{"id":"https://openalex.org/W1772700132","doi":"https://doi.org/10.1145/2716260","title":"Taxonomy and Survey of Collaborative Intrusion Detection","display_name":"Taxonomy and Survey of Collaborative Intrusion Detection","publication_year":2015,"publication_date":"2015-05-11","ids":{"openalex":"https://openalex.org/W1772700132","doi":"https://doi.org/10.1145/2716260","mag":"1772700132"},"language":"en","primary_location":{"id":"doi:10.1145/2716260","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2716260","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5083149653","display_name":"Emmanouil Vasilomanolakis","orcid":"https://orcid.org/0000-0001-5068-9158"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Emmanouil Vasilomanolakis","raw_affiliation_strings":["Technische Universit\u00e4t Darmstadt/CASED"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t Darmstadt/CASED","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054341757","display_name":"Shankar Karuppayah","orcid":"https://orcid.org/0000-0003-4801-6370"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Shankar Karuppayah","raw_affiliation_strings":["Technische Universit\u00e4t Darmstadt/CASED"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t Darmstadt/CASED","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021712397","display_name":"Max M\u00fchlh\u00e4user","orcid":"https://orcid.org/0000-0003-4713-5327"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Max M\u00fchlh\u00e4user","raw_affiliation_strings":["Technische Universit\u00e4t Darmstadt/CASED"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t Darmstadt/CASED","institution_ids":["https://openalex.org/I31512782"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5033270363","display_name":"Mathias Fischer","orcid":"https://orcid.org/0000-0002-6254-8288"},"institutions":[{"id":"https://openalex.org/I31512782","display_name":"Technische Universit\u00e4t Darmstadt","ror":"https://ror.org/05n911h24","country_code":"DE","type":"education","lineage":["https://openalex.org/I31512782"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Mathias Fischer","raw_affiliation_strings":["Technische Universit\u00e4t Darmstadt/CASED"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technische Universit\u00e4t Darmstadt/CASED","institution_ids":["https://openalex.org/I31512782"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I31512782"],"apc_list":null,"apc_paid":null,"fwci":30.4918,"has_fulltext":false,"cited_by_count":325,"citation_normalized_percentile":{"value":0.99658892,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"47","issue":"4","first_page":"1","last_page":"33"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8367774486541748},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.644019365310669},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5900755524635315},{"id":"https://openalex.org/keywords/cyber-physical-system","display_name":"Cyber-physical system","score":0.5017211437225342},{"id":"https://openalex.org/keywords/component","display_name":"Component (thermodynamics)","score":0.4703170359134674},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.4407017230987549},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.43740314245224},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3881099224090576},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3714645802974701},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.1176309883594513}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8367774486541748},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.644019365310669},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5900755524635315},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.5017211437225342},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.4703170359134674},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.4407017230987549},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.43740314245224},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3881099224090576},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3714645802974701},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.1176