{"id":"https://openalex.org/W3176742384","doi":"https://doi.org/10.1145/3446636","title":"Automated Feature Selection for Anomaly Detection in Network Traffic Data","display_name":"Automated Feature Selection for Anomaly Detection in Network Traffic Data","publication_year":2021,"publication_date":"2021-06-21","ids":{"openalex":"https://openalex.org/W3176742384","doi":"https://doi.org/10.1145/3446636","mag":"3176742384"},"language":"en","primary_location":{"id":"doi:10.1145/3446636","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3446636","pdf_url":null,"source":{"id":"https://openalex.org/S4210170305","display_name":"ACM Transactions on Management Information Systems","issn_l":"2158-656X","issn":["2158-656X","2158-6578"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Management Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053208227","display_name":"Makiya Nakashima","orcid":null},"institutions":[{"id":"https://openalex.org/I206651237","display_name":"East Texas A&M University","ror":"https://ror.org/01red3556","country_code":"US","type":"education","lineage":["https://openalex.org/I206651237"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Makiya Nakashima","raw_affiliation_strings":["Texas A&M University-Commerce, Commerce, TX"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Texas A&M University-Commerce, Commerce, TX","institution_ids":["https://openalex.org/I206651237"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068293431","display_name":"Alex Sim","orcid":"https://orcid.org/0000-0002-6295-1982"},"institutions":[{"id":"https://openalex.org/I148283060","display_name":"Lawrence Berkeley National Laboratory","ror":"https://ror.org/02jbv0t02","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I148283060","https://openalex.org/I39565521"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alex Sim","raw_affiliation_strings":["Lawrence Berkeley National Laboratory, Berkeley, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Lawrence Berkeley National Laboratory, Berkeley, CA","institution_ids":["https://openalex.org/I148283060"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100395864","display_name":"Youngsoo Kim","orcid":"https://orcid.org/0000-0002-1494-9503"},"institutions":[{"id":"https://openalex.org/I142401562","display_name":"Electronics and Telecommunications Research Institute","ror":"https://ror.org/03ysstz10","country_code":"KR","type":"facility","lineage":["https://openalex.org/I142401562","https://openalex.org/I2801339556","https://openalex.org/I4210144908","https://openalex.org/I4387152098"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Youngsoo Kim","raw_affiliation_strings":["Electronics and Telecommunications Research Institute, Daejeon, Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electronics and Telecommunications Research Institute, Daejeon, Korea","institution_ids":["https://openalex.org/I142401562"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016013197","display_name":"Jonghyun Kim","orcid":"https://orcid.org/0000-0002-5532-2117"},"institutions":[{"id":"https://openalex.org/I142401562","display_name":"Electronics and Telecommunications Research Institute","ror":"https://ror.org/03ysstz10","country_code":"KR","type":"facility","lineage":["https://openalex.org/I142401562","https://openalex.org/I2801339556","https://openalex.org/I4210144908","https://openalex.org/I4387152098"]},{"id":"https://openalex.org/I148283060","display_name":"Lawrence Berkeley National Laboratory","ror":"https://ror.org/02jbv0t02","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I148283060","https://openalex.org/I39565521"]}],"countries":["KR","US"],"is_corresponding":false,"raw_author_name":"Jonghyun Kim","raw_affiliation_strings":["Electronics and Telecommunications Research Institute, Daejeon, Korea","Texas A&M University-Commerce and Lawrence Berkeley National Laboratory, Berkeley, CA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electronics and Telecommunications Research Institute, Daejeon, Korea","institution_ids":["https://openalex.org/I142401562"]},{"raw_affiliation_string":"Texas A&M University-Commerce and Lawrence Berkeley National Laboratory, Berkeley, CA","institution_ids":["https://openalex.org/I148283060"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101877231","display_name":"Jinoh Kim","orcid":"https://orcid.org/0000-0002-9835-1866"},"institutions":[{"id":"https://openalex.org/I142401562","display_name":"Electronics and Telecommunications Research Institute","ror":"https://ror.org/03ysstz10","country_code":"KR","type":"facility","lineage":["https://openalex.org/I142401562","https://openalex.org/I2801339556","https://openalex.org/I4210144908","https://openalex.org/I4387152098"]},{"id":"https://openalex.org/I148283060","display_name":"Lawrence