{"id":"https://openalex.org/W4388758247","doi":"https://doi.org/10.1109/tnsm.2023.3334028","title":"An Autoencoder-Based Hybrid Detection Model for Intrusion Detection With Small-Sample Problem","display_name":"An Autoencoder-Based Hybrid Detection Model for Intrusion Detection With Small-Sample Problem","publication_year":2023,"publication_date":"2023-11-17","ids":{"openalex":"https://openalex.org/W4388758247","doi":"https://doi.org/10.1109/tnsm.2023.3334028"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2023.3334028","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2023.3334028","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035597099","display_name":"Nan Wei","orcid":"https://orcid.org/0000-0001-9075-5738"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nan Wei","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100411650","display_name":"Lihua Yin","orcid":"https://orcid.org/0000-0001-8829-4442"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lihua Yin","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0001-8829-4442","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jingyi Tan","orcid":null},"institutions":[{"id":"https://openalex.org/I4210156464","display_name":"Anhui Xinhua University","ror":"https://ror.org/053d7x641","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210156464"]},{"id":"https://openalex.org/I4400573165","display_name":"Guangzhou Xinhua University","ror":"https://ror.org/0068n3903","country_code":null,"type":"education","lineage":["https://openalex.org/I4400573165"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jingyi Tan","raw_affiliation_strings":["Department of Information Resource Management, Guangzhou Xinhua University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Resource Management, Guangzhou Xinhua University, Guangzhou, China","institution_ids":["https://openalex.org/I4210156464","https://openalex.org/I4400573165"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108311988","display_name":"Chuhong Ruan","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chuhong Ruan","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113023350","display_name":"Chuang Yin","orcid":null},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chuang Yin","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049529533","display_name":"Zhe Sun","orcid":"https://orcid.org/0000-0002-4633-7675"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhe Sun","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-4633-7675","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101981613","display_name":"Xi Luo","orcid":"https://orcid.org/0000-0003-2478-1529"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xi Luo","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0003-2478-1529","affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.0837,"has_fulltext":false,"cited_by_count":38,"citation_normalized_percentile":{"value":0.95997537,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"21","issue":"2","first_page":"2402","last_page":"2412"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.816495418548584},{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.7993966341018677},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.648593544960022},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.5984687209129333},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4598018527030945},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.45074066519737244},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.43191176652908325},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4279940724372864},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4248258173465729},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4207788109779358},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.4191126823425293},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3612718880176544},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.30959463119506836}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.816495418548584},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.7993966341018677},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.648593544960022},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5984687209129333},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4598018527030945},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.45074066519737244},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.43191176652908325},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4279940724372864},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4248258173465729},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4207788109779358},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.4191126823425293},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3612718880176544},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.30959463119506836},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2023.3334028","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2023.3334028","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2495480902","display_name":null,"funder_award_id":"92167203","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2952985428","display_name":null,"funder_award_id":"2021A1515012454","funder_id":"https://openalex.org/F4320337111","funder_display_name":"Basic