{"id":"https://openalex.org/W3157514903","doi":"https://doi.org/10.7148/2021-0035","title":"Towards Intrusion Detection Of Previously Unknown Network Attacks","display_name":"Towards Intrusion Detection Of Previously Unknown Network Attacks","publication_year":2021,"publication_date":"2021-04-29","ids":{"openalex":"https://openalex.org/W3157514903","doi":"https://doi.org/10.7148/2021-0035","mag":"3157514903"},"language":"en","primary_location":{"id":"doi:10.7148/2021-0035","is_oa":false,"landing_page_url":"https://doi.org/10.7148/2021-0035","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ECMS 2021 Proceedings edited by Khalid Al-Begain, Mauro Iacono, Lelio Campanile, Andrzej Bargiela","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041615167","display_name":"Saif Alzubi","orcid":null},"institutions":[{"id":"https://openalex.org/I71052956","display_name":"University of Reading","ror":"https://ror.org/05v62cm79","country_code":"GB","type":"education","lineage":["https://openalex.org/I71052956"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Saif Alzubi","raw_affiliation_strings":["Department of Computer Science, University of Reading, Reading, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Reading, Reading, UK","institution_ids":["https://openalex.org/I71052956"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085158698","display_name":"Frederic Stahl","orcid":"https://orcid.org/0000-0002-4860-0203"},"institutions":[{"id":"https://openalex.org/I33256026","display_name":"German Research Centre for Artificial Intelligence","ror":"https://ror.org/01ayc5b57","country_code":"DE","type":"funder","lineage":["https://openalex.org/I33256026"]},{"id":"https://openalex.org/I71052956","display_name":"University of Reading","ror":"https://ror.org/05v62cm79","country_code":"GB","type":"education","lineage":["https://openalex.org/I71052956"]}],"countries":["DE","GB"],"is_corresponding":false,"raw_author_name":"Frederic T. Stahl","raw_affiliation_strings":["Department of Computer Science, University of Reading, Reading, UK","Marine Perception Research Department,German Research Center for Artificial Intelligence (DFKI), Oldenburg, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Reading, Reading, UK","institution_ids":["https://openalex.org/I71052956"]},{"raw_affiliation_string":"Marine Perception Research Department,German Research Center for Artificial Intelligence (DFKI), Oldenburg, Germany","institution_ids":["https://openalex.org/I33256026"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5016157034","display_name":"Mohamed Medhat Gaber","orcid":"https://orcid.org/0000-0003-0339-4474"},"institutions":[{"id":"https://openalex.org/I12870472","display_name":"Birmingham City University","ror":"https://ror.org/00t67pt25","country_code":"GB","type":"education","lineage":["https://openalex.org/I12870472"]},{"id":"https://openalex.org/I4400009028","display_name":"Galala University","ror":"https://ror.org/04x3ne739","country_code":null,"type":"education","lineage":["https://openalex.org/I4400009028"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mohamed M. Gaber","raw_affiliation_strings":["Faculty of Computer Science and Engineering, Galala University, Galala City 43511, Egypt","School of Computing and Digital Technology, Birmingham City University, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computer Science and Engineering, Galala University, Galala City 43511, Egypt","institution_ids":["https://openalex.org/I4400009028"]},{"raw_affiliation_string":"School of Computing and Digital Technology, Birmingham City University, UK","institution_ids":["https://openalex.org/I12870472"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.05664233,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":95},"biblio":{"volume":null,"issue":null,"first_page":"35","last_page":"41"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8135650753974915},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6542823314666748},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5801209211349487},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.5067034363746643},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.42872968316078186},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4180573523044586},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.392697274684906},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.36136895418167114},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3412458300590515}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8135650753974915},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6542823314666748},