{"id":"https://openalex.org/W4394975949","doi":"https://doi.org/10.1145/3659575","title":"Applying Generative Machine Learning to Intrusion Detection: A Systematic Mapping Study and Review","display_name":"Applying Generative Machine Learning to Intrusion Detection: A Systematic Mapping Study and Review","publication_year":2024,"publication_date":"2024-04-20","ids":{"openalex":"https://openalex.org/W4394975949","doi":"https://doi.org/10.1145/3659575"},"language":"en","primary_location":{"id":"doi:10.1145/3659575","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3659575","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3659575","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3659575","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071053094","display_name":"James Halvorsen","orcid":"https://orcid.org/0000-0002-6095-9972"},"institutions":[{"id":"https://openalex.org/I72951846","display_name":"Washington State University","ror":"https://ror.org/05dk0ce17","country_code":"US","type":"education","lineage":["https://openalex.org/I72951846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"James Halvorsen","raw_affiliation_strings":["School of EECS, Washington State University, Pullman, United States","School of Electrical Engineering and Computer Science, Washington State University, Pullman, United States"],"raw_orcid":"https://orcid.org/0000-0002-6095-9972","affiliations":[{"raw_affiliation_string":"School of EECS, Washington State University, Pullman, United States","institution_ids":["https://openalex.org/I72951846"]},{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, Washington State University, Pullman, United States","institution_ids":["https://openalex.org/I72951846"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041998052","display_name":"Clemente Izurieta","orcid":"https://orcid.org/0000-0002-1002-3906"},"institutions":[{"id":"https://openalex.org/I23732399","display_name":"Montana State University","ror":"https://ror.org/02w0trx84","country_code":"US","type":"education","lineage":["https://openalex.org/I23732399","https://openalex.org/I4210126032"]},{"id":"https://openalex.org/I2800102766","display_name":"Idaho National Laboratory","ror":"https://ror.org/00ty2a548","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I2800102766","https://openalex.org/I2801818860"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Clemente Izurieta","raw_affiliation_strings":["School of Computing, Montana State University, Bozeman, United States and Idaho National Laboratory, Idaho Falls, United States","Gianforte School of Computing, Montana State University, Bozeman, United States and Idaho National Laboratories, Idaho Falls, United States"],"raw_orcid":"https://orcid.org/0000-0002-1002-3906","affiliations":[{"raw_affiliation_string":"School of Computing, Montana State University, Bozeman, United States and Idaho National Laboratory, Idaho Falls, United States","institution_ids":["https://openalex.org/I2800102766"]},{"raw_affiliation_string":"Gianforte School of Computing, Montana State University, Bozeman, United States and Idaho National Laboratories, Idaho Falls, United States","institution_ids":["https://openalex.org/I23732399","https://openalex.org/I2800102766"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076081056","display_name":"Haipeng Cai","orcid":"https://orcid.org/0000-0002-5224-9970"},"institutions":[{"id":"https://openalex.org/I72951846","display_name":"Washington State University","ror":"https://ror.org/05dk0ce17","country_code":"US","type":"education","lineage":["https://openalex.org/I72951846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Haipeng Cai","raw_affiliation_strings":["School of EECS, Washington State University, Pullman, United States","School of Electrical Engineering and Computer Science, Washington State University, Pullman, United States"],"raw_orcid":"https://orcid.org/0000-0002-5224-9970","affiliations":[{"raw_affiliation_string":"School of EECS, Washington State University, Pullman, United States","institution_ids":["https://openalex.org/I72951846"]},{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, Washington State University, Pullman, United States","institution_ids":["https://openalex.org/I72951846"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5049685547","display_name":"Assefaw H. Gebremedhin","orcid":"https://orcid.org/0000-0001-5383-8032"},"institutions":[{"id":"https://openalex.org/I72951846","display_name":"Washington State