{"id":"https://openalex.org/W3193365863","doi":"https://doi.org/10.1145/3465481.3469190","title":"A Hybrid CNN-LSTM Based Approach for Anomaly Detection Systems in SDNs","display_name":"A Hybrid CNN-LSTM Based Approach for Anomaly Detection Systems in SDNs","publication_year":2021,"publication_date":"2021-08-16","ids":{"openalex":"https://openalex.org/W3193365863","doi":"https://doi.org/10.1145/3465481.3469190","mag":"3193365863"},"language":"en","primary_location":{"id":"doi:10.1145/3465481.3469190","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3465481.3469190","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3469190","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3469190","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5112705314","display_name":"Mahmoud Abdallah","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Mahmoud Abdallah","raw_affiliation_strings":["UCD, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UCD, Ireland","institution_ids":[]}]},{"author_position":"middle","author":{"id":null,"display_name":"Nhien An Le Khac","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nhien An Le Khac","raw_affiliation_strings":["UCD, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UCD, Ireland","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030642092","display_name":"Hamed Z. Jahromi","orcid":"https://orcid.org/0000-0002-8900-2875"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hamed Jahromi","raw_affiliation_strings":["UCD, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UCD, Ireland","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022546955","display_name":"Anca Delia Jurcut","orcid":"https://orcid.org/0000-0002-2705-1823"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Anca Delia Jurcut","raw_affiliation_strings":["UCD, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"UCD, Ireland","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5112705314"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":9.7732,"has_fulltext":true,"cited_by_count":116,"citation_normalized_percentile":{"value":0.98398601,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8433306813240051},{"id":"https://openalex.org/keywords/overfitting","display_name":"Overfitting","score":0.7585123777389526},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.703911304473877},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.6138068437576294},{"id":"https://openalex.org/keywords/regularization","display_name":"Regularization (linguistics)","score":0.59025639295578},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5114113688468933},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.487255722284317},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4762587547302246},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.42492157220840454},{"id":"https://openalex.org/keywords/dropout","display_name":"Dropout (neural networks)","score":0.42433440685272217},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.3759901523590088}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8433306813240051},{"id":"https://openalex.org/C22019652","wikidata":"https://www.wikidata.org/wiki/Q331309","display_name":"Overfitting","level":3,"score":0.7585123777389526},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.703911304473877},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.6138068437576294},{"id":"https://openalex.org/C2776135515","wikidata":"https://www.wikidata.org/wiki/Q17143721","display_name":"Regularization (linguistics)","level":2,"score":0.59025639295578},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5114113688468933},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.487255722284317},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4762587547302246},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.42492157220840454},{"id":"https://openalex.org/C2776145597","wikidata":"https://www.wikidata.org/wiki/Q25339462","display_name":"Dropout (neural networks)","level":2,"score":0.42433440685272217},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3759901523590088}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3465481.3469190","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3465481.3469190","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3469190","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3465481.3469190","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3465481.3469190","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3469190","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.5400000214576721,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3193365863.pdf","grobid_xml":"https://content.openalex.org/works/W3193365863.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W2064675550","https://openalex.org/W2403816530","https://openalex.org/W2560162835","https://openalex.org/W2560178266","https://openalex.org/W2584217814","https://openalex.org/W2751998928","https://openalex.org/W2790344751","https://openalex.org/W2889109290","https://openalex.org/W2892758955","https://openalex.org/W2911747218","https://openalex.org/W2919868916","https://openalex.org/W2921453769","https://openalex.org/W2921708219","https://openalex.org/W2924689635","https://openalex.org/W2969965567","https://openalex.org/W2977374708","https://openalex.org/W2978540646","https://openalex.org/W2979354191","https://openalex.org/W3005641848","https://openalex.org/W3006077934","https://openalex.org/W3080213411","https://openalex.org/W3081509497","https://openalex.org/W3084346886","https://openalex.org/W3092771185","https://openalex.org/W3109037541","https://openalex.org/W3122385627"],"related_works":["https://openalex.org/W4298017035","https://openalex.org/W3110700750","https://openalex.org/W2792147139","https://openalex.org/W2998675825","https://openalex.org/W4226354336","https://openalex.org/W3128220493","https://openalex.org/W2736804899","https://openalex.org/W2897443685","https://openalex.org/W4307654087","https://openalex.org/W2951100320"],"abstract_inverted_index":{"Software-Defined":[0],"Networking":[1],"(SDN)":[2],"is":[3,53,106,141,153],"a":[4,31],"promising":[5],"technology":[6],"for":[7,103,188],"the":[8,12,24,39,57,63,81,88,99,112,115,123,128,144,156,160,163,173,182],"future":[9],"Internet.":[10],"However,":[11],"SDN":[13,104,189],"paradigm":[14],"introduces":[15],"new":[16,168],"attack":[17],"vectors":[18],"that":[19,121,155],"do":[20],"not":[21],"exist":[22],"in":[23,166],"conventional":[25],"distributed":[26],"networks.":[27],"This":[28],"paper":[29],"develops":[30],"hybrid":[32],"Intrusion":[33],"Detection":[34],"System":[35],"(IDS)":[36],"by":[37],"combining":[38],"Convolutional":[40],"Neural":[41],"Network":[42,48],"(CNN)":[43],"and":[44,59,73,110,132],"Long":[45],"Short-Term":[46],"Memory":[47],"(LSTM).":[49],"The":[50,84,95,118,138,176],"proposed":[51,85,116],"model":[52],"capable":[54],"of":[55,62,92,114,136,146,162,178,184],"capturing":[56],"spatial":[58],"temporal":[60],"features":[61],"network":[64],"traffic.":[65],"Two":[66],"regularization":[67,157],"techniques":[68,158],"i.e.,":[69],"L2":[70],"Regularization":[71],"()":[72],"dropout":[74],"method":[75,86],"are":[76],"used":[77,107],"to":[78,108,172],"overcome":[79],"with":[80,125],"overfitting":[82],"problem.":[83],"improves":[87,127,159],"intrusion":[89,129],"detection":[90,130],"performance":[91,113,131,161],"zero-day":[93],"attacks.":[94],"InSDN":[96],"dataset":[97,102],"\u2014":[98],"most":[100],"recent":[101],"networks":[105],"test":[109],"evaluate":[111],"model.":[117,149],"results":[119],"indicate":[120],"integrating":[122],"CNN":[124,164],"LSTM":[126],"achieves":[133],"an":[134],"accuracy":[135,140,145],"96.32%.":[137],"estimated":[139],"higher":[142],"than":[143],"each":[147],"individual":[148],"In":[150],"addition,":[151],"it":[152],"established":[154],"algorithms":[165],"detecting":[167],"intrusions":[169],"when":[170],"compared":[171],"standard":[174],"CNN.":[175],"findings":[177],"this":[179],"study":[180],"facilitates":[181],"development":[183],"robust":[185],"IDS":[186],"systems":[187],"environment.":[190]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":45},{"year":2024,"cited_by_count":27},{"year":2023,"cited_by_count":22},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":1}],"updated_date":"2026-05-14T08:36:36.166977","created_date":"2025-10-10T00:00:00"}