{"id":"https://openalex.org/W3091379954","doi":"https://doi.org/10.3390/fi12100167","title":"Comparison of Machine Learning and Deep Learning Models for Network Intrusion Detection Systems","display_name":"Comparison of Machine Learning and Deep Learning Models for Network Intrusion Detection Systems","publication_year":2020,"publication_date":"2020-09-30","ids":{"openalex":"https://openalex.org/W3091379954","doi":"https://doi.org/10.3390/fi12100167","mag":"3091379954"},"language":"en","primary_location":{"id":"doi:10.3390/fi12100167","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi12100167","pdf_url":"https://www.mdpi.com/1999-5903/12/10/167/pdf","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1999-5903/12/10/167/pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086819474","display_name":"Niraj Thapa","orcid":"https://orcid.org/0000-0003-2533-7462"},"institutions":[{"id":"https://openalex.org/I35777872","display_name":"North Carolina Agricultural and Technical State University","ror":"https://ror.org/02aze4h65","country_code":"US","type":"education","lineage":["https://openalex.org/I35777872"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Niraj Thapa","raw_affiliation_strings":["Department of Computational Data Science and Engineering, North Carolina A&T State University, Greensboro, NC 27411, USA"],"raw_orcid":"https://orcid.org/0000-0003-2533-7462","affiliations":[{"raw_affiliation_string":"Department of Computational Data Science and Engineering, North Carolina A&T State University, Greensboro, NC 27411, USA","institution_ids":["https://openalex.org/I35777872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101818613","display_name":"Zhipeng Liu","orcid":"https://orcid.org/0009-0008-3962-2153"},"institutions":[{"id":"https://openalex.org/I35777872","display_name":"North Carolina Agricultural and Technical State University","ror":"https://ror.org/02aze4h65","country_code":"US","type":"education","lineage":["https://openalex.org/I35777872"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhipeng Liu","raw_affiliation_strings":["Department of Computer Science, North Carolina A&T State University, Greensboro, NC 27411, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina A&T State University, Greensboro, NC 27411, USA","institution_ids":["https://openalex.org/I35777872"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069061591","display_name":"Dukka B. KC","orcid":"https://orcid.org/0000-0001-7443-1928"},"institutions":[{"id":"https://openalex.org/I39587148","display_name":"Wichita State University","ror":"https://ror.org/00c4e7y75","country_code":"US","type":"education","lineage":["https://openalex.org/I39587148"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dukka B. KC","raw_affiliation_strings":["Electrical Engineering and Computer Science Department, Wichita State University, Wichita, KS 67260, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical Engineering and Computer Science Department, Wichita State University, Wichita, KS 67260, USA","institution_ids":["https://openalex.org/I39587148"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042802565","display_name":"Balakrishna Gokaraju","orcid":"https://orcid.org/0000-0002-0070-0248"},"institutions":[{"id":"https://openalex.org/I35777872","display_name":"North Carolina Agricultural and Technical State University","ror":"https://ror.org/02aze4h65","country_code":"US","type":"education","lineage":["https://openalex.org/I35777872"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Balakrishna Gokaraju","raw_affiliation_strings":["Department of Computational Data Science and Engineering, North Carolina A&T State University, Greensboro, NC 27411, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computational Data Science and Engineering, North Carolina A&T State University, Greensboro, NC 27411, USA","institution_ids":["https://openalex.org/I35777872"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015792060","display_name":"Kaushik Roy","orcid":"https://orcid.org/0000-0002-3360-7576"},"institutions":[{"id":"https://openalex.org/I35777872","display_name":"North Carolina Agricultural and Technical State University","ror":"https://ror.org/02aze4h65","country_code":"US","type":"education","lineage":["https://openalex.org/I35777872"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Kaushik Roy","raw_affiliation_strings":["Department