{"id":"https://openalex.org/W4283804310","doi":"https://doi.org/10.23919/cycon55549.2022.9811014","title":"Data Quality Problem in AI-Based Network Intrusion Detection Systems Studies and a Solution Proposal","display_name":"Data Quality Problem in AI-Based Network Intrusion Detection Systems Studies and a Solution Proposal","publication_year":2022,"publication_date":"2022-05-31","ids":{"openalex":"https://openalex.org/W4283804310","doi":"https://doi.org/10.23919/cycon55549.2022.9811014"},"language":"en","primary_location":{"id":"doi:10.23919/cycon55549.2022.9811014","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cycon55549.2022.9811014","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 14th International Conference on Cyber Conflict: Keep Moving! (CyCon)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041304984","display_name":"Maj. Emre Halisdemir","orcid":null},"institutions":[{"id":"https://openalex.org/I2802296436","display_name":"NATO Cooperative Cyber Defence Centre of Excellence","ror":"https://ror.org/050reks70","country_code":"EE","type":"facility","lineage":["https://openalex.org/I2802296436","https://openalex.org/I4210162703"]}],"countries":["EE"],"is_corresponding":true,"raw_author_name":"Maj. Emre Halisdemir","raw_affiliation_strings":["Strategy Researcher CCDCOE,Tallinn,Estonia","Strategy Researcher CCDCOE, Tallinn, Estonia"],"affiliations":[{"raw_affiliation_string":"Strategy Researcher CCDCOE,Tallinn,Estonia","institution_ids":["https://openalex.org/I2802296436"]},{"raw_affiliation_string":"Strategy Researcher CCDCOE, Tallinn, Estonia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001503014","display_name":"Hacer Karacan","orcid":"https://orcid.org/0000-0001-6788-008X"},"institutions":[{"id":"https://openalex.org/I95634034","display_name":"Gazi University","ror":"https://ror.org/054xkpr46","country_code":"TR","type":"education","lineage":["https://openalex.org/I95634034"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Hacer Karacan","raw_affiliation_strings":["Gazi University,Ankara,Turkey","Gazi University, Ankara, Turkey"],"affiliations":[{"raw_affiliation_string":"Gazi University,Ankara,Turkey","institution_ids":["https://openalex.org/I95634034"]},{"raw_affiliation_string":"Gazi University, Ankara, Turkey","institution_ids":["https://openalex.org/I95634034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039830415","display_name":"Mauno Pihelgas","orcid":null},"institutions":[{"id":"https://openalex.org/I111112146","display_name":"Tallinn University of Technology","ror":"https://ror.org/0443cwa12","country_code":"EE","type":"education","lineage":["https://openalex.org/I111112146"]},{"id":"https://openalex.org/I4210118071","display_name":"V\u00e4hiuuringute Tehnoloogia Arenduskeskus","ror":"https://ror.org/01pey0n03","country_code":"EE","type":"facility","lineage":["https://openalex.org/I4210118071"]}],"countries":["EE"],"is_corresponding":false,"raw_author_name":"Mauno Pihelgas","raw_affiliation_strings":["Technology Researcher CCDCOE,Tallinn,Estonia","Technology Researcher CCDCOE, Tallinn, Estonia"],"affiliations":[{"raw_affiliation_string":"Technology Researcher CCDCOE,Tallinn,Estonia","institution_ids":["https://openalex.org/I111112146","https://openalex.org/I4210118071"]},{"raw_affiliation_string":"Technology Researcher CCDCOE, Tallinn, Estonia","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075642699","display_name":"Toomas Lepik","orcid":"https://orcid.org/0000-0002-2551-7933"},"institutions":[{"id":"https://openalex.org/I111112146","display_name":"Tallinn University of Technology","ror":"https://ror.org/0443cwa12","country_code":"EE","type":"education","lineage":["https://openalex.org/I111112146"]},{"id":"https://openalex.org/I193629610","display_name":"Tallinn University","ror":"https://ror.org/05mey9k78","country_code":"EE","type":"education","lineage":["https://openalex.org/I193629610"]}],"countries":["EE"],"is_corresponding":false,"raw_author_name":"Toomas Lepik","raw_affiliation_strings":["Tallinn University of Technology,Information Security Expert,Tallinn,Estonia","Information Security Expert, Tallinn University of Technology, Tallinn, Estonia"],"affiliations":[{"raw_affiliation_string":"Tallinn University of Technology,Information