{"id":"https://openalex.org/W4416784889","doi":"https://doi.org/10.1186/s40537-025-01323-2","title":"A systematic literature study of machine learning techniques based intrusion detection: datasets, models, challenges, and future directions","display_name":"A systematic literature study of machine learning techniques based intrusion detection: datasets, models, challenges, and future directions","publication_year":2025,"publication_date":"2025-11-28","ids":{"openalex":"https://openalex.org/W4416784889","doi":"https://doi.org/10.1186/s40537-025-01323-2"},"language":"en","primary_location":{"id":"doi:10.1186/s40537-025-01323-2","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s40537-025-01323-2","pdf_url":"https://link.springer.com/content/pdf/10.1186/s40537-025-01323-2.pdf","source":{"id":"https://openalex.org/S2737955091","display_name":"Journal Of Big Data","issn_l":"2196-1115","issn":["2196-1115"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Big Data","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://link.springer.com/content/pdf/10.1186/s40537-025-01323-2.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053810241","display_name":"Hafiz Muhammad Raza Ur Rehman","orcid":null},"institutions":[{"id":"https://openalex.org/I55240360","display_name":"Yeungnam University","ror":"https://ror.org/05yc6p159","country_code":"KR","type":"education","lineage":["https://openalex.org/I55240360"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Hafiz Muhammad Raza Ur Rehman","raw_affiliation_strings":["School of Computer Science and Engineering, Yeungnam University, 280-Daehak-ro, Gyeongsan, 38541, Republic of Korea"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Yeungnam University, 280-Daehak-ro, Gyeongsan, 38541, Republic of Korea","institution_ids":["https://openalex.org/I55240360"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120570105","display_name":"Saira Liaquat","orcid":null},"institutions":[{"id":"https://openalex.org/I174731842","display_name":"Islamia University of Bahawalpur","ror":"https://ror.org/002rc4w13","country_code":"PK","type":"education","lineage":["https://openalex.org/I174731842"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Saira Liaquat","raw_affiliation_strings":["Department of Data Science, The Islamia University of Bahawalpur, Baghdad road, Bahawalpur, 63100, Pakistan"],"affiliations":[{"raw_affiliation_string":"Department of Data Science, The Islamia University of Bahawalpur, Baghdad road, Bahawalpur, 63100, Pakistan","institution_ids":["https://openalex.org/I174731842"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5079245541","display_name":"M. Junaid Gul","orcid":null},"institutions":[{"id":"https://openalex.org/I55240360","display_name":"Yeungnam University","ror":"https://ror.org/05yc6p159","country_code":"KR","type":"education","lineage":["https://openalex.org/I55240360"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Muhammad Junaid Gul","raw_affiliation_strings":["School of Computer Science and Engineering, Yeungnam University, 280-Daehak-ro, Gyeongsan, 38541, Republic of Korea"],"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Yeungnam University, 280-Daehak-ro, Gyeongsan, 38541, Republic of Korea","institution_ids":["https://openalex.org/I55240360"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007801124","display_name":"Muhammad Zeeshan Jhandir","orcid":null},"institutions":[{"id":"https://openalex.org/I174731842","display_name":"Islamia University of Bahawalpur","ror":"https://ror.org/002rc4w13","country_code":"PK","type":"education","lineage":["https://openalex.org/I174731842"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Muhammad Zeeshan Jhandir","raw_affiliation_strings":["Department of Data Science, The Islamia University of Bahawalpur, Baghdad road, Bahawalpur, 63100, Pakistan"],"affiliations":[{"raw_affiliation_string":"Department of Data Science, The Islamia University of Bahawalpur, Baghdad road, Bahawalpur, 63100, Pakistan","institution_ids":["https://openalex.org/I174731842"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069924686","display_name":"Daniel Gavilanes","orcid":null},"institutions":[{"id":"https://openalex.org/I205571821","display_name":"Ibero American University","ror":"https://ror.org/05vss7635","country_code":"MX","type":"education","lineage":["https://openalex.org/I205571821"]},{"id":"https://openalex.org/I4210097234","display_name":"Universidad Internacional","ror":"https://ror.org/00cxp1a86","country_code":"MX","type":"education","lineage":["https://openalex.org/I4210097234"]},{"id":"https://openalex.org/I4210128504","display_name":"Universidad Europea del Atl\u00e1ntico","ror":"https://ror.org/048tesw25","country_code":"ES","type":"education","lineage":["https://openalex.org/I4210128504"]},{"id":"https://openalex.org/I87806610","display_name":"Ibero-American