of Computer Science, North Carolina A&T State University, Greensboro, NC 27411, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina A&T State University, Greensboro, NC 27411, USA","institution_ids":["https://openalex.org/I35777872"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5015792060"],"corresponding_institution_ids":["https://openalex.org/I35777872"],"apc_list":{"value":1400,"currency":"CHF","value_usd":1515},"apc_paid":{"value":1400,"currency":"CHF","value_usd":1515},"fwci":7.7791,"has_fulltext":true,"cited_by_count":101,"citation_normalized_percentile":{"value":0.97604007,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"12","issue":"10","first_page":"167","last_page":"167"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9022750854492188},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7663967609405518},{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.7593550682067871},{"id":"https://openalex.org/keywords/constant-false-alarm-rate","display_name":"Constant false alarm rate","score":0.7170295119285583},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6826100945472717},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.675226092338562},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5132381916046143},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.49597033858299255},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4747783839702606},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.47228676080703735},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"False positive rate","score":0.4599560499191284},{"id":"https://openalex.org/keywords/anomaly-based-intrusion-detection-system","display_name":"Anomaly-based intrusion detection system","score":0.41404205560684204}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9022750854492188},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7663967609405518},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.7593550682067871},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.7170295119285583},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6826100945472717},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.675226092338562},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5132381916046143},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.49597033858299255},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4747783839702606},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.47228676080703735},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.4599560499191284},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.41404205560684204},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.3390/fi12100167","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi12100167","pdf_url":"https://www.mdpi.com/1999-5903/12/10/167/pdf","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:gam:jftint:v:12:y:2020:i:10:p:167-:d:421767","is_oa":false,"landing_page_url":"https://www.mdpi.com/1999-5903/12/10/167/","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},{"id":"pmh:oai:doaj.org/article:8a596ab843994220aca104b2dda6e461","is_oa":true,"landing_page_url":"https://doaj.org/article/8a596ab843994220aca104b2dda6e461","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Future Internet, Vol 12, Iss 10, p 167 (2020)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1999-5903/12/10/167/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/fi12100167","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Future Internet; Volume 12; Issue 10; Pages: 167","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/fi12100167","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi12100167","pdf_url":"https://www.mdpi.com/1999-5903/12/10/167/pdf","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320307791","display_name":"Cisco