{"id":"https://openalex.org/W2982084047","doi":"https://doi.org/10.1186/s13635-019-0098-y","title":"Multi-layer intrusion detection system with ExtraTrees feature selection, extreme learning machine ensemble, and softmax aggregation","display_name":"Multi-layer intrusion detection system with ExtraTrees feature selection, extreme learning machine ensemble, and softmax aggregation","publication_year":2019,"publication_date":"2019-10-22","ids":{"openalex":"https://openalex.org/W2982084047","doi":"https://doi.org/10.1186/s13635-019-0098-y","mag":"2982084047"},"language":"en","primary_location":{"id":"doi:10.1186/s13635-019-0098-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-019-0098-y","pdf_url":"https://jis-eurasipjournals.springeropen.com/track/pdf/10.1186/s13635-019-0098-y","source":{"id":"https://openalex.org/S4210195102","display_name":"EURASIP Journal on Information Security","issn_l":"2510-523X","issn":["2510-523X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EURASIP Journal on Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://jis-eurasipjournals.springeropen.com/track/pdf/10.1186/s13635-019-0098-y","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029534696","display_name":"Jivitesh Sharma","orcid":"https://orcid.org/0000-0001-5754-9078"},"institutions":[{"id":"https://openalex.org/I200650556","display_name":"University of Agder","ror":"https://ror.org/03x297z98","country_code":"NO","type":"education","lineage":["https://openalex.org/I200650556"]}],"countries":["NO"],"is_corresponding":true,"raw_author_name":"Jivitesh Sharma","raw_affiliation_strings":["University of Agder, Grimstad, Norway"],"raw_orcid":"https://orcid.org/0000-0001-5754-9078","affiliations":[{"raw_affiliation_string":"University of Agder, Grimstad, Norway","institution_ids":["https://openalex.org/I200650556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016919783","display_name":"Charul Giri","orcid":null},"institutions":[{"id":"https://openalex.org/I200650556","display_name":"University of Agder","ror":"https://ror.org/03x297z98","country_code":"NO","type":"education","lineage":["https://openalex.org/I200650556"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Charul Giri","raw_affiliation_strings":["University of Agder, Grimstad, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Agder, Grimstad, Norway","institution_ids":["https://openalex.org/I200650556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071922620","display_name":"Ole\u2010Christoffer Granmo","orcid":"https://orcid.org/0000-0002-7287-030X"},"institutions":[{"id":"https://openalex.org/I200650556","display_name":"University of Agder","ror":"https://ror.org/03x297z98","country_code":"NO","type":"education","lineage":["https://openalex.org/I200650556"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Ole-Christoffer Granmo","raw_affiliation_strings":["University of Agder, Grimstad, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Agder, Grimstad, Norway","institution_ids":["https://openalex.org/I200650556"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002394922","display_name":"Morten Goodwin","orcid":"https://orcid.org/0000-0001-6331-702X"},"institutions":[{"id":"https://openalex.org/I200650556","display_name":"University of Agder","ror":"https://ror.org/03x297z98","country_code":"NO","type":"education","lineage":["https://openalex.org/I200650556"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Morten Goodwin","raw_affiliation_strings":["University of Agder, Grimstad, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Agder, Grimstad, Norway","institution_ids":["https://openalex.org/I200650556"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5029534696"],"corresponding_institution_ids":["https://openalex.org/I200650556"],"apc_list":{"value":660,"currency":"GBP","value_usd":809},"apc_paid":{"value":660,"currency":"GBP","value_usd":809},"fwci":5.8035,"has_fulltext":true,"cited_by_count":84,"citation_normalized_percentile":{"value":0.96827989,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"2019","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12676","display_name":"Machine Learning and ELM","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12676","display_name":"Machine Learning and ELM","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9405999779701233,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/softmax-function","display_name":"Softmax