{"id":"https://openalex.org/W3217648337","doi":"https://doi.org/10.1109/access.2021.3129775","title":"Research Trends in Network-Based Intrusion Detection Systems: A Review","display_name":"Research Trends in Network-Based Intrusion Detection Systems: A Review","publication_year":2021,"publication_date":"2021-01-01","ids":{"openalex":"https://openalex.org/W3217648337","doi":"https://doi.org/10.1109/access.2021.3129775","mag":"3217648337"},"language":"en","primary_location":{"id":"doi:10.1109/access.2021.3129775","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3129775","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/09623451.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"review","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/09623451.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101509359","display_name":"Satish Kumar","orcid":"https://orcid.org/0000-0001-5972-671X"},"institutions":[{"id":"https://openalex.org/I59179055","display_name":"Shri Mata Vaishno Devi University","ror":"https://ror.org/036x6w630","country_code":"IN","type":"education","lineage":["https://openalex.org/I59179055"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Satish Kumar","raw_affiliation_strings":["School of Computer Science and Engineering, Shri Mata Vaishno Devi University, Katra, Jammu-182320, India. (e-mail: 16dcs005@smvdu.ac.in)","School of Computer Science and Engineering, Shri Mata Vaishno Devi University, Katra, Jammu-182320, India"],"raw_orcid":"https://orcid.org/0000-0001-5972-671X","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Shri Mata Vaishno Devi University, Katra, Jammu-182320, India. (e-mail: 16dcs005@smvdu.ac.in)","institution_ids":["https://openalex.org/I59179055"]},{"raw_affiliation_string":"School of Computer Science and Engineering, Shri Mata Vaishno Devi University, Katra, Jammu-182320, India","institution_ids":["https://openalex.org/I59179055"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044781519","display_name":"Sunanda Gupta","orcid":"https://orcid.org/0000-0001-5180-244X"},"institutions":[{"id":"https://openalex.org/I59179055","display_name":"Shri Mata Vaishno Devi University","ror":"https://ror.org/036x6w630","country_code":"IN","type":"education","lineage":["https://openalex.org/I59179055"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sunanda Gupta","raw_affiliation_strings":["School of Computer Science and Engineering, Shri Mata Vaishno Devi University, Katra, Jammu-182320, India"],"raw_orcid":"https://orcid.org/0000-0001-5180-244X","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Shri Mata Vaishno Devi University, Katra, Jammu-182320, India","institution_ids":["https://openalex.org/I59179055"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002581395","display_name":"Sakshi Arora","orcid":"https://orcid.org/0000-0001-8064-3951"},"institutions":[{"id":"https://openalex.org/I59179055","display_name":"Shri Mata Vaishno Devi University","ror":"https://ror.org/036x6w630","country_code":"IN","type":"education","lineage":["https://openalex.org/I59179055"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Sakshi Arora","raw_affiliation_strings":["School of Computer Science and Engineering, Shri Mata Vaishno Devi University, Katra, Jammu-182320, India"],"raw_orcid":"https://orcid.org/0000-0001-8064-3951","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Shri Mata Vaishno Devi University, Katra, Jammu-182320, India","institution_ids":["https://openalex.org/I59179055"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":11.7045,"has_fulltext":true,"cited_by_count":123,"citation_normalized_percentile":{"value":0.988944,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"9","issue":null,"first_page":"157761","last_page":"157779"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.8349928855895996},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8093596696853638},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.5405089259147644},{"id":"https://openalex.org/keywords/popularity","display_name":"Popularity","score":0.5378782749176025},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.48784518241882324},{"id":"https://openalex.org/keywords/citation","display_name":"Citation","score":0.4375073313713074},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4339882731437683},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.40809041261672974},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.36489933729171753},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.33762824535369873},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.1571348011493683}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.8349928855895996},