{"id":"https://openalex.org/W2941521012","doi":"https://doi.org/10.1515/itit-2020-0015","title":"Efficient machine learning for attack detection","display_name":"Efficient machine learning for attack detection","publication_year":2020,"publication_date":"2020-11-10","ids":{"openalex":"https://openalex.org/W2941521012","doi":"https://doi.org/10.1515/itit-2020-0015","mag":"2941521012"},"language":"en","primary_location":{"id":"doi:10.1515/itit-2020-0015","is_oa":false,"landing_page_url":"https://doi.org/10.1515/itit-2020-0015","pdf_url":null,"source":{"id":"https://openalex.org/S4210229153","display_name":"it - Information Technology","issn_l":"1611-2776","issn":["1611-2776","2196-7032"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319967","host_organization_name":"R. Oldenbourg Verlag","host_organization_lineage":["https://openalex.org/P4310319967"],"host_organization_lineage_names":["R. Oldenbourg Verlag"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"it - Information Technology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.24355/dbbs.084-201902200937-0","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040751355","display_name":"Christian Wressnegger","orcid":"https://orcid.org/0009-0007-1493-9552"},"institutions":[{"id":"https://openalex.org/I102335020","display_name":"Karlsruhe Institute of Technology","ror":"https://ror.org/04t3en479","country_code":"DE","type":"education","lineage":["https://openalex.org/I102335020","https://openalex.org/I1305996414"]}],"countries":["DE"],"is_corresponding":true,"raw_author_name":"Christian Wressnegger","raw_affiliation_strings":["Karlsruhe Institute of Technology (KIT) , Institute of Theoretic Computer Science , Karlsruhe , Germany","Karlsruhe Institute of Technology (KIT), Institute of Theoretic Computer Science, D-76131Karlsruhe, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Karlsruhe Institute of Technology (KIT) , Institute of Theoretic Computer Science , Karlsruhe , Germany","institution_ids":["https://openalex.org/I102335020"]},{"raw_affiliation_string":"Karlsruhe Institute of Technology (KIT), Institute of Theoretic Computer Science, D-76131Karlsruhe, Germany","institution_ids":["https://openalex.org/I102335020"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5040751355"],"corresponding_institution_ids":["https://openalex.org/I102335020"],"apc_list":null,"apc_paid":null,"fwci":0.1485,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.38011853,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"62","issue":"5-6","first_page":"279","last_page":"286"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9930999875068665,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7980269193649292},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.605370819568634},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.5682543516159058},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.5679606795310974},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5398944616317749},{"id":"https://openalex.org/keywords/substring","display_name":"Substring","score":0.5082871317863464},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.5028297305107117},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.49440670013427734},{"id":"https://openalex.org/keywords/retraining","display_name":"Retraining","score":0.46748560667037964},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4655160903930664},{"id":"https://openalex.org/keywords/representation","display_name":"Representation (politics)","score":0.44712764024734497},{"id":"https://openalex.org/keywords/data-structure","display_name":"Data structure","score":0.236648827791214},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.1113293468952179},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09556135535240173}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7980269193649292},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.605370819568634},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.5682543516159058},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.5679606795310974},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5398944616317749},{"id":"https://openalex.org/C182407805","wikidata":"https://www.wikidata.org/wiki/Q2626534","display_name":"Substring","level":3,"score":0.5082871317863464},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.5028297305107117},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.49440670013427734},{"id":"https://openalex.org/C2778712577","wikidata":"https://www.wikidata.org/wiki/Q3505966","display_name":"Retraining","level":2,"score":0.46748560667037964},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4655160903930664},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.44712764024734497},{"id":"https://openalex.org/C162319229","wikidata":"https://www.wikidata.org/wiki/Q175263","display_name":"Data structure","level":2,"score":0.236648827791214},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.1113293468952179},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09556135535240173},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C155202549","wikidata":"https://www.wikidata.org/wiki/Q178803","display_name":"International trade","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1515/itit-2020-0015","is_oa":false,"landing_page_url":"https://doi.org/10.1515/itit-2020-0015","pdf_url":null,"source":{"id":"https://openalex.org/S4210229153","display_name":"it - Information Technology","issn_l":"1611-2776","issn":["1611-2776","2196-7032"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319967","host_organization_name":"R. Oldenbourg Verlag","host_organization_lineage":["https://openalex.org/P4310319967"],"host_organization_lineage_names":["R. Oldenbourg Verlag"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"it - Information