{"id":"https://openalex.org/W2977371127","doi":"https://doi.org/10.1186/s40537-019-0248-6","title":"Big data analysis and distributed deep learning for next-generation intrusion detection system optimization","display_name":"Big data analysis and distributed deep learning for next-generation intrusion detection system optimization","publication_year":2019,"publication_date":"2019-10-05","ids":{"openalex":"https://openalex.org/W2977371127","doi":"https://doi.org/10.1186/s40537-019-0248-6","mag":"2977371127"},"language":"en","primary_location":{"id":"doi:10.1186/s40537-019-0248-6","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s40537-019-0248-6","pdf_url":"https://journalofbigdata.springeropen.com/track/pdf/10.1186/s40537-019-0248-6","source":{"id":"https://openalex.org/S2737955091","display_name":"Journal Of Big Data","issn_l":"2196-1115","issn":["2196-1115"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Big Data","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://journalofbigdata.springeropen.com/track/pdf/10.1186/s40537-019-0248-6","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088312471","display_name":"Khloud Al Jallad","orcid":"https://orcid.org/0000-0001-9474-9204"},"institutions":[{"id":"https://openalex.org/I99731219","display_name":"Higher Institute for Applied Sciences and Technology","ror":"https://ror.org/009qm7w92","country_code":"SY","type":"education","lineage":["https://openalex.org/I99731219"]}],"countries":["SY"],"is_corresponding":true,"raw_author_name":"Khloud Al Jallad","raw_affiliation_strings":["Faculty of Information Technology, Higher Institute for Applied Sciences and Technology, Damascus, Syria"],"raw_orcid":"https://orcid.org/0000-0001-9474-9204","affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Higher Institute for Applied Sciences and Technology, Damascus, Syria","institution_ids":["https://openalex.org/I99731219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000110587","display_name":"Mohamad Aljnidi","orcid":null},"institutions":[{"id":"https://openalex.org/I99731219","display_name":"Higher Institute for Applied Sciences and Technology","ror":"https://ror.org/009qm7w92","country_code":"SY","type":"education","lineage":["https://openalex.org/I99731219"]}],"countries":["SY"],"is_corresponding":false,"raw_author_name":"Mohamad Aljnidi","raw_affiliation_strings":["Faculty of Information Technology, Higher Institute for Applied Sciences and Technology, Damascus, Syria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Higher Institute for Applied Sciences and Technology, Damascus, Syria","institution_ids":["https://openalex.org/I99731219"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5109230154","display_name":"Mohammad Said Desouki","orcid":null},"institutions":[{"id":"https://openalex.org/I99731219","display_name":"Higher Institute for Applied Sciences and Technology","ror":"https://ror.org/009qm7w92","country_code":"SY","type":"education","lineage":["https://openalex.org/I99731219"]}],"countries":["SY"],"is_corresponding":false,"raw_author_name":"Mohammad Said Desouki","raw_affiliation_strings":["Faculty of Information Technology, Higher Institute for Applied Sciences and Technology, Damascus, Syria"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Higher Institute for Applied Sciences and Technology, Damascus, Syria","institution_ids":["https://openalex.org/I99731219"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5088312471"],"corresponding_institution_ids":["https://openalex.org/I99731219"],"apc_list":{"value":1060,"currency":"GBP","value_usd":1300},"apc_paid":{"value":1060,"currency":"GBP","value_usd":1300},"fwci":5.3313,"has_fulltext":true,"cited_by_count":54,"citation_normalized_percentile":{"value":0.96101443,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"6","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8512297868728638},{"id":"https://openalex.org/keywords/spark","display_name":"SPARK (programming language)","score":0.6666682362556458},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6541207432746887},{"id":"https://openalex.org/keywords/big-data","display_name":"Big