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8093596696853638},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5405089259147644},{"id":"https://openalex.org/C2780586970","wikidata":"https://www.wikidata.org/wiki/Q1357284","display_name":"Popularity","level":2,"score":0.5378782749176025},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.48784518241882324},{"id":"https://openalex.org/C2778805511","wikidata":"https://www.wikidata.org/wiki/Q1713","display_name":"Citation","level":2,"score":0.4375073313713074},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4339882731437683},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40809041261672974},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.36489933729171753},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.33762824535369873},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1571348011493683},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2021.3129775","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3129775","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/09623451.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:24eb410d6afb4162ad40d7d97c8c2747","is_oa":true,"landing_page_url":"https://doaj.org/article/24eb410d6afb4162ad40d7d97c8c2747","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 9, Pp 157761-157779 (2021)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2021.3129775","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2021.3129775","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/6514899/09623451.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5099999904632568}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3217648337.pdf","grobid_xml":"https://content.openalex.org/works/W3217648337.grobid-xml"},"referenced_works_count":137,"referenced_works":["https://openalex.org/W101596157","https://openalex.org/W184831296","https://openalex.org/W1492196703","https://openalex.org/W1495172800","https://openalex.org/W1498109646","https://openalex.org/W1500851093","https://openalex.org/W1515288891","https://openalex.org/W1524908045","https://openalex.org/W1536395052","https://openalex.org/W1598667691","https://openalex.org/W1602183532","https://openalex.org/W1964718018","https://openalex.org/W1967376128","https://openalex.org/W1976262362","https://openalex.org/W1978915475","https://openalex.org/W1985332627","https://openalex.org/W1985987493","https://openalex.org/W1986239185","https://openalex.org/W1988918299","https://openalex.org/W1991520194","https://openalex.org/W1996482171","https://openalex.org/W2000144914","https://openalex.org/W2002900768","https://openalex.org/W2007087405","https://openalex.org/W2008224380","https://openalex.org/W2015401767","https://openalex.org/W2016070752","https://openalex.org/W2017380649","https://openalex.org/W2017420094","https://openalex.org/W2020657476","https://openalex.org/W2032247543","https://openalex.org/W2033274527","https://openalex.org/W2033850865","https://openalex.org/W2064209947","https://openalex.org/W2067345832","https://openalex.org/W2077028504","https://openalex.org/W2077442291","https://openalex.org/W2081675971","https://openalex.org/W2091576221","https://openalex.org/W2096830520","https://openalex.org/W2097872967","https://openalex.org/W2099528623","https://openalex.org/W2099940443","https://openalex.org/W2100537916","https://openalex.org/W2105705594","https://openalex.org/W2105779206","https://openalex.org/W2108142795","https://openalex.org/W2112086364","https://openalex.org/W2115267384","https://openalex.org/W2116587206","https://openalex.org/W2133590498","https://openalex.org/W2134378541","https://openalex.org/W2136995341","https://openalex.org/W2139669429","https://openalex.org/W2139731313","https://openalex.org/W2142640215","https://openalex.org/W2145492393","https://openalex.org/W2147067398","https://openalex.org/W2147457514","https://openalex.org/W2150755264","https://openalex.org/W2155461860","https://openalex.org/W2156347968","https://openalex.org/W2162718061","https://openalex.org/W2166199068","https://openalex.org/W2166683449","https://openalex.org/W2167121375","https://openalex.org/W2167287136","https://openalex.org/W2168620475","https://openalex.org/W2168938675","https://openalex.org/W2169041657","https://openalex.org/W2170214103","https://openalex.org/W2191006491","https://openalex.org/W2278186031","https://openalex.org/W2296509296","https://openalex.org/W2327209956","https://openalex.org/W2342408547","https://openalex.org/W2349395687","https://openalex.org/W2380096321","https://openalex.org/W2391401965","https://openalex.org/W2495428268","https://openalex.org/W2496011824","https://openalex.org/W2504400801","https://openalex.org/W2523