openalex.org/W3123600015","https://openalex.org/W2370467235","https://openalex.org/W2926402417","https://openalex.org/W2989824750","https://openalex.org/W2360858150","https://openalex.org/W370365947"],"abstract_inverted_index":{"Anomaly-based":[0],"network":[1,106],"intrusion":[2,107],"detection":[3,36],"systems":[4],"(NIDSs)":[5],"are":[6,28],"essential":[7],"for":[8],"ensuring":[9],"cybersecurity.":[10],"However,":[11],"the":[12,63,69,77,83,87,102,115,129,150],"security":[13],"communities":[14],"realize":[15],"some":[16],"limitations":[17],"when":[18],"they":[19],"put":[20],"most":[21],"existing":[22],"proposals":[23],"into":[24],"practice.":[25],"The":[26,53],"challenges":[27],"mainly":[29],"concerned":[30],"with":[31,128],"(i)":[32],"fine-grained":[33,160],"unknown":[34],"attack":[35],"and":[37,67,145],"(ii)":[38],"ever-changing":[39],"legitimate":[40],"traffic":[41],"adaptation.":[42],"To":[43],"tackle":[44],"these":[45],"problem,":[46],"we":[47,109,119,148],"present":[48],"three":[49,98],"key":[50],"design":[51,90],"norms.":[52,99],"core":[54],"idea":[55],"is":[56],"to":[57,61,89,95,134,154],"construct":[58],"a":[59,159],"model":[60,79],"split":[62],"data":[64],"distribution":[65],"hyperplane":[66],"leverage":[68],"concept":[70],"of":[71,105,124,138,152],"isolation,":[72],"as":[73,75,86],"well":[74],"advance":[76],"incremental":[78],"update.":[80],"We":[81],"utilize":[82],"isolation":[84],"tree":[85],"backbone":[88],"our":[91],"model,":[92],"named":[93],"FOSS,":[94],"echo":[96],"back":[97],"By":[100],"analyzing":[101],"popular":[103],"dataset":[104],"traces,":[108],"show":[110],"that":[111],"FOSS":[112,125,153],"significantly":[113],"outperforms":[114],"state-of-the-art":[116],"methods.":[117],"Further,":[118],"perform":[120],"an":[121],"initial":[122],"deployment":[123],"by":[126],"working":[127],"Internet":[130],"Service":[131],"Provider":[132],"(ISP)":[133],"detect":[135],"distributed":[136],"denial":[137],"service":[139],"(DDoS)":[140],"attacks.":[141],"With":[142],"real-world":[143],"tests":[144],"manual":[146],"analysis,":[147],"demonstrate":[149],"effectiveness":[151],"identify":[155],"previously-unseen":[156],"attacks":[157],"in":[158],"manner.":[161]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":3}],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2024-08-20T00:00:00"}