{"id":"https://openalex.org/W4412567444","doi":"https://doi.org/10.1109/tnsm.2025.3591533","title":"Semi-Supervised Learning for Anomaly Traffic Detection via Bidirectional Normalizing Flows","display_name":"Semi-Supervised Learning for Anomaly Traffic Detection via Bidirectional Normalizing Flows","publication_year":2025,"publication_date":"2025-07-22","ids":{"openalex":"https://openalex.org/W4412567444","doi":"https://doi.org/10.1109/tnsm.2025.3591533"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2025.3591533","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2025.3591533","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071910713","display_name":"Zhangxuan Dang","orcid":"https://orcid.org/0009-0008-9613-5511"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Zhangxuan Dang","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, China","School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, P.R. China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, P.R. China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101843137","display_name":"Yu Zheng","orcid":"https://orcid.org/0000-0002-4288-3345"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Zheng","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, China","School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, P.R. China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, P.R. China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025519634","display_name":"Xinglin Lian","orcid":"https://orcid.org/0009-0000-0627-8933"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]},{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinglin Lian","raw_affiliation_strings":["School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, Sichuan, China","School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, P.R. China"],"affiliations":[{"raw_affiliation_string":"School of Information and Software Engineering, University of Electronic Science and Technology of China, Chengdu, Sichuan, China","institution_ids":["https://openalex.org/I150229711"]},{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, P.R. China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012655281","display_name":"Chunlei Peng","orcid":"https://orcid.org/0000-0003-3448-2514"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chunlei Peng","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, China","School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, P.R. China"],"affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi&#x2019;an, Shaanxi, P.R. China","institution_ids":["https://openalex.org/I149594827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102708632","display_name":"Qiuyu Chen","orcid":"https://orcid.org/0009-0008-6024-6076"},"institutions":[{"id":"https://openalex.org/I1311688040","display_name":"Amazon (United States)","ror":"https://ror.org/04mv4n011","country_code":"US","type":"company","lineage":["https://openalex.org/I1311688040"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Qiuyu Chen","raw_affiliation_strings":["Artificial General Intelligence, Amazon, Seattle, WA, USA","Artificial General Intelligence, Amazon, Seattle, USA"],"affiliations":[{"raw_affiliation_string":"Artificial General Intelligence, Amazon, Seattle, WA, USA","institution_ids":["https://openalex.org/I1311688040"]},{"raw_affiliation_string":"Artificial General Intelligence, Amazon, Seattle, USA","institution_ids":["https://openalex.org/I1311688040"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101785348","display_name":"Xinbo Gao","orcid":"https://orcid.org/0000-0003-1443-0776"},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinbo Gao","raw_affiliation_strings":["State Key Laboratory of Integrated Services Networks, School of Electronic Engineering, Xidian University, Xi&#x2019;an, Shaanxi, China","School of Electronic Engineering, State Key Laboratory of Integrated Services Networks, Xidian University, Xi&#x2019;an, Shaanxi, P.R. China"],"affiliations":[{"raw_affiliation_string":"State Key Laboratory of Integrated Services Networks, School of Electronic Engineering, Xidian University, Xi&#x2019;an, Shaanxi, China","institution_ids":["https://openalex.org/I149594827"]},{"raw_affiliation_string":"School of Electronic Engineering, State Key Laboratory of Integrated Services Networks, Xidian University, Xi&#x2019;an, Shaanxi, P.R. China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5071910713"],"corresponding_institution_ids":["https://openalex.org/I149594827"],"apc_list":null,"apc_paid":null,"fwci":14.141,"has_fulltext":false,"cited_by_count":6,"citation_normalized_percentile":{"value":0.98615001,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":"22","issue":"5","first_page":"5106","last_page":"5117"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9822999835014343,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7851527333259583},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7286538481712341},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4347061812877655},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.37192201614379883},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.35761356353759766},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.33307284116744995},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.332115113735199}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7851527333259583},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7286538481712341},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4347061812877655},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.37192201614379883},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.35761356353759766},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33307284116744995},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.332115113735199}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2025.3591533","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2025.3591533","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Reduced