{"id":"https://openalex.org/W3009091629","doi":"https://doi.org/10.3390/s20051452","title":"Malicious Network Traffic Detection Based on Deep Neural Networks and Association Analysis","display_name":"Malicious Network Traffic Detection Based on Deep Neural Networks and Association Analysis","publication_year":2020,"publication_date":"2020-03-06","ids":{"openalex":"https://openalex.org/W3009091629","doi":"https://doi.org/10.3390/s20051452","mag":"3009091629","pmid":"https://pubmed.ncbi.nlm.nih.gov/32155834"},"language":"en","primary_location":{"id":"doi:10.3390/s20051452","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s20051452","pdf_url":"https://www.mdpi.com/1424-8220/20/5/1452/pdf?version=1583915676","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1424-8220/20/5/1452/pdf?version=1583915676","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102022353","display_name":"Minghui Gao","orcid":"https://orcid.org/0000-0002-2913-3048"},"institutions":[{"id":"https://openalex.org/I4210118629","display_name":"NARI Group (China)","ror":"https://ror.org/02egn3136","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210118629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Minghui Gao","raw_affiliation_strings":["Beijing Kedong Electric Power Control System Co., Ltd., Beijing 100192, China","China NARI Group Corporation (State Grid Electronic Power Research Institute), Nanjing 211106, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Kedong Electric Power Control System Co., Ltd., Beijing 100192, China","institution_ids":[]},{"raw_affiliation_string":"China NARI Group Corporation (State Grid Electronic Power Research Institute), Nanjing 211106, China","institution_ids":["https://openalex.org/I4210118629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101979827","display_name":"Li Ma","orcid":"https://orcid.org/0000-0002-4338-2200"},"institutions":[{"id":"https://openalex.org/I4210118629","display_name":"NARI Group (China)","ror":"https://ror.org/02egn3136","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210118629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Li Ma","raw_affiliation_strings":["Beijing Kedong Electric Power Control System Co., Ltd., Beijing 100192, China","China NARI Group Corporation (State Grid Electronic Power Research Institute), Nanjing 211106, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Kedong Electric Power Control System Co., Ltd., Beijing 100192, China","institution_ids":[]},{"raw_affiliation_string":"China NARI Group Corporation (State Grid Electronic Power Research Institute), Nanjing 211106, China","institution_ids":["https://openalex.org/I4210118629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100753321","display_name":"Heng Liu","orcid":"https://orcid.org/0000-0001-5746-1279"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Heng Liu","raw_affiliation_strings":["Software College, Northeastern University, Shenyang 110169, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Software College, Northeastern University, Shenyang 110169, China","institution_ids":["https://openalex.org/I9224756"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100388920","display_name":"Zhijun Zhang","orcid":"https://orcid.org/0000-0002-6859-3426"},"institutions":[{"id":"https://openalex.org/I4210118629","display_name":"NARI Group (China)","ror":"https://ror.org/02egn3136","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210118629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhijun Zhang","raw_affiliation_strings":["Beijing Kedong Electric Power Control System Co., Ltd., Beijing 100192, China","China NARI Group Corporation (State Grid Electronic Power Research Institute), Nanjing 211106, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Kedong Electric Power Control System Co., Ltd., Beijing 100192, China","institution_ids":[]},{"raw_affiliation_string":"China NARI Group Corporation (State Grid Electronic Power Research Institute), Nanjing 211106, China","institution_ids":["https://openalex.org/I4210118629"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032209550","display_name":"Zhiyan Ning","orcid":"https://orcid.org/0009-0009-5987-1621"},"institutions":[{"id":"https://openalex.org/I4210118629","display_name":"NARI Group (China)","ror":"https://ror.org/02egn3136","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210118629"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiyan Ning","raw_affiliation_strings":["Beijing Kedong Electric Power Control System Co., Ltd., Beijing 100192, China","China NARI Group Corporation (State Grid Electronic Power Research Institute), Nanjing 