Systems","ror":"https://ror.org/03yt1ez60"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3091379954.pdf","grobid_xml":"https://content.openalex.org/works/W3091379954.grobid-xml"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W245277704","https://openalex.org/W2031163547","https://openalex.org/W2053550965","https://openalex.org/W2064675550","https://openalex.org/W2066168108","https://openalex.org/W2099940443","https://openalex.org/W2112061072","https://openalex.org/W2122111042","https://openalex.org/W2171331105","https://openalex.org/W2287408518","https://openalex.org/W2295598076","https://openalex.org/W2399703559","https://openalex.org/W2498672755","https://openalex.org/W2783037699","https://openalex.org/W2783047817","https://openalex.org/W2789828921","https://openalex.org/W2885565273","https://openalex.org/W2919115771","https://openalex.org/W2922078240","https://openalex.org/W2962806630","https://openalex.org/W2967549527","https://openalex.org/W2995026345","https://openalex.org/W2995755899","https://openalex.org/W2998704965","https://openalex.org/W3005630930","https://openalex.org/W3020537178","https://openalex.org/W4285719527","https://openalex.org/W6680532216","https://openalex.org/W6696151112"],"related_works":["https://openalex.org/W2337148208","https://openalex.org/W3004832009","https://openalex.org/W3036013726","https://openalex.org/W1971929717","https://openalex.org/W1724519426","https://openalex.org/W2351051591","https://openalex.org/W2369534771","https://openalex.org/W2357468538","https://openalex.org/W2352639800","https://openalex.org/W3112374511"],"abstract_inverted_index":{"The":[0,20],"development":[1,21],"of":[2,22,81,201],"robust":[3,275],"anomaly-based":[4],"network":[5,14,158,248,282],"detection":[6,38,47,91,210,284],"systems,":[7],"which":[8],"are":[9,274],"preferred":[10],"over":[11],"static":[12],"signal-based":[13],"intrusion,":[15],"is":[16,29],"vital":[17],"for":[18],"cybersecurity.":[19],"a":[23,78,170,208],"flexible":[24],"and":[25,49,70,85,99,117,134,147,155,178,184,195,216,229,241,245,271,276],"dynamic":[26],"security":[27],"system":[28],"required":[30],"to":[31,42,120,150,261],"tackle":[32],"the":[33,45,103,114,131,141,152,204,227,257],"new":[34],"attacks.":[35],"Current":[36],"intrusion":[37,90,283],"systems":[39],"(IDSs)":[40],"suffer":[41,156],"attain":[43],"both":[44,175,182,269],"high":[46,209],"rate":[48],"low":[50,212,218],"false":[51,213],"alarm":[52,214],"rate.":[53],"To":[54],"address":[55],"this":[56,59,163],"issue,":[57],"in":[58,162,169,238],"paper,":[60],"we":[61,95,107,125],"propose":[62,108],"an":[63,109,199,280],"IDS":[64,143],"using":[65,226],"different":[66,82,97],"machine":[67],"learning":[68,72],"(ML)":[69],"deep":[71],"(DL)":[73],"models.":[74,139,192,263],"This":[75],"paper":[76],"presents":[77],"comparative":[79],"analysis":[80],"ML":[83,116,194,270],"models":[84,87,101,119,129,197,235],"DL":[86,118,196,272],"on":[88,102,203,256],"Coburg":[89],"datasets":[92,144],"(CIDDSs).":[93],"First,":[94],"compare":[96],"ML-":[98],"DL-based":[100],"CIDDS":[104,205],"dataset.":[105],"Second,":[106],"ensemble":[110],"model":[111],"that":[112,268],"combines":[113],"best":[115,128],"achieve":[121],"high-performance":[122],"metrics.":[123],"Finally,":[124],"benchmarked":[126],"our":[127],"with":[130,137,174,207,250],"CIC-IDS2017":[132,258],"dataset":[133,206,259],"compared":[135,260],"them":[136],"state-of-the-art":[138],"While":[140],"popular":[142],"like":[145],"KDD99":[146],"NSL-KDD":[148],"fail":[149],"represent":[151],"recent":[153],"attacks":[154,177],"from":[157],"biases,":[159],"CIDDS,":[160],"used":[161],"research,":[164],"encompasses":[165],"labeled":[166],"flow-based":[167],"data":[168],"simulated":[171],"office":[172],"environment":[173],"updated":[176],"normal":[179],"usage.":[180],"Furthermore,":[181],"accuracy":[183,200],"interpretability":[185],"must":[186],"be":[187],"considered":[188],"while":[189],"implementing":[190],"AI":[191],"Both":[193],"achieved":[198,252],"99%":[202],"rate,":[211,215],"relatively":[217],"training":[219],"costs.":[220],"Feature":[221],"importance":[222],"was":[223],"also":[224],"studied":[225],"Classification":[228],"regression":[230],"tree":[231],"(CART)":[232],"model.":[233],"Our":[234],"performed":[236],"well":[237],"10-fold":[239],"cross-validation":[240],"independent":[242],"testing.":[243],"CART":[244],"convolutional":[246],"neural":[247],"(CNN)":[249],"embedding":[251],"slightly":[253],"better":[254],"performance":[255],"previous":[262],"Together,":[264],"these":[265],"results":[266],"suggest":[267],"methods":[273],"complementary":[277],"techniques":[278],"as":[279],"effective":[281],"system.":[285]},"counts_by_year":[{"year":2026,"cited_by_count":10},{"year":2025,"cited_by_count":24},{"year":2024,"cited_by_count":19},{"year":2023,"cited_by_count":14},{"year":2022,"cited_by_count":16},{"year":2021,"cited_by_count":18}],"updated_date":"2026-06-13T07:54:00.901334","created_date":"2020-10-08T00:00:00"}