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5801209211349487},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5067034363746643},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.42872968316078186},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4180573523044586},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.392697274684906},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.36136895418167114},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3412458300590515},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.7148/2021-0035","is_oa":false,"landing_page_url":"https://doi.org/10.7148/2021-0035","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ECMS 2021 Proceedings edited by Khalid Al-Begain, Mauro Iacono, Lelio Campanile, Andrzej Bargiela","raw_type":"proceedings-article"},{"id":"pmh:oai:centaur.reading.ac.uk:99113","is_oa":false,"landing_page_url":"https://centaur.reading.ac.uk/view/creators/90005065.html>","pdf_url":null,"source":{"id":"https://openalex.org/S4306402273","display_name":"CentAUR (University of Reading)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I71052956","host_organization_name":"University of Reading","host_organization_lineage":["https://openalex.org/I71052956"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"PeerReviewed"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W42722137","https://openalex.org/W187043655","https://openalex.org/W1980262437","https://openalex.org/W1995443851","https://openalex.org/W2008224380","https://openalex.org/W2099940443","https://openalex.org/W2101234009","https://openalex.org/W2105497548","https://openalex.org/W2107011304","https://openalex.org/W2144182447","https://openalex.org/W2144200194","https://openalex.org/W2155806188","https://openalex.org/W2289015916","https://openalex.org/W2296509296","https://openalex.org/W2296719434","https://openalex.org/W2500517591","https://openalex.org/W2522803339","https://openalex.org/W2734682423","https://openalex.org/W2789758093","https://openalex.org/W2789828921","https://openalex.org/W2896308136","https://openalex.org/W2914710505","https://openalex.org/W2944643572","https://openalex.org/W2946427082","https://openalex.org/W3014732532","https://openalex.org/W3088291765","https://openalex.org/W3120137300","https://openalex.org/W4243563432"],"related_works":["https://openalex.org/W1981780420","https://openalex.org/W2182707996","https://openalex.org/W45233828","https://openalex.org/W2964988449","https://openalex.org/W2397952901","https://openalex.org/W2029380707","https://openalex.org/W4255934811","https://openalex.org/W2465382974","https://openalex.org/W2010229520","https://openalex.org/W2547528905"],"abstract_inverted_index":{"Advances":[0],"in":[1],"telecommunication":[2,114],"network":[3,91,115,154],"technologies":[4],"have":[5,133,167],"led":[6],"to":[7,20,32,40,51],"an":[8],"ever":[9],"more":[10,100],"interconnected":[11],"world.":[12],"Accordingly,":[13],"the":[14,131],"types":[15,165],"of":[16,28,76,141,146,150],"threats":[17],"and":[18,78,87,110,143],"attacks":[19,106,128],"intrude":[21],"or":[22,26],"disable":[23],"such":[24],"networks":[25],"portions":[27],"it":[29,159],"are":[30,48],"continuing":[31],"develop":[33],"likewise.":[34],"Thus,":[35],"there":[36],"is":[37,99,111],"a":[38,61,72,139,144],"need":[39],"detect":[41,52,127,161],"previously":[42,53,104],"unknown":[43,105],"attack":[44,56,155,164],"types.":[45,57],"Supervised":[46],"techniques":[47],"not":[49,54,134],"suitable":[50],"encountered":[55,170],"This":[58,97],"paper":[59],"presents":[60],"new":[62,163],"ensemble-based":[63],"Unknown":[64],"Network":[65],"Attack":[66],"Detector":[67],"(UNAD)":[68],"system.":[69],"UNAD":[70,125,151],"proposes":[71],"training":[73],"workflow":[74],"composed":[75],"heterogeneous":[77],"unsupervised":[79],"anomaly":[80],"detection":[81],"techniques,":[82],"trains":[83],"on":[84,113,129,137],"attack-free":[85],"data":[86,116],"can":[88,126,160],"distinguish":[89],"normal":[90],"flow":[92],"from":[93],"(previously":[94],"unknown)":[95],"attacks.":[96],"scenario":[98],"realistic":[101],"for":[102],"detecting":[103],"than":[107],"supervised":[108],"approaches":[109],"evaluated":[112],"with":[117,138,152],"known":[118],"ground":[119],"truth.":[120],"Empirical":[121],"results":[122],"reveal":[123],"that":[124,158,166],"which":[130],"workflows":[132],"been":[135,169],"trained":[136],"precision":[140],"75%":[142],"recall":[145],"80%.":[147],"The":[148],"benefit":[149],"existing":[153],"detectors":[156],"is,":[157],"completely":[162],"never":[168],"before.":[171]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}