{"id":"https://openalex.org/W4282042832","doi":"https://doi.org/10.3390/sym14061095","title":"Machine-Learning-Based DDoS Attack Detection Using Mutual Information and Random Forest Feature Importance Method","display_name":"Machine-Learning-Based DDoS Attack Detection Using Mutual Information and Random Forest Feature Importance Method","publication_year":2022,"publication_date":"2022-05-27","ids":{"openalex":"https://openalex.org/W4282042832","doi":"https://doi.org/10.3390/sym14061095"},"language":"en","primary_location":{"id":"doi:10.3390/sym14061095","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym14061095","pdf_url":"https://www.mdpi.com/2073-8994/14/6/1095/pdf?version=1653623569","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2073-8994/14/6/1095/pdf?version=1653623569","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5055079218","display_name":"Mona Alduailij","orcid":"https://orcid.org/0000-0001-8632-4759"},"institutions":[{"id":"https://openalex.org/I106778892","display_name":"Princess Nourah bint Abdulrahman University","ror":"https://ror.org/05b0cyh02","country_code":"SA","type":"education","lineage":["https://openalex.org/I106778892"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Mona Alduailij","raw_affiliation_strings":["Department of Computer Sciences, College of Computer and Information Sciences, Princess Nourah Bint Abdulrahman University, Riyadh 11671, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, College of Computer and Information Sciences, Princess Nourah Bint Abdulrahman University, Riyadh 11671, Saudi Arabia","institution_ids":["https://openalex.org/I106778892"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046869007","display_name":"Qazi Waqas Khan","orcid":"https://orcid.org/0000-0002-4031-3920"},"institutions":[{"id":"https://openalex.org/I16076960","display_name":"COMSATS University Islamabad","ror":"https://ror.org/00nqqvk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I16076960"]}],"countries":["PK"],"is_corresponding":true,"raw_author_name":"Qazi Waqas Khan","raw_affiliation_strings":["Department of Computer Science, COMSATS University Islamabad, Attock Campus, Attock 43600, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, COMSATS University Islamabad, Attock Campus, Attock 43600, Pakistan","institution_ids":["https://openalex.org/I16076960"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060347077","display_name":"Muhammad Tahir","orcid":"https://orcid.org/0000-0002-7750-8959"},"institutions":[{"id":"https://openalex.org/I16076960","display_name":"COMSATS University Islamabad","ror":"https://ror.org/00nqqvk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I16076960"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Muhammad Tahir","raw_affiliation_strings":["Department of Computer Science, COMSATS University Islamabad, Attock Campus, Attock 43600, Pakistan"],"raw_orcid":"https://orcid.org/0000-0002-7750-8959","affiliations":[{"raw_affiliation_string":"Department of Computer Science, COMSATS University Islamabad, Attock Campus, Attock 43600, Pakistan","institution_ids":["https://openalex.org/I16076960"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066472711","display_name":"Muhammad Sardaraz","orcid":"https://orcid.org/0000-0002-7169-8683"},"institutions":[{"id":"https://openalex.org/I16076960","display_name":"COMSATS University Islamabad","ror":"https://ror.org/00nqqvk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I16076960"]}],"countries":["PK"],"is_corresponding":true,"raw_author_name":"Muhammad Sardaraz","raw_affiliation_strings":["Department of Computer Science, COMSATS University Islamabad, Attock Campus, Attock 43600, Pakistan"],"raw_orcid":"https://orcid.org/0000-0002-7169-8683","affiliations":[{"raw_affiliation_string":"Department of Computer Science, COMSATS University Islamabad, Attock Campus, Attock 43600, Pakistan","institution_ids":["https://openalex.org/I16076960"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076888825","display_name":"Mai Alduailij","orcid":"https://orcid.org/0000-0002-3995-5977"},"institutions":[{"id":"https://openalex.org/I106778892","display_name":"Princess Nourah bint Abdulrahman University","ror":"https://ror.org/05b0cyh02","country_code":"SA","type":"education","lineage":["https://openalex.org/I106778892"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Mai Alduailij","raw_affiliation_strings":["Department of Computer Sciences, College of Computer and Information Sciences, Princess Nourah Bint Abdulrahman University, Riyadh 11671, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, College of Computer and Information Sciences, Princess Nourah Bint Abdulrahman University, Riyadh 11671, Saudi