University Puebla","ror":"https://ror.org/00pcv0g02","country_code":"MX","type":"education","lineage":["https://openalex.org/I87806610"]}],"countries":["ES","MX"],"is_corresponding":false,"raw_author_name":"Daniel Gavilanes","raw_affiliation_strings":["Universidad Europea del Atl\u00e1ntico, Isabel Torres 21, Santander, 39011, Spain","Universidad Internacional Iberoamericana, Campeche, 24560, Mexico","Universidade Internacional do Cuanza, Cuito, Bie, Angola"],"affiliations":[{"raw_affiliation_string":"Universidad Europea del Atl\u00e1ntico, Isabel Torres 21, Santander, 39011, Spain","institution_ids":["https://openalex.org/I4210128504"]},{"raw_affiliation_string":"Universidad Internacional Iberoamericana, Campeche, 24560, Mexico","institution_ids":["https://openalex.org/I4210097234","https://openalex.org/I87806610","https://openalex.org/I205571821"]},{"raw_affiliation_string":"Universidade Internacional do Cuanza, Cuito, Bie, Angola","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087328233","display_name":"Manuel Masias Vergara","orcid":"https://orcid.org/0000-0001-7555-5017"},"institutions":[{"id":"https://openalex.org/I4210097234","display_name":"Universidad Internacional","ror":"https://ror.org/00cxp1a86","country_code":"MX","type":"education","lineage":["https://openalex.org/I4210097234"]},{"id":"https://openalex.org/I4210128504","display_name":"Universidad Europea del Atl\u00e1ntico","ror":"https://ror.org/048tesw25","country_code":"ES","type":"education","lineage":["https://openalex.org/I4210128504"]},{"id":"https://openalex.org/I4391767878","display_name":"Universidad de la Romana","ror":"https://ror.org/051sm7d31","country_code":null,"type":"education","lineage":["https://openalex.org/I4391767878"]}],"countries":["ES","MX"],"is_corresponding":false,"raw_author_name":"Manuel Masias Vergara","raw_affiliation_strings":["Universidad Europea del Atl\u00e1ntico, Isabel Torres 21, Santander, 39011, Spain","Universidad Internacional Iberoamericana Arecibo, Puerto Rico, 00613, USA","Universidad de La Romana, La Romana, Dominican Republic"],"affiliations":[{"raw_affiliation_string":"Universidad Europea del Atl\u00e1ntico, Isabel Torres 21, Santander, 39011, Spain","institution_ids":["https://openalex.org/I4210128504"]},{"raw_affiliation_string":"Universidad Internacional Iberoamericana Arecibo, Puerto Rico, 00613, USA","institution_ids":["https://openalex.org/I4210097234"]},{"raw_affiliation_string":"Universidad de La Romana, La Romana, Dominican Republic","institution_ids":["https://openalex.org/I4391767878"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101909275","display_name":"Imran Ashraf","orcid":null},"institutions":[{"id":"https://openalex.org/I55240360","display_name":"Yeungnam University","ror":"https://ror.org/05yc6p159","country_code":"KR","type":"education","lineage":["https://openalex.org/I55240360"]}],"countries":["KR"],"is_corresponding":true,"raw_author_name":"Imran Ashraf","raw_affiliation_strings":["Department of Information and Communication Engineering, Yeungnam University, 280-Daehak-ro, Gyeongsan, 38541, Republic of Korea"],"affiliations":[{"raw_affiliation_string":"Department of Information and Communication Engineering, Yeungnam University, 280-Daehak-ro, Gyeongsan, 38541, Republic of Korea","institution_ids":["https://openalex.org/I55240360"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5101909275"],"corresponding_institution_ids":["https://openalex.org/I55240360"],"apc_list":{"value":1060,"currency":"GBP","value_usd":1300},"apc_paid":{"value":1060,"currency":"GBP","value_usd":1300},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.43001118,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"12","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9395999908447266,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9395999908447266,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.005499999970197678,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.004399999976158142,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6636000275611877},{"id":"https://openalex.org/keywords/clarity","display_name":"CLARITY","score":0.646399974822998},{"id":"https://openalex.org/keywords/cyberspace","display_name":"Cyberspace","score":0.5565000176429749},{"id":"https://openalex.org/keywords/systematic-review","display_name":"Systematic