{"id":"https://openalex.org/W4293065833","doi":"https://doi.org/10.3390/s22166164","title":"Examining the Suitability of NetFlow Features in Detecting IoT Network Intrusions","display_name":"Examining the Suitability of NetFlow Features in Detecting IoT Network Intrusions","publication_year":2022,"publication_date":"2022-08-17","ids":{"openalex":"https://openalex.org/W4293065833","doi":"https://doi.org/10.3390/s22166164","pmid":"https://pubmed.ncbi.nlm.nih.gov/36015924"},"language":"en","primary_location":{"id":"doi:10.3390/s22166164","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s22166164","pdf_url":"https://www.mdpi.com/1424-8220/22/16/6164/pdf?version=1661069002","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1424-8220/22/16/6164/pdf?version=1661069002","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053430405","display_name":"Mohammed Awad","orcid":"https://orcid.org/0000-0002-4698-133X"},"institutions":[{"id":"https://openalex.org/I4210153389","display_name":"American University of Ras Al Khaimah","ror":"https://ror.org/0440yjn92","country_code":"AE","type":"education","lineage":["https://openalex.org/I4210153389"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Mohammed Awad","raw_affiliation_strings":["Department of Computer Science and Engineering, American University of Ras Al Khaimah, Ras Al Khaimah P.O. Box 72603, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0002-4698-133X","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, American University of Ras Al Khaimah, Ras Al Khaimah P.O. Box 72603, United Arab Emirates","institution_ids":["https://openalex.org/I4210153389"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004065267","display_name":"F.M.A. Salam","orcid":"https://orcid.org/0000-0002-1025-7868"},"institutions":[{"id":"https://openalex.org/I182000528","display_name":"Ajman University","ror":"https://ror.org/01j1rma10","country_code":"AE","type":"education","lineage":["https://openalex.org/I182000528"]},{"id":"https://openalex.org/I2799651553","display_name":"City University Ajman","ror":"https://ror.org/00zb4qh40","country_code":"AE","type":"education","lineage":["https://openalex.org/I2799651553"]}],"countries":["AE"],"is_corresponding":true,"raw_author_name":"Salam Fraihat","raw_affiliation_strings":["Artificial Intelligence Research Center (AIRC), College of Engineering and Information Technology, Ajman University, Ajman P.O. Box  346, United Arab Emirates","Artificial Intelligence Research Center (AIRC), College of Engineering and Information Technology, Ajman University, Ajman P.O. Box 346, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0002-1025-7868","affiliations":[{"raw_affiliation_string":"Artificial Intelligence Research Center (AIRC), College of Engineering and Information Technology, Ajman University, Ajman P.O. Box  346, United Arab Emirates","institution_ids":["https://openalex.org/I182000528","https://openalex.org/I2799651553"]},{"raw_affiliation_string":"Artificial Intelligence Research Center (AIRC), College of Engineering and Information Technology, Ajman University, Ajman P.O. Box 346, United Arab Emirates","institution_ids":["https://openalex.org/I182000528"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073023942","display_name":"Khouloud Salameh","orcid":"https://orcid.org/0000-0003-0620-7769"},"institutions":[{"id":"https://openalex.org/I4210153389","display_name":"American University of Ras Al Khaimah","ror":"https://ror.org/0440yjn92","country_code":"AE","type":"education","lineage":["https://openalex.org/I4210153389"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Khouloud Salameh","raw_affiliation_strings":["Department of Computer Science and Engineering, American University of Ras Al Khaimah, Ras Al Khaimah P.O. Box 72603, United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, American University of Ras Al Khaimah, Ras Al Khaimah P.O. Box 72603, United Arab Emirates","institution_ids":["https://openalex.org/I4210153389"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031346214","display_name":"Aneesa Al Redhaei","orcid":"https://orcid.org/0000-0002-0605-5278"},"institutions":[{"id":"https://openalex.org/I4210153389","display_name":"American University of Ras Al Khaimah","ror":"https://ror.org/0440yjn92","country_code":"AE","type":"education","lineage":["https://openalex.org/I4210153389"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Aneesa Al Redhaei","raw_affiliation_strings":["Department of Computer Science and Engineering, American University of Ras Al Khaimah, Ras Al Khaimah P.O. Box 72603, United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, American University of Ras Al Khaimah, Ras Al Khaimah P.O. Box 72603, United Arab Emirates","institution_ids":["https://openalex.org/I4210153389"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5004065267"],"corresponding_institution_ids":["https://openalex.org/I182000528","https://openalex.org/I2799651553"],"apc_list":{"value":2400,"currency":"CHF","value_usd":2598},"apc_paid":{"value":2400,"currency":"CHF","value_usd":2598},"fwci":5.2706,"has_fulltext":true,"cited_by_count":39,"citation_normalized_percentile":{"value":0.95913205,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":"22","issue":"16","first_page":"6164","last_page":"6164"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.9901546835899353},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.695761501789093},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6357285380363464},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.5297319293022156},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.518761396408081},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.468955934047699},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4544071555137634},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.43523848056793213},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4303589463233948},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.4203888177871704},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.39893069863319397},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3414306640625},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.10972446203231812}],"concepts":[{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.9901546835899353},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.695761501789093},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6357285380363464},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.5297319293022156},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.518761396408081},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.468955934047699},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4544071555137634},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.43523848056793213},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4303589463233948},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4203888177871704},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.39893069863319397},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3414306640625},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.10972446203231812}],"mesh":[{"descriptor_ui":"D000069550","descriptor_name":"Machine