{"id":"https://openalex.org/W2987273375","doi":"https://doi.org/10.3233/jhs-190620","title":"Discovery of DoS attacks by the ZED-IDS anomaly detector","display_name":"Discovery of DoS attacks by the ZED-IDS anomaly detector","publication_year":2019,"publication_date":"2019-11-01","ids":{"openalex":"https://openalex.org/W2987273375","doi":"https://doi.org/10.3233/jhs-190620","mag":"2987273375"},"language":"en","primary_location":{"id":"doi:10.3233/jhs-190620","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jhs-190620","pdf_url":null,"source":{"id":"https://openalex.org/S133922704","display_name":"Journal of High Speed Networks","issn_l":"0926-6801","issn":["0926-6801","1875-8940"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of High Speed Networks","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041921145","display_name":"Marta Catillo","orcid":"https://orcid.org/0000-0002-5025-7969"},"institutions":[{"id":"https://openalex.org/I16337185","display_name":"University of Sannio","ror":"https://ror.org/04vc81p87","country_code":"IT","type":"education","lineage":["https://openalex.org/I16337185"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Marta Catillo","raw_affiliation_strings":["Department of Engineering, University of Sannio, Benevento, Italy. E-mails:\u00a0mcatillo@unisannio.it,\u00a0villano@unisannio.it"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Engineering, University of Sannio, Benevento, Italy. E-mails:\u00a0mcatillo@unisannio.it,\u00a0villano@unisannio.it","institution_ids":["https://openalex.org/I16337185"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068111307","display_name":"Massimiliano Rak","orcid":"https://orcid.org/0000-0001-6708-4032"},"institutions":[{"id":"https://openalex.org/I197809005","display_name":"University of Campania \"Luigi Vanvitelli\"","ror":"https://ror.org/02kqnpp86","country_code":"IT","type":"education","lineage":["https://openalex.org/I197809005"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Massimiliano Rak","raw_affiliation_strings":["Department of Computer Engineering, University of Campania Luigi Vanvitelli, Aversa, Italy. E-mail:\u00a0massimiliano.rak@unicampania.it"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, University of Campania Luigi Vanvitelli, Aversa, Italy. E-mail:\u00a0massimiliano.rak@unicampania.it","institution_ids":["https://openalex.org/I197809005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053986858","display_name":"Umberto Villano","orcid":"https://orcid.org/0000-0001-5382-4650"},"institutions":[{"id":"https://openalex.org/I16337185","display_name":"University of Sannio","ror":"https://ror.org/04vc81p87","country_code":"IT","type":"education","lineage":["https://openalex.org/I16337185"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Umberto Villano","raw_affiliation_strings":["Department of Engineering, University of Sannio, Benevento, Italy. E-mails:\u00a0mcatillo@unisannio.it,\u00a0villano@unisannio.it"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Engineering, University of Sannio, Benevento, Italy. E-mails:\u00a0mcatillo@unisannio.it,\u00a0villano@unisannio.it","institution_ids":["https://openalex.org/I16337185"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5053986858"],"corresponding_institution_ids":["https://openalex.org/I16337185"],"apc_list":null,"apc_paid":null,"fwci":2.1844,"has_fulltext":false,"cited_by_count":22,"citation_normalized_percentile":{"value":0.88752036,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":"25","issue":"4","first_page":"349","last_page":"365"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7656897306442261},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.6264431476593018},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5672962069511414},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.4793742001056671},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.462594211101532},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.2643420696258545},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.197379469871521},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.10560840368270874},{"id":"https://openalex.org/keywords/condensed-matter-physics","display_name":"Condensed matter