and Applied Basic Research Foundation of Guangdong Province"},{"id":"https://openalex.org/G4586726719","display_name":null,"funder_award_id":"2022YFB3104100","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null},{"id":"https://openalex.org/F4320337111","display_name":"Basic and Applied Basic Research Foundation of Guangdong Province","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W2791951418","https://openalex.org/W2799758613","https://openalex.org/W2801118360","https://openalex.org/W2889531475","https://openalex.org/W2896967263","https://openalex.org/W2912711574","https://openalex.org/W2949695962","https://openalex.org/W2950250245","https://openalex.org/W2955014922","https://openalex.org/W2959392253","https://openalex.org/W2973442392","https://openalex.org/W2980697058","https://openalex.org/W2986887468","https://openalex.org/W3000307855","https://openalex.org/W3024476475","https://openalex.org/W3090111074","https://openalex.org/W3122864121","https://openalex.org/W3128098287","https://openalex.org/W3128483054","https://openalex.org/W3154284926","https://openalex.org/W3210903652","https://openalex.org/W4206331418","https://openalex.org/W4214699222","https://openalex.org/W4214928356","https://openalex.org/W4220846496","https://openalex.org/W4220959892","https://openalex.org/W4226135488","https://openalex.org/W4283773335","https://openalex.org/W4285227650","https://openalex.org/W4293370949","https://openalex.org/W4293812121","https://openalex.org/W4295219739","https://openalex.org/W4312994655","https://openalex.org/W4318148743","https://openalex.org/W4320033847","https://openalex.org/W4385754713"],"related_works":["https://openalex.org/W3013693939","https://openalex.org/W2566616303","https://openalex.org/W2159052453","https://openalex.org/W3131327266","https://openalex.org/W2734887215","https://openalex.org/W2803255133","https://openalex.org/W4297051394","https://openalex.org/W2752972570","https://openalex.org/W4386815338","https://openalex.org/W4321789545"],"abstract_inverted_index":{"Cyber-attacks":[0],"have":[1],"become":[2],"more":[3],"frequent,":[4],"targeted,":[5],"and":[6,15,31,65,129,163,165,197,231],"complex":[7],"as":[8,79],"the":[9,16,39,52,60,82,101,106,122,144,148,167,192,200,203,228],"exponential":[10],"growth":[11],"in":[12,210],"computer":[13],"networks":[14],"development":[17],"of":[18,20,42,54,62,137,147,214,221],"Internet":[19],"Things":[21],"(IoT).":[22],"Network":[23],"intrusion":[24,83],"detection":[25,76,84,135,145,170,184,194,219],"system":[26],"(NIDS)":[27],"is":[28,140,224],"an":[29,72,207],"important":[30],"essential":[32],"tool":[33],"to":[34,59,111,125,191],"protect":[35],"network":[36,98,120],"environments.":[37],"However,":[38],"low":[40],"performance":[41],"a":[43,90,182,218],"NIDS":[44],"against":[45],"small":[46],"malicious":[47,114,131,138,168,174,188,215],"samples":[48],"has":[49,89,181],"seriously":[50],"threatened":[51],"security":[53],"networks,":[55],"thus":[56],"directly":[57],"leading":[58],"loss":[61],"personal":[63],"property":[64],"national":[66],"interests.":[67],"Given":[68],"this,":[69],"we":[70,154],"propose":[71],"auto":[73],"encoder-based":[74],"hybrid":[75],"model,":[77],"abbreviated":[78],"AHDM,":[80],"for":[81,186],"with":[85,217],"small-sample":[86,113,173,187],"problem.":[87],"AHDM":[88,180,204],"dual":[91],"classifier":[92],"framework.":[93],"It":[94,116],"trains":[95,117],"first":[96],"neural":[97,119,150],"based":[99],"on":[100],"encoding":[102],"features":[103,124],"obtained":[104,141],"from":[105],"autoencoder":[107],"feature":[108],"enhancement":[109],"algorithm":[110],"detect":[112,126],"traffic.":[115,132,175],"second":[118],"using":[121],"original":[123],"normal":[127],"traffic":[128,139,169,189],"large-sample":[130],"The":[133,176],"final":[134],"result":[136],"by":[142],"combining":[143],"results":[146,177],"two":[149],"networks.":[151],"In":[152,199],"experiments,":[153],"use":[155],"three":[156],"classic":[157],"datasets":[158],"(KDD":[159],"CUP":[160],"99,":[161],"CIC-IDS-2017,":[162],"IOT-23)":[164],"simulate":[166],"targeting":[171],"extremely":[172],"show":[178],"that":[179],"higher":[183,226],"rate":[185,220],"compared":[190],"advanced":[193],"models":[195],"(DNN":[196],"ACID).":[198],"IOT-23":[201],"dataset,":[202],"model":[205],"shows":[206],"absolute":[208],"advantage":[209],"detecting":[211],"DDoS":[212],"type":[213],"traffic,":[216],"0.71,":[222],"which":[223],"much":[225],"than":[227],"DNN":[229],"(0.14)":[230,233],"ACID":[232],"models.":[234]},"counts_by_year":[{"year":2026,"cited_by_count":13},{"year":2025,"cited_by_count":22},{"year":2024,"cited_by_count":3}],"updated_date":"2026-07-17T09:13:05.818461","created_date":"2025-10-10T00:00:00"}