{"id":"https://openalex.org/W3008500749","doi":"https://doi.org/10.3233/jifs-179659","title":"A new approach of user-level intrusion detection with command sequence-to-sequence model","display_name":"A new approach of user-level intrusion detection with command sequence-to-sequence model","publication_year":2020,"publication_date":"2020-02-17","ids":{"openalex":"https://openalex.org/W3008500749","doi":"https://doi.org/10.3233/jifs-179659","mag":"3008500749"},"language":"en","primary_location":{"id":"doi:10.3233/jifs-179659","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jifs-179659","pdf_url":null,"source":{"id":"https://openalex.org/S179157397","display_name":"Journal of Intelligent & Fuzzy Systems","issn_l":"1064-1246","issn":["1064-1246","1875-8967"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent & Fuzzy Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100431792","display_name":"Wei Liu","orcid":"https://orcid.org/0000-0002-3865-8145"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wei Liu","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010111289","display_name":"Yu Mao","orcid":"https://orcid.org/0000-0002-9303-4888"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Mao","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017292091","display_name":"Linlin Ci","orcid":null},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Linlin Ci","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100673696","display_name":"Fuquan Zhang","orcid":"https://orcid.org/0000-0001-7813-3071"},"institutions":[{"id":"https://openalex.org/I354108","display_name":"Minjiang University","ror":"https://ror.org/00s7tkw17","country_code":"CN","type":"education","lineage":["https://openalex.org/I354108"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Fuquan Zhang","raw_affiliation_strings":["Fujian Provincial Key Laboratory of Information Processing and Intelligent Control,  Minjiang University, Fuzhou, China","Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, Minjiang University, Fuzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fujian Provincial Key Laboratory of Information Processing and Intelligent Control,  Minjiang University, Fuzhou, China","institution_ids":["https://openalex.org/I354108"]},{"raw_affiliation_string":"Fujian Provincial Key Laboratory of Information Processing and Intelligent Control, Minjiang University, Fuzhou, China","institution_ids":["https://openalex.org/I354108"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5100673696"],"corresponding_institution_ids":["https://openalex.org/I354108"],"apc_list":null,"apc_paid":null,"fwci":0.6483,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.71070386,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":"38","issue":"5","first_page":"5707","last_page":"5716"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8115822076797485},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7841193675994873},{"id":"https://openalex.org/keywords/sequence","display_name":"Sequence (biology)","score":0.7201222777366638},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.6469831466674805},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5370306968688965},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.5078578591346741},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.4927230179309845},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.49129718542099},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4906681776046753},{"id":"https://openalex.org/keywords/host","display_name":"Host (biology)","score":0.4834805130958557},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.46317058801651},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4522377848625183},{"id":"https://openalex.org/keywords/data-set","display_name":"Data set","score":0.4518333673477173},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.39663589000701904},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.07476526498794556}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8115822076797485},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7841193675994873},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.7201222777366638},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.6469831466674805},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5370306968688965},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.5078578591346741},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.4927230179309845},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.49129718542099},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4906681776046753},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.4834805130958557},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.46317058801651},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4522377848625183},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.4518333673477173},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.39663589000701904},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.07476526498794556},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3233/jifs-179659","is_oa":false,"landing_page_url":"https://doi.org/10.3233/jifs-179659","pdf_url":null,"source":{"id":"https://openalex.org/S179157397","display_name":"Journal of Intelligent & Fuzzy Systems","issn_l":"1064-1246","issn":["1064-1246","1875-8967"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310318577","host_organization_name":"IOS Press","host_organization_lineage":["https://openalex.org/P4310318577"],"host_organization_lineage_names":["IOS Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent & Fuzzy Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W24286040","https://openalex.org/W99621492","https://openalex.org/W1498436455","https://openalex.org/W1503602183","https://openalex.org/W1545528966","https://openalex.org/W1965400296","https://openalex.org/W1966948031","https://openalex.org/W1973104766","https://openalex.org/W1973704753","https://openalex.org/W1991796154","https://openalex.org/W2000226507","https://openalex.org/W2017524370","https://openalex.org/W2026493302","https://openalex.org/W2039207705","https://openalex.org/W2053321475","https://openalex.org/W2077847043","https://openalex.org/W2084128492","https://openalex.org/W2119463329","https://openalex.org/W2136922672","https://openalex.org/W2137130182","https://openalex.org/W2141910941","https://openalex.org/W2148583977","https://openalex.org/W2160992701","https://openalex.org/W2317869823","https://openalex.org/W2400678587","https://openalex.org/W2463456957","https://openalex.org/W2534437297","https://openalex.org/W2583649498","https://openalex.org/W2618219509","https://openalex.org/W2632775315","https://openalex.org/W2735043505","https://openalex.org/W2747715470","https://openalex.org/W2776884785","https://openalex.org/W2789467204","https://openalex.org/W2791047498","https://openalex.org/W2890503685","https://openalex.org/W2904326687","https://openalex.org/W2911056119","https://openalex.org/W2913598664","https://openalex.org/W2919115771","https://openalex.org/W2928261986","https://openalex.org/W2943301478","https://openalex.org/W2946392898","https://openalex.org/W2946470114","https://openalex.org/W3003236177","https://openalex.org/W4206904060"],"related_works":["https://openalex.org/W2183313954","https://openalex.org/W1969635302","https://openalex.org/W2133389611","https://openalex.org/W2061466315","https://openalex.org/W2376886931","https://openalex.org/W2010561419","https://openalex.org/W2376046849","https://openalex.org/W2374845301","https://openalex.org/W2351448539","https://openalex.org/W1977863481"],"abstract_inverted_index":{"It":[0],"is":[1,72,92],"not":[2],"foolproof":[3],"for":[4,96],"intrusion":[5,32],"detection":[6,33],"to":[7,74],"focus":[8],"only":[9],"on":[10,67,101],"the":[11,15,45,52],"network":[12],"level":[13],"and":[14,20,36,50,79,94,114],"program":[16],"level.":[17],"Internal":[18],"security":[19,22],"external":[21],"of":[23],"information":[24,41],"systems":[25],"should":[26],"be":[27],"given":[28],"equal":[29],"attention.":[30],"User-level":[31],"can":[34],"deter":[35],"curtail":[37],"attackers":[38],"from":[39],"damaging":[40],"systems.":[42],"Even":[43],"if":[44],"mimic":[46],"attacker":[47],"has":[48],"gained":[49],"enhanced":[51],"host":[53],"user":[54,76,81],"privileges":[55],"that":[56,87],"he":[57],"illegally":[58],"obtained.":[59],"In":[60],"this":[61],"paper,":[62],"a":[63],"novel":[64],"method":[65],"based":[66],"recurrent":[68],"neural":[69],"networks":[70],"(RNNs)":[71],"used":[73],"predict":[75],"command":[77,89],"sequences":[78],"prophesy":[80],"behaviors.":[82],"The":[83],"experimental":[84],"results":[85],"show":[86],"our":[88],"sequence-to-sequence":[90],"model":[91],"robust":[93],"effective":[95],"solving":[97],"long":[98],"sequential":[99],"problem":[100],"three":[102],"different":[103],"data":[104,109,112,116],"sets":[105],"including":[106],"Purdue":[107],"University":[108],"set,":[110],"SEA":[111],"set":[113],"self-collected":[115],"set.":[117]},"counts_by_year":[{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":1}],"updated_date":"2026-06-19T15:47:20.252518","created_date":"2025-10-10T00:00:00"}