{"id":"https://openalex.org/W3048313003","doi":"https://doi.org/10.1109/tnsm.2020.3014929","title":"Multi-Stage Optimized Machine Learning Framework for Network Intrusion Detection","display_name":"Multi-Stage Optimized Machine Learning Framework for Network Intrusion Detection","publication_year":2020,"publication_date":"2020-08-07","ids":{"openalex":"https://openalex.org/W3048313003","doi":"https://doi.org/10.1109/tnsm.2020.3014929","mag":"3048313003"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2020.3014929","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2020.3014929","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2008.03297","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5006496852","display_name":"MohammadNoor Injadat","orcid":"https://orcid.org/0000-0003-1959-0058"},"institutions":[{"id":"https://openalex.org/I125749732","display_name":"Western University","ror":"https://ror.org/02grkyz14","country_code":"CA","type":"education","lineage":["https://openalex.org/I125749732"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"MohammadNoor Injadat","raw_affiliation_strings":["University of Western Ontario, London, ON, Canada"],"affiliations":[{"raw_affiliation_string":"University of Western Ontario, London, ON, Canada","institution_ids":["https://openalex.org/I125749732"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022670644","display_name":"Abdallah Moubayed","orcid":"https://orcid.org/0000-0002-1476-164X"},"institutions":[{"id":"https://openalex.org/I125749732","display_name":"Western University","ror":"https://ror.org/02grkyz14","country_code":"CA","type":"education","lineage":["https://openalex.org/I125749732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Abdallah Moubayed","raw_affiliation_strings":["University of Western Ontario, London, ON, Canada"],"affiliations":[{"raw_affiliation_string":"University of Western Ontario, London, ON, Canada","institution_ids":["https://openalex.org/I125749732"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002628427","display_name":"Ali Bou Nassif","orcid":"https://orcid.org/0000-0003-1570-0897"},"institutions":[{"id":"https://openalex.org/I125749732","display_name":"Western University","ror":"https://ror.org/02grkyz14","country_code":"CA","type":"education","lineage":["https://openalex.org/I125749732"]},{"id":"https://openalex.org/I29891158","display_name":"University of Sharjah","ror":"https://ror.org/00engpz63","country_code":"AE","type":"education","lineage":["https://openalex.org/I29891158"]}],"countries":["AE","CA"],"is_corresponding":false,"raw_author_name":"Ali Bou Nassif","raw_affiliation_strings":["University of Sharjah, Sharjah, UAE","University of Western Ontario, London, ON, Canada"],"affiliations":[{"raw_affiliation_string":"University of Sharjah, Sharjah, UAE","institution_ids":["https://openalex.org/I29891158"]},{"raw_affiliation_string":"University of Western Ontario, London, ON, Canada","institution_ids":["https://openalex.org/I125749732"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5041270670","display_name":"Abdallah Shami","orcid":"https://orcid.org/0000-0003-2887-0350"},"institutions":[{"id":"https://openalex.org/I125749732","display_name":"Western University","ror":"https://ror.org/02grkyz14","country_code":"CA","type":"education","lineage":["https://openalex.org/I125749732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Abdallah Shami","raw_affiliation_strings":["University of Western Ontario, London, ON, Canada"],"affiliations":[{"raw_affiliation_string":"University of Western Ontario, London, ON, Canada","institution_ids":["https://openalex.org/I125749732"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5006496852"],"corresponding_institution_ids":["https://openalex.org/I125749732"],"apc_list":null,"apc_paid":null,"fwci":22.5025,"has_fulltext":false,"cited_by_count":267,"citation_normalized_percentile":{"value":0.99664134,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"18","issue":"2","first_page":"1803","last_page":"1816"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.774964451789856},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7543945908546448},{"id":"https://openalex.org/keywords/oversampling","display_name":"Oversampling","score":0.6925030946731567},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6477847099304199},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6334893107414246},{"id":"https://openalex.org/keywords/constant-false-alarm-rate","display_name":"Constant