{"id":"https://openalex.org/W1964689461","doi":"https://doi.org/10.1145/1636665.1636670","title":"M-AID","display_name":"M-AID","publication_year":2009,"publication_date":"2009-11-01","ids":{"openalex":"https://openalex.org/W1964689461","doi":"https://doi.org/10.1145/1636665.1636670","mag":"1964689461"},"language":"en","primary_location":{"id":"doi:10.1145/1636665.1636670","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1636665.1636670","pdf_url":null,"source":{"id":"https://openalex.org/S16632050","display_name":"ACM Transactions on Autonomous and Adaptive Systems","issn_l":"1556-4665","issn":["1556-4665","1556-4703"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Autonomous and Adaptive Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073982057","display_name":"Zonghua Zhang","orcid":"https://orcid.org/0000-0003-0379-7089"},"institutions":[{"id":"https://openalex.org/I4210151344","display_name":"National Institute on Consumer Education","ror":"https://ror.org/03y6p7b93","country_code":"JP","type":"education","lineage":["https://openalex.org/I4210151344"]}],"countries":["JP"],"is_corresponding":true,"raw_author_name":"Zonghua Zhang","raw_affiliation_strings":["NICT, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NICT, Tokyo, Japan","institution_ids":["https://openalex.org/I4210151344"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5070128994","display_name":"Hong Shen","orcid":"https://orcid.org/0000-0002-3663-6591"},"institutions":[{"id":"https://openalex.org/I5681781","display_name":"The University of Adelaide","ror":"https://ror.org/00892tw58","country_code":"AU","type":"education","lineage":["https://openalex.org/I5681781"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Hong Shen","raw_affiliation_strings":["The University of Adelaide, SA, Australia","The University of Adelaide, SA, Australia#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The University of Adelaide, SA, Australia","institution_ids":["https://openalex.org/I5681781"]},{"raw_affiliation_string":"The University of Adelaide, SA, Australia#TAB#","institution_ids":["https://openalex.org/I5681781"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5073982057"],"corresponding_institution_ids":["https://openalex.org/I4210151344"],"apc_list":null,"apc_paid":null,"fwci":1.0883,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.78223586,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"4","issue":"4","first_page":"1","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9959999918937683,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8401535153388977},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.7512616515159607},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7049046158790588},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.6199724674224854},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.49689581990242004},{"id":"https://openalex.org/keywords/adaptability","display_name":"Adaptability","score":0.4713791310787201},{"id":"https://openalex.org/keywords/parametric-statistics","display_name":"Parametric statistics","score":0.4110771715641022},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.36407822370529175},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.12118697166442871},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.10591894388198853},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.10007378458976746}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8401535153388977},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.7512616515159607},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7049046158790588},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.6199724674224854},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.49689581990242004},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.4713791310787201},{"id":"https://openalex.org/C117251300","wikidata":"https://www.wikidata.org/wiki/Q1849855","display_name":"Parametric statistics","level":2,"score":0.4110771715641022},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.36407822370529175},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.12118697166442871},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.10591894388198853},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.10007378458976746},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/1636665.1636670","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1636665.1636670","pdf_url":null,"source":{"id":"https://openalex.org/S16632050","display_name":"ACM Transactions on Autonomous and Adaptive Systems","issn_l":"1556-4665","issn":["1556-4665","1556-4703"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Autonomous and Adaptive Systems","raw_type":"journal-article"},{"id":"pmh:oai:digital.library.adelaide.edu.au:2440/57654","is_oa":false,"landing_page_url":"http://hdl.handle.net/2440/57654","pdf_url":null,"source":{"id":"https://openalex.org/S4306401835","display_name":"Adelaide Research & Scholarship (AR&S) (University of Adelaide)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I5681781","host_organization_name":"The University of Adelaide","host_organization_lineage":["https://openalex.org/I5681781"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://dx.doi.org/10.1145/1636665.1636670","raw_type":"Journal