University","ror":"https://ror.org/05dk0ce17","country_code":"US","type":"education","lineage":["https://openalex.org/I72951846"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Assefaw Gebremedhin","raw_affiliation_strings":["School of EECS, Washington State University, Pullman, United States","School of Electrical Engineering and Computer Science, Washington State University, Pullman, United States"],"raw_orcid":"https://orcid.org/0000-0001-5383-8032","affiliations":[{"raw_affiliation_string":"School of EECS, Washington State University, Pullman, United States","institution_ids":["https://openalex.org/I72951846"]},{"raw_affiliation_string":"School of Electrical Engineering and Computer Science, Washington State University, Pullman, United States","institution_ids":["https://openalex.org/I72951846"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.7202,"has_fulltext":true,"cited_by_count":31,"citation_normalized_percentile":{"value":0.97401015,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"56","issue":"10","first_page":"1","last_page":"33"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9929999709129333,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8751094341278076},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7530028820037842},{"id":"https://openalex.org/keywords/intersection","display_name":"Intersection (aeronautics)","score":0.7001339197158813},{"id":"https://openalex.org/keywords/intrusion-prevention-system","display_name":"Intrusion prevention system","score":0.6317172050476074},{"id":"https://openalex.org/keywords/generative-grammar","display_name":"Generative grammar","score":0.5924761891365051},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5584163665771484},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5526762008666992},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.4874439537525177}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8751094341278076},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7530028820037842},{"id":"https://openalex.org/C64543145","wikidata":"https://www.wikidata.org/wiki/Q162942","display_name":"Intersection (aeronautics)","level":2,"score":0.7001339197158813},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.6317172050476074},{"id":"https://openalex.org/C39890363","wikidata":"https://www.wikidata.org/wiki/Q36108","display_name":"Generative grammar","level":2,"score":0.5924761891365051},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5584163665771484},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5526762008666992},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.4874439537525177},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3659575","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3659575","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3659575","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3659575","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3659575","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3659575","source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4394975949.pdf","grobid_xml":"https://content.openalex.org/works/W4394975949.grobid-xml"},"referenced_works_count":114,"referenced_works":["https://openalex.org/W4214443","https://openalex.org/W433644524","https://openalex.org/W2022788640","https://openalex.org/W2056716515","https://openalex.org/W2079777648","https://openalex.org/W2099940443","https://openalex.org/W2106732331","https://openalex.org/W2111724279","https://openalex.org/W2117002131","https://openalex.org/W2143842190","https://openalex.org/W2189456526","https://openalex.org/W2296509296","https://openalex.org/W2399906603","https://openalex.org/W2467604901","https://openalex.org/W2550453031","https://openalex.org/W2559655401","https://openalex.org/W2560828726","https://openalex.org/W2580458810","https://openalex.org/W2596185890","https://openalex.org/W2605195953","https://openalex.org/W2620763085","https://openalex.org/W2742334953","https://openalex.org/W2749908420","https://openalex.org/W2755577605","https://openalex.org/W2767092890","https://openalex.org/W2779931100","https://openalex.org/W2788864200","https://openalex.org/W2789828921","https://openalex.org/W2794988934","https://openalex.org/W2795967288","https://openalex.org/W2804769055","https://openalex.org/W2807998075","https://openalex.org/W2811069758","https://openalex.org/W2874542333","https://openalex.org/W2886533716","https://openalex.org/W2889836475","https://openalex.org/W2897256107","https