Security Expert,Tallinn,Estonia","institution_ids":["https://openalex.org/I111112146","https://openalex.org/I193629610"]},{"raw_affiliation_string":"Information Security Expert, Tallinn University of Technology, Tallinn, Estonia","institution_ids":["https://openalex.org/I111112146"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085974068","display_name":"Sungbaek Cho","orcid":null},"institutions":[{"id":"https://openalex.org/I2802296436","display_name":"NATO Cooperative Cyber Defence Centre of Excellence","ror":"https://ror.org/050reks70","country_code":"EE","type":"facility","lineage":["https://openalex.org/I2802296436","https://openalex.org/I4210162703"]}],"countries":["EE"],"is_corresponding":false,"raw_author_name":"Sungbaek Cho","raw_affiliation_strings":["Strategy Researcher CCDCOE,Tallinn,Estonia","Strategy Researcher CCDCOE, Tallinn, Estonia"],"affiliations":[{"raw_affiliation_string":"Strategy Researcher CCDCOE,Tallinn,Estonia","institution_ids":["https://openalex.org/I2802296436"]},{"raw_affiliation_string":"Strategy Researcher CCDCOE, Tallinn, Estonia","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5041304984"],"corresponding_institution_ids":["https://openalex.org/I2802296436"],"apc_list":null,"apc_paid":null,"fwci":0.9987,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.7681587,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"367","last_page":"383"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7847890853881836},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.688496470451355},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.5044873952865601},{"id":"https://openalex.org/keywords/intrusion-prevention-system","display_name":"Intrusion prevention system","score":0.4386424124240875},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.43335071206092834}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7847890853881836},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.688496470451355},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.5044873952865601},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.4386424124240875},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.43335071206092834},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23919/cycon55549.2022.9811014","is_oa":false,"landing_page_url":"https://doi.org/10.23919/cycon55549.2022.9811014","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 14th International Conference on Cyber Conflict: Keep Moving! (CyCon)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.41999998688697815,"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W1642214264","https://openalex.org/W1988918299","https://openalex.org/W2008217382","https://openalex.org/W2029787883","https://openalex.org/W2031163547","https://openalex.org/W2046079241","https://openalex.org/W2085618569","https://openalex.org/W2099940443","https://openalex.org/W2108513376","https://openalex.org/W2129468158","https://openalex.org/W2152163062","https://openalex.org/W2180210406","https://openalex.org/W2460037574","https://openalex.org/W2564660321","https://openalex.org/W2743475759","https://openalex.org/W2770942607","https://openalex.org/W2783741806","https://openalex.org/W2789828921","https://openalex.org/W2924689635","https://openalex.org/W2969973402","https://openalex.org/W2973862992","https://openalex.org/W2985675944","https://openalex.org/W2995026345","https://openalex.org/W3005630930","https://openalex.org/W3042945059","https://openalex.org/W3119207006","https://openalex.org/W3178709430","https://openalex.org/W3197994103"],"related_works":["https://openalex.org/W2364419519","https://openalex.org/W2392603527","https://openalex.org/W2360767377","https://openalex.org/W2017948608","https://openalex.org/W2360951146","https://openalex.org/W2390009783","https://openalex.org/W2348767155","https://openalex.org/W2388497169","https://openalex.org/W3120393658","https://openalex.org/W4283700121"],"abstract_inverted_index":{"Network":[0],"Intrusion":[1],"Detection":[2],"Systems":[3],"(IDSs)":[4],"have":[5,36],"been":[6,37,82],"used":[7,134],"to":[8,25,75,118,135,142,146,180,208,223,273,285,306,315,322,340,351,368,393],"increase":[9],"the":[10,32,39,52,184,216,225,230,236,247,265,275,293,310,317,323,359,369,385,394