{"id":"https://openalex.org/W4411012154","doi":"https://doi.org/10.1186/s42400-024-00336-3","title":"Building a large, realistic and labeled HTTP URI dataset for anomaly-based intrusion detection systems: Biblio-US17","display_name":"Building a large, realistic and labeled HTTP URI dataset for anomaly-based intrusion detection systems: Biblio-US17","publication_year":2025,"publication_date":"2025-06-05","ids":{"openalex":"https://openalex.org/W4411012154","doi":"https://doi.org/10.1186/s42400-024-00336-3"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-024-00336-3","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00336-3","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00336-3","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00336-3","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5071465643","display_name":"Jes\u00fas E. D\u0131\u0301az-Verdejo","orcid":"https://orcid.org/0000-0002-8424-9932"},"institutions":[{"id":"https://openalex.org/I173304897","display_name":"Universidad de Granada","ror":"https://ror.org/04njjy449","country_code":"ES","type":"education","lineage":["https://openalex.org/I173304897"]}],"countries":["ES"],"is_corresponding":true,"raw_author_name":"Jes\u00fas D\u00edaz-Verdejo","raw_affiliation_strings":["Department of Signal Theory, Telematics and Communications, University of Granada, Granada, Spain"],"affiliations":[{"raw_affiliation_string":"Department of Signal Theory, Telematics and Communications, University of Granada, Granada, Spain","institution_ids":["https://openalex.org/I173304897"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051920060","display_name":"Rafael Estepa","orcid":"https://orcid.org/0000-0001-8505-1920"},"institutions":[{"id":"https://openalex.org/I79238269","display_name":"Universidad de Sevilla","ror":"https://ror.org/03yxnpp24","country_code":"ES","type":"education","lineage":["https://openalex.org/I79238269"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Rafael Estepa","raw_affiliation_strings":["Department of Telematics Engineering, University of Seville, Seville, Spain"],"affiliations":[{"raw_affiliation_string":"Department of Telematics Engineering, University of Seville, Seville, Spain","institution_ids":["https://openalex.org/I79238269"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015226343","display_name":"Antonio Estepa","orcid":"https://orcid.org/0000-0003-1841-3973"},"institutions":[{"id":"https://openalex.org/I79238269","display_name":"Universidad de Sevilla","ror":"https://ror.org/03yxnpp24","country_code":"ES","type":"education","lineage":["https://openalex.org/I79238269"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Antonio Estepa","raw_affiliation_strings":["Department of Telematics Engineering, University of Seville, Seville, Spain"],"affiliations":[{"raw_affiliation_string":"Department of Telematics Engineering, University of Seville, Seville, Spain","institution_ids":["https://openalex.org/I79238269"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007319942","display_name":"Javier Mu\u00f1oz-Calle","orcid":"https://orcid.org/0000-0001-8146-8438"},"institutions":[{"id":"https://openalex.org/I79238269","display_name":"Universidad de Sevilla","ror":"https://ror.org/03yxnpp24","country_code":"ES","type":"education","lineage":["https://openalex.org/I79238269"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Javier Mu\u00f1oz-Calle","raw_affiliation_strings":["Department of Telematics Engineering, University of Seville, Seville, Spain"],"affiliations":[{"raw_affiliation_string":"Department of Telematics Engineering, University of Seville, Seville, Spain","institution_ids":["https://openalex.org/I79238269"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051570639","display_name":"Germ\u00e1n Madinabeitia","orcid":"https://orcid.org/0000-0001-6376-4620"},"institutions":[{"id":"https://openalex.org/I79238269","display_name":"Universidad de Sevilla","ror":"https://ror.org/03yxnpp24","country_code":"ES","type":"education","lineage":["https://openalex.org/I79238269"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Germ\u00e1n Madinabeitia","raw_affiliation_strings":["Department of Telematics Engineering, University of Seville, Seville, Spain"],"affiliations":[{"raw_affiliation_string":"Department of Telematics Engineering, University of Seville, Seville, Spain","institution_ids":["https://openalex.org/I79238269"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5071465643"],"corresponding_institution_ids":["https://openalex.org/I173304897"],"apc_list":null,"apc_paid":null,"fwci":1.4161,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.82792565,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":"8","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7028904557228088},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.608549952507019},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.6080350875854492},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5785728096961975},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.43027710914611816},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.04619872570037842}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7028904557228088},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.608549952507019},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.6080350875854492},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5785728096961975},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.43027710914611816},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.04619872570037842},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1186/s42400-024-00336-3","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00336-3","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00336-3","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:45ef4be5c94e44349d5441ae6443795d","is_oa":true,"landing_page_url":"https://doaj.org/article/45ef4be5c94e44349d5441ae6443795d","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 8, Iss 1, Pp 1-21 