{"id":"https://openalex.org/W2983890249","doi":"https://doi.org/10.3233/ida-184391","title":"The comparison network model for cyber anomaly detection","display_name":"The comparison network model for cyber anomaly detection","publication_year":2019,"publication_date":"2019-11-08","ids":{"openalex":"https://openalex.org/W2983890249","doi":"https://doi.org/10.3233/ida-184391","mag":"2983890249"},"language":"en","primary_location":{"id":"doi:10.3233/ida-184391","is_oa":false,"landing_page_url":"https://doi.org/10.3233/ida-184391","pdf_url":null,"source":{"id":"https://openalex.org/S2498839158","display_name":"Intelligent Data Analysis","issn_l":"1088-467X","issn":["1088-467X","1571-4128"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Intelligent Data Analysis","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014935476","display_name":"Haicheng Qu","orcid":"https://orcid.org/0000-0002-2351-3154"},"institutions":[{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"id":"https://openalex.org/I176808543","display_name":"Liaoning Technical University","ror":"https://ror.org/01n2bd587","country_code":"CN","type":"education","lineage":["https://openalex.org/I176808543"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Haicheng Qu","raw_affiliation_strings":["Institute of Software, Liaoning Technical University, Huludao, Liaoning 125105, China"],"affiliations":[{"raw_affiliation_string":"Institute of Software, Liaoning Technical University, Huludao, Liaoning 125105, China","institution_ids":["https://openalex.org/I176808543","https://openalex.org/I4210128818"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011038195","display_name":"Jitao Qin","orcid":"https://orcid.org/0000-0001-8619-1677"},"institutions":[{"id":"https://openalex.org/I4210128818","display_name":"Institute of Software","ror":"https://ror.org/033dfsn42","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210128818"]},{"id":"https://openalex.org/I176808543","display_name":"Liaoning Technical University","ror":"https://ror.org/01n2bd587","country_code":"CN","type":"education","lineage":["https://openalex.org/I176808543"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jitao Qin","raw_affiliation_strings":["Institute of Software, Liaoning Technical University, Huludao, Liaoning 125105, China"],"affiliations":[{"raw_affiliation_string":"Institute of Software, Liaoning Technical University, Huludao, Liaoning 125105, China","institution_ids":["https://openalex.org/I176808543","https://openalex.org/I4210128818"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101960495","display_name":"Hao Chen","orcid":"https://orcid.org/0000-0002-1837-3986"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]},{"id":"https://openalex.org/I4210161462","display_name":"Heilongjiang Institute of Technology","ror":"https://ror.org/05x0m9n95","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210161462"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hao Chen","raw_affiliation_strings":["Department of Information Engineering, Harbin Institute of Technology, Harbin, Heilongjiang 150001, China"],"affiliations":[{"raw_affiliation_string":"Department of Information Engineering, Harbin Institute of Technology, Harbin, Heilongjiang 150001, China","institution_ids":["https://openalex.org/I4210161462","https://openalex.org/I204983213"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5014935476"],"corresponding_institution_ids":["https://openalex.org/I176808543","https://openalex.org/I4210128818"],"apc_list":null,"apc_paid":null,"fwci":0.3537,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.64257715,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"23","issue":"6","first_page":"1313","last_page":"1334"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7550774812698364},{"id":"https://openalex.org/keywords/outlier","display_name":"Outlier","score":0.7275921106338501},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5780055522918701},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.5680910348892212},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5250163674354553},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.5080325603485107},{"id":"https://openalex.org/keywords/degree","display_name":"Degree (music)","score":0.49930262565612793},{"id":"https://openalex.org/keywords/object","display_name":"Object (grammar)","score":0.49660545587539673},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.48630866408348083},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.48013612627983093},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.47167643904685974}],"concepts":[{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7550774812698364},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.7275921106338501},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5780055522918701},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.5680910348892212},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5250163674354553},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.5080325603485107},{"id":"https://openalex.org/C2775997480","wikidata":"https://www.wikidata.org/wiki/Q586277","display_name":"Degree (music)","level":2,"score":0.49930262565612793},{"id":"https://openalex.org/C2781238097","wikidata":"https://www.wikidata.org/wiki/Q175026","display_name":"Object (grammar)","level":2,"score":0.49660545587539673},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48630866408348083},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.48013612627983093},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.47167643904685974},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.0},{"id":"https://openalex.org/C24890656","wikidata":"https://www.wikidata.org/wiki/Q82811","display_name":"Acoustics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/ida-184391","is_oa":false,"landing_page_url":"https://doi.org/10.3233/ida-184391","pdf_url":null,"source":{"id":"https://openalex.org/S2498839158","display_name":"Intelligent Data Analysis","issn_l":"1088-467X","issn":["1088-467X","1571-4128"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Intelligent Data Analysis","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W195047088","https://openalex.org/W214166028","https://openalex.org/W1988086936","https://openalex.org/W1990067238","https://openalex.org/W2087432251","https://openalex.org/W2089944128","https://openalex.org/W2103914106","https://openalex.org/W2134490011","https://openalex.org/W2167710876","https://openalex.org/W2278186031","https://openalex.org/W2342408547","https://openalex.org/W2496948936","https://openalex.org/W2542770903","https://openalex.org/W2743138268","https://openalex.org/W2784643650","https://openalex.org/W2786088545","https://openalex.org/W2789493698","https://openalex.org/W2807786182","https://openalex.org/W4239954780","https://openalex.org/W6603283563","https://openalex.org/W6684670823","https://openalex.org/W6747821715"],"related_works":["https://openalex.org/W2499612753","https://openalex.org/W3111802945","https://openalex.org/W2806741695","https://openalex.org/W2946096271","https://openalex.org/W2295423552","https://openalex.org/W3107369729","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259"],"abstract_inverted_index":{"In":[0],"cyber":[1,250,291],"anomaly":[2,66,251,292],"detection,":[3],"if":[4],"the":[5,12,24,29,86,96,100,110,113,117,122,126,132,159,163,172,184,188,195,200,203,207,211,215,238,249,265,268,279,290],"detected":[6,176,208,216],"target":[7],"is":[8,19,32,156,168,218],"significantly":[9],"different":[10,104],"from":[11,28],"predefined":[13],"normal":[14,30,50,146,173,204,221],"network":[15,51,72,147,161],"data":[16,52,148,174,205],"pattern,":[17],"it":[18,38],"considered":[20],"an":[21,223],"outlier.":[22,224],"However,":[23],"degree":[25,127,212],"of":[26,84,106,124,128,134,187,213,237,286],"deviation":[27],"model":[31,98,155,272],"often":[33],"difficult":[34,39],"to":[35,40,49,145,170,178,198,283],"determine,":[36],"making":[37],"effectively":[41],"identify":[42],"attack":[43,136,140,244],"cate":[44],"gories":[45],"that":[46,142],"are":[47,143],"similar":[48,144],"and":[53,91,108,116,130,149,162,175,182,206],"have":[54,150],"small":[55,151],"sample":[56,89,152],"sizes.":[57,153],"To":[58],"address":[59],"this":[60],"problem,":[61],"we":[62],"propose":[63],"a":[64,70,76,80,229,274,284],"novel":[65],"detection":[67,235,252,276,293],"method":[68],"called":[69],"comparison":[71,164,191],"(C-Net),":[73],"which":[74],"has":[75],"double-branch":[77],"structure":[78],"for":[79,139],"neural":[81,94],"network.":[82,189],"Instead":[83],"learning":[85,257],"correspondence":[87,111],"between":[88,103,112,202],"values":[90,102,115],"labels":[92],"by":[93,289],"networks,":[95],"C-Net":[97],"fits":[99],"difference":[101,114,129,201],"classes":[105,141],"samples":[107],"learns":[109],"labels.":[118],"This":[119],"approach":[120],"avoids":[121],"process":[123],"determining":[125],"addresses":[131],"problem":[133],"low":[135],"recognition":[137],"rates":[138],"Our":[154,233],"split":[157],"into":[158],"auto-encoder":[160],"component.":[165],"The":[166,190],"former":[167],"applied":[169],"compress":[171],"object":[177,217],"collect":[179],"essential":[180],"features":[181],"reconstruct":[183],"input":[185,197],"part":[186],"component":[192],"then":[193],"uses":[194],"reconstructed":[196],"find":[199],"object.":[209],"According":[210],"difference,":[214],"categorized":[219],"as":[220],"or":[222],"We":[225],"performed":[226],"experiments":[227],"using":[228],"water":[230],"storage":[231],"dataset.":[232],"model\u00e2\u0080\u0099s":[234],"rate":[236,277,285],"Complex":[239],"Malicious":[240],"Response":[241],"Injection":[242],"(CMRI)":[243],"category":[245,281],"reached":[246],"95.5%,":[247],"while":[248],"algorithms":[253,294],"based":[254,295],"on":[255,296],"machine":[256,297],"(OCSVM,":[258],"K-means,":[259],"simple-One-Class,":[260],"etc.)":[261],"could":[262],"not":[263],"detect":[264],"attack.":[266],"For":[267],"KDDCUP99":[269],"data,":[270],"our":[271],"achieved":[273,288],"99.52%":[275],"in":[278],"R2L":[280],"compared":[282],"54.62%":[287],"learning.":[298]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}