physics","score":0.051333457231521606}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7656897306442261},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.6264431476593018},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5672962069511414},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.4793742001056671},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.462594211101532},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2643420696258545},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.197379469871521},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.10560840368270874},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.051333457231521606}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/jhs-190620","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jhs-190620","pdf_url":null,"source":{"id":"https://openalex.org/S133922704","display_name":"Journal of High Speed Networks","issn_l":"0926-6801","issn":["0926-6801","1875-8940"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of High Speed Networks","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6499999761581421,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W1095282497","https://openalex.org/W1591530988","https://openalex.org/W1876967670","https://openalex.org/W1966809779","https://openalex.org/W1988918299","https://openalex.org/W2027871673","https://openalex.org/W2064675550","https://openalex.org/W2086288008","https://openalex.org/W2099940443","https://openalex.org/W2112796928","https://openalex.org/W2122646361","https://openalex.org/W2127979711","https://openalex.org/W2136922672","https://openalex.org/W2145094598","https://openalex.org/W2160598920","https://openalex.org/W2281120889","https://openalex.org/W2529525882","https://openalex.org/W2576897537","https://openalex.org/W2736937187","https://openalex.org/W2765181145","https://openalex.org/W2783454406","https://openalex.org/W2783741806","https://openalex.org/W2786885650","https://openalex.org/W2789828921","https://openalex.org/W2795147830","https://openalex.org/W2892341857","https://openalex.org/W2896412072","https://openalex.org/W2907111600","https://openalex.org/W2911278693","https://openalex.org/W2997574889","https://openalex.org/W4231109964","https://openalex.org/W4249837478","https://openalex.org/W4388506701","https://openalex.org/W6637370835","https://openalex.org/W6681096077"],"related_works":["https://openalex.org/W2806741695","https://openalex.org/W4290647774","https://openalex.org/W3189286258","https://openalex.org/W3207797160","https://openalex.org/W3210364259","https://openalex.org/W4300558037","https://openalex.org/W2667207928","https://openalex.org/W2912112202","https://openalex.org/W4377864969","https://openalex.org/W3120251014"],"abstract_inverted_index":{"Intrusion":[0,128],"detection":[1,27,121,155],"is":[2,36,103,133,143,151],"one":[3],"of":[4,25,107,117,122,179],"the":[5,20,23,104,113,120,140,154,160,171,177,180],"major":[6],"challenges":[7],"in":[8,19],"today\u2019s":[9],"security":[10,52],"industry.":[11],"Currently":[12],"attack":[13,184],"surfaces":[14],"are":[15,45,61,163],"more":[16],"extensive":[17],"than":[18],"past,":[21],"and":[22,33,54,84,115,139,153,165],"use":[24],"anomaly":[26,141],"tools,":[28],"able":[29,46],"to":[30,38,47,64],"detect":[31],"intrusions":[32],"malicious":[34],"activities,":[35],"essential":[37],"avoid":[39,55],"infrastructure":[40],"damages.":[41],"Furthermore,":[42],"atta":[43],"ckers":[44],"exploit":[48],"techniques":[49,60],"that":[50],"bypass":[51],"countermeasures":[53],"straight":[56],"detection.":[57,68,185],"Machine":[58],"learning":[59,73,96],"widely":[62],"used":[63],"perform":[65],"effective":[66],"intrusion":[67],"In":[69],"this":[70],"context,":[71],"deep":[72,95,147],"networks":[74],"may":[75],"play":[76],"an":[77,108],"important":[78],"role,":[79],"by":[80],"analyzing":[81],"network":[82],"flows":[83],"classifying":[85],"them":[86],"as":[87,135],"\u201cnormal\u201d":[88],"or":[89],"\u201cintrusion\u201d.":[90],"This":[91],"paper":[92],"presents":[93],"a":[94,136,146],"architecture":[97],"for":[98,119,182],"DoS":[99],"attacks":[100],"detection,":[101],"which":[102],"first":[105],"result":[106],"on-going":[109],"project":[110],"aiming":[111],"at":[112],"design":[114],"implementation":[116],"tools":[118],"0-day":[123,183],"threats":[124],"(ZED-IDS,":[125],"Zero":[126],"Day":[127],"Detection":[129],"System).":[130],"The":[131,149,167],"problem":[132],"tackled":[134],"semi-supervised":[137],"task,":[138],"detector":[142],"based":[144],"on":[145,159],"autoencoder.":[148],"model":[150],"described,":[152],"performance":[156,168],"results":[157],"obtained":[158],"CICIDS2017":[161],"dataset":[162],"presented":[164],"commented.":[166],"comparison":[169],"with":[170],"most":[172],"common":[173],"supervised":[174],"classifiers":[175],"shows":[176],"potential":[178],"proposal":[181]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":5}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}