review","score":0.5521000027656555},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.506600022315979},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4986000061035156},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.41780000925064087},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.3756999969482422}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8429999947547913},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6636000275611877},{"id":"https://openalex.org/C2777146004","wikidata":"https://www.wikidata.org/wiki/Q14949826","display_name":"CLARITY","level":2,"score":0.646399974822998},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6118999719619751},{"id":"https://openalex.org/C2781241145","wikidata":"https://www.wikidata.org/wiki/Q204606","display_name":"Cyberspace","level":3,"score":0.5565000176429749},{"id":"https://openalex.org/C189708586","wikidata":"https://www.wikidata.org/wiki/Q1504425","display_name":"Systematic review","level":3,"score":0.5521000027656555},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5515999794006348},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.506600022315979},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4986000061035156},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.41780000925064087},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.40139999985694885},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.3756999969482422},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3384999930858612},{"id":"https://openalex.org/C68597687","wikidata":"https://www.wikidata.org/wiki/Q362601","display_name":"Computational Science and Engineering","level":2,"score":0.323199987411499},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.3156999945640564},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.3059000074863434},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.30320000648498535},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.29269999265670776},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2904999852180481},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.2709999978542328},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.26840001344680786},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.26019999384880066}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s40537-025-01323-2","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s40537-025-01323-2","pdf_url":"https://link.springer.com/content/pdf/10.1186/s40537-025-01323-2.pdf","source":{"id":"https://openalex.org/S2737955091","display_name":"Journal Of Big Data","issn_l":"2196-1115","issn":["2196-1115"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Big Data","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:19f8a45d5a534f9cb9a05ceb4350dbfd","is_oa":true,"landing_page_url":"https://doaj.org/article/19f8a45d5a534f9cb9a05ceb4350dbfd","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Big Data, Vol 12, Iss 1, Pp 1-36 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s40537-025-01323-2","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s40537-025-01323-2","pdf_url":"https://link.springer.com/content/pdf/10.1186/s40537-025-01323-2.pdf","source":{"id":"https://openalex.org/S2737955091","display_name":"Journal Of Big Data","issn_l":"2196-1115","issn":["2196-1115"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Big Data","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416784889.pdf","grobid_xml":"https://content.openalex.org/works/W4416784889.grobid-xml"},"referenced_works_count":124,"referenced_works":["https://openalex.org/W1625605225","https://openalex.org/W1966741850","https://openalex.org/W1972544015","https://openalex.org/W1976166354","https://openalex.org/W1984670829","https://openalex.org/W1986134082","https://openalex.org/W2001107211","https://openalex.org/W2031163547","https://openalex.org/W2085618569","https://openalex.org/W2089612197","https://openalex.org/W2342408547","https://openalex.org/W2426032775","https://openalex.org/W2503576829","https://openalex.org/W2512144135","https://openalex.org/W2529525882","https://openalex.org/W2563104793","https://openalex.org/W2586525912","https://openalex.org/W2598811698","https://openalex.org/W2601682974","https://openalex.org/W2612404666","https://openalex.org/W2613205839","https://openalex.org/W2613480438","https://openalex.org/W2613920221","https://openalex.org/W2626309987","https://openalex.org/W2724268118","https://openalex.org/W2752291283","https://openalex.org/W2756489700","https://openalex.org/W2772317693","https://openalex.org/W2790100928","https://openalex.org/W2797283471","https://openalex.org/W2803881474","https://openalex.org/W2804368608","https://openalex.org/W2861867928","https://openalex.org/W2890624031","https://openalex.org/W2896485386","https://openalex.org/W2899599931","https://openalex.org/W2900633536","https://openalex.org/W2900694037","https://openalex.org/W2904034693","https://openalex.org/W2905097561","https://openalex.org/W2907351452","https://openalex.org/W2908954810","https://openalex.org/W2919868916","https://openalex.org/W2921134108","https://openalex.org/W2924689635","https://openalex.org/W2926701059","https://openalex.org/W2929803724","https://openalex.org/W2936995087","https://openalex.org/W2963902795","https