function","score":0.8854106664657593},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.878426730632782},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7124143242835999},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.7035942077636719},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6478791236877441},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.6173470616340637},{"id":"https://openalex.org/keywords/extreme-learning-machine","display_name":"Extreme learning machine","score":0.6021828651428223},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5559195876121521},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.5263984203338623},{"id":"https://openalex.org/keywords/binary-classification","display_name":"Binary classification","score":0.425674706697464},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3785327076911926},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3765767812728882},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.32672739028930664},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.2238406538963318},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.18235483765602112}],"concepts":[{"id":"https://openalex.org/C188441871","wikidata":"https://www.wikidata.org/wiki/Q7554146","display_name":"Softmax function","level":3,"score":0.8854106664657593},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.878426730632782},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7124143242835999},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7035942077636719},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6478791236877441},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.6173470616340637},{"id":"https://openalex.org/C2780150128","wikidata":"https://www.wikidata.org/wiki/Q21948731","display_name":"Extreme learning machine","level":3,"score":0.6021828651428223},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5559195876121521},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.5263984203338623},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.425674706697464},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3785327076911926},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3765767812728882},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.32672739028930664},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2238406538963318},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.18235483765602112}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1186/s13635-019-0098-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-019-0098-y","pdf_url":"https://jis-eurasipjournals.springeropen.com/track/pdf/10.1186/s13635-019-0098-y","source":{"id":"https://openalex.org/S4210195102","display_name":"EURASIP Journal on Information Security","issn_l":"2510-523X","issn":["2510-523X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EURASIP Journal on Information Security","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:52c642add623417e87319d0a5d25ba96","is_oa":true,"landing_page_url":"https://doaj.org/article/52c642add623417e87319d0a5d25ba96","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"EURASIP Journal on Information Security, Vol 2019, Iss 1, Pp 1-16 (2019)","raw_type":"article"},{"id":"pmh:oai:uia.brage.unit.no:11250/2648591","is_oa":true,"landing_page_url":"https://hdl.handle.net/11250/2648591","pdf_url":null,"source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"16","raw_type":"info:eu-repo/semantics/article"},{"id":"pmh:oai:uia.brage.unit.no:11250/2992841","is_oa":true,"landing_page_url":"https://hdl.handle.net/11250/2992841","pdf_url":null,"source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"2019","raw_type":"info:eu-repo/semantics/other"}],"best_oa_location":{"id":"doi:10.1186/s13635-019-0098-y","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s13635-019-0098-y","pdf_url":"https://jis-eurasipjournals.springeropen.com/track/pdf/10.1186/s13635-019-0098-y","source":{"id":"https://openalex.org/S4210195102","display_name":"EURASIP Journal on Information Security","issn_l":"2510-523X","issn":["2510-523X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EURASIP Journal on Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2982084047.pdf","grobid_xml":"https://content.openalex.org/works/W2982084047.grobid-xml"},"referenced_works_count":49,"referenced_works":["https://openalex.org/W156957101","https://openalex.org/W627553601","https://openalex.org/W1136074057","https://openalex.org/W1506806321","https://openalex.org/W1522301498","https://openalex.org/W1525510058","https://openalex.org/W1576523742","https://openalex.org/W1974911249","https://openalex.org/W2002394060","https://openalex.org/W2003912160","https://openalex.org/W2023459473","https://openalex.org/W2056132907","https://openalex.org/W2078622091","https://openalex.org/W2111072639","https://openalex.org/W2116873850","https://openalex.org/W2125523891","https://openalex.org/W2134603844","https://openalex.org/W2156387975","https://openalex.org/W2168148636","https://openalex.org/W2173213060","https://openalex.org/W2296509296","https://openalex.org/W2504797357","https://openalex.org/W2528663298","https://openalex.org/W2547078880","https://openalex.org/W2586872059","https://openalex.org/W2599306383","https://openalex.org/W2610441619","https://openalex.org/W2729006349","https://openalex.org/W2735716675","https://openalex.org/W2738663878","https://openalex.org/W2748757733","https://openalex.org/W2765164841","https://openalex.org/W2765709649","https://openalex.org/W2782713273","https://openalex.org/W2787944753","https://openalex.org/W2796545586","https://openalex.org/W2797915143","https://openalex.org/W2889109290","https://openalex.org/W2897955170","https://openalex.org/W2898211982","https://openalex.org/W2898324827","https://openalex.org/W2945670759","https://openalex.org/W2947802941","https://openalex.org/W2951781752","https://openalex.org/W2953046920","https://openalex.org/W3099976866","https://openalex.org/W3198134824","https://openalex.org/W4238294603","https://openalex.org/W6628722637"],"related_works":["https://openalex.org/W3107204728","https://openalex.org/W4287591324","https://openalex.org/W4226420367","https://openalex.org/W2980176872","https://openalex.org/W2962876041","https://openalex.org/W2988321605","https://openalex.org/W2830281438","https://openalex.org/W3189276259","https://openalex.org/W3158472548","https://openalex.org/W2999368888"],"abstract_inverted_index":{"Abstract":[0],"Recent":[1],"advances":[2],"in":[3,33,180,195,203],"intrusion":[4,201],"detection":[5,202],"systems":[6],"based":[7],"on":[8,120,159],"machine":[9,173],"learning":[10,172],"have":[11],"indeed":[12],"outperformed":[13],"other":[14,140],"techniques,":[15],"but":[16],"struggle":[17],"with":[18,24,142],"detecting":[19],"multiple":[20,113],"classes":[21],"of":[22,49,58,66,72,178,182,193],"attacks":[23],"high":[25,144],"accuracy.":[26],"We":[27,116],"propose":[28],"a":[29,78,143],"method":[30,119,133],"that":[31,96,130],"works":[32],"three":[34],"stages.":[35],"First,":[36],"the":[37,70,83,87,109,121,139,160,169,176,191],"ExtraTrees":[38],"classifier":[39],"is":[40,60,95,99,134,148],"used":[41,61],"to":[42,62,81,103,136,150,174,199],"select":[43],"relevant":[44],"features":[45],"for":[46,52,156],"each":[47,53,64],"type":[48,65],"attack":[50,67],"individually":[51],"(ELM).":[54],"Then,":[55],"an":[56],"ensemble":[57,192],"ELMs":[59,74,194],"detect":[63],"separately.":[68],"Finally,":[69],"results":[71,84,127],"all":[73,138],"are":[75],"combined":[76],"using":[77,197],"softmax":[79],"layer":[80],"refine":[82],"and":[85,123,153,162],"increase":[86],"accuracy":[88,155],"further.":[89],"The":[90,126],"intuition":[91],"behind":[92],"our":[93,118,131],"system":[94,147],"multi-class":[97,110,157],"classification":[98,158,181],"quite":[100],"difficult":[101],"compared":[102],"binary":[104,114],"classification.":[105],"So,":[106],"we":[107,167,189],"divide":[108],"problem":[111,177],"into":[112],"classifications.":[115],"test":[117],"UNSW":[122,161],"KDDcup99":[124,163],"datasets.":[125],"clearly":[128],"show":[129],"proposed":[132],"able":[135,149],"outperform":[137],"methods,":[141],"margin.":[145],"Our":[146],"achieve":[151],"98.24%":[152],"99.76%":[154],"datasets,":[164],"respectively.":[165],"Additionally,":[166],"use":[168],"weighted":[170],"extreme":[171],"alleviate":[175],"imbalance":[179],"attacks,":[183],"which":[184],"further":[185],"boosts":[186],"performance.":[187],"Lastly,":[188],"implement":[190],"parallel":[196],"GPUs":[198],"perform":[200],"real":[204],"time.":[205]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":18},{"year":2023,"cited_by_count":15},{"year":2022,"cited_by_count":18},{"year":2021,"cited_by_count":18},{"year":2020,"cited_by_count":4}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}