],"level":[11],"of":[12,21,41,54,64,150,183,235,258,260,267,277,343,387,396,408],"network":[13,33,66,226,295,302],"security":[14,217,402],"for":[15,44,91,213,377],"many":[16,87],"years.":[17],"The":[18,219],"main":[19],"purpose":[20],"such":[22],"systems":[23],"is":[24,222],"detect":[26],"and":[27,72,100,110,120,137,204,215,365,380],"block":[28],"malicious":[29,71],"activity":[30],"in":[31],"traffic.":[34],"Researchers":[35],"improving":[38],"performance":[40,149],"IDS":[42,152],"technology":[43],"decades":[45],"by":[46,246,264,404],"applying":[47],"various":[48],"machine-learning":[49],"techniques.":[50,126,187],"From":[51],"perspective":[53],"academia,":[55],"obtaining":[56],"a":[57,61,83,206,287,335,353],"quality":[58],"dataset":[59],"(i.e.":[60],"sufficient":[62],"amount":[63],"captured":[65,228,297],"packets":[67,296],"that":[68,193,331,372],"contain":[69,328],"both":[70],"normal":[73],"traffic)":[74],"support":[76],"machine":[77],"learning":[78],"approaches":[79],"has":[80],"always":[81],"challenge.":[84],"There":[85],"are":[86,105,130,283,303,312],"datasets":[88,104,133,171,203,212,407],"publicly":[89,201],"available":[90,202],"research":[92,379],"purposes,":[93],"including":[94],"NSL-KDD,":[95],"KDDCUP":[96],"99,":[97],"CICIDS":[98],"2017":[99],"UNSWNB15.":[101],"However,":[102,309],"these":[103,326],"becoming":[106],"obsolete":[107],"over":[108,268,278,305],"time":[109],"may":[111,172],"no":[112],"longer":[113],"be":[114,143],"adequate":[115],"or":[116,177],"valid":[117],"model":[119],"validate":[121],"IDSs":[122,139],"against":[123,166],"state-of-the-art":[124],"attack":[125,128,156,186,410],"As":[127],"techniques":[129],"continuously":[131],"evolving,":[132],"develop":[136],"test":[138],"also":[140],"need":[141],"kept":[144],"up":[145],"date.":[147],"Proven":[148],"an":[151],"tested":[153],"on":[154],"old":[155],"patterns":[157],"does":[158],"not":[159,313],"necessarily":[160],"mean":[161],"it":[162,367,376],"will":[163],"perform":[164],"well":[165],"new":[167,185],"patterns.":[168,411],"Moreover,":[169],"existing":[170],"lack":[173],"certain":[174,341],"data":[175],"fields":[176],"attributes":[178],"necessary":[179],"analyse":[181],"some":[182],"In":[188,382],"this":[189,251,347,362,383],"paper,":[190],"we":[191,349],"argue":[192],"academia":[194,373],"needs":[195],"up-to-date":[196,210,409],"high-quality":[197,211],"datasets.":[198],"We":[199],"compare":[200],"suggest":[205],"way":[207],"provide":[209],"researchers":[214],"industry.":[218],"proposed":[220],"solution":[221],"utilize":[224],"traffic":[227,360],"from":[229,298,361],"Locked":[231,388],"Shields":[232,389],"exercise,":[233,253,294],"one":[234],"world\u2019s":[237],"largest":[238],"live-fire":[239],"international":[240],"cyber":[241],"defence":[242],"exercises":[243],"held":[244],"annually":[245],"NATO":[248],"CCDCOE.":[249],"During":[250],"three-day":[252],"red":[254],"team":[255],"members":[256],"consisting":[257],"dozens":[259],"white":[261],"hackers":[262],"selected":[263],"governments":[266],"20":[269,279],"participating":[270],"countries":[271,311],"attempt":[272],"infiltrate":[274],"networks":[276],"blue":[280,300],"teams,":[281],"who":[282],"tasked":[284],"defend":[286],"fictional":[288],"country":[289],"called":[290],"Berylia.":[291],"After":[292],"each":[299,307],"team\u2019s":[301,363],"handed":[304],"team.":[308],"willing":[314],"disclose":[316,366],"packet":[318],"capture":[319,357],"(PCAP)":[320],"files":[321,327],"public":[324,370],"since":[325],"specific":[329],"information":[330],"could":[332],"reveal":[333],"how":[334],"particular":[336],"nation":[337],"might":[338],"react":[339],"types":[342],"cyberattacks.":[344],"To":[345],"overcome":[346],"problem,":[348],"propose":[350],"create":[352],"dedicated":[354],"virtual":[355],"team,":[356],"all":[358],"network,":[364],"so":[371],"can":[374,390],"use":[375],"unclassified":[378],"studies.":[381],"way,":[384],"organizers":[386],"effectively":[391],"contribute":[392],"advancement":[395],"future":[397],"artificial":[398],"intelligence":[399],"(AI)":[400],"enabled":[401],"solutions":[403],"providing":[405],"annual":[406]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":2}],"updated_date":"2026-04-24T08:23:43.765630","created_date":"2025-10-10T00:00:00"}