{"id":"https://openalex.org/W3046049885","doi":"https://doi.org/10.3233/ida-194656","title":"An outlier ensemble for unsupervised anomaly detection in honeypots data","display_name":"An outlier ensemble for unsupervised anomaly detection in honeypots data","publication_year":2020,"publication_date":"2020-07-15","ids":{"openalex":"https://openalex.org/W3046049885","doi":"https://doi.org/10.3233/ida-194656","mag":"3046049885"},"language":"en","primary_location":{"id":"doi:10.3233/ida-194656","is_oa":false,"landing_page_url":"https://doi.org/10.3233/ida-194656","pdf_url":null,"source":{"id":"https://openalex.org/S2498839158","display_name":"Intelligent Data Analysis","issn_l":"1088-467X","issn":["1088-467X","1571-4128"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Intelligent Data Analysis","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://hal.science/hal-02921160","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073066042","display_name":"Lynda Boukela","orcid":"https://orcid.org/0000-0002-1201-7438"},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Lynda Boukela","raw_affiliation_strings":["School of Computer Science and Engineering, Nanjing University of Science and Technology, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Nanjing University of Science and Technology, Nanjing, China","institution_ids":["https://openalex.org/I36399199"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043414541","display_name":"Gongxuan Zhang","orcid":"https://orcid.org/0000-0003-2925-5624"},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gongxuan Zhang","raw_affiliation_strings":["School of Computer Science and Engineering, Nanjing University of Science and Technology, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Nanjing University of Science and Technology, Nanjing, China","institution_ids":["https://openalex.org/I36399199"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5007882938","display_name":"Samia Bouzefrane","orcid":"https://orcid.org/0000-0002-0979-1289"},"institutions":[{"id":"https://openalex.org/I124158823","display_name":"Conservatoire National des Arts et M\u00e9tiers","ror":"https://ror.org/0175hh227","country_code":"FR","type":"education","lineage":["https://openalex.org/I124158823","https://openalex.org/I4210134562"]},{"id":"https://openalex.org/I4210145724","display_name":"Centre d'\u00e9tudes et de recherche en informatique et communications","ror":"https://ror.org/044j5mm75","country_code":"FR","type":"facility","lineage":["https://openalex.org/I124158823","https://openalex.org/I4210134562","https://openalex.org/I4210145724"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Samia Bouzefrane","raw_affiliation_strings":["CEDRIC lab, Conservatoire National des Arts et M\u00e9tiers, Paris, France"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CEDRIC lab, Conservatoire National des Arts et M\u00e9tiers, Paris, France","institution_ids":["https://openalex.org/I124158823","https://openalex.org/I4210145724"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102905745","display_name":"Junlong Zhou","orcid":"https://orcid.org/0000-0002-7734-4077"},"institutions":[{"id":"https://openalex.org/I36399199","display_name":"Nanjing University of Science and Technology","ror":"https://ror.org/00xp9wg62","country_code":"CN","type":"education","lineage":["https://openalex.org/I36399199"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junlong Zhou","raw_affiliation_strings":["School of Computer Science and Engineering, Nanjing University of Science and Technology, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Nanjing University of Science and Technology, Nanjing, China","institution_ids":["https://openalex.org/I36399199"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5073066042"],"corresponding_institution_ids":["https://openalex.org/I36399199"],"apc_list":null,"apc_paid":null,"fwci":1.2064,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":{"value":0.83982634,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"24","issue":"4","first_page":"743","last_page":"758"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9918000102043152,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeypot","display_name":"Honeypot","score":0.8927008509635925},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8427802324295044},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5890347957611084},{"id":"https://openalex.org/keywords/outlier","display_name":"Outlier","score":0.5814579129219055},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5264240503311157},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.41836756467819214},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.38435935974121094},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.34731289744377136},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.0807437002658844},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.0788259506225