{"id":"https://openalex.org/W3203921286","doi":"https://doi.org/10.3906/elk-2102-89","title":"A new distributed anomaly detection approach for log IDS management based on deep learning","display_name":"A new distributed anomaly detection approach for log IDS management based on deep learning","publication_year":2021,"publication_date":"2021-04-21","ids":{"openalex":"https://openalex.org/W3203921286","doi":"https://doi.org/10.3906/elk-2102-89","mag":"3203921286"},"language":"en","primary_location":{"id":"doi:10.3906/elk-2102-89","is_oa":true,"landing_page_url":"https://doi.org/10.3906/elk-2102-89","pdf_url":"https://journals.tubitak.gov.tr/cgi/viewcontent.cgi?article=1059&context=elektrik","source":{"id":"https://openalex.org/S32837994","display_name":"TURKISH JOURNAL OF ELECTRICAL ENGINEERING & COMPUTER SCIENCES","issn_l":"1300-0632","issn":["1300-0632","1303-6203"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310318422","host_organization_name":"Scientific and Technological Research Council of Turkey (TUBITAK)","host_organization_lineage":["https://openalex.org/P4310318422"],"host_organization_lineage_names":["Scientific and Technological Research Council of Turkey (TUBITAK)"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"TURKISH JOURNAL OF ELECTRICAL ENGINEERING & COMPUTER SCIENCES","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://journals.tubitak.gov.tr/cgi/viewcontent.cgi?article=1059&context=elektrik","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078957941","display_name":"Murat Koca","orcid":"https://orcid.org/0000-0002-6048-7645"},"institutions":[{"id":"https://openalex.org/I4210094772","display_name":"Henan University of Engineering","ror":"https://ror.org/007wym039","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210094772"]},{"id":"https://openalex.org/I4210120668","display_name":"Creative Commons","ror":"https://ror.org/02ed4cj64","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I4210120668"]},{"id":"https://openalex.org/I4210125067","display_name":"Atos (Turkey)","ror":"https://ror.org/0394awa03","country_code":"TR","type":"company","lineage":["https://openalex.org/I170138621","https://openalex.org/I4210125067"]}],"countries":["CN","TR","US"],"is_corresponding":false,"raw_author_name":"Murat KOCA","raw_affiliation_strings":[", of Turkey of and , , Turkey","of Engineering , - , , of , , ,","Part of the Computer Engineering Commons, Computer Sciences Commons,","Computer Engineering Commons"],"raw_orcid":"https://orcid.org/0000-0002-6048-7645","affiliations":[{"raw_affiliation_string":", of Turkey of and , , Turkey","institution_ids":["https://openalex.org/I4210125067"]},{"raw_affiliation_string":"of Engineering , - , , of , , ,","institution_ids":["https://openalex.org/I4210094772"]},{"raw_affiliation_string":"Part of the Computer Engineering Commons, Computer Sciences Commons,","institution_ids":["https://openalex.org/I4210120668"]},{"raw_affiliation_string":"Computer Engineering Commons","institution_ids":["https://openalex.org/I4210120668"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013726817","display_name":"Muhammed Ali Ayd\u0131n","orcid":"https://orcid.org/0000-0002-1846-6090"},"institutions":[{"id":"https://openalex.org/I4210120668","display_name":"Creative Commons","ror":"https://ror.org/02ed4cj64","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I4210120668"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Muhammed Ali AYDIN","raw_affiliation_strings":["Part of the Computer Engineering Commons, Computer Sciences Commons,","Computer Engineering Commons"],"raw_orcid":"https://orcid.org/0000-0002-1846-6090","affiliations":[{"raw_affiliation_string":"Part of the Computer Engineering Commons, Computer Sciences Commons,","institution_ids":["https://openalex.org/I4210120668"]},{"raw_affiliation_string":"Computer Engineering Commons","institution_ids":["https://openalex.org/I4210120668"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065102655","display_name":"Ahmet Sertba\u015f","orcid":"https://orcid.org/0000-0001-8166-1211"},"institutions":[{"id":"https://openalex.org/I4210120668","display_name":"Creative Commons","ror":"https://ror.org/02ed4cj64","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I4210120668"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmet SERTBA\u015e","raw_affiliation_strings":["Computer Engineering Commons","Part of the Computer Engineering Commons, Computer Sciences Commons,"],"raw_orcid":"https://orcid.org/0000-0001-8166-1211","affiliations":[{"raw_affiliation_string":"Computer Engineering Commons","institution_ids":["https://openalex.org/I4210120668"]},{"raw_affiliation_string":"Part of the Computer Engineering Commons, Computer Sciences