{"id":"https://openalex.org/W3109037541","doi":"https://doi.org/10.1145/3416013.3426457","title":"Network Anomaly Detection Using LSTM Based Autoencoder","display_name":"Network Anomaly Detection Using LSTM Based Autoencoder","publication_year":2020,"publication_date":"2020-11-16","ids":{"openalex":"https://openalex.org/W3109037541","doi":"https://doi.org/10.1145/3416013.3426457","mag":"3109037541"},"language":"en","primary_location":{"id":"doi:10.1145/3416013.3426457","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3416013.3426457","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th ACM Symposium on QoS and Security for Wireless and Mobile Networks","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1145/3416013.3426457","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088141347","display_name":"Mahmoud Said Elsayed","orcid":"https://orcid.org/0000-0003-2416-7481"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":true,"raw_author_name":"Mahmoud Said Elsayed","raw_affiliation_strings":["University College Dublin, Dublin, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Dublin, Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073189627","display_name":"Nhien\u2010An Le\u2010Khac","orcid":"https://orcid.org/0000-0003-4373-2212"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Nhien-An Le-Khac","raw_affiliation_strings":["University College Dublin, Dublin, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Dublin, Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011772990","display_name":"Soumyabrata Dev","orcid":"https://orcid.org/0000-0002-0153-1095"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Soumyabrata Dev","raw_affiliation_strings":["University College Dublin, Dublin, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Dublin, Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022546955","display_name":"Anca Delia Jurcut","orcid":"https://orcid.org/0000-0002-2705-1823"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Anca Delia Jurcut","raw_affiliation_strings":["University College Dublin, Dublin, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Dublin, Dublin, Ireland","institution_ids":["https://openalex.org/I100930933"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5088141347"],"corresponding_institution_ids":["https://openalex.org/I100930933"],"apc_list":null,"apc_paid":null,"fwci":16.842,"has_fulltext":false,"cited_by_count":268,"citation_normalized_percentile":{"value":0.99362803,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"37","last_page":"45"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.9433046579360962},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7874493598937988},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7704180479049683},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.758436381816864},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7017731666564941},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6308408379554749},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.541487455368042},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.49268919229507446},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4912664294242859},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4906281530857086},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.4625759422779083},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4023081958293915}],"concepts":[{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.9433046579360962},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7874493598937988},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7704180479049683},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.758436381816864},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7017731666564941},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6308408379554749},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.541487455368042},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.49268919229507446},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4912664294242859},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4906281530857086},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.4625759422779083},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4023081958293915},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3416013.3426457","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3416013.3426457","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th ACM Symposium on QoS and Security for Wireless and Mobile Networks","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3416013.3426457","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3416013.3426457","pdf_url":null,"source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th ACM Symposium on QoS and Security for Wireless and Mobile Networks","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1876967670","https://openalex.org/W2097034581","https://openalex.org/W2100495367","https://openalex.org/W2105497548","https://openalex.org/W2116261113","https://openalex.org/W2122646361","https://openalex.org/W2127979711","https://openalex.org/W2145094598","https://openalex.org/W2324108672","https://openalex.org/W2335999708","https://openalex.org/W2499291430","https://openalex.org/W2560162835","https://openalex.org/W2563007988","https://openalex.org/W2587098040","https://openalex.org/W2756489700","https://openalex.org/W2762776925","https://openalex.org/W2782735691","https://openalex.org/W2783190965","https://openalex.org/W2889109290","https://openalex.org/W2896604743","https://openalex.org/W2970724283","https://openalex.org/W2977374708","https://openalex.org/W2997574889","https://openalex.org/W3084346886","https://openalex.org/W3112142095","https://openalex.org/W3118774794"],"related_works":["https://openalex.org/W3186512740","https://openalex.org/W4312467842","https://openalex.org/W4363671829","https://openalex.org/W4287995534","https://openalex.org/W2998168123","https://openalex.org/W3116554004","https://openalex.org/W3135121883","https://openalex.org/W3017266184","https://openalex.org/W2897995864","https://openalex.org/W2377356555"],"abstract_inverted_index":{"Anomaly":[0],"detection":[1,24,159],"aims":[2],"to":[3,12,58,81,88,104,123],"discover":[4],"patterns":[5],"in":[6,63,118,173],"data":[7,31,96],"that":[8,153],"do":[9],"not":[10],"conform":[11],"the":[13,19,27,69,83,90,94,112,115,136,154,163],"expected":[14],"normal":[15,75,84],"behaviour.":[16],"One":[17],"of":[18,29,34,74,93,114,141],"significant":[20],"issues":[21],"for":[22,32,146],"anomaly":[23],"techniques":[25],"is":[26,79],"availability":[28],"labeled":[30],"training/validation":[33],"models.":[35],"In":[36],"this":[37],"paper,":[38],"we":[39,131],"proposed":[40,155],"a":[41],"hyper":[42],"approach":[43],"based":[44,61],"on":[45],"Long":[46],"Short":[47],"Term":[48],"Memory":[49],"(LSTM)":[50],"autoencoder":[51],"and":[52,87,100,127,161],"One-class":[53],"Support":[54],"Vector":[55],"Machine":[56],"(OC-SVM)":[57],"detect":[59],"anomalies":[60],"attacks":[62],"an":[64,105],"unbalanced":[65],"dataset,":[66],"by":[67],"training":[68],"models":[70],"using":[71,135],"only":[72],"examples":[73],"classes.":[76],"The":[77,108,149],"LSTM-autoencoder":[78],"trained":[80],"learn":[82,89],"traffic":[85],"pattern":[86],"compressed":[91],"representation":[92],"input":[95],"(i.e.":[97],"latent":[98],"features)":[99],"then":[101],"feed":[102],"it":[103],"OC-SVM":[106],"approach.":[107],"hybrid":[109],"model":[110,156],"overcomes":[111],"shortcomings":[113],"separate":[116],"OC-SVM,":[117],"which":[119],"its":[120],"low":[121],"capability":[122],"operate":[124],"with":[125],"massive":[126],"high-dimensional":[128],"datasets.":[129],"Additionally,":[130],"perform":[132],"our":[133,168],"experiments":[134],"most":[137],"recent":[138],"dataset":[139],"(InSDN)":[140],"Intrusion":[142],"Detection":[143],"Systems":[144],"(IDSs)":[145],"SDN":[147,175],"environments.":[148],"experimental":[150],"results":[151],"show":[152],"provides":[157,170],"higher":[158],"rate":[160],"reduces":[162],"processing":[164],"time":[165],"significantly.":[166],"Hence,":[167],"method":[169],"great":[171],"confidence":[172],"securing":[174],"networks":[176],"from":[177],"malicious":[178],"traffic.":[179]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":89},{"year":2024,"cited_by_count":72},{"year":2023,"cited_by_count":61},{"year":2022,"cited_by_count":24},{"year":2021,"cited_by_count":19}],"updated_date":"2026-05-08T15:41:06.802602","created_date":"2025-10-10T00:00:00"}