://openalex.org/W2964396928","https://openalex.org/W2966209365","https://openalex.org/W2968503817","https://openalex.org/W2970700757","https://openalex.org/W2980609871","https://openalex.org/W3001683812","https://openalex.org/W3006526650","https://openalex.org/W3008764542","https://openalex.org/W3009195050","https://openalex.org/W3012981875","https://openalex.org/W3014732532","https://openalex.org/W3032266608","https://openalex.org/W3038955483","https://openalex.org/W3095186246","https://openalex.org/W3106960257","https://openalex.org/W3108671495","https://openalex.org/W3119693685","https://openalex.org/W3139008799","https://openalex.org/W3154485088","https://openalex.org/W3198965389","https://openalex.org/W3210361010","https://openalex.org/W3213433688","https://openalex.org/W4200616942","https://openalex.org/W4206266129","https://openalex.org/W4210647780","https://openalex.org/W4210814081","https://openalex.org/W4212795178","https://openalex.org/W4212879593","https://openalex.org/W4226226163","https://openalex.org/W4253471267","https://openalex.org/W4254315320","https://openalex.org/W4255375513","https://openalex.org/W4284888242","https://openalex.org/W4296010380","https://openalex.org/W4308605894","https://openalex.org/W4311421536","https://openalex.org/W4312847977","https://openalex.org/W4320027659","https://openalex.org/W4321434732","https://openalex.org/W4321843874","https://openalex.org/W4362703719","https://openalex.org/W4366748065","https://openalex.org/W4366978761","https://openalex.org/W4375840483","https://openalex.org/W4382793227","https://openalex.org/W4383196772","https://openalex.org/W4384787750","https://openalex.org/W4385811952","https://openalex.org/W4385877082","https://openalex.org/W4386134245","https://openalex.org/W4386741428","https://openalex.org/W4387647860","https://openalex.org/W4387859458","https://openalex.org/W4388573952","https://openalex.org/W4388914801","https://openalex.org/W4389201650","https://openalex.org/W4390401000","https://openalex.org/W4390494344","https://openalex.org/W4391481781","https://openalex.org/W4391925589","https://openalex.org/W4391944556","https://openalex.org/W4391948443","https://openalex.org/W4392359842","https://openalex.org/W4393406201","https://openalex.org/W4401072016","https://openalex.org/W4402925642","https://openalex.org/W4403389808","https://openalex.org/W4403599752","https://openalex.org/W4405631660","https://openalex.org/W4407304366","https://openalex.org/W4407366087","https://openalex.org/W4409990191","https://openalex.org/W4410319648","https://openalex.org/W4410913542","https://openalex.org/W4414128144"],"related_works":[],"abstract_inverted_index":{"The":[0,120],"tremendous":[1],"growth":[2],"of":[3,9,52,99,128,136],"cyberspace":[4],"has":[5],"magnified":[6],"the":[7,13,29,49,60,68,93,145,150],"risk":[8],"advanced":[10],"cyber-attacks,":[11],"making":[12],"conventional":[14],"security":[15],"system":[16,21],"deficient.":[17],"An":[18],"intrusion":[19,166],"detection":[20,66,167],"(IDS)":[22],"is":[23,44],"a":[24,84,96,133],"crucial":[25],"aspect":[26],"for":[27,39],"securing":[28],"networks,":[30],"and":[31,72,83,90,107,109,116,138,141,164],"machine":[32,61],"learning":[33],"based":[34],"approaches":[35],"have":[36],"attained":[37],"significance":[38],"detecting":[40],"growing":[41],"threats,":[42],"which":[43],"extremely":[45],"essential":[46],"to":[47,148,157],"address":[48],"major":[50],"concern":[51],"network":[53],"security.":[54],"This":[55,153],"survey":[56,154],"paper":[57,94,155],"systematically":[58],"reviews":[59],"learning-based":[62],"IDS,":[63],"focusing":[64],"on":[65],"models,":[67],"most":[69],"used":[70],"datasets,":[71],"evaluation":[73],"metrics.":[74],"A":[75],"systematic":[76],"review":[77],"methodology,":[78],"including":[79,114],"defined":[80],"selection":[81],"criteria":[82],"detailed":[85,134],"analysis":[86,98],"framework,":[87],"enables":[88],"clarity":[89],"reproducibility.":[91],"Furthermore,":[92],"presents":[95],"comparative":[97],"popular":[100],"IDS":[101,130],"datasets":[102,137],"such":[103],"as":[104],"NSL-KDD,":[105],"CICIS2017,":[106],"UNSW-NB15":[108],"points":[110],"out":[111,144],"their":[112],"limitations,":[113],"imbalance":[115],"antiquated":[117],"attack":[118],"methods.":[119],"key":[121],"contributions":[122],"are:":[123],"(a)":[124],"an":[125],"organized":[126],"taxonomy":[127],"ML-based":[129],"techniques,":[131],"(b)":[132],"comparison":[135],"related":[139],"challenges,":[140],"(c)":[142],"pointing":[143],"research":[146],"gaps":[147],"guide":[149],"future":[151],"directions.":[152],"aims":[156],"help":[158],"scholars":[159],"in":[160],"developing":[161],"vigorous,":[162],"intelligent,":[163],"convertible":[165],"solutions.":[168]},"counts_by_year":[],"updated_date":"2026-03-20T23:20:44.827607","created_date":"2025-11-28T00:00:00"}