827785","https://openalex.org/W2527999453","https://openalex.org/W2557450880","https://openalex.org/W2613480438","https://openalex.org/W2736183220","https://openalex.org/W2751399725","https://openalex.org/W2754245123","https://openalex.org/W2765181145","https://openalex.org/W2768506257","https://openalex.org/W2777579789","https://openalex.org/W2789654058","https://openalex.org/W2801256139","https://openalex.org/W2803217416","https://openalex.org/W2805665873","https://openalex.org/W2807786182","https://openalex.org/W2889547648","https://openalex.org/W2900201388","https://openalex.org/W2900833899","https://openalex.org/W2904707475","https://openalex.org/W2911614936","https://openalex.org/W2918696265","https://openalex.org/W2921185724","https://openalex.org/W2924689635","https://openalex.org/W2928842143","https://openalex.org/W2950250245","https://openalex.org/W2958285686","https://openalex.org/W2980576170","https://openalex.org/W2988777132","https://openalex.org/W2990236609","https://openalex.org/W3003089566","https://openalex.org/W3009422166","https://openalex.org/W3023758415","https://openalex.org/W3036517673","https://openalex.org/W3091379954","https://openalex.org/W3101397573","https://openalex.org/W3101641741","https://openalex.org/W3101883599","https://openalex.org/W3140706010","https://openalex.org/W3214373139","https://openalex.org/W4247093768","https://openalex.org/W4256430969","https://openalex.org/W4300922049","https://openalex.org/W6604196288","https://openalex.org/W6629523211","https://openalex.org/W6629932669","https://openalex.org/W6633866076","https://openalex.org/W6635919243","https://openalex.org/W6637549440","https://openalex.org/W6752449833","https://openalex.org/W6756968680","https://openalex.org/W6760370850","https://openalex.org/W6770245228","https://openalex.org/W6773009785","https://openalex.org/W6803782233","https://openalex.org/W6987514180"],"related_works":["https://openalex.org/W2364419519","https://openalex.org/W2360767377","https://openalex.org/W2017948608","https://openalex.org/W2360951146","https://openalex.org/W2061466315","https://openalex.org/W2376886931","https://openalex.org/W1992118813","https://openalex.org/W2010561419","https://openalex.org/W2374845301","https://openalex.org/W2351448539"],"abstract_inverted_index":{"Network":[0],"threats":[1],"and":[2,20,41,49,71,112,125,159,168,196,205],"hazards":[3],"are":[4,23,179],"evolving":[5],"at":[6],"a":[7,57,110],"high-speed":[8],"rate":[9],"in":[10,63,84,109,123,133,182,187,199,203],"recent":[11],"years.":[12],"Many":[13],"mechanisms":[14],"(such":[15],"as":[16,26],"firewalls,":[17],"anti-virus,":[18],"anti-malware,":[19],"spam":[21],"filters)":[22],"being":[24],"used":[25,76,152,162],"security":[27,44],"tools":[28],"to":[29,46,77,106,118,172,193],"protect":[30],"networks.":[31],"An":[32],"intrusion":[33,65,107,120,135,164],"detection":[34,66,108,121,136],"system":[35,45,122],"(IDS)":[36],"is":[37,87],"also":[38,145,180],"an":[39,96],"effective":[40],"powerful":[42],"network":[43,51],"detect":[47],"unauthorized":[48],"abnormal":[50],"traffic":[52],"flow.":[53],"This":[54],"article":[55,97,144,189],"presents":[56],"review":[58],"of":[59,92,102,149,156,176],"the":[60,72,90,99,119,130,134,139,147,174,194],"research":[61,115,201],"trends":[62,202],"network-based":[64],"systems":[67],"(NIDS),":[68],"their":[69,206],"approaches,":[70],"most":[73,113],"common":[74],"datasets":[75],"evaluate":[78],"IDS":[79],"Models.":[80],"The":[81,185],"analysis":[82,155,171],"presented":[83,181],"this":[85,143,183,188],"paper":[86],"based":[88],"on":[89,129],"number":[91],"citations":[93],"acquired":[94],"by":[95],"published,":[98],"total":[100],"count":[101],"articles":[103,116,132],"published":[104,131],"related":[105,117,207],"year,":[111],"cited":[114],"journals":[124],"conferences":[126],"separately.":[127],"Based":[128],"field":[137],"for":[138,163],"last":[140],"15":[141],"years,":[142],"discusses":[146],"state-of-the-arts":[148],"NIDS,":[150,153],"commonly":[151],"citation-based":[154],"benchmark":[157],"datasets,":[158],"NIDS":[160,204],"techniques":[161],"detection.":[165],"A":[166],"citation":[167],"publication-based":[169],"comparative":[170],"quantify":[173],"popularity":[175],"various":[177],"approaches":[178],"paper.":[184],"study":[186],"may":[190],"be":[191],"helpful":[192],"novices":[195],"researchers":[197],"interested":[198],"evaluating":[200],"applications.":[208]},"counts_by_year":[{"year":2026,"cited_by_count":12},{"year":2025,"cited_by_count":38},{"year":2024,"cited_by_count":44},{"year":2023,"cited_by_count":20},{"year":2022,"cited_by_count":9}],"updated_date":"2026-06-17T08:01:34.144755","created_date":"2025-10-10T00:00:00"}