false alarm rate","score":0.5770126581192017},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.5001754760742188},{"id":"https://openalex.org/keywords/sample-size-determination","display_name":"Sample size determination","score":0.4693770408630371},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4512443244457245},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4469248950481415},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4460962116718292},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.4181009531021118},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.09975570440292358},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.08979642391204834},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.08308461308479309}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.774964451789856},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7543945908546448},{"id":"https://openalex.org/C197323446","wikidata":"https://www.wikidata.org/wiki/Q331222","display_name":"Oversampling","level":3,"score":0.6925030946731567},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6477847099304199},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6334893107414246},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.5770126581192017},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.5001754760742188},{"id":"https://openalex.org/C129848803","wikidata":"https://www.wikidata.org/wiki/Q2564360","display_name":"Sample size determination","level":2,"score":0.4693770408630371},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4512443244457245},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4469248950481415},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4460962116718292},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.4181009531021118},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09975570440292358},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.08979642391204834},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.08308461308479309},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.0},{"id":"https://openalex.org/C2776257435","wikidata":"https://www.wikidata.org/wiki/Q1576430","display_name":"Bandwidth (computing)","level":2,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tnsm.2020.3014929","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2020.3014929","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2008.03297","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2008.03297","pdf_url":"https://arxiv.org/pdf/2008.03297","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2008.03297","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2008.03297","pdf_url":"https://arxiv.org/pdf/2008.03297","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"score":0.5899999737739563,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":87,"referenced_works":["https://openalex.org/W33933511","https://openalex.org/W433644524","https://openalex.org/W1465090524","https://openalex.org/W1495061682","https://openalex.org/W1568404366","https://openalex.org/W1695431174","https://openalex.org/W1750422355","https://openalex.org/W1761159547","https://openalex.org/W1888136415","https://openalex.org/W1992377888","https://openalex.org/W2025001960","https://openalex.org/W2031163547","https://openalex.org/W2046609661","https://openalex.org/W2050206309","https://openalex.org/W2059115408","https://openalex.org/W2078559757","https://openalex.org/W2082931571","https://openalex.org/W2086540457","https://openalex.org/W2088891725","https://openalex.org/W2097034581","https://openalex.org/W2097998348","https://openalex.org/W2099201756","https://openalex.org/W2100537916","https://openalex.org/W2101109743","https://openalex.org/W2101234009","https://openalex.org/W2109722477","https://openalex.org/W2120685459","https://openalex.org/W2125194875","https://openalex.org/W2131241448","https://openalex.org/W2139669429","https://openalex.org/W2140491475","https://openalex.org/W2141390398","https://openalex.org/W2148143831","https://openalex.org/W2153919695","https://openalex.org/W2166207903","https://openalex.org/W2258585808","https://openalex.org/W2290473050","https://openalex.org/W2296509296","https://openalex.org/W2357454289","https://openalex.org/W2405446364","https://openalex.org/W2468706984","https://openalex.org/W2487770199","https://openalex.org/W2604105233","https://openalex.org/W2609225916","https://openalex.org/W2789337632","https://openalex.org/W2789828921","