article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5199999809265137,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"},{"score":0.4300000071525574,"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":38,"referenced_works":["https://openalex.org/W59296718","https://openalex.org/W112491364","https://openalex.org/W171844054","https://openalex.org/W191098608","https://openalex.org/W1702462424","https://openalex.org/W1800991598","https://openalex.org/W1881316505","https://openalex.org/W1974102697","https://openalex.org/W1977342596","https://openalex.org/W1977838479","https://openalex.org/W1988918299","https://openalex.org/W1999392360","https://openalex.org/W2004168725","https://openalex.org/W2016551721","https://openalex.org/W2016559036","https://openalex.org/W2018538061","https://openalex.org/W2043314203","https://openalex.org/W2093488494","https://openalex.org/W2096847629","https://openalex.org/W2098266409","https://openalex.org/W2107035663","https://openalex.org/W2108867737","https://openalex.org/W2115149820","https://openalex.org/W2125735062","https://openalex.org/W2128217000","https://openalex.org/W2129860818","https://openalex.org/W2130906191","https://openalex.org/W2146440914","https://openalex.org/W2154266412","https://openalex.org/W2156204309","https://openalex.org/W2157021454","https://openalex.org/W2167332015","https://openalex.org/W2171297690","https://openalex.org/W2288766236","https://openalex.org/W2913841560","https://openalex.org/W3012481697","https://openalex.org/W4214931895","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2912112202","https://openalex.org/W2667207928","https://openalex.org/W4377864969","https://openalex.org/W3030345572"],"abstract_inverted_index":{"Anomaly-based":[0],"intrusion":[1],"detection":[2,150,257],"is":[3,31,50,96,211,243,285,337],"about":[4],"the":[5,13,16,28,78,90,93,107,183,191,273,296,310,324],"discrimination":[6],"of":[7,15,18,23,38,80,121,135,149,170,186,193,219,259,275,292,335],"malicious":[8],"and":[9,99,127,144,152,181,234,287,298,307,309,320,344],"legitimate":[10],"behaviors":[11,185,238,274],"on":[12,106],"basis":[14,204],"characterization":[17],"system":[19,29,81,164],"normality":[20,30,82],"in":[21,101,141,147,239,278],"terms":[22,148],"particular":[24],"observable":[25,168],"subjects.":[26],"As":[27,92],"constructed":[32],"solely":[33],"from":[34,115],"an":[35,57,156,207],"observed":[36],"sample":[37],"normally":[39],"occurring":[40],"patterns,":[41],"anomaly":[42,58,74,122,138,158,187,222,229,256,276],"detectors":[43,75,123,139,188,230,277],"always":[44],"suffer":[45],"excessive":[46],"false":[47],"alerts.":[48],"Adaptability":[49],"therefore":[51],"a":[52,133,175,202,217,232,240,246,266,281,290,332],"desirable":[53],"feature":[54],"that":[55,129,284],"enables":[56,301],"detector":[59],"to":[60,76,87,178,214,303,316],"alleviate,":[61],"if":[62],"not":[63],"eliminate,":[64],"such":[65],"annoyance.":[66],"To":[67],"achieve":[68],"that,":[69],"we":[70,104,173],"either":[71],"design":[72,113],"self-learning":[73],"capture":[77],"drifts":[79],"or":[83],"develop":[84],"postprocessing":[85],"mechanisms":[86],"deal":[88],"with":[89,280,340],"outputs.":[91],"former":[94],"methodology":[95],"usually":[97],"scenario-":[98],"application-specific,":[100],"this":[102],"article,":[103],"focus":[105],"latter":[108],"one.":[109],"In":[110],"particular,":[111],"our":[112],"starts":[114],"three":[116],"key":[117],"observations:":[118],"(1)":[119],"most":[120],"are":[124,261],"threshold":[125],"based":[126],"parametric,":[128],"is,":[130],"configurable":[131],"by":[132,189,289],"set":[134],"parameters;":[136],"(2)":[137],"differ":[140],"operational":[142,145,195,325],"environment":[143],"capability":[146],"coverage":[151],"blind":[153],"spots;":[154],"(3)":[155],"intrusive":[157],"may":[159],"leave":[160],"traces":[161],"across":[162],"multiple":[163],"layers,":[165],"incurring":[166],"different":[167],"events":[169],"interest.":[171],"Firstly,":[172],"present":[174],"statistical":[176],"framework":[177,198,241],"formally":[179],"characterize":[180],"analyze":[182],"basic":[184],"examining":[190],"properties":[192],"their":[194,236],"environments.":[196],"The":[197,254],"then":[199],"serves":[200],"as":[201,231,245],"theoretical":[203],"for":[205,327],"developing":[206],"adaptive":[208],"middleware,":[209],"which":[210,242,270],"called":[212],"M-AID,":[213],"optimally":[215],"integrate":[216],"number":[218],"observation-specific":[220],"parameterizable":[221],"detectors.":[223],"Specifically,":[224],"M-AID":[225,260,302,336],"treats":[226],"these":[227],"fine-grained":[228],"whole":[233],"casts":[235],"collective":[237],"formulated":[244],"Multiagent":[247],"Partially":[248],"Observable":[249],"Markov":[250],"Decision":[251],"Process":[252],"(MPO-MDP).":[253],"generic":[255],"models":[258],"thus":[262],"automatically":[263],"inferred":[264],"via":[265],"reinforcement":[267],"learning":[268],"algorithm":[269],"dynamically":[271],"adjusts":[272],"accordance":[279],"reward":[282,311],"signal":[283,312],"defined":[286],"quantified":[288],"suit":[291],"evaluation":[293,343],"metrics.":[294],"Fundamentally,":[295],"distributed":[297],"autonomous":[299],"architecture":[300],"be":[304],"scalable,":[305],"dependable,":[306],"adaptable,":[308],"allows":[313],"security":[314],"administrators":[315],"specify":[317],"cost":[318],"factors":[319],"take":[321],"into":[322],"account":[323],"context":[326],"taking":[328],"rational":[329],"response.":[330],"Finally,":[331],"host-based":[333],"prototype":[334],"developed,":[338],"along":[339],"comprehensive":[341],"experimental":[342],"comparative":[345],"studies.":[346]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2018,"cited_by_count":1},{"year":2016,"cited_by_count":2},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":1},{"year":2012,"cited_by_count":3}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2016-06-24T00:00:00"}