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-024-00336-3","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-024-00336-3","pdf_url":"https://cybersecurity.springeropen.com/counter/pdf/10.1186/s42400-024-00336-3","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1643949827","display_name":null,"funder_award_id":"AEI/10.13039/501100011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G2262748287","display_name":null,"funder_award_id":"501100011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G300979063","display_name":null,"funder_award_id":"10.13039/501100011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G3025668325","display_name":null,"funder_award_id":"RB-I00","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G3429648993","display_name":null,"funder_award_id":"PID202","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G3480869486","display_name":null,"funder_award_id":"13039","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G4126322094","display_name":null,"funder_award_id":"01100011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G5080475149","display_name":null,"funder_award_id":"10.13039","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G5680620035","display_name":null,"funder_award_id":"MICIN/AEI/10.13039 /501100011033","funder_id":"https://openalex.org/F4320315062","funder_display_name":"Ministerio de Ciencia, Innovaci\u00f3n y Universidades"},{"id":"https://openalex.org/G661330594","display_name":null,"funder_award_id":"00110","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G6685425346","display_name":null,"funder_award_id":"0011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G7084143925","display_name":null,"funder_award_id":"AEI/10","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G7266728691","display_name":null,"funder_award_id":"13039/501100011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G7535663061","display_name":null,"funder_award_id":"AEI/10.","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G8260616629","display_name":null,"funder_award_id":"011033","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"},{"id":"https://openalex.org/G8638682022","display_name":null,"funder_award_id":"10.13039/50110001103","funder_id":"https://openalex.org/F4320335598","funder_display_name":"Agencia Estatal de Investigaci\u00f3n"}],"funders":[{"id":"https://openalex.org/F4320315062","display_name":"Ministerio de Ciencia, Innovaci\u00f3n y Universidades","ror":null},{"id":"https://openalex.org/F4320335598","display_name":"Agencia Estatal de Investigaci\u00f3n","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4411012154.pdf","grobid_xml":"https://content.openalex.org/works/W4411012154.grobid-xml"},"referenced_works_count":32,"referenced_works":["https://openalex.org/W648871171","https://openalex.org/W1591480890","https://openalex.org/W1978884755","https://openalex.org/W2103154003","https://openalex.org/W2142406320","https://openalex.org/W2142889610","https://openalex.org/W2145357146","https://openalex.org/W2155409100","https://openalex.org/W2747144285","https://openalex.org/W2803131667","https://openalex.org/W2910733186","https://openalex.org/W2958285686","https://openalex.org/W2958368965","https://openalex.org/W2964113884","https://openalex.org/W3009412409","https://openalex.org/W3011610465","https://openalex.org/W3092513437","https://openalex.org/W3102029110","https://openalex.org/W3104695953","https://openalex.org/W3133740671","https://openalex.org/W3154315339","https://openalex.org/W3159050999","https://openalex.org/W3212815918","https://openalex.org/W4205519045","https://openalex.org/W4293094126","https://openalex.org/W4318186638","https://openalex.org/W4378531159","https://openalex.org/W4385344637","https://openalex.org/W4386542285","https://openalex.org/W4399332347","https://openalex.org/W4399332923","https://openalex.org/W4400577132"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3120251014"],"abstract_inverted_index":{"Abstract":[0],"This":[1,109,141],"paper":[2,142],"introduces":[3],"Biblio-US17,":[4,172],"a":[5,17,63,87,120,168],"labeled":[6],"dataset":[7,149],"collected":[8],"over":[9],"6":[10],"months":[11],"from":[12],"the":[13,22,33,50,92,144,165,176,185],"log":[14],"files":[15],"of":[16,24,45,73,95,104,160,167],"popular":[18],"public":[19],"website":[20],"at":[21],"University":[23],"Seville.":[25],"It":[26],"contains":[27],"47":[28],"million":[29],"records,":[30],"each":[31],"including":[32],"method,":[34],"uniform":[35],"resource":[36],"identifier":[37],"(URI)":[38],"and":[39,43,76,115,126,138,146,151],"associated":[40],"response":[41],"code":[42],"size":[44,125],"every":[46],"request":[47],"received":[48],"by":[49,188],"web":[51,190],"server.":[52],"Records":[53],"have":[54],"been":[55],"classified":[56],"as":[57],"either":[58],"normal":[59,93],"or":[60],"attack":[61],"using":[62],"comprehensive":[64],"semi-automated":[65],"process,":[66],"which":[67],"involved":[68],"signature-based":[69],"detection,":[70],"assisted":[71],"inspection":[72],"URIs":[74,186],"vocabulary,":[75],"substantial":[77],"expert":[78],"manual":[79],"supervision.":[80],"Unlike":[81],"comparable":[82],"datasets,":[83],"this":[84],"one":[85],"offers":[86],"genuine":[88],"real-world":[89],"perspective":[90],"on":[91],"operation":[94],"an":[96,101,158,161],"active":[97],"website,":[98],"along":[99],"with":[100],"unbiased":[102],"proportion":[103],"actual":[105],"attacks":[106],"(i.e.,":[107],"non-synthetic).":[108],"makes":[110],"it":[111,130],"ideal":[112],"for":[113,132,163],"evaluating":[114],"comparing":[116],"anomaly-based":[117],"approaches":[118],"in":[119],"realistic":[121],"environment.":[122],"Its":[123],"extensive":[124],"duration":[127],"also":[128,156,180],"make":[129],"valuable":[131],"addressing":[133],"challenges":[134],"like":[135],"data":[136],"shift":[137],"insufficient":[139],"training.":[140],"describes":[143],"collection":[145],"labeling":[147],"processes,":[148],"structure,":[150],"most":[152],"relevant":[153],"properties.":[154],"We":[155],"include":[157],"example":[159],"application":[162],"assessing":[164],"performance":[166],"simple":[169],"anomaly":[170],"detector.":[171],"now":[173],"available":[174],"to":[175,183],"scientific":[177],"community,":[178],"can":[179],"be":[181],"used":[182,187],"model":[184],"current":[189],"servers.":[191]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}