Technology","raw_type":"journal-article"},{"id":"pmh:oai:https://leopard.tu-braunschweig.de/:dbbs_mods_00066393","is_oa":false,"landing_page_url":"https://nbn-resolving.org/urn:nbn:de:gbv:084-2019022009398","pdf_url":null,"source":{"id":"https://openalex.org/S4306402617","display_name":"Digitale Bibliothek Braunschweig (Verbundzentrale G\u00f6ttingen (VZG))","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210149878","host_organization_name":"Verbundzentrale des GBV","host_organization_lineage":["https://openalex.org/I4210149878"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"dissertation"},{"id":"pmh:oai:publikationsserver.tu-braunschweig.de:dbbs_mods_00066393","is_oa":false,"landing_page_url":"https://publikationsserver.tu-braunschweig.de/receive/dbbs_mods_00066393","pdf_url":null,"source":{"id":"https://openalex.org/S4306402617","display_name":"Digitale Bibliothek Braunschweig (Verbundzentrale G\u00f6ttingen (VZG))","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210149878","host_organization_name":"Verbundzentrale des GBV","host_organization_lineage":["https://openalex.org/I4210149878"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"dissertation"},{"id":"doi:10.24355/dbbs.084-201902200937-0","is_oa":true,"landing_page_url":"https://doi.org/10.24355/dbbs.084-201902200937-0","pdf_url":null,"source":{"id":"https://openalex.org/S7407052991","display_name":"LeoPARD - TU Braunschweig Publications And Research Data","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"thesis"}],"best_oa_location":{"id":"doi:10.24355/dbbs.084-201902200937-0","is_oa":true,"landing_page_url":"https://doi.org/10.24355/dbbs.084-201902200937-0","pdf_url":null,"source":{"id":"https://openalex.org/S7407052991","display_name":"LeoPARD - TU Braunschweig Publications And Research Data","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"thesis"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.550000011920929}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W1504161274","https://openalex.org/W1515539475","https://openalex.org/W1519699895","https://openalex.org/W1533946607","https://openalex.org/W1594536929","https://openalex.org/W1910686388","https://openalex.org/W1987644478","https://openalex.org/W1988146703","https://openalex.org/W2012005986","https://openalex.org/W2038841294","https://openalex.org/W2039148409","https://openalex.org/W2058929792","https://openalex.org/W2064274762","https://openalex.org/W2070991879","https://openalex.org/W2070996757","https://openalex.org/W2099844038","https://openalex.org/W2112490010","https://openalex.org/W2116065364","https://openalex.org/W2121035740","https://openalex.org/W2122672392","https://openalex.org/W2123845384","https://openalex.org/W2128217000","https://openalex.org/W2132280055","https://openalex.org/W2132874238","https://openalex.org/W2150015221","https://openalex.org/W2165612380","https://openalex.org/W2183342945","https://openalex.org/W2401293755","https://openalex.org/W2491054514","https://openalex.org/W2537189236","https://openalex.org/W2588814296","https://openalex.org/W2601109766","https://openalex.org/W2606740176","https://openalex.org/W2724134549","https://openalex.org/W2752602409","https://openalex.org/W2753352458","https://openalex.org/W2753395445","https://openalex.org/W2883514760","https://openalex.org/W2890228473","https://openalex.org/W2891432086","https://openalex.org/W2941521012","https://openalex.org/W2948763287","https://openalex.org/W2948848125","https://openalex.org/W3100503250","https://openalex.org/W6639864006","https://openalex.org/W6677103492","https://openalex.org/W6678985388"],"related_works":["https://openalex.org/W1905638570","https://openalex.org/W1575263621","https://openalex.org/W1964111820","https://openalex.org/W1485630101","https://openalex.org/W2961085424","https://openalex.org/W1536235319","https://openalex.org/W2083338789","https://openalex.org/W2889374234","https://openalex.org/W3199340779","https://openalex.org/W3145633345"],"abstract_inverted_index":{"Abstract":[0],"Detecting":[1],"and":[2,24,54,122],"fending":[3],"off":[4],"attacks":[5],"on":[6,125],"computer":[7,14],"systems":[8],"is":[9,47,106],"an":[10,135],"enduring":[11],"problem":[12],"in":[13,33,66,98,145],"security.":[15],"In":[16,73],"light":[17],"of":[18,21,36,70,87,95,138],"a":[19,101],"plethora":[20],"different":[22],"threats":[23],"the":[25,74,85,92,112,130],"growing":[26],"automation":[27,139],"used":[28],"by":[29,48],"attackers,":[30],"we":[31,83],"are":[32],"urgent":[34],"need":[35],"more":[37],"advanced":[38,88],"methods":[39],"for":[40,79,118,133,140],"attack":[41,89],"detection.":[42,90],"Manually":[43],"crafting":[44],"detection":[45],"rules":[46],"no":[49],"means":[50],"feasible":[51],"at":[52],"scale,":[53],"automatically":[55],"generated":[56],"signatures":[57],"often":[58],"lack":[59],"context,":[60],"such":[61],"that":[62,110],"they":[63],"fall":[64],"short":[65],"detecting":[67],"slight":[68],"variations":[69],"known":[71],"threats.":[72],"thesis":[75],"\u201cEfficient":[76],"Machine":[77],"Learning":[78],"Attack":[80],"Detection\u201d":[81],"[35],":[82],"address":[84],"necessity":[86],"For":[91],"effective":[93],"application":[94],"machine":[96],"learning":[97],"this":[99],"domain,":[100],"periodic":[102],"retraining":[103],"over":[104],"time":[105],"crucial.":[107],"We":[108],"show":[109],"with":[111],"right":[113],"data":[114,127],"representation,":[115],"efficient":[116],"algorithms":[117],"mining":[119],"substring":[120],"statistics,":[121],"implementations":[123],"based":[124],"probabilistic":[126],"structures,":[128],"training":[129],"underlying":[131],"model":[132],"establishing":[134],"higher":[136],"degree":[137],"defenses":[141],"can":[142],"be":[143],"achieved":[144],"linear":[146],"time.":[147]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}