data","score":0.6324885487556458},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6253992319107056},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5572672486305237},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.47955819964408875},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.47466519474983215},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4745679199695587},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.4707396924495697},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.41280362010002136},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4095939099788666},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.19978982210159302}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8512297868728638},{"id":"https://openalex.org/C2781215313","wikidata":"https://www.wikidata.org/wiki/Q3493345","display_name":"SPARK (programming language)","level":2,"score":0.6666682362556458},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6541207432746887},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.6324885487556458},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6253992319107056},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5572672486305237},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47955819964408875},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.47466519474983215},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4745679199695587},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.4707396924495697},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.41280362010002136},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4095939099788666},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.19978982210159302},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1186/s40537-019-0248-6","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s40537-019-0248-6","pdf_url":"https://journalofbigdata.springeropen.com/track/pdf/10.1186/s40537-019-0248-6","source":{"id":"https://openalex.org/S2737955091","display_name":"Journal Of Big Data","issn_l":"2196-1115","issn":["2196-1115"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Big Data","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2209.13961","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2209.13961","pdf_url":"https://arxiv.org/pdf/2209.13961","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:doaj.org/article:fb2946aa4d3342958f0520d2fb76668d","is_oa":true,"landing_page_url":"https://doaj.org/article/fb2946aa4d3342958f0520d2fb76668d","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Big Data, Vol 6, Iss 1, Pp 1-18 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s40537-019-0248-6","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s40537-019-0248-6","pdf_url":"https://journalofbigdata.springeropen.com/track/pdf/10.1186/s40537-019-0248-6","source":{"id":"https://openalex.org/S2737955091","display_name":"Journal Of Big Data","issn_l":"2196-1115","issn":["2196-1115"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Big Data","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6399999856948853,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2977371127.pdf","grobid_xml":"https://content.openalex.org/works/W2977371127.grobid-xml"},"referenced_works_count":48,"referenced_works":["https://openalex.org/W376761957","https://openalex.org/W1659617390","https://openalex.org/W1963669090","https://openalex.org/W1968622070","https://openalex.org/W1971585691","https://openalex.org/W1973069250","https://openalex.org/W1976816362","https://openalex.org/W1983559153","https://openalex.org/W1990089904","https://openalex.org/W2004086221","https://openalex.org/W2021660846","https://openalex.org/W2025826947","https://openalex.org/W2038536589","https://openalex.org/W2039157918","https://openalex.org/W2042742070","https://openalex.org/W2052387539","https://openalex.org/W2064675550","https://openalex.org/W2065523140","https://openalex.org/W2078799390","https://openalex.org/W2079810272","https://openalex.org/W2084694377","https://openalex.org/W2093171578","https://openalex.org/W2097034581","https://openalex.org/W2109099747","https://openalex.org/W2120713742","https://openalex.org/W2130676130","https://openalex.org/W2132712726","https://openalex.org/W2165969310","https://openalex.org/W2182343634","https://openalex.org/W2238042769","https://openalex.org/W2274473371","https