https://openalex.org/W2794988934","https://openalex.org/W2883325838","https://openalex.org/W2885070483","https://openalex.org/W2889406945","https://openalex.org/W2892556724","https://openalex.org/W2893123663","https://openalex.org/W2904037980","https://openalex.org/W2904893217","https://openalex.org/W2910197492","https://openalex.org/W2916401208","https://openalex.org/W2918109107","https://openalex.org/W2937483190","https://openalex.org/W2962590879","https://openalex.org/W2962725067","https://openalex.org/W2979657369","https://openalex.org/W2981094074","https://openalex.org/W2982633340","https://openalex.org/W2988864014","https://openalex.org/W3009513989","https://openalex.org/W3012289806","https://openalex.org/W3022199973","https://openalex.org/W3029474863","https://openalex.org/W3044339716","https://openalex.org/W3045004532","https://openalex.org/W3097993951","https://openalex.org/W3101647584","https://openalex.org/W3107464100","https://openalex.org/W3117331835","https://openalex.org/W4211116959","https://openalex.org/W4287776057","https://openalex.org/W4289236186","https://openalex.org/W6629652716","https://openalex.org/W6637825345","https://openalex.org/W6674385629","https://openalex.org/W6675200109","https://openalex.org/W6675354045","https://openalex.org/W6676367512","https://openalex.org/W6678911119","https://openalex.org/W6706610444","https://openalex.org/W6778235376","https://openalex.org/W6779366610"],"related_works":["https://openalex.org/W2061466315","https://openalex.org/W2376886931","https://openalex.org/W1992118813","https://openalex.org/W2010561419","https://openalex.org/W2374845301","https://openalex.org/W2351448539","https://openalex.org/W1977863481","https://openalex.org/W2384741105","https://openalex.org/W1495178644","https://openalex.org/W2185594426"],"abstract_inverted_index":{"Cyber-security":[0],"garnered":[1],"significant":[2],"attention":[3],"due":[4],"to":[5,41,118,160,167],"the":[6,14,20,69,75,82,120,126,137,141,149,154,170],"increased":[7],"dependency":[8],"of":[9,24,71,125],"individuals":[10],"and":[11,16,22,80,98,100,107,140,162,194],"organizations":[12],"on":[13,74,104],"Internet":[15],"their":[17,25,102],"concern":[18],"about":[19],"security":[21],"privacy":[23],"online":[26,45],"activities.":[27],"Several":[28],"previous":[29],"machine":[30],"learning":[31],"(ML)-based":[32],"network":[33],"intrusion":[34,134],"detection":[35,64,105,135,179],"systems":[36],"(NIDSs)":[37],"have":[38],"been":[39],"developed":[40],"protect":[42],"against":[43],"malicious":[44],"behavior.":[46],"This":[47,66],"paper":[48],"proposes":[49],"a":[50],"novel":[51],"multi-stage":[52],"optimized":[53],"ML-based":[54],"NIDS":[55],"framework":[56,128],"that":[57,148],"reduces":[58,153],"computational":[59],"complexity":[60],"while":[61],"maintaining":[62],"its":[63],"performance.":[65,122],"work":[67],"studies":[68],"impact":[70],"oversampling":[72],"techniques":[73,115],"models\u2019":[76],"training":[77,85,156],"sample":[78,86,157],"size":[79,158,165],"determines":[81],"minimal":[83],"suitable":[84],"size.":[87],"Furthermore,":[88],"it":[89],"compares":[90],"between":[91],"two":[92,132],"feature":[93,163],"selection":[94],"techniques,":[95],"information":[96],"gain":[97],"correlation-based,":[99],"explores":[101],"effect":[103],"performance":[106,124,172],"time":[108],"complexity.":[109],"Moreover,":[110,169],"different":[111],"ML":[112],"hyper-parameter":[113,176],"optimization":[114,177],"are":[116],"investigated":[117],"enhance":[119],"NIDS\u2019s":[121],"The":[123],"proposed":[127,150],"is":[129,173],"evaluated":[130],"using":[131],"recent":[133,187],"datasets,":[136,185],"CICIDS":[138],"2017":[139],"UNSW-NB":[142],"2015":[143],"datasets.":[144],"Experimental":[145],"results":[146],"show":[147],"model":[151,171],"significantly":[152],"required":[155],"(up":[159,166],"74%)":[161],"set":[164],"50%).":[168],"enhanced":[174],"with":[175,178],"accuracies":[180],"over":[181],"99%":[182],"for":[183],"both":[184],"outperforming":[186],"literature":[188],"works":[189],"by":[190],"1-2%":[191,195],"higher":[192],"accuracy":[193],"lower":[196],"false":[197],"alarm":[198],"rate.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":9},{"year":2025,"cited_by_count":59},{"year":2024,"cited_by_count":60},{"year":2023,"cited_by_count":56},{"year":2022,"cited_by_count":51},{"year":2021,"cited_by_count":28},{"year":2020,"cited_by_count":4}],"updated_date":"2026-04-02T15:55:50.835912","created_date":"2025-10-10T00:00:00"}