Commons,","institution_ids":["https://openalex.org/I4210120668"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069589514","display_name":"Abd\u00fcl Halim Zaim","orcid":"https://orcid.org/0000-0002-0233-064X"},"institutions":[{"id":"https://openalex.org/I4210120668","display_name":"Creative Commons","ror":"https://ror.org/02ed4cj64","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I4210120668"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abd\u00fcl Halim ZA\u0130M","raw_affiliation_strings":["Part of the Computer Engineering Commons, Computer Sciences Commons,","Computer Engineering Commons"],"raw_orcid":"https://orcid.org/0000-0002-0233-064X","affiliations":[{"raw_affiliation_string":"Part of the Computer Engineering Commons, Computer Sciences Commons,","institution_ids":["https://openalex.org/I4210120668"]},{"raw_affiliation_string":"Computer Engineering Commons","institution_ids":["https://openalex.org/I4210120668"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.6413,"has_fulltext":true,"cited_by_count":15,"citation_normalized_percentile":{"value":0.71750445,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"29","issue":"5","first_page":"2486","last_page":"2501"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/big-data","display_name":"Big data","score":0.799545168876648},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7822751998901367},{"id":"https://openalex.org/keywords/spark","display_name":"SPARK (programming language)","score":0.7494319677352905},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6029164791107178},{"id":"https://openalex.org/keywords/data-pre-processing","display_name":"Data pre-processing","score":0.44759446382522583},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4463021755218506},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.38783979415893555},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.3639726936817169},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.3252337574958801},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.30282077193260193}],"concepts":[{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.799545168876648},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7822751998901367},{"id":"https://openalex.org/C2781215313","wikidata":"https://www.wikidata.org/wiki/Q3493345","display_name":"SPARK (programming language)","level":2,"score":0.7494319677352905},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6029164791107178},{"id":"https://openalex.org/C10551718","wikidata":"https://www.wikidata.org/wiki/Q5227332","display_name":"Data pre-processing","level":2,"score":0.44759446382522583},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4463021755218506},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38783979415893555},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.3639726936817169},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3252337574958801},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30282077193260193},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3906/elk-2102-89","is_oa":true,"landing_page_url":"https://doi.org/10.3906/elk-2102-89","pdf_url":"https://journals.tubitak.gov.tr/cgi/viewcontent.cgi?article=1059&context=elektrik","source":{"id":"https://openalex.org/S32837994","display_name":"TURKISH JOURNAL OF ELECTRICAL ENGINEERING & COMPUTER SCIENCES","issn_l":"1300-0632","issn":["1300-0632","1303-6203"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310318422","host_organization_name":"Scientific and Technological Research Council of Turkey (TUBITAK)","host_organization_lineage":["https://openalex.org/P4310318422"],"host_organization_lineage_names":["Scientific and Technological Research Council of Turkey (TUBITAK)"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"TURKISH JOURNAL OF ELECTRICAL ENGINEERING & COMPUTER SCIENCES","raw_type":"journal-article"},{"id":"pmh:7b01bb54-0f40-4f46-83a6-6f82a610fdab","is_oa":false,"landing_page_url":"https://avesis.yyu.edu.tr/publication/details/7b01bb54-0f40-4f46-83a6-6f82a610fdab/oai","pdf_url":null,"source":{"id":"https://openalex.org/S7407055328","display_name":"Van Y\u00fcz\u00fcnc\u00fc Y\u0131l University Academic Data Management System","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.3906/elk-2102-89","is_oa":true,"landing_page_url":"https://doi.org/10.3906/elk-2102-89","pdf_url":"https://journals.tubitak.gov.tr/cgi/viewcontent.cgi?article=1059&context=elektrik","source":{"id":"https://openalex.org/S32837994","display_name":"TURKISH JOURNAL OF ELECTRICAL ENGINEERING & COMPUTER SCIENCES","issn_l":"1300-0632","issn":["1300-0632","1303-6203"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310318422","host_organization_name":"Scientific and