{"id":"https://openalex.org/W2951955154","doi":"https://doi.org/10.1145/3325917.3325946","title":"Network Traffic Anomaly Detection Based on Information Gain and Deep Learning","display_name":"Network Traffic Anomaly Detection Based on Information Gain and Deep Learning","publication_year":2019,"publication_date":"2019-04-06","ids":{"openalex":"https://openalex.org/W2951955154","doi":"https://doi.org/10.1145/3325917.3325946","mag":"2951955154"},"language":"en","primary_location":{"id":"doi:10.1145/3325917.3325946","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3325917.3325946","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 3rd International Conference on Information System and Data Mining","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5039044492","display_name":"Xianglin Lu","orcid":"https://orcid.org/0000-0002-8822-5663"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xianglin Lu","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing city"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing city","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100701410","display_name":"Pengju Liu","orcid":"https://orcid.org/0000-0002-9748-7665"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Pengju Liu","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing city"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing city","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101503754","display_name":"Jiayi Lin","orcid":"https://orcid.org/0000-0003-2324-4908"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiayi Lin","raw_affiliation_strings":["School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing city"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Security, Beijing University of Posts and Telecommunications, Beijing city","institution_ids":["https://openalex.org/I139759216"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.8595,"has_fulltext":false,"cited_by_count":16,"citation_normalized_percentile":{"value":0.86853071,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"11","last_page":"15"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7972981333732605},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.6710473299026489},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5911992192268372},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.5593130588531494},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5546610355377197},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.5535147190093994},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5274577140808105},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5243423581123352},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4807022213935852},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.46078455448150635},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4367219805717468},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.27626168727874756},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.08371168375015259}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7972981333732605},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.6710473299026489},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5911992192268372},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.5593130588531494},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5546610355377197},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.5535147190093994},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5274577140808105},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5243423581123352},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4807022213935852},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.46078455448150635},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4367219805717468},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27626168727874756},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.08371168375015259},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3325917.3325946","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3325917.3325946","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2019 3rd International Conference on Information System and Data Mining","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W125869453","https://openalex.org/W1483251242","https://openalex.org/W2015791724","https://openalex.org/W2104118252","https://openalex.org/W2573080301","https://openalex.org/W2772317693","https://openalex.org/W2775103799","https://openalex.org/W2782563033","https://openalex.org/W2793690623","https://openalex.org/W2794811173","https://openalex.org/W2883778034","https://openalex.org/W2886138395","https://openalex.org/W2896920734","https://openalex.org/W2897880975","https://openalex.org/W4230614151","https://openalex.org/W4253254286"],"related_works":["https://openalex.org/W2061466315","https://openalex.org/W2376886931","https://openalex.org/W1992118813","https://openalex.org/W2010561419","https://openalex.org/W2374845301","https://openalex.org/W2351448539","https://openalex.org/W1977863481","https://openalex.org/W2384741105","https://openalex.org/W3157271777","https://openalex.org/W2377372927"],"abstract_inverted_index":{"With":[0],"the":[1,5,7,16,30,44,74,79,84,88,93,117,124,129,138,142,150,158,163,180,184,195],"rapid":[2],"development":[3],"of":[4,26,32,35,46,76,81,92,128,141,197],"Internet,":[6],"network":[8,36,51,68,143,198],"traffic":[9,37,199],"shows":[10],"an":[11],"explosive":[12],"growth":[13],"trend.":[14],"Although":[15],"Internet":[17,47],"facilitates":[18],"people's":[19],"lives,":[20],"it":[21],"also":[22,98,207],"brings":[23],"a":[24,39,56,100,175],"lot":[25],"security":[27],"threats.":[28],"Thus,":[29],"analysis":[31,196],"abnormal":[33,67],"behavior":[34],"becomes":[38],"crucial":[40],"factor":[41],"for":[42],"ensuring":[43],"quality":[45],"services":[48],"and":[49,63,90,132,153,168,192,203],"preventing":[50],"intrusion.":[52],"This":[53],"paper":[54,97],"proposes":[55,99],"deep":[57],"learning":[58],"method":[59,103],"that":[60],"combines":[61],"CNN":[62,121],"LSTM":[64,135],"to":[65,87,122,136],"detect":[66],"traffic,":[69],"especially":[70],"unknown":[71],"intrusions.":[72],"In":[73,183],"field":[75],"machine":[77],"learning,":[78],"choice":[80],"features":[82,127],"is":[83,189],"key":[85],"ingredient":[86],"effect":[89],"accuracy":[91,165,170],"model.":[94,118,182],"Therefore,":[95],"this":[96],"feature":[101],"selection":[102],"based":[104],"on":[105,149],"Information":[106],"Gain":[107],"(IG),":[108],"extracting":[109],"more":[110,191,193,202,204],"valuable":[111],"features,":[112],"which":[113,173,206],"are":[114],"fed":[115],"into":[116],"We":[119,145],"use":[120,134],"extract":[123],"higher":[125],"dimensional":[126],"input":[130],"data,":[131],"then":[133],"learn":[137],"timing":[139],"characteristics":[140],"traffic.":[144],"applied":[146],"our":[147],"model":[148],"KDD99":[151],"dataset":[152],"assessed":[154],"its":[155],"accuracy.":[156],"When":[157],"epoch":[159],"greater":[160],"than":[161],"4,":[162],"training":[164],"reaches":[166,171],"0.99":[167],"testing":[169],"0.925,":[172],"showed":[174],"certain":[176],"improvement":[177],"compared":[178],"with":[179],"traditional":[181],"era":[185],"when":[186],"information":[187],"volume":[188],"becoming":[190],"dense,":[194],"will":[200],"become":[201],"necessary,":[205],"proves":[208],"broader":[209],"application":[210],"prospects.":[211]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}