{"id":"https://openalex.org/W4413344083","doi":"https://doi.org/10.23919/transcom.2025ebp3028","title":"Unsupervised Real-Time In-Kernel Intrusion Detection System Using Autoencoders and eBPF","display_name":"Unsupervised Real-Time In-Kernel Intrusion Detection System Using Autoencoders and eBPF","publication_year":2025,"publication_date":"2025-08-19","ids":{"openalex":"https://openalex.org/W4413344083","doi":"https://doi.org/10.23919/transcom.2025ebp3028"},"language":"en","primary_location":{"id":"doi:10.23919/transcom.2025ebp3028","is_oa":false,"landing_page_url":"https://doi.org/10.23919/transcom.2025ebp3028","pdf_url":null,"source":{"id":"https://openalex.org/S2493627025","display_name":"IEICE Transactions on Communications","issn_l":"0916-8516","issn":["0916-8516","1745-1345"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Communications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://naist.repo.nii.ac.jp/records/2001395","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Hotaka Taguchi","orcid":null},"institutions":[{"id":"https://openalex.org/I75917431","display_name":"Nara Institute of Science and Technology","ror":"https://ror.org/05bhada84","country_code":"JP","type":"education","lineage":["https://openalex.org/I75917431"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Hotaka Taguchi","raw_affiliation_strings":["Nara Institute of Science and Technology,Division of Information Science,Ikoma-shi,Japan,630-0192","Division of Information Science, Nara Institute of Science and Technology, 8916-5 Takayama-cho, Ikoma, Nara, 630-0192, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nara Institute of Science and Technology,Division of Information Science,Ikoma-shi,Japan,630-0192","institution_ids":["https://openalex.org/I75917431"]},{"raw_affiliation_string":"Division of Information Science, Nara Institute of Science and Technology, 8916-5 Takayama-cho, Ikoma, Nara, 630-0192, Japan","institution_ids":["https://openalex.org/I75917431"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064463101","display_name":"Takanori Hara","orcid":"https://orcid.org/0000-0002-7861-1771"},"institutions":[{"id":"https://openalex.org/I75917431","display_name":"Nara Institute of Science and Technology","ror":"https://ror.org/05bhada84","country_code":"JP","type":"education","lineage":["https://openalex.org/I75917431"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takanori Hara","raw_affiliation_strings":["Nara Institute of Science and Technology,Division of Information Science,Ikoma-shi,Japan,630-0192","Division of Information Science, Nara Institute of Science and Technology, 8916-5 Takayama-cho, Ikoma, Nara, 630-0192, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nara Institute of Science and Technology,Division of Information Science,Ikoma-shi,Japan,630-0192","institution_ids":["https://openalex.org/I75917431"]},{"raw_affiliation_string":"Division of Information Science, Nara Institute of Science and Technology, 8916-5 Takayama-cho, Ikoma, Nara, 630-0192, Japan","institution_ids":["https://openalex.org/I75917431"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5050684508","display_name":"Shoji Kasahara","orcid":"https://orcid.org/0000-0001-9785-8350"},"institutions":[{"id":"https://openalex.org/I75917431","display_name":"Nara Institute of Science and Technology","ror":"https://ror.org/05bhada84","country_code":"JP","type":"education","lineage":["https://openalex.org/I75917431"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Shoji Kasahara","raw_affiliation_strings":["Nara Institute of Science and Technology,Division of Information Science,Ikoma-shi,Japan,630-0192","Division of Information Science, Nara Institute of Science and Technology, 8916-5 Takayama-cho, Ikoma, Nara, 630-0192, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Nara Institute of Science and Technology,Division of Information Science,Ikoma-shi,Japan,630-0192","institution_ids":["https://openalex.org/I75917431"]},{"raw_affiliation_string":"Division of Information Science, Nara Institute of Science and Technology, 8916-5 Takayama-cho, Ikoma, Nara, 630-0192, Japan","institution_ids":["https://openalex.org/I75917431"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I75917431"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.20771971,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"E109-B","issue":"2","first_page":"326","last_page":"336"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9217000007629395,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9217000007629395,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9047999978065491,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9275996685028076},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7486695051193237},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5894526243209839},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.5783365368843079},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4486095607280731},{"id":"https://openalex.org/keywords/unsupervised-learning","display_name":"Unsupervised learning","score":0.4141945242881775},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.38524162769317627},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.32681167125701904}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9275996685028076},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7486695051193237},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5894526243209839},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.5783365368843079},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4486095607280731},{"id":"https://openalex.org/C8038995","wikidata":"https://www.wikidata.org/wiki/Q1152135","display_name":"Unsupervised