586}],"concepts":[{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.8927008509635925},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8427802324295044},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5890347957611084},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.5814579129219055},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5264240503311157},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.41836756467819214},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38435935974121094},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.34731289744377136},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0807437002658844},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0788259506225586},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3233/ida-194656","is_oa":false,"landing_page_url":"https://doi.org/10.3233/ida-194656","pdf_url":null,"source":{"id":"https://openalex.org/S2498839158","display_name":"Intelligent Data Analysis","issn_l":"1088-467X","issn":["1088-467X","1571-4128"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Intelligent Data Analysis","raw_type":"journal-article"},{"id":"pmh:oai:HAL:hal-02921160v1","is_oa":true,"landing_page_url":"https://hal.science/hal-02921160","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Intelligent Data Analysis, 2020, ⟨10.3233/IDA-194656⟩","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-02921160v1","is_oa":true,"landing_page_url":"https://hal.science/hal-02921160","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Intelligent Data Analysis, 2020, ⟨10.3233/IDA-194656⟩","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W42722137","https://openalex.org/W2008224380","https://openalex.org/W2012649175","https://openalex.org/W2017004419","https://openalex.org/W2025899538","https://openalex.org/W2056081083","https://openalex.org/W2061284258","https://openalex.org/W2081290035","https://openalex.org/W2082938293","https://openalex.org/W2101549186","https://openalex.org/W2105642232","https://openalex.org/W2106339675","https://openalex.org/W2107011304","https://openalex.org/W2122646361","https://openalex.org/W2150142104","https://openalex.org/W2337344967","https://openalex.org/W2587459291","https://openalex.org/W2607460355","https://openalex.org/W2612558585","https://openalex.org/W2775236000","https://openalex.org/W2889511488","https://openalex.org/W3144134378","https://openalex.org/W4254182148","https://openalex.org/W4254420769","https://openalex.org/W6736873811"],"related_works":["https://openalex.org/W2499612753","https://openalex.org/W3111802945","https://openalex.org/W2806741695","https://openalex.org/W2946096271","https://openalex.org/W2295423552","https://openalex.org/W1598471830","https://openalex.org/W3107369729","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160"],"abstract_inverted_index":{"Nowadays,":[0],"computers,":[1],"as":[2,4,21,27,153,164],"well":[3],"smart":[5],"devices,":[6],"are":[7,19],"connected":[8],"through":[9],"communication":[10],"networks":[11],"making":[12],"them":[13],"more":[14],"vulnerable":[15],"to":[16,59,64,119],"attacks.":[17],"Honeypots":[18],"proposed":[20],"deception":[22],"tools":[23],"but":[24],"usually":[25],"used":[26],"part":[28],"of":[29,88,102,137],"a":[30,99,154,170],"proactive":[31],"defense":[32,47],"strategy.":[33,48],"Hence,":[34],"this":[35,143],"article":[36],"demonstrates":[37],"how":[38],"honeypots":[39,80,126],"data":[40,81,127,131],"can":[41],"be":[42],"analyzed":[43],"in":[44,112,125,166],"an":[45,145],"active":[46],"Furthermore,":[49],"anomaly":[50,123,139],"detection":[51,124,140,171],"based":[52],"on":[53],"unsupervised":[54,76,122],"machine":[55],"learning":[56],"techniques":[57,77],"allows":[58],"build":[60],"autonomous":[61],"systems":[62],"and":[63,108,134],"detect":[65],"unknown":[66],"anomalies":[67,105],"without":[68],"the":[69,75,86,93,113,116,121,130,135,138,167],"need":[70],"for":[71,79],"prior":[72],"knowledge.":[73],"However,":[74],"applied":[78],"analysis":[82],"do":[83],"not":[84],"value":[85],"advantages":[87],"these":[89],"tools\u2019":[90],"data,":[91],"particularly":[92],"high":[94],"probability":[95],"that":[96],"they":[97],"include":[98],"large":[100],"number":[101],"previously":[103],"unseen":[104],"with":[106,148],"unexpected":[107],"diverse":[109],"patterns.":[110],"Therefore,":[111],"present":[114],"work,":[115],"aim":[117],"is":[118,157,176],"improve":[120],"by":[128],"varying":[129],"feature":[132],"subset":[133],"parameterization":[136],"algorithm.":[141],"To":[142],"purpose,":[144],"outlier":[146],"ensemble":[147,160],"LOF":[149],"(Local":[150],"Outlier":[151],"Factor)":[152],"base":[155],"algorithm":[156],"proposed.":[158],"The":[159],"outperforms":[161],"existing":[162],"solutions":[163],"depicted":[165],"experiments":[168],"where":[169],"rate":[172],"higher":[173],"than":[174],"92%":[175],"achieved.":[177]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}