{"id":"https://openalex.org/W7162461199","doi":"https://doi.org/10.15837/ijccc.2026.3.7305","title":"Cosine Distance-Based Fuzzy C-Means Clustering for Local Classification in Imbalanced Network Intrusion Detection","display_name":"Cosine Distance-Based Fuzzy C-Means Clustering for Local Classification in Imbalanced Network Intrusion Detection","publication_year":2026,"publication_date":"2026-05-26","ids":{"openalex":"https://openalex.org/W7162461199","doi":"https://doi.org/10.15837/ijccc.2026.3.7305"},"language":null,"primary_location":{"id":"doi:10.15837/ijccc.2026.3.7305","is_oa":true,"landing_page_url":"https://doi.org/10.15837/ijccc.2026.3.7305","pdf_url":"https://univagora.ro/jour/index.php/ijccc/article/download/7305/2510","source":{"id":"https://openalex.org/S147751515","display_name":"International Journal of Computers Communications & Control","issn_l":"1841-9836","issn":["1841-9836","1841-9844"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310314650","host_organization_name":"Agora University","host_organization_lineage":["https://openalex.org/P4310314650"],"host_organization_lineage_names":["Agora University"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"INTERNATIONAL JOURNAL OF COMPUTERS  COMMUNICATIONS & CONTROL","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://univagora.ro/jour/index.php/ijccc/article/download/7305/2510","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5137000231","display_name":"Ngoc-Bich Giap Thi","orcid":null},"institutions":[{"id":"https://openalex.org/I4210095603","display_name":"Vietnam Posts and Telecommunications Group (Vietnam)","ror":"https://ror.org/00q0e7f94","country_code":"VN","type":"company","lineage":["https://openalex.org/I4210095603"]},{"id":"https://openalex.org/I4400600977","display_name":"Posts and Telecommunications Institute of Technology","ror":"https://ror.org/0363rtq22","country_code":null,"type":"education","lineage":["https://openalex.org/I4400600977"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Ngoc-Bich Giap Thi","raw_affiliation_strings":["Posts and Telecommunications Institute of Technology, Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Posts and Telecommunications Institute of Technology, Hanoi, Vietnam","institution_ids":["https://openalex.org/I4210095603","https://openalex.org/I4400600977"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5137053069","display_name":"Van-Nhan Nguyen","orcid":null},"institutions":[{"id":"https://openalex.org/I64519617","display_name":"Hanoi University","ror":"https://ror.org/01mxx0e62","country_code":"VN","type":"education","lineage":["https://openalex.org/I64519617"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Van-Nhan Nguyen","raw_affiliation_strings":["Faculty of Information Technology, Dai Nam University, Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Information Technology, Dai Nam University, Hanoi, Vietnam","institution_ids":["https://openalex.org/I64519617"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062299699","display_name":"Anh-Thu Pham","orcid":null},"institutions":[{"id":"https://openalex.org/I4210095603","display_name":"Vietnam Posts and Telecommunications Group (Vietnam)","ror":"https://ror.org/00q0e7f94","country_code":"VN","type":"company","lineage":["https://openalex.org/I4210095603"]},{"id":"https://openalex.org/I4400600977","display_name":"Posts and Telecommunications Institute of Technology","ror":"https://ror.org/0363rtq22","country_code":null,"type":"education","lineage":["https://openalex.org/I4400600977"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Anh-Thu Pham","raw_affiliation_strings":["Posts and Telecommunications Institute of Technology, Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Posts and Telecommunications Institute of Technology, Hanoi, Vietnam","institution_ids":["https://openalex.org/I4210095603","https://openalex.org/I4400600977"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036260043","display_name":"Trong-Minh Hoang","orcid":"https://orcid.org/0000-0001-8486-2940"},"institutions":[{"id":"https://openalex.org/I4210095603","display_name":"Vietnam Posts and Telecommunications Group (Vietnam)","ror":"https://ror.org/00q0e7f94","country_code":"VN","type":"company","lineage":["https://openalex.org/I4210095603"]},{"id":"https://openalex.org/I4400600977","display_name":"Posts and Telecommunications Institute of Technology","ror":"https://ror.org/0363rtq22","country_code":null,"type":"education","lineage":["https://openalex.org/I4400600977"]}],"countries":["VN"],"is_corresponding":false,"raw_author_name":"Trong-Minh Hoang","raw_affiliation_strings":["Posts and Telecommunications Institute of Technology, Hanoi, Vietnam"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Posts and Telecommunications Institute of Technology, Hanoi, Vietnam","institution_ids":["https://openalex.org/I4210095603","https://openalex.org/I4400600977"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":500,"currency":"EUR","value_usd":539},"apc_paid":{"value":500,"currency":"EUR","value_usd":539},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.65675639,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":"3","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.8379999995231628,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.8379999995231628,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.026900000870227814,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.022600000724196434,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7251999974250793},{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.6456000208854675},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.6456000208854675},{"id":"https://openalex.org/keywords/euclidean-distance","display_name":"Euclidean distance","score":0.6241999864578247},{"id":"https://openalex.org/keywords/fuzzy-logic","display_name":"Fuzzy logic","score":0.5074999928474426},{"id":"https://openalex.org/keywords/cosine-similarity","display_name":"Cosine similarity","score":0.5044000148773193},{"id":"https://openalex.org/keywords/similarity","display_name":"Similarity (geometry)","score":0.5023000240325928},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.49410000443458557},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.44179999828338623}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7251999974250793},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.6456000208854675},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.6456000208854675},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6398000121116638},{"id":"https://openalex.org/C120174047","wikidata":"https://www.wikidata.org/wiki/Q847073","display_name":"Euclidean distance","level":2,"score":0.6241999864578247},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5593000054359436},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5521000027656555},{"id":"https://openalex.org/C58166","wikidata":"https://www.wikidata.org/wiki/Q224821","display_name":"Fuzzy logic","level":2,"score":0.5074999928474426},{"id":"https://openalex.org/C2780762811","wikidata":"https://www.wikidata.org/wiki/Q1784941","display_name":"Cosine similarity","level":3,"score":0.5044000148773193},{"id":"https://openalex.org/C103278499","wikidata":"https://www.wikidata.org/wiki/Q254465","display_name":"Similarity (geometry)","level":3,"score":0.5023000240325928},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.49410000443458557},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.44179999828338623},{"id":"https://openalex.org/C178009071","wikidata":"https://www.wikidata.org/wiki/Q93344","display_name":"Trigonometric functions","level":2,"score":0.40799999237060547},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.40459999442100525},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.36399999260902405},{"id":"https://openalex.org/C17212007","wikidata":"https://www.wikidata.org/wiki/Q5511111","display_name":"Fuzzy clustering","level":3,"score":0.35339999198913574},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.3474999964237213},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.3179999887943268},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.3050000071525574},{"id":"https://openalex.org/C129782007","wikidata":"https://www.wikidata.org/wiki/Q162886","display_name":"Euclidean geometry","level":2,"score":0.29679998755455017},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2827000021934509},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.27799999713897705},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2773999869823456},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.2694999873638153},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.265500009059906},{"id":"https://openalex.org/C2639959","wikidata":"https://www.wikidata.org/wiki/Q1344778","display_name":"Distance measures","level":2,"score":0.26420000195503235},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2614000141620636}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.15837/ijccc.2026.3.7305","is_oa":true,"landing_page_url":"https://doi.org/10.15837/ijccc.2026.3.7305","pdf_url":"https://univagora.ro/jour/index.php/ijccc/article/download/7305/2510","source":{"id":"https://openalex.org/S147751515","display_name":"International Journal of Computers Communications & Control","issn_l":"1841-9836","issn":["1841-9836","1841-9844"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310314650","host_organization_name":"Agora University","host_organization_lineage":["https://openalex.org/P4310314650"],"host_organization_lineage_names":["Agora University"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"INTERNATIONAL JOURNAL OF COMPUTERS  COMMUNICATIONS & CONTROL","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.15837/ijccc.2026.3.7305","is_oa":true,"landing_page_url":"https://doi.org/10.15837/ijccc.2026.3.7305","pdf_url":"https://univagora.ro/jour/index.php/ijccc/article/download/7305/2510","source":{"id":"https://openalex.org/S147751515","display_name":"International Journal of Computers Communications & Control","issn_l":"1841-9836","issn":["1841-9836","1841-9844"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310314650","host_organization_name":"Agora University","host_organization_lineage":["https://openalex.org/P4310314650"],"host_organization_lineage_names":["Agora University"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"INTERNATIONAL JOURNAL OF COMPUTERS  COMMUNICATIONS & CONTROL","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7162461199.pdf","grobid_xml":"https://content.openalex.org/works/W7162461199.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Network":[0],"Intrusion":[1],"Detection":[2],"Systems":[3],"(NIDS)":[4],"deal":[5],"with":[6,33,117,128],"class":[7],"imbalance":[8],"in":[9,29,41,92],"network":[10],"traffic":[11],"data,":[12],"where":[13],"minority":[14,60],"attack":[15,61],"classes":[16],"are":[17],"underestimated.":[18],"FCM-Cosine,":[19],"a":[20,93],"modified":[21],"Fuzzy":[22],"C-Means":[23],"clustering":[24],"algorithm,":[25],"replaces":[26],"Euclidean":[27],"distance":[28,35],"the":[30,49,69],"objective":[31],"function":[32],"Cosine":[34],"to":[36,58],"better":[37],"capture":[38],"directional":[39],"similarity":[40],"high-dimensional":[42],"feature":[43],"spaces.":[44],"The":[45,99],"cluster-then-classify":[46],"framework":[47,100],"decomposes":[48],"global":[50],"intrusion":[51],"detection":[52],"problem":[53],"into":[54],"localized":[55],"classification":[56,126],"sub-problems":[57],"detect":[59],"classes.":[62],"Five":[63],"classifiers":[64],"have":[65],"been":[66],"examined":[67],"on":[68],"CICIoT2023":[70],"dataset":[71,118],"at":[72],"two":[73],"scales":[74,114],"(16,100":[75],"and":[76,113],"465,000":[77],"samples).":[78],"FCM-Cosine":[79,123],"had":[80,89],"an":[81],"average":[82,110],"F1-Macro":[83],"of":[84],"69.36%,":[85],"while":[86],"Decision":[87],"Tree":[88],"86.79%,":[90],"resulting":[91],"37.97%":[94],"improvement":[95],"over":[96],"direct":[97],"training.":[98],"is":[101],"ten":[102],"times":[103],"faster":[104],"than":[105],"SMOTE":[106],"(19.18s":[107],"vs.":[108],"189.73s":[109],"training":[111],"time)":[112],"nearly":[115],"linearly":[116],"size.":[119],"Results":[120],"demonstrate":[121],"that":[122],"offers":[124],"competitive":[125],"performance":[127],"computational":[129],"efficiency":[130],"for":[131],"large-scale":[132],"NIDS":[133],"deployments.":[134]},"counts_by_year":[],"updated_date":"2026-05-28T06:12:49.907903","created_date":"2026-05-27T00:00:00"}