Learning","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D000069550","descriptor_name":"Machine Learning","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D000069550","descriptor_name":"Machine Learning","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D000080487","descriptor_name":"Internet of Things","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D000080487","descriptor_name":"Internet of Things","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D000080487","descriptor_name":"Internet of Things","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D016494","descriptor_name":"Computer Security","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D016494","descriptor_name":"Computer Security","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D016494","descriptor_name":"Computer Security","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D018907","descriptor_name":"Privacy","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D018907","descriptor_name":"Privacy","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false},{"descriptor_ui":"D018907","descriptor_name":"Privacy","qualifier_ui":null,"qualifier_name":null,"is_major_topic":false}],"locations_count":5,"locations":[{"id":"doi:10.3390/s22166164","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s22166164","pdf_url":"https://www.mdpi.com/1424-8220/22/16/6164/pdf?version=1661069002","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},{"id":"pmid:36015924","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/36015924","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors (Basel, Switzerland)","raw_type":null},{"id":"pmh:oai:doaj.org/article:e05580bd8c46403bad02a4954a6b7b64","is_oa":true,"landing_page_url":"https://doaj.org/article/e05580bd8c46403bad02a4954a6b7b64","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors, Vol 22, Iss 16, p 6164 (2022)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1424-8220/22/16/6164/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/s22166164","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors; Volume 22; Issue 16; Pages: 6164","raw_type":"Text"},{"id":"pmh:oai:pubmedcentral.nih.gov:9412997","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/9412997","pdf_url":null,"source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sensors (Basel)","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/s22166164","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s22166164","pdf_url":"https://www.mdpi.com/1424-8220/22/16/6164/pdf?version=1661069002","source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5600000023841858,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4293065833.pdf","grobid_xml":"https://content.openalex.org/works/W4293065833.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W1472067","https://openalex.org/W1574447377","https://openalex.org/W2131261404","https://openalex.org/W2142889610","https://openalex.org/W2260771218","https://openalex.org/W2320204756","https://openalex.org/W2479071993","https://openalex.org/W2780918913","https://openalex.org/W2970289707","https://openalex.org/W2991140181","https://openalex.org/W2996283780","https://openalex.org/W2997270780","https://openalex.org/W3009253820","https://openalex.org/W3036517673","https://openalex.org/W3102359135","https://openalex.org/W3105682467","https://openalex.org/W3120695945","https://openalex.org/W3123339530","https://openalex.org/W3160450178","https://openalex.org/W3196496721","https://openalex.org/W3211805421","https://openalex.org/W4200041978","https://openalex.org/W4210659135","https://openalex.org/W4297846671","https://openalex.org/W6692628530","https://openalex.org/W6869608176"],"related_works":["https://openalex.org/W2184748140","https://openalex.org/W2110675786","https://openalex.org/W2907510212","https://openalex.org/W3120717340","https://openalex.org/W2567044960","https://openalex.org/W2052466667","https://openalex.org/W1679070068","https://openalex.org/W2519215548","https://openalex.org/W3001902713","https://openalex.org/W2990941159"],"abstract_inverted_index":{"The":[0],"past":[1],"few":[2,73,128],"years":[3],"have":[4],"witnessed":[5],"a":[6,23,72,86,118,137],"substantial":[7],"increase":[8],"in":[9,36,44,67,111,146],"cyberattacks":[10],"on":[11,56,71],"Internet":[12],"of":[13,52,60,78,140],"Things":[14],"(IoT)":[15],"devices":[16],"and":[17,29,107],"their":[18,109],"networks.":[19],"Such":[20],"attacks":[21,100,122],"pose":[22],"significant":[24],"threat":[25],"to":[26,81,97],"organizational":[27],"security":[28],"user":[30],"privacy.":[31],"Utilizing":[32],"Machine":[33],"Learning":[34],"(ML)":[35],"Intrusion":[37],"Detection":[38],"Systems":[39],"(NIDS)":[40],"has":[41],"proven":[42],"advantageous":[43],"countering":[45],"novel":[46],"zero-day":[47],"attacks.":[48],"However,":[49],"the":[50,76,82],"performance":[51],"such":[53],"systems":[54],"relies":[55],"several":[57],"factors,":[58],"one":[59],"which":[61],"is":[62],"prediction":[63],"time.":[64],"Processing":[65],"speed":[66],"anomaly-based":[68],"NIDS":[69],"depends":[70],"elements,":[74],"including":[75],"number":[77],"features":[79,92,106],"fed":[80],"ML":[83],"model.":[84],"NetFlow,":[85],"networking":[87],"industry-standard":[88],"protocol,":[89],"offers":[90],"many":[91],"that":[93,120],"can":[94],"be":[95],"used":[96],"predict":[98],"malicious":[99],"accurately.":[101],"This":[102,132],"paper":[103,116],"examines":[104],"NetFlow":[105],"assesses":[108],"suitability":[110],"classifying":[112],"network":[113],"traffic.":[114],"Our":[115],"presents":[117],"model":[119],"detects":[121],"with":[123],"(98-100%)":[124],"accuracy":[125],"using":[126,136],"as":[127,129],"13":[130],"features.":[131],"study":[133],"was":[134],"conducted":[135],"large":[138],"dataset":[139],"over":[141],"16":[142],"million":[143],"records":[144],"released":[145],"2021.":[147]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":15},{"year":2024,"cited_by_count":12},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":3}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}