309883594513},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/2716260","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2716260","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.725.4605","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.725.4605","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://www.tk.informatik.tu-darmstadt.de/fileadmin/user_upload/Group_TK/filesDownload/Published_Papers/vasilomanolakis_survey.pdf","raw_type":"text"},{"id":"pmh:oai:tubiblio.ulb.tu-darmstadt.de:72316","is_oa":false,"landing_page_url":"http://tubiblio.ulb.tu-darmstadt.de/72316/","pdf_url":null,"source":{"id":"https://openalex.org/S4377196390","display_name":"TUbilio (Technical University of Darmstadt)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I31512782","host_organization_name":"Technische Universit\u00e4t Darmstadt","host_organization_lineage":["https://openalex.org/I31512782"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Artikel"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6000000238418579}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":96,"referenced_works":["https://openalex.org/W28108053","https://openalex.org/W34732858","https://openalex.org/W35422670","https://openalex.org/W35835773","https://openalex.org/W174112453","https://openalex.org/W1492196703","https://openalex.org/W1492552531","https://openalex.org/W1495304983","https://openalex.org/W1500725760","https://openalex.org/W1511785468","https://openalex.org/W1516506771","https://openalex.org/W1520914943","https://openalex.org/W1529060400","https://openalex.org/W1529945719","https://openalex.org/W1532648900","https://openalex.org/W1536779234","https://openalex.org/W1537204778","https://openalex.org/W1541939527","https://openalex.org/W1549716092","https://openalex.org/W1554596310","https://openalex.org/W1570754081","https://openalex.org/W1577117059","https://openalex.org/W1582506709","https://openalex.org/W1591743417","https://openalex.org/W1605124321","https://openalex.org/W1621186777","https://openalex.org/W1674877186","https://openalex.org/W1873122431","https://openalex.org/W1969464808","https://openalex.org/W1985449099","https://openalex.org/W1985793456","https://openalex.org/W1985902740","https://openalex.org/W1989545529","https://openalex.org/W1993284846","https://openalex.org/W1993426957","https://openalex.org/W1993704367","https://openalex.org/W1994212840","https://openalex.org/W1997222770","https://openalex.org/W1999427165","https://openalex.org/W2013627100","https://openalex.org/W2038053775","https://openalex.org/W2053684007","https://openalex.org/W2075354189","https://openalex.org/W2090942719","https://openalex.org/W2099137371","https://openalex.org/W2099218848","https://openalex.org/W2100903665","https://openalex.org/W2100976923","https://openalex.org/W2101173463","https://openalex.org/W2108867737","https://openalex.org/W2111914367","https://openalex.org/W2116069379","https://openalex.org/W2118016433","https://openalex.org/W2118831445","https://openalex.org/W2121686811","https://openalex.org/W2122646361","https://openalex.org/W2124365372","https://openalex.org/W2128064123","https://openalex.org/W2133217855","https://openalex.org/W2133800002","https://openalex.org/W2135143063","https://openalex.org/W2137042154","https://openalex.org/W2137430899","https://openalex.org/W2142889610","https://openalex.org/W2143339817","https://openalex.org/W2146211060","https://openalex.org/W2151839674","https://openalex.org/W2155495097","https://openalex.org/W2155871862","https://openalex.org/W2156523427","https://openalex.org/W2156644501","https://openalex.org/W2160182303","https://openalex.org/W2160279333","https://openalex.org/W2162733677","https://openalex.org/W2163277533","https://openalex.org/W2165313080","https://openalex.org/W2167898414","https://openalex.org/W2170313477","https://openalex.org/W2187084711","https://openalex.org/W2229135539","https://openalex.org/W2256845964","https://openalex.org/W2275675895","https://openalex.org/W2288766236","https://openalex.org/W2337430557","https://openalex.org/W2406116398","https://openalex.org/W2477905973","https://openalex.org/W2503888018","https://openalex.org/W2504625779","https://openalex.org/W2914982603","https://openalex.org/W3028818932","https://openalex.org/W3140367595","https://openalex.org/W4237945458","https://openalex.org/W4244461107","https://openalex.org/W4285719527","https://openalex.org/W4299317891","https://openalex.org/W4300849041"],"related_works":["https://openalex.org/W3004173571","https://openalex.org/W2209816623","https://openalex.org/W2389214306","https://openalex.org/W1987127708","https://openalex.org/W3017360834","https://openalex.org/W2357256365","https://openalex.org/W3135700974","https://openalex.org/W4235240664","https://openalex.org/W4313307484","https://openalex.org/W2086962923"],"abstract_inverted_index":{"The":[0,69,226],"dependency":[1],"of":[2,27,38,42,61,71,91,130,171,220,229,244,247,260],"our":[3,39],"society":[4],"on":[5,77,140,207,217],"networked":[6,62],"computers":[7,63],"has":[8,64,80],"become":[9,65],"frightening:":[10],"In":[11],"the":[12,34,48,52,55,92,104,141,151,172,218,221,245,248],"economy,":[13],"all-digital":[14],"networks":[15,30,115],"have":[16,97,126],"turned":[17],"from":[18],"facilitators":[19],"to":[20,112,119,154,166,204],"drivers;":[21],"as":[22,47,189,235],"cyber-physical":[23],"systems":[24,37,79],"are":[25,31,87,109,159,224],"coming":[26],"age,":[28],"computer":[29],"now":[32],"becoming":[33],"central":[35,145],"nervous":[36],"physical":[40],"world\u2014even":[41],"highly":[43,74],"critical":[44],"infrastructures":[45],"such":[46],"power":[49],"grid.":[50],"At":[51],"same":[53],"time,":[54],"24/7":[56],"availability":[57,219],"and":[58,73,101,116,136,198,215,233,258],"correct":[59],"functioning":[60],"much":[66],"more":[67],"threatened:":[68],"number":[70],"sophisticated":[72],"tailored":[75],"attacks":[76,211,216,234],"IT":[78],"significantly":[81],"increased.":[82],"Intrusion":[83],"Detection":[84],"Systems":[85],"(IDSs)":[86],"a":[88,168,190,194,241,255],"key":[89],"component":[90],"corresponding":[93],"defense":[94],"measures;":[95],"they":[96],"been":[98],"extensively":[99],"studied":[100],"utilized":[102],"in":[103,164,250],"past.":[105],"Since":[106],"conventional":[107],"IDSs":[108,124],"not":[110],"scalable":[111],"big":[113],"company":[114],"beyond,":[117],"nor":[118],"massively":[120],"parallel":[121],"attacks,":[122],"Collaborative":[123],"(CIDSs)":[125],"emerged.":[127],"They":[128],"consist":[129],"several":[131],"monitoring":[132],"components":[133,149],"that":[134,212],"collect":[135],"exchange":[137],"data.":[138],"Depending":[139],"specific":[142,261],"CIDS":[143,195,262],"architecture,":[144],"or":[146],"distributed":[147],"analysis":[148,243],"mine":[150],"gathered":[152],"data":[153],"identify":[155],"attacks.":[156],"Resulting":[157],"alerts":[158],"correlated":[160],"among":[161],"multiple":[162],"monitors":[163],"order":[165],"create":[167],"holistic":[169],"view":[170],"network":[173],"monitored.":[174],"This":[175],"article":[176],"first":[177],"determines":[178],"relevant":[179],"requirements":[180],"for":[181,192,199,240],"CIDSs;":[182],"it":[183,201],"then":[184,238],"differentiates":[185],"distinct":[186],"building":[187,231],"blocks":[188],"basis":[191],"introducing":[193],"design":[196,209],"space":[197],"discussing":[200],"with":[202],"respect":[203],"requirements.":[205],"Based":[206],"this":[208],"space,":[210],"evade":[213],"CIDSs":[214,222],"themselves":[223],"discussed.":[225],"entire":[227],"framework":[228],"requirements,":[230],"blocks,":[232],"introduced":[236],"is":[237],"used":[239],"comprehensive":[242],"state":[246],"art":[249],"collaborative":[251],"intrusion":[252],"detection,":[253],"including":[254],"detailed":[256],"survey":[257],"comparison":[259],"approaches.":[263]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":19},{"year":2024,"cited_by_count":22},{"year":2023,"cited_by_count":20},{"year":2022,"cited_by_count":37},{"year":2021,"cited_by_count":45},{"year":2020,"cited_by_count":45},{"year":2019,"cited_by_count":41},{"year":2018,"cited_by_count":31},{"year":2017,"cited_by_count":20},{"year":2016,"cited_by_count":26},{"year":2015,"cited_by_count":8}],"updated_date":"2026-07-25T15:57:00.446498","created_date":"2025-10-10T00:00:00"}