learning","level":2,"score":0.4141945242881775},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.38524162769317627},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32681167125701904},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.23919/transcom.2025ebp3028","is_oa":false,"landing_page_url":"https://doi.org/10.23919/transcom.2025ebp3028","pdf_url":null,"source":{"id":"https://openalex.org/S2493627025","display_name":"IEICE Transactions on Communications","issn_l":"0916-8516","issn":["0916-8516","1745-1345"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4320800604","host_organization_name":"Institute of Electronics, Information and Communication Engineers","host_organization_lineage":["https://openalex.org/P4320800604"],"host_organization_lineage_names":["Institute of Electronics, Information and Communication Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEICE Transactions on Communications","raw_type":"journal-article"},{"id":"pmh:oai:irdb.nii.ac.jp:01146:0007266730","is_oa":true,"landing_page_url":"https://naist.repo.nii.ac.jp/records/2001395","pdf_url":null,"source":{"id":"https://openalex.org/S7407056385","display_name":"Institutional Repositories DataBase (IRDB)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184597095","host_organization_name":"National Institute of Informatics","host_organization_lineage":["https://openalex.org/I184597095"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEICE Transactions on Communications","raw_type":"journal article"}],"best_oa_location":{"id":"pmh:oai:irdb.nii.ac.jp:01146:0007266730","is_oa":true,"landing_page_url":"https://naist.repo.nii.ac.jp/records/2001395","pdf_url":null,"source":{"id":"https://openalex.org/S7407056385","display_name":"Institutional Repositories DataBase (IRDB)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184597095","host_organization_name":"National Institute of Informatics","host_organization_lineage":["https://openalex.org/I184597095"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEICE Transactions on Communications","raw_type":"journal article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/13","display_name":"Climate action","score":0.41999998688697815}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":19,"referenced_works":["https://openalex.org/W1498436455","https://openalex.org/W1965555277","https://openalex.org/W2100495367","https://openalex.org/W2107409339","https://openalex.org/W2296509296","https://openalex.org/W2789828921","https://openalex.org/W2963122961","https://openalex.org/W2995305419","https://openalex.org/W3004075915","https://openalex.org/W3040266635","https://openalex.org/W3137147200","https://openalex.org/W4295979716","https://openalex.org/W4366493235","https://openalex.org/W4388212817","https://openalex.org/W4390685455","https://openalex.org/W4392246854","https://openalex.org/W4401111492","https://openalex.org/W4402040227","https://openalex.org/W4406132914"],"related_works":["https://openalex.org/W2364419519","https://openalex.org/W2360767377","https://openalex.org/W2017948608","https://openalex.org/W2360951146","https://openalex.org/W3196155444","https://openalex.org/W4321844043","https://openalex.org/W3210156800","https://openalex.org/W4390062853","https://openalex.org/W4297883248","https://openalex.org/W4255830763"],"abstract_inverted_index":{"Traditional":[0],"intrusion":[1],"detection":[2,13,140],"systems":[3],"(IDSs),":[4],"leveraging":[5,116],"machine":[6],"learning":[7],"(ML)":[8],"algorithms,":[9],"have":[10,24,41],"improved":[11],"the":[12,26,50,55,73,77,81,84,87,132,138,143,148,151,155,167],"accuracy":[14,141],"of":[15,104,150],"unknown":[16],"attacks":[17],"by":[18,53],"continuously":[19],"updating":[20],"ML":[21],"models":[22,57],"but":[23],"underestimated":[25],"context":[27],"switching":[28],"overhead":[29],"between":[30],"kernel":[31,51],"and":[32,120],"user":[33],"spaces.":[34],"To":[35],"address":[36],"this":[37,108],"issue,":[38],"existing":[39],"studies":[40],"implemented":[42],"real-time":[43,113],"IDSs":[44,93],"using":[45],"neural":[46],"networks":[47],"(NNs)":[48],"in":[49],"space":[52],"offloading":[54],"quantized":[56],"trained":[58,88],"with":[59],"post-training":[60],"quantization":[61,85],"(PTQ)":[62],"to":[63,86,124],"extended":[64],"Berkeley":[65],"Packet":[66],"Filter":[67],"(eBPF).":[68],"However,":[69],"they":[70],"cannot":[71],"fine-tune":[72],"model":[74],"parameters":[75],"through":[76],"additional":[78],"training":[79,122],"because":[80],"PTQ":[82],"applies":[83],"model.":[89],"In":[90,107],"addition,":[91],"their":[92],"are":[94],"based":[95],"on":[96],"supervised":[97],"learning,":[98,119],"which":[99],"requires":[100],"a":[101,112],"large":[102],"amount":[103],"labeled":[105],"data.":[106],"paper,":[109],"we":[110],"propose":[111],"in-kernel":[114,134,157],"IDS":[115,135,158,169],"eBPF,":[117],"unsupervised":[118],"quantization-aware":[121],"(QAT)":[123],"enhance":[125],"continuous":[126],"learning.":[127],"Evaluation":[128],"results":[129],"demonstrate":[130],"that":[131],"proposed":[133,156],"exhibits":[136],"almost":[137],"same":[139],"as":[142],"traditional":[144],"user-space":[145,168],"IDS.":[146],"From":[147],"viewpoint":[149],"packet":[152],"processing":[153],"speed,":[154],"can":[159,170],"serve":[160,172],"224":[161],"K":[162],"packets":[163,174],"per":[164,175],"second":[165],"while":[166],"only":[171],"3.2K":[173],"second.":[176]},"counts_by_year":[],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}