{"id":"https://openalex.org/W4396558173","doi":"https://doi.org/10.1186/s42400-023-00199-0","title":"A multi-agent adaptive deep learning framework for online intrusion detection","display_name":"A multi-agent adaptive deep learning framework for online intrusion detection","publication_year":2024,"publication_date":"2024-05-01","ids":{"openalex":"https://openalex.org/W4396558173","doi":"https://doi.org/10.1186/s42400-023-00199-0"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-023-00199-0","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-023-00199-0","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-023-00199-0","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-023-00199-0","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086317115","display_name":"Mahdi Soltani","orcid":"https://orcid.org/0000-0003-3492-2049"},"institutions":[{"id":"https://openalex.org/I133529467","display_name":"Sharif University of Technology","ror":"https://ror.org/024c2fq17","country_code":"IR","type":"education","lineage":["https://openalex.org/I133529467"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Mahdi Soltani","raw_affiliation_strings":["Department of Computer Engineering, Sharif University of Technology, Tehran, Iran"],"raw_orcid":"https://orcid.org/0000-0003-3492-2049","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005943292","display_name":"Khashayar Khajavi","orcid":"https://orcid.org/0000-0001-8270-9707"},"institutions":[{"id":"https://openalex.org/I133529467","display_name":"Sharif University of Technology","ror":"https://ror.org/024c2fq17","country_code":"IR","type":"education","lineage":["https://openalex.org/I133529467"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Khashayar Khajavi","raw_affiliation_strings":["Department of Computer Engineering, Sharif University of Technology, Tehran, Iran"],"raw_orcid":"https://orcid.org/0000-0001-8270-9707","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005484703","display_name":"Mahdi Jafari Siavoshani","orcid":"https://orcid.org/0000-0003-3860-5999"},"institutions":[{"id":"https://openalex.org/I133529467","display_name":"Sharif University of Technology","ror":"https://ror.org/024c2fq17","country_code":"IR","type":"education","lineage":["https://openalex.org/I133529467"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Mahdi Jafari Siavoshani","raw_affiliation_strings":["Department of Computer Engineering, Sharif University of Technology, Tehran, Iran"],"raw_orcid":"https://orcid.org/0000-0003-3860-5999","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024678473","display_name":"Amir Hossein Jahangir","orcid":"https://orcid.org/0000-0002-8837-0668"},"institutions":[{"id":"https://openalex.org/I133529467","display_name":"Sharif University of Technology","ror":"https://ror.org/024c2fq17","country_code":"IR","type":"education","lineage":["https://openalex.org/I133529467"]}],"countries":["IR"],"is_corresponding":true,"raw_author_name":"Amir Hossein Jahangir","raw_affiliation_strings":["Department of Computer Engineering, Sharif University of Technology, Tehran, Iran"],"raw_orcid":"https://orcid.org/0000-0002-8837-0668","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5024678473"],"corresponding_institution_ids":["https://openalex.org/I133529467"],"apc_list":null,"apc_paid":null,"fwci":9.2008,"has_fulltext":false,"cited_by_count":33,"citation_normalized_percentile":{"value":0.98399248,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"7","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9944000244140625,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6968785524368286},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6507059335708618},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4947027862071991},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4326387047767639},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3910198211669922}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6968785524368286},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6507059335708618},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4947027862071991},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4326387047767639},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3910198211669922}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-023-00199-0","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-023-00199-0","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-023-00199-0","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:f6ca3b80bd604511ba223a8e2c8cb6d2","is_oa":false,"landing_page_url":"https://doaj.org/article/f6ca3b80bd604511ba223a8e2c8cb6d2","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 7, Iss 1, Pp 1-25 