Arabia","institution_ids":["https://openalex.org/I106778892"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015320860","display_name":"Fazila\u2010Tun\u2010Nesa Malik","orcid":"https://orcid.org/0000-0002-8424-439X"},"institutions":[{"id":"https://openalex.org/I16076960","display_name":"COMSATS University Islamabad","ror":"https://ror.org/00nqqvk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I16076960"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Fazila Malik","raw_affiliation_strings":["Department of Computer Science, COMSATS University Islamabad, Attock Campus, Attock 43600, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, COMSATS University Islamabad, Attock Campus, Attock 43600, Pakistan","institution_ids":["https://openalex.org/I16076960"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5046869007","https://openalex.org/A5066472711"],"corresponding_institution_ids":["https://openalex.org/I16076960"],"apc_list":{"value":2000,"currency":"CHF","value_usd":2165},"apc_paid":{"value":2000,"currency":"CHF","value_usd":2165},"fwci":25.1026,"has_fulltext":true,"cited_by_count":197,"citation_normalized_percentile":{"value":0.99826795,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":100},"biblio":{"volume":"14","issue":"6","first_page":"1095","last_page":"1095"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.8901822566986084},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.8499449491500854},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8356577754020691},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.6913901567459106},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.6516047716140747},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4846663773059845},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.4841252267360687},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.45750948786735535},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4072141647338867},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3996642827987671},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3504500687122345},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.07762029767036438}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.8901822566986084},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.8499449491500854},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8356577754020691},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.6913901567459106},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.6516047716140747},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4846663773059845},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.4841252267360687},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.45750948786735535},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4072141647338867},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3996642827987671},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3504500687122345},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.07762029767036438},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3390/sym14061095","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym14061095","pdf_url":"https://www.mdpi.com/2073-8994/14/6/1095/pdf?version=1653623569","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:a73927c0d74b49bbaaf2549bd0d3d346","is_oa":true,"landing_page_url":"https://doaj.org/article/a73927c0d74b49bbaaf2549bd0d3d346","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Symmetry, Vol 14, Iss 6, p 1095 (2022)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/2073-8994/14/6/1095/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/sym14061095","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Symmetry","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/sym14061095","is_oa":true,"landing_page_url":"https://doi.org/10.3390/sym14061095","pdf_url":"https://www.mdpi.com/2073-8994/14/6/1095/pdf?version=1653623569","source":{"id":"https://openalex.org/S190787756","display_name":"Symmetry","issn_l":"2073-8994","issn":["2073-8994"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Symmetry","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Life in