Berkeley National Laboratory","ror":"https://ror.org/02jbv0t02","country_code":"US","type":"facility","lineage":["https://openalex.org/I1330989302","https://openalex.org/I148283060","https://openalex.org/I39565521"]}],"countries":["KR","US"],"is_corresponding":false,"raw_author_name":"Jinoh Kim","raw_affiliation_strings":["Electronics and Telecommunications Research Institute, Daejeon, Korea","Texas A&M University-Commerce and Lawrence Berkeley National Laboratory, Berkeley, CA"],"raw_orcid":"https://orcid.org/0000-0002-9835-1866","affiliations":[{"raw_affiliation_string":"Electronics and Telecommunications Research Institute, Daejeon, Korea","institution_ids":["https://openalex.org/I142401562"]},{"raw_affiliation_string":"Texas A&M University-Commerce and Lawrence Berkeley National Laboratory, Berkeley, CA","institution_ids":["https://openalex.org/I148283060"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5053208227"],"corresponding_institution_ids":["https://openalex.org/I206651237"],"apc_list":null,"apc_paid":null,"fwci":3.2044,"has_fulltext":false,"cited_by_count":29,"citation_normalized_percentile":{"value":0.91995875,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"12","issue":"3","first_page":"1","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9939000010490417,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.8126212954521179},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7412852048873901},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.6119840741157532},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5829184055328369},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.5688600540161133},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5528907775878906},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5473716855049133},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5329967737197876},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5196701288223267},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5143262147903442},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.4391353726387024},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.42634934186935425},{"id":"https://openalex.org/keywords/greedy-algorithm","display_name":"Greedy algorithm","score":0.4127291738986969},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.14347445964813232},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.1031232476234436}],"concepts":[{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.8126212954521179},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7412852048873901},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6119840741157532},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5829184055328369},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.5688600540161133},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5528907775878906},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5473716855049133},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5329967737197876},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5196701288223267},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5143262147903442},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.4391353726387024},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.42634934186935425},{"id":"https://openalex.org/C51823790","wikidata":"https://www.wikidata.org/wiki/Q504353","display_name":"Greedy algorithm","level":2,"score":0.4127291738986969},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.14347445964813232},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.1031232476234436},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3446636","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3446636","pdf_url":null,"source":{"id":"https://openalex.org/S4210170305","display_name":"ACM Transactions on Management Information Systems","issn_l":"2158-656X","issn":["2158-656X","2158-6578"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Management Information Systems","raw_type":"journal-article"},{"id":"pmh:oai:escholarship.org:ark:/13030/qt4t72d84h","is_oa":false,"landing_page_url":"https://escholarship.org/uc/item/4t72d84h","pdf_url":null,"source":{"id":"https://openalex.org/S4306400115","display_name":"eScholarship (California Digital Library)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2801248553","host_organization_name":"California Digital Library","host_organization_lineage":["https://openalex.org/I2801248553"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"ACM Transactions on Management Information Systems, vol 12, iss 3","raw_type":"article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"},{"id":"https://openalex.org/F4320317220","display_name":"National Energy