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-023-00199-0","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-023-00199-0","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-023-00199-0","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4396558173.pdf"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W1747767590","https://openalex.org/W1999427165","https://openalex.org/W2045371716","https://openalex.org/W2064675550","https://openalex.org/W2072580964","https://openalex.org/W2099940443","https://openalex.org/W2460144244","https://openalex.org/W2560647685","https://openalex.org/W2750674396","https://openalex.org/W2752291283","https://openalex.org/W2762776925","https://openalex.org/W2775103799","https://openalex.org/W2789828921","https://openalex.org/W2874136421","https://openalex.org/W2890624031","https://openalex.org/W2914502888","https://openalex.org/W2962700793","https://openalex.org/W2962902328","https://openalex.org/W2969295985","https://openalex.org/W2973817951","https://openalex.org/W3005392745","https://openalex.org/W3009987980","https://openalex.org/W3045570840","https://openalex.org/W3048282123","https://openalex.org/W3093621053","https://openalex.org/W3121026104","https://openalex.org/W3131088496","https://openalex.org/W3157331533","https://openalex.org/W3159350970","https://openalex.org/W3202760407","https://openalex.org/W3204227193","https://openalex.org/W3208693455","https://openalex.org/W4285058242","https://openalex.org/W4322722384","https://openalex.org/W6600654476","https://openalex.org/W6600708310","https://openalex.org/W6600955100","https://openalex.org/W6601198272","https://openalex.org/W6629267907","https://openalex.org/W6829155664"],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W3046775127","https://openalex.org/W3107602296","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347"],"abstract_inverted_index":{"Abstract":[0],"The":[1,17],"network":[2,141],"security":[3],"analyzers":[4],"use":[5],"intrusion":[6,142],"detection":[7,143,291],"systems":[8],"(IDSes)":[9],"to":[10,24,45,51,82,95,98,107,145,170,261,281],"distinguish":[11],"malicious":[12],"traffic":[13,68,263,283],"from":[14],"benign":[15,87],"ones.":[16],"deep":[18,163,234],"learning-based":[19],"(DL-based)":[20],"IDSes":[21,42,321],"are":[22,275,310],"proposed":[23,186,198,229,255],"auto-extract":[25],"high-level":[26],"features":[27],"and":[28,32,124,189,222,238,243,249,306],"eliminate":[29],"the":[30,59,83,119,147,171,197,214,228,241,254,262,272,282,303,307],"time-consuming":[31],"costly":[33],"signature":[34],"extraction":[35],"process.":[36],"However,":[37],"this":[38],"new":[39,75,300],"generation":[40],"of":[41,49,58,62,86,121,293],"still":[43],"needs":[44,94],"overcome":[46],"a":[47,90,99,113,138,151,181,311],"number":[48],"challenges":[50,129],"be":[52,96],"employed":[53],"in":[54,80,105,175,318],"practical":[55,91,153,319],"environments.":[56],"One":[57],"main":[60],"issues":[61],"an":[63,209,289],"applicable":[64],"IDS":[65,93],"is":[66,185,258],"facing":[67],"concept":[69,264,284],"drift,":[70],"which":[71,207],"manifests":[72],"itself":[73],"as":[74],"(i.e.":[76,101,286,322],",":[77,102,287,323],"zero-day)":[78],"attacks,":[79],"addition":[81],"changing":[84,172],"behavior":[85],"users/applications.":[88],"Furthermore,":[89,196],"DL-based":[92],"conformed":[97],"distributed":[100,256],"multi-sensor)":[103],"architecture":[104],"order":[106],"yield":[108],"more":[109,152],"accurate":[110],"detections,":[111],"create":[112],"collective":[114],"attack":[115,210],"knowledge":[116,192],"based":[117],"on":[118],"observations":[120],"different":[122,194,233],"sensors,":[123],"also":[125],"handle":[126],"big":[127],"data":[128],"for":[130,166,187,204,213,278,302,314],"supporting":[131],"high":[132],"throughput":[133],"networks.":[134],"This":[135,159],"paper":[136],"proposes":[137],"novel":[139],"multi-agent":[140],"framework":[144,160,199,230,257],"address":[146],"above":[148,294],"shortcomings,":[149],"considering":[150],"scenario":[154],"(i.e.,":[155],"online":[156,320],"adaptable":[157],"IDSes).":[158],"employs":[161],"continual":[162],"anomaly":[164],"detectors":[165],"adapting":[167,280],"each":[168,205,219],"agent":[169],"attack/benign":[173],"patterns":[174],"its":[176,224],"local":[177,191],"traffic.":[178],"In":[179],"addition,":[180],"federated":[182],"learning":[183],"approach":[184],"sharing":[188],"exchanging":[190],"between":[193],"agents.":[195],"implements":[200],"sequential":[201,315],"packet":[202,221,316],"labeling":[203,317],"flow,":[206],"provides":[208],"probability":[211],"score":[212],"flow":[215,220],"by":[216,231,326],"gradually":[217],"observing":[218,328],"updating":[223,304],"estimation.":[225],"We":[226],"evaluate":[227],"employing":[232],"models":[235,274,309],"(including":[236],"CNN-based":[237,273],"LSTM-based)":[239],"over":[240],"CIC-IDS2017":[242],"CSE-CIC-IDS2018":[244],"datasets.":[245],"Through":[246],"extensive":[247],"evaluations":[248],"experiments,":[250],"we":[251],"show":[252],"that":[253,271],"well":[259,276],"adapted":[260],"drift.":[265],"More":[266],"precisely,":[267],"our":[268],"results":[269],"indicate":[270],"suited":[277],"continually":[279],"drift":[285],"achieving":[288],"average":[290],"rate":[292],"95%":[295],"while":[296],"needing":[297],"just":[298,327],"128":[299],"flows":[301],"phase),":[305],"LSTM-based":[308],"good":[312],"candidate":[313],"detecting":[324],"intrusions":[325],"their":[329],"first":[330],"15":[331],"packets).":[332]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}