inequalities","score":0.5,"id":"https://metadata.un.org/sdg/10"}],"awards":[{"id":"https://openalex.org/G2452297484","display_name":null,"funder_award_id":"QTZX23042","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G2917221252","display_name":null,"funder_award_id":"ZYTS24142","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G528944840","display_name":null,"funder_award_id":"62306227","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5344593585","display_name":null,"funder_award_id":"QTZX23083","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G5405834107","display_name":null,"funder_award_id":"62276198","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5420252985","display_name":null,"funder_award_id":"B16037","funder_id":"https://openalex.org/F4320336698","funder_display_name":"Overseas Expertise Introduction Center for Discipline Innovation of Food Nutrition and Human Health (111 Center)"},{"id":"https://openalex.org/G6498477754","display_name":null,"funder_award_id":"U22A2035, Grants U22A2096","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G913836228","display_name":null,"funder_award_id":"62036007","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null},{"id":"https://openalex.org/F4320336698","display_name":"Overseas Expertise Introduction Center for Discipline Innovation of Food Nutrition and Human Health (111 Center)","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W2108598243","https://openalex.org/W2122646361","https://openalex.org/W2277036336","https://openalex.org/W2343828539","https://openalex.org/W2399941526","https://openalex.org/W2591712613","https://openalex.org/W2766315530","https://openalex.org/W2772317693","https://openalex.org/W2783741806","https://openalex.org/W2897256107","https://openalex.org/W2912386632","https://openalex.org/W2962608904","https://openalex.org/W2963045681","https://openalex.org/W2963516518","https://openalex.org/W2971782395","https://openalex.org/W2992005611","https://openalex.org/W2995006815","https://openalex.org/W3009091629","https://openalex.org/W3040266635","https://openalex.org/W3096929904","https://openalex.org/W3123788679","https://openalex.org/W3125641641","https://openalex.org/W3147184966","https://openalex.org/W3160074056","https://openalex.org/W3166166117","https://openalex.org/W3169651898","https://openalex.org/W3183588514","https://openalex.org/W3197410585","https://openalex.org/W3198511875","https://openalex.org/W3200007923","https://openalex.org/W3201886739","https://openalex.org/W4210474485","https://openalex.org/W4212986808","https://openalex.org/W4214694907","https://openalex.org/W4220982575","https://openalex.org/W4224220262","https://openalex.org/W4224322255","https://openalex.org/W4244657151","https://openalex.org/W4290991003","https://openalex.org/W4308235797","https://openalex.org/W4312772600","https://openalex.org/W4315629661","https://openalex.org/W4320476215","https://openalex.org/W4396817460","https://openalex.org/W4404896192","https://openalex.org/W4410090375","https://openalex.org/W6940431289"],"related_works":["https://openalex.org/W2105642232","https://openalex.org/W3207332793","https://openalex.org/W3197833032","https://openalex.org/W4386081464","https://openalex.org/W2499612753","https://openalex.org/W3113278055","https://openalex.org/W2750709484","https://openalex.org/W4296474495","https://openalex.org/W4388937474","https://openalex.org/W4408666830"],"abstract_inverted_index":{"With":[0],"the":[1,5,17,61,85,99,117,126,140,150,185,190,194],"rapid":[2],"development":[3],"of":[4,9,19,57,63,84,129,198],"Internet,":[6],"various":[7],"types":[8],"anomaly":[10,35,52,64,154,161,199],"traffic":[11,24,42,201],"are":[12,122],"threatening":[13],"network":[14,86,200],"security.":[15],"However,":[16],"difficulty":[18],"collecting":[20],"and":[21,40,103,121,155],"labelling":[22],"anomalous":[23,173],"is":[25,77],"a":[26,33,73,81,89,95,104,145,177],"significant":[27],"challenge,":[28],"so":[29],"this":[30,108],"paper":[31],"proposes":[32],"semi-supervised":[34],"detection":[36,62],"framework.":[37],"Considering":[38],"normal":[39,156],"abnormal":[41],"have":[43],"different":[44],"data":[45,101,142],"distributions,":[46],"our":[47,165,187],"framework":[48,67,166],"can":[49],"generate":[50],"pseudo":[51],"samples":[53,111,157],"without":[54],"prior":[55],"knowledge":[56],"anomalies":[58],"to":[59,79,158,171,176,184],"achieve":[60],"data.":[65],"The":[66],"comprises":[68],"three":[69],"principal":[70],"components.":[71],"Firstly,":[72],"pre-trained":[74],"feature":[75,82,137],"extractor":[76],"employed":[78],"extract":[80],"representation":[83],"traffic.":[87],"Secondly,":[88],"bidirectional":[90,109],"normalizing":[91,130],"flow":[92],"module":[93],"establishes":[94],"reversible":[96],"transformation":[97,114],"between":[98,153],"latent":[100,141],"distribution":[102,119],"Gaussian":[105,118],"space.":[106,143],"Through":[107],"mapping,":[110],"first":[112],"undergo":[113],"manipulation":[115],"within":[116],"space,":[120],"then":[123],"transported":[124],"through":[125],"generative":[127],"direction":[128],"flows,":[131],"translating":[132],"mathematical":[133],"transformations":[134],"into":[135],"semantic":[136],"evolutions":[138],"in":[139,180],"Finally,":[144],"simple":[146],"classifier":[147],"explicitly":[148],"learns":[149],"potential":[151],"differences":[152],"facilitate":[159],"better":[160],"detection.":[162,202],"During":[163],"inference,":[164],"requires":[167],"only":[168],"two":[169],"modules":[170],"detect":[172],"samples,":[174],"leading":[175],"considerable":[178],"reduction":[179],"model":[181],"size.":[182],"According":[183],"experiments,":[186],"method":[188],"achieves":[189],"state-of-the-art":[191],"results":[192],"on":[193],"common":[195],"benchmarking":[196],"datasets":[197],"Furthermore,":[203],"it":[204],"exhibits":[205],"good":[206],"generalisation":[207],"performance":[208],"across":[209],"datasets.":[210]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5}],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-10-10T00:00:00"}