Technological Research Council of Turkey (TUBITAK)","host_organization_lineage":["https://openalex.org/P4310318422"],"host_organization_lineage_names":["Scientific and Technological Research Council of Turkey (TUBITAK)"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"TURKISH JOURNAL OF ELECTRICAL ENGINEERING & COMPUTER SCIENCES","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3203921286.pdf","grobid_xml":"https://content.openalex.org/works/W3203921286.grobid-xml"},"referenced_works_count":31,"referenced_works":["https://openalex.org/W67460294","https://openalex.org/W188726702","https://openalex.org/W1591888204","https://openalex.org/W1964549039","https://openalex.org/W1964940342","https://openalex.org/W1977177161","https://openalex.org/W2000031724","https://openalex.org/W2025001960","https://openalex.org/W2039157918","https://openalex.org/W2064630666","https://openalex.org/W2099940443","https://openalex.org/W2107103225","https://openalex.org/W2108142795","https://openalex.org/W2526226593","https://openalex.org/W2530314904","https://openalex.org/W2611710598","https://openalex.org/W2622259984","https://openalex.org/W2732560875","https://openalex.org/W2789828921","https://openalex.org/W2885977168","https://openalex.org/W2886986697","https://openalex.org/W2896412072","https://openalex.org/W2914968227","https://openalex.org/W2963273475","https://openalex.org/W2973331010","https://openalex.org/W2995564009","https://openalex.org/W3162728205","https://openalex.org/W4302296459","https://openalex.org/W6637151318","https://openalex.org/W6674887505","https://openalex.org/W6759130423"],"related_works":["https://openalex.org/W2766461310","https://openalex.org/W4247566972","https://openalex.org/W3202731209","https://openalex.org/W4240326769","https://openalex.org/W3211874991","https://openalex.org/W3012518171","https://openalex.org/W2906268655","https://openalex.org/W4241605045","https://openalex.org/W2338082995","https://openalex.org/W2524620548"],"abstract_inverted_index":{"Today,":[0],"with":[1,26,92,163,184,206,219],"the":[2,7,39,100,110,126,129,134,141,148,155,158,164,169,180,185,191,194,207,220,245],"rapid":[3],"increase":[4,43],"of":[5,9,102,107,112,188],"data,":[6],"security":[8],"big":[10,28,83],"data":[11,29,84,118,131,142,150,159,217],"has":[12],"become":[13],"more":[14],"important":[15],"than":[16],"ever":[17],"for":[18],"managers.":[19],"However,":[20],"traditional":[21],"infrastructure":[22],"systems":[23,42],"cannot":[24],"cope":[25],"increasingly":[27],"that":[30],"is":[31,114],"created":[32,151],"like":[33],"an":[34,65],"avalanche.":[35],"In":[36,125,154,190],"addition,":[37],"as":[38],"existing":[40],"database":[41],"licensing":[44],"costs":[45,101],"per":[46],"transaction,":[47],"organizations":[48],"using":[49],"information":[50],"technologies":[51],"are":[52,137,197],"shifting":[53],"to":[54,98,115,179,211,234,244],"free":[55],"and":[56,86,146,162],"open":[57,81],"source":[58,82],"solutions.":[59],"For":[60],"this":[61],"reason,":[62],"we":[63,172,209],"propose":[64,210],"anomaly":[66,182],"attack":[67],"detection":[68,183],"model":[69,105],"on":[70,119,143,199],"Apache":[71,87,144],"Hadoop":[72],"distributed":[73,123,181],"file":[74],"system":[75],"(HDFS),":[76],"which":[77,89,113],"stands":[78,90],"out":[79,91],"in":[80,96,121,133,168,215,224,230,239],"analytics,":[85],"Spark,":[88],"its":[93],"speed":[94],"performance":[95,240],"analysis":[97],"reduce":[99],"organizations.":[103],"This":[104],"consists":[106],"four":[108],"stages:":[109],"first":[111],"store":[116],"instant":[117],"HDFS":[120,200],"a":[122,236],"manner.":[124],"second":[127],"stage,":[128,157,193],"log":[130,149,216],"generated":[132,195],"network":[135],"traffic":[136],"analyzed":[138],"by":[139,152],"taking":[140],"Spark":[145],"including":[147],"HDFS.":[153],"third":[156],"preprocessing":[160],"stage":[161],"CUDA":[165],"parallel":[166],"programming":[167],"TensorFlow":[170],"library,":[171],"apply":[173],"our":[174],"deep":[175],"learning":[176],"(cuDNN)":[177],"method":[178],"computational":[186],"support":[187],"GPUs.":[189],"last":[192],"alarms":[196],"recorded":[198],"again.":[201],"We":[202],"conducted":[203],"comparative":[204],"experiments":[205,232],"approach":[208],"detect":[212],"cyberattack":[213],"anomalies":[214],"management":[218],"classification":[221],"methods":[222],"used":[223],"machine":[225],"learning.":[226],"The":[227],"results":[228],"obtained":[229],"these":[231],"appear":[233],"provide":[235],"promising":[237],"gain":[238],"evaluation":[241],"metrics":[242],"compared":[243],"other":[246],"available":[247],"methods.":[248]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":4}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}