Research Scientific Computing Center","ror":"https://ror.org/05v3mvq14"},{"id":"https://openalex.org/F4320335489","display_name":"Institute for Information and Communications Technology Promotion","ror":"https://ror.org/01g0hqq23"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1487321909","https://openalex.org/W1985987493","https://openalex.org/W2021347322","https://openalex.org/W2076758681","https://openalex.org/W2107296782","https://openalex.org/W2119387367","https://openalex.org/W2133990480","https://openalex.org/W2170449798","https://openalex.org/W2278186031","https://openalex.org/W2296509296","https://openalex.org/W2342408547","https://openalex.org/W2478883064","https://openalex.org/W2580060826","https://openalex.org/W2595741287","https://openalex.org/W2626468835","https://openalex.org/W2724549444","https://openalex.org/W2728176761","https://openalex.org/W2732383329","https://openalex.org/W2737540862","https://openalex.org/W2743483681","https://openalex.org/W2746486433","https://openalex.org/W2756489700","https://openalex.org/W2799358885","https://openalex.org/W2883019799","https://openalex.org/W2900953199","https://openalex.org/W2910114055","https://openalex.org/W2910328857","https://openalex.org/W2945020349","https://openalex.org/W2998216295","https://openalex.org/W3097993951","https://openalex.org/W4285719527","https://openalex.org/W4289236186","https://openalex.org/W4301800898","https://openalex.org/W4385674832"],"related_works":["https://openalex.org/W4387497383","https://openalex.org/W3183948672","https://openalex.org/W3173606202","https://openalex.org/W3110381201","https://openalex.org/W2948807893","https://openalex.org/W2778153218","https://openalex.org/W2758277628","https://openalex.org/W1531601525","https://openalex.org/W4386564352","https://openalex.org/W2952668426"],"abstract_inverted_index":{"Variable":[0],"selection":[1,6,42,49,60,83,121,147,167,260],"(also":[2],"known":[3],"as":[4],"feature":[5,41,146,166,205,224,239],")":[7],"is":[8,32,116],"essential":[9],"to":[10,37,118,189,200,202,215,258],"optimize":[11],"the":[12,40,44,47,58,69,77,110,120,144,149,164,175,190,196,204,217,222,237,242],"learning":[13],"complexity":[14],"by":[15,131,169,241],"prioritizing":[16],"features,":[17],"particularly":[18],"for":[19,76,106,221],"a":[20,73,132,210,253],"massive,":[21],"high-dimensional":[22],"dataset":[23],"like":[24],"network":[25,152,233],"traffic":[26],"data.":[27],"In":[28,80,137],"reality,":[29],"however,":[30],"it":[31,115,124],"not":[33],"an":[34],"easy":[35],"task":[36],"effectively":[38],"perform":[39,85],"despite":[43],"availability":[45],"of":[46,65,101,134,151,174,198,212,219,256],"existing":[48,59,165,191],"techniques.":[50,192,261],"From":[51],"our":[52,158],"initial":[53],"experiments,":[54],"we":[55,140],"observed":[56],"that":[57,161,236],"techniques":[61,84,168,178],"produce":[62],"different":[63],"sets":[64,240],"features":[66,220,257],"even":[67],"under":[68],"same":[70],"condition":[71],"(e.g.,":[72],"static":[74],"size":[75],"resulted":[78],"set).":[79],"addition,":[81],"individual":[82],"inconsistently,":[86],"sometimes":[87,92],"showing":[88,186],"better":[89],"performance":[90,251],"but":[91],"worse":[93],"than":[94],"others,":[95],"thereby":[96],"simply":[97],"relying":[98],"on":[99,180],"one":[100,173],"them":[102],"would":[103],"be":[104],"risky":[105],"building":[107],"models":[108],"using":[109],"selected":[111],"features.":[112],"More":[113],"critically,":[114],"demanding":[117],"automate":[119],"process,":[122],"since":[123],"requires":[125],"laborious":[126],"efforts":[127],"with":[128,148,230,252],"intensive":[129],"analysis":[130],"group":[133],"experts":[135],"otherwise.":[136],"this":[138],"article,":[139],"explore":[141],"challenges":[142],"in":[143],"automated":[145],"application":[150],"anomaly":[153],"detection.":[154],"We":[155,193],"first":[156],"present":[157,209],"ensemble":[159,177,244],"approach":[160],"benefits":[162],"from":[163],"incorporating":[170],"them,":[171],"and":[172,208,245],"proposed":[176],"based":[179],"greedy":[181],"search":[182],"works":[183],"highly":[184],"consistently":[185,248],"comparable":[187,250],"results":[188,228],"also":[194],"address":[195],"problem":[197],"when":[199],"stop":[201],"finalize":[203],"elimination":[206],"process":[207],"set":[211],"methods":[213,247],"designed":[214],"determine":[216],"number":[218,255],"reduced":[223],"set.":[225],"Our":[226],"experimental":[227],"conducted":[229],"two":[231],"recent":[232],"datasets":[234],"show":[235],"identified":[238],"presented":[243],"stopping":[246],"yield":[249],"smaller":[254],"conventional":[259]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":5}],"updated_date":"2026-05-27T09:02:27.158192","created_date":"2025-10-10T00:00:00"}