://openalex.org/W2899141320","https://openalex.org/W2902715977","https://openalex.org/W2904969546","https://openalex.org/W2913608505","https://openalex.org/W2914304175","https://openalex.org/W2914885528","https://openalex.org/W2914900082","https://openalex.org/W2918222882","https://openalex.org/W2923951475","https://openalex.org/W2926701059","https://openalex.org/W2947459187","https://openalex.org/W2947802941","https://openalex.org/W2947934595","https://openalex.org/W2948596468","https://openalex.org/W2955343150","https://openalex.org/W2958285686","https://openalex.org/W2962870788","https://openalex.org/W2962896174","https://openalex.org/W2963017889","https://openalex.org/W2963391384","https://openalex.org/W2967969227","https://openalex.org/W2969262720","https://openalex.org/W2978971541","https://openalex.org/W2980576170","https://openalex.org/W2982340830","https://openalex.org/W2999905431","https://openalex.org/W3003456222","https://openalex.org/W3008195198","https://openalex.org/W3009569043","https://openalex.org/W3011900228","https://openalex.org/W3031028459","https://openalex.org/W3035311645","https://openalex.org/W3048997728","https://openalex.org/W3083690138","https://openalex.org/W3086737406","https://openalex.org/W3087836803","https://openalex.org/W3089739557","https://openalex.org/W3092707779","https://openalex.org/W3097056170","https://openalex.org/W3099427515","https://openalex.org/W3113816305","https://openalex.org/W3113843773","https://openalex.org/W3123788679","https://openalex.org/W3132109934","https://openalex.org/W3137750955","https://openalex.org/W3153872861","https://openalex.org/W3157814027","https://openalex.org/W3165871547","https://openalex.org/W3174867786","https://openalex.org/W3193629284","https://openalex.org/W3201886739","https://openalex.org/W3214373139","https://openalex.org/W3217364290","https://openalex.org/W4210818611","https://openalex.org/W4210946668","https://openalex.org/W4211258396","https://openalex.org/W4224035735","https://openalex.org/W4225481767","https://openalex.org/W4226264609","https://openalex.org/W4242458762","https://openalex.org/W4280572893","https://openalex.org/W4289860735","https://openalex.org/W4290991003","https://openalex.org/W4290994944","https://openalex.org/W4295274059","https://openalex.org/W4295690791","https://openalex.org/W4302011534","https://openalex.org/W4303474413","https://openalex.org/W4311415873","https://openalex.org/W4312933868","https://openalex.org/W4317778265","https://openalex.org/W4366526216","https://openalex.org/W4388893589","https://openalex.org/W4391519594","https://openalex.org/W6759977823","https://openalex.org/W6767341103","https://openalex.org/W7016021835"],"related_works":["https://openalex.org/W2392603527","https://openalex.org/W2390009783","https://openalex.org/W2348767155","https://openalex.org/W1513478798","https://openalex.org/W2388497169","https://openalex.org/W4283700121","https://openalex.org/W1496376327","https://openalex.org/W2357468538","https://openalex.org/W3120393658","https://openalex.org/W2133389611"],"abstract_inverted_index":{"Intrusion":[0],"Detection":[1],"Systems":[2],"(IDSs)":[3],"are":[4],"an":[5,62],"essential":[6],"element":[7],"of":[8,41,65,78,83],"modern":[9],"cyber":[10],"defense,":[11],"alerting":[12],"users":[13],"to":[14,25,68],"when":[15],"and":[16,30,45,85,87,94],"where":[17],"cyber-attacks":[18],"occur.":[19],"Machine":[20,50],"learning":[21],"can":[22,54],"enable":[23],"IDSs":[24],"further":[26],"distinguish":[27],"between":[28],"benign":[29],"malicious":[31],"behaviors,":[32],"but":[33],"it":[34],"comes":[35],"with":[36],"several":[37],"challenges,":[38],"including":[39],"lack":[40],"quality":[42],"training":[43],"data":[44],"high":[46],"false-positive":[47],"rates.":[48],"Generative":[49],"Learning":[51],"Models":[52],"(GMLMs)":[53],"help":[55],"overcome":[56],"these":[57],"challenges.":[58],"This":[59],"article":[60],"offers":[61],"in-depth":[63],"exploration":[64],"GMLMs\u2019":[66],"application":[67],"intrusion":[69],"detection.":[70],"It":[71],"gives":[72],"(1)":[73],"a":[74,89],"systematic":[75],"mapping":[76],"study":[77],"research":[79],"at":[80],"the":[81],"intersection":[82],"GMLMs":[84],"IDSs,":[86],"(2)":[88],"detailed":[90],"review":[91],"providing":[92],"insights":[93],"directions":[95],"for":[96],"future":[97],"research.":[98]},"counts_by_year":[{"year":2026,"cited_by_count":6},{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":5}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}