Land","score":0.6200000047683716,"id":"https://metadata.un.org/sdg/15"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4282042832.pdf","grobid_xml":"https://content.openalex.org/works/W4282042832.grobid-xml"},"referenced_works_count":57,"referenced_works":["https://openalex.org/W1988195734","https://openalex.org/W1997199359","https://openalex.org/W2000326002","https://openalex.org/W2027696829","https://openalex.org/W2088252378","https://openalex.org/W2113599721","https://openalex.org/W2117636524","https://openalex.org/W2154053567","https://openalex.org/W2165250079","https://openalex.org/W2260771218","https://openalex.org/W2588978745","https://openalex.org/W2792883466","https://openalex.org/W2794238513","https://openalex.org/W2926701059","https://openalex.org/W2947056311","https://openalex.org/W2955739827","https://openalex.org/W2956030019","https://openalex.org/W2963203015","https://openalex.org/W2982375055","https://openalex.org/W2989230867","https://openalex.org/W3009422166","https://openalex.org/W3015392399","https://openalex.org/W3020514584","https://openalex.org/W3022034716","https://openalex.org/W3025029468","https://openalex.org/W3036749504","https://openalex.org/W3043530913","https://openalex.org/W3047526793","https://openalex.org/W3048313003","https://openalex.org/W3101894954","https://openalex.org/W3116027269","https://openalex.org/W3116162237","https://openalex.org/W3118220620","https://openalex.org/W3118429534","https://openalex.org/W3125261485","https://openalex.org/W3129632563","https://openalex.org/W3133975858","https://openalex.org/W3134836427","https://openalex.org/W3161205829","https://openalex.org/W3161554626","https://openalex.org/W3164127829","https://openalex.org/W3168064778","https://openalex.org/W3175873106","https://openalex.org/W3176111990","https://openalex.org/W3189042227","https://openalex.org/W3200241357","https://openalex.org/W3209469313","https://openalex.org/W4205160065","https://openalex.org/W4212838072","https://openalex.org/W4220670717","https://openalex.org/W4399647672","https://openalex.org/W6677516838","https://openalex.org/W6683942726","https://openalex.org/W6692628530","https://openalex.org/W6788217860","https://openalex.org/W6789981486","https://openalex.org/W6869608176"],"related_works":["https://openalex.org/W2360429410","https://openalex.org/W2898696280","https://openalex.org/W2204131204","https://openalex.org/W2383770723","https://openalex.org/W2921433547","https://openalex.org/W2958385475","https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W2370216173","https://openalex.org/W2754163055"],"abstract_inverted_index":{"Cloud":[0],"computing":[1],"facilitates":[2],"the":[3,9,21,24,40,59,107,112,123,162,182,196,217],"users":[4],"with":[5,74,170],"on-demand":[6],"services":[7,12,44,62],"over":[8],"Internet.":[10],"The":[11,66,92,157],"are":[13,152,184,213],"accessible":[14],"from":[15],"anywhere":[16],"at":[17],"any":[18],"time.":[19],"Despite":[20],"valuable":[22],"services,":[23],"paradigm":[25],"is,":[26],"also,":[27],"prone":[28],"to":[29,49,99,154,188,215],"security":[30,47],"issues.":[31],"A":[32],"Distributed":[33],"Denial":[34],"of":[35,42,53,61,95,164,181],"Service":[36],"(DDoS)":[37],"attack":[38,87,202,208],"affects":[39],"availability":[41,60],"cloud":[43,50,90],"and":[45,127,148,168,204],"causes":[46],"threats":[48],"computing.":[51,91],"Detection":[52],"DDoS":[54,86,104,201],"attacks":[55],"is":[56,98,173],"necessary":[57],"for":[58,63,77,85],"legitimate":[64],"users.":[65],"topic":[67],"has":[68],"been":[69],"studied":[70],"by":[71,116],"many":[72],"researchers,":[73],"better":[75],"accuracy":[76,163],"different":[78],"datasets.":[79],"This":[80],"article":[81,97],"presents":[82],"a":[83],"method":[84],"detection":[88,203],"in":[89,103,200],"primary":[93],"objective":[94],"this":[96],"reduce":[100],"misclassification":[101],"error":[102],"detection.":[105],"In":[106],"proposed":[108,218],"work,":[109],"we":[110],"select":[111],"most":[113],"relevant":[114],"features,":[115],"applying":[117],"two":[118],"feature":[119],"selection":[120],"techniques,":[121],"i.e.,":[122],"Mutual":[124],"Information":[125],"(MI)":[126],"Random":[128,134],"Forest":[129,135],"Feature":[130],"Importance":[131],"(RFFI)":[132],"methods.":[133],"(RF),":[136],"Gradient":[137],"Boosting":[138],"(GB),":[139],"Weighted":[140],"Voting":[141],"Ensemble":[142],"(WVE),":[143],"K":[144],"Nearest":[145],"Neighbor":[146],"(KNN),":[147],"Logistic":[149],"Regression":[150],"(LR)":[151],"applied":[153],"selected":[155],"features.":[156],"experimental":[158],"results":[159,212],"show":[160],"that":[161,195],"RF,":[165],"GB,":[166],"WVE,":[167],"KNN":[169],"19":[171],"features":[172],"0.99.":[174],"To":[175],"further":[176],"study":[177],"these":[178],"methods,":[179],"misclassifications":[180],"methods":[183],"analyzed,":[185],"which":[186],"lead":[187],"more":[189],"accurate":[190],"measurements.":[191],"Extensive":[192],"experiments":[193],"conclude":[194],"RF":[197],"performed":[198],"well":[199],"misclassified":[205],"only":[206],"one":[207],"as":[209],"normal.":[210],"Comparative":[211],"presented":[214],"validate":[216],"method.":[219]},"counts_by_year":[{"year":2026,"cited_by_count":21},{"year":2025,"cited_by_count":71},{"year":2024,"cited_by_count":59},{"year":2023,"cited_by_count":40},{"year":2022,"cited_by_count":6}],"updated_date":"2026-06-13T07:54:00.901334","created_date":"2025-10-10T00:00:00"}