://openalex.org/W2287394288","https://openalex.org/W2293275308","https://openalex.org/W2316894836","https://openalex.org/W2339623982","https://openalex.org/W2465437519","https://openalex.org/W2507920413","https://openalex.org/W2539869562","https://openalex.org/W2560413256","https://openalex.org/W2599033937","https://openalex.org/W2748012568","https://openalex.org/W2768432814","https://openalex.org/W2768562030","https://openalex.org/W2771883124","https://openalex.org/W2949144520","https://openalex.org/W4230263483","https://openalex.org/W4235659077","https://openalex.org/W4285719527"],"related_works":["https://openalex.org/W4390608645","https://openalex.org/W2960264696","https://openalex.org/W3090563135","https://openalex.org/W2497432351","https://openalex.org/W4206777497","https://openalex.org/W2766461310","https://openalex.org/W4247566972","https://openalex.org/W4388692845","https://openalex.org/W3202731209","https://openalex.org/W3211874991"],"abstract_inverted_index":{"Abstract":[0],"With":[1],"the":[2,113,127,150,230,236,245],"growing":[3,28],"use":[4],"of":[5,98,106,118,129,141,158,160,219,244,248],"information":[6],"technology":[7],"in":[8,168,269],"all":[9],"life":[10],"domains,":[11],"hacking":[12],"has":[13,103],"become":[14,34],"more":[15,35],"negatively":[16],"effective":[17],"than":[18,64,192,198,280],"ever":[19],"before.":[20],"Also":[21],"with":[22,56],"developing":[23],"technologies,":[24],"attacks":[25],"numbers":[26],"are":[27,179],"exponentially":[29],"every":[30],"few":[31],"months":[32],"and":[33,60,74,109,112,165,175,184,211,221,229,255],"sophisticated":[36],"so":[37,251],"that":[38,102,148,263],"traditional":[39,199],"IDS":[40],"becomes":[41],"inefficient":[42],"detecting":[43],"them.":[44],"This":[45],"paper":[46],"proposes":[47],"a":[48,86,116,146,156],"solution":[49],"to":[50,171],"detect":[51,72,172],"not":[52,190],"only":[53,191],"new":[54],"threats":[55],"higher":[57,208],"detection":[58,140,188,209],"rate":[59,189,210],"lower":[61,205],"false":[62,206],"positive":[63],"already":[65],"used":[66],"IDS,":[67,194],"but":[68,195],"also":[69,196],"it":[70,185],"could":[71],"collective":[73,174,222],"contextual":[75,132,176,220],"security":[76],"attacks.":[77],"We":[78,124,144],"achieve":[79],"those":[80],"results":[81],"by":[82,271],"using":[83],"Networking":[84],"Chatbot,":[85],"deep":[87,135],"recurrent":[88],"neural":[89],"network:":[90],"Long":[91],"Short":[92],"Term":[93],"Memory":[94],"(LSTM)":[95],"on":[96,181,240],"top":[97],"Apache":[99],"Spark":[100],"Framework":[101],"an":[104],"input":[105],"flow":[107,142],"traffic":[108,110],"aggregation":[111],"output":[114],"is":[115,238],"language":[117,130],"two":[119],"words,":[120],"normal":[121,153],"or":[122],"abnormal.":[123],"propose":[125,145],"merging":[126],"concepts":[128],"processing,":[131],"analysis,":[133],"distributed":[134],"learning,":[136],"big":[137],"data,":[138],"anomaly":[139,200],"analysis.":[143],"model":[147],"describes":[149],"network":[151],"abstract":[152],"behavior":[154],"from":[155],"sequence":[157],"millions":[159],"packets":[161],"within":[162],"their":[163],"context":[164],"analyzes":[166],"them":[167],"near":[169],"real-time":[170],"point,":[173],"anomalies.":[177],"Experiments":[178],"done":[180,239,268],"MAWI":[182],"dataset,":[183],"shows":[186,204],"better":[187,197,212,277],"signature":[193],"IDS.":[201],"The":[202],"experiment":[203,237,254],"positive,":[207],"point":[213],"anomalies":[214,223],"detection.":[215],"As":[216],"for":[217],"prove":[218,265],"detection,":[224],"we":[225,252,261],"discuss":[226],"our":[227,233,256],"claim":[228],"reason":[231],"behind":[232],"hypothesis.":[234],"But":[235],"random":[241],"small":[242],"subsets":[243],"dataset":[246],"because":[247],"hardware":[249,278],"limitations,":[250],"share":[253],"future":[257,270],"vision":[258],"thoughts":[259],"as":[260],"wish":[262],"full":[264],"will":[266],"be":[267],"other":[272],"interested":[273],"researchers":[274],"who":[275],"have":[276],"infrastructure":[279],"ours.":[281]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":14},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":13},{"year":2020,"cited_by_count":9}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2019-10-10T00:00:00"}