211106, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Kedong Electric Power Control System Co., Ltd., Beijing 100192, China","institution_ids":[]},{"raw_affiliation_string":"China NARI Group Corporation (State Grid Electronic Power Research Institute), Nanjing 211106, China","institution_ids":["https://openalex.org/I4210118629"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085728168","display_name":"Jian Xu","orcid":"https://orcid.org/0000-0001-5590-8540"},"institutions":[{"id":"https://openalex.org/I9224756","display_name":"Northeastern University","ror":"https://ror.org/03awzbc87","country_code":"CN","type":"education","lineage":["https://openalex.org/I9224756"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jian Xu","raw_affiliation_strings":["Software College, Northeastern University, Shenyang 110169, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Software College, Northeastern University, Shenyang 110169, China","institution_ids":["https://openalex.org/I9224756"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5085728168"],"corresponding_institution_ids":["https://openalex.org/I9224756"],"apc_list":{"value":2400,"currency":"CHF","value_usd":2598},"apc_paid":{"value":2400,"currency":"CHF","value_usd":2598},"fwci":7.5731,"has_fulltext":false,"cited_by_count":95,"citation_normalized_percentile":{"value":0.9751851,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"20","issue":"5","first_page":"1452","last_page":"1452"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7185147404670715},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6880208849906921},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6757359504699707},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.6636921167373657},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.6244825124740601},{"id":"https://openalex.org/keywords/constant-false-alarm-rate","display_name":"Constant false alarm rate","score":0.5251124501228333},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5226009488105774},{"id":"https://openalex.org/keywords/anomaly-based-intrusion-detection-system","display_name":"Anomaly-based intrusion detection system","score":0.512390673160553},{"id":"https://openalex.org/keywords/association-rule-learning","display_name":"Association rule learning","score":0.49271634221076965},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.440920352935791},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"False positive rate","score":0.426962673664093},{"id":"https://openalex.org/keywords/traffic-analysis","display_name":"Traffic analysis","score":0.42440056800842285},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3692759871482849},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.1779038906097412}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7185147404670715},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6880208849906921},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6757359504699707},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.6636921167373657},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.6244825124740601},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.5251124501228333},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5226009488105774},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.512390673160553},{"id":"https://openalex.org/C193524817","wikidata":"https://www.wikidata.org/wiki/Q386780","display_name":"Association rule learning","level":2,"score":0.49271634221076965},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.440920352935791},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.426962673664093},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.42440056800842285},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3692759871482849},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.1779038906097412}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.3390/s20051452","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s20051452","pdf_url":"https://www.mdpi.com/1424-8220/20/5/1452/pdf?version=1583915676","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},{"id":"pmid:32155834","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/32155834","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors (Basel, Switzerland)","raw_type":null},{"id":"pmh:oai:doaj.org/article:d38f9b401e104e50bcf27ab19e9865e5","is_oa":true,"landing_page_url":"https://doaj.org/article/d38f9b401e104e50bcf27ab19e9865e5","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors, Vol 20, Iss 5, p 1452 (2020)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1424-8220/20/5/1452/","is_oa":true,"landing_page_url":"http://dx.doi.org/10.3390/s20051452","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors","raw_type":"Text"},{"id":"pmh:oai:pubmedcentral.nih.gov:7085765","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/7085765","pdf_url":null,"source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors (Basel)","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/s20051452","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s20051452","pdf_url":"https://www.mdpi.com/1424-8220/20/5/1452/pdf?version=1583915676","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5199999809265137,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3009091629.pdf"},"referenced_works_count":23,"referenced_works":["https://openalex.org/W1903029394","https://openalex.org/W2021308105","https://openalex.org/W2042495914","https://openalex.org/W2099940443","https://openalex.org/W2115529843","https://openalex.org/W2115569246","https://openalex.org/W2142889610","https://openalex.org/W2150755264","https://openalex.org/W2346714907","https://openalex.org/W2395611524","https://openalex.org/W2744316982","https://openalex.org/W2768211408","https://openalex.org/W2768673271","https://openalex.org/W2771399008","https://openalex.org/W2775103799","https://openalex.org/W2789828921","https://openalex.org/W2791697444","https://openalex.org/W2913975235","https://openalex.org/W2915817976","https://openalex.org/W2928016897","https://openalex.org/W2935633365","https://openalex.org/W2997979776","https://openalex.org/W3105682467"],"related_works":["https://openalex.org/W2013909972","https://openalex.org/W2280598164","https://openalex.org/W2189092700","https://openalex.org/W2993555267","https://openalex.org/W4241302526","https://openalex.org/W2925487447","https://openalex.org/W3120726910","https://openalex.org/W2019269853","https://openalex.org/W2158760744","https://openalex.org/W2187860584"],"abstract_inverted_index":{"Anomaly":[0],"detection":[1,34,89,173,206],"systems":[2,35],"can":[3,60,143,154],"accurately":[4],"identify":[5,40],"malicious":[6,138,212],"network":[7,10,18,47,95],"traffic,":[8],"providing":[9],"security.":[11],"With":[12],"the":[13,71,118,159,164,185,198,218,222],"development":[14],"of":[15,55,74,104,127,220,224],"internet":[16],"technology,":[17],"attacks":[19],"are":[20],"becoming":[21],"more":[22,24],"and":[23,26,39,58,96,108,134,150,162,178,215],"sourced":[25],"complicated,":[27],"making":[28],"it":[29,59,216],"difficult":[30],"for":[31,197],"traditional":[32],"anomaly":[33,56,88],"to":[36,157],"effectively":[37],"analyze":[38],"abnormal":[41],"traffic.":[42,139],"At":[43],"present,":[44],"deep":[45,75,93],"neural":[46,76,94,110],"(DNN)":[48],"technology":[49],"achieved":[50],"great":[51,209],"results":[52,73,202],"in":[53,70,79,136,211],"terms":[54],"detection,":[57,214],"achieve":[61],"automatic":[62],"detection.":[63],"However,":[64],"there":[65],"still":[66],"exists":[67],"misclassified":[68],"traffic":[69,161,213],"prediction":[72],"networks,":[77],"resulting":[78],"redundant":[80],"alarm":[81],"information.":[82],"This":[83],"paper":[84],"designs":[85],"a":[86,101,194],"two-level":[87],"system":[90,174,207],"based":[91,112,175],"on":[92,113,176,184],"association":[97,179],"analysis.":[98],"We":[99,181],"made":[100],"comprehensive":[102],"evaluation":[103],"experiments":[105,183],"using":[106],"DNNs":[107],"other":[109],"networks":[111],"publicly":[114],"available":[115],"datasets.":[116],"Through":[117],"experiments,":[119],"we":[120,169],"chose":[121],"DNN-4":[122,177],"as":[123,193],"an":[124,171],"important":[125],"part":[126],"our":[128,205],"system,":[129],"which":[130,153,190],"has":[131,208],"high":[132],"precision":[133,210],"accuracy":[135],"identifying":[137],"The":[140,201],"Apriori":[141],"algorithm":[142],"mine":[144],"rules":[145],"between":[146],"various":[147],"discretized":[148],"features":[149],"normal":[151],"labels,":[152],"be":[155],"used":[156],"filter":[158],"classified":[160],"reduce":[163],"false":[165,225],"positive":[166],"rate.":[167],"Finally,":[168],"designed":[170],"intrusion":[172],"rules.":[180],"conducted":[182],"public":[186],"training":[187],"set":[188],"NSL-KDD,":[189],"is":[191],"considered":[192],"modified":[195],"dataset":[196],"KDDCup":[199],"1999.":[200],"show":[203],"that":[204],"achieves":[217],"effect":[219],"reducing":[221],"number":[223],"alarms.":[226]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":19},{"year":2024,"cited_by_count":23},{"year":2023,"cited_by_count":9},{"year":2022,"cited_by_count":16},{"year":2021,"cited_by_count":18},{"year":2020,"cited_by_count":6}],"updated_date":"2026-05-22T06:13:13.366637","created_date":"2025-10-10T00:00:00"}