Student or educator? Sign up with your school email and get 6 months of Pro free.
CoChat
Sign Up
Cited by 382

The DOI matches its Crossref record; 127 of the 127 references it cites were found in a registry or an index.

A comprehensive survey on network anomaly detection

Open access
Fernandes, Gilberto, Rodrigues, Joel J. P. C., Carvalho, Luiz Fernando, Al-Muhtadi, Jalal F., Proença, Mario Lemes·2019·Telecommunication Systems
DOI 10.1007/s11235-018-0475-8
Open this paper in CoChat — free account

Overview

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1007/s11235-018-0475-8

Cites

127 of 127 references verified0 citation errors · 0 not checkable

Statistics

Verification

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Citations

Cites

Show all 127 references

Research works printed but not linked: 38

  1. Hashim, F., Munasinghe, K. S., & Jamalipour, A. (2010). Biologically inspired anomaly detection and security control frameworks for complex heterogeneous networks. IEEE Transactions on Network and Service Management, 7, 268–281. https://doi.org/10.1109/TNSM.2010.1012.0360 . · doi:10.1109/tnsm.2010.1012.0360
  2. Carvalho, L. F., Abrão, T., Mendes, L. S., & Proença, M. L. (2018). An ecosystem for anomaly detection and mitigation in software-defined networking. Expert Systems with Applications, 104, 121–133. https://doi.org/10.1016/J.ESWA.2018.03.027 . · doi:10.1016/j.eswa.2018.03.027
  3. Lu, S., Wang, X., & Mao, L. (2014). Network security situation awareness based on network simulation. In 2014 IEEE workshop on electronics, computer and applications (pp. 512–517). https://doi.org/10.1109/IWECA.2014.6845671 . · doi:10.1109/iweca.2014.6845671
  4. Lof, A., & Nelson, R. (2014). Annotating network trace data for anomaly detection research. In 2014 IEEE 39th conference on local computer networks workshops (LCN workshops) (pp. 679–684). https://doi.org/10.1109/LCNW.2014.6927720 . · doi:10.1109/lcnw.2014.6927720
  5. Mohana Priya, P., Akilandeswari, V., Mercy Shalinie, S., Lavanya, V., & Shanmuga Priya, M. (2014). The protocol independent detection and classification (PIDC) system for DRDoS attack. In 2014 International conference on recent trends in information technology (ICRTIT) (pp. 1–7). IEEE. https://doi.org/10.1109/ICRTIT.2014.6996154 . · doi:10.1109/icrtit.2014.6996154
  6. Muller, T., & Freiling, F. C. (2014). A systematic assessment of the security of full disk encryption. IEEE Transactions on Dependable and Secure Computing. https://doi.org/10.1109/TDSC.2014.2369041 . · doi:10.1109/tdsc.2014.2369041
  7. Shimonski, R., Zenir, J., & Bishop, A. (2015). Chapter 2: Information gathering. In R. S. Z. Bishop (Ed.), Cyber Reconnaissance, surveillance and defense (pp. 45–84). Boston: Syngress. https://doi.org/10.1016/B978-0-12-801308-3.00002-0 . · doi:10.1016/b978-0-12-801308-3.00002-0
  8. Lima, M. F., Sampaio, L. D. H., Zarpelao, B. B., Rodrigues, J. J. P. C., Abrao, T., & Proenca, M. L., Jr. (2010). Networking anomaly detection using DSNs and particle swarm optimization with re-clustering. In 2010 IEEE global telecommunications conference GLOBECOM 2010 (pp. 1–6). IEEE. https://doi.org/10.1109/GLOCOM.2010.5683910 . · doi:10.1109/glocom.2010.5683910
  9. Zarpelao, B. B., Mendes, L. S., Proenca Jr., M. L., & Rodrigues, J. J. P. C. (2009). Parameterized anomaly detection system with automatic configuration. In GLOBECOM 2009—2009 IEEE global telecommunications conference (pp. 1–6). IEEE. https://doi.org/10.1109/GLOCOM.2009.5426189 . · doi:10.1109/glocom.2009.5426189
  10. Chapman, C. (2016). Chapter 10: Traffic performance testing in the network. In Network performance and security (pp. 295–317). https://doi.org/10.1016/B978-0-12-803584-9.00010-X . · doi:10.1016/b978-0-12-803584-9.00010-x
  11. Deri, L., Chou, E., Cherian, Z., Karmarkar, K., & Patterson, M. (2011). Increasing data center network visibility with cisco NetFlow-Lite. In International conference on network and service management (pp. 1–6).
  12. Jadidi, Z., Muthukkumarasamy, V., Sithirasenan, E., & Singh, K. (2015). Flow-based anomaly detection in big data. In Network big data (pp. 257–279). Chapman and Hall/CRC. https://doi.org/10.1201/b18772-17 . · doi:10.1201/b18772-17
  13. Bartos, K., Rehak, M., & Krmicek, V. (2011). Optimizing flow sampling for network anomaly detection. In 2011 7th international wireless communications and mobile computing conference (pp. 1304–1309). IEEE. https://doi.org/10.1109/IWCMC.2011.5982728 . · doi:10.1109/iwcmc.2011.5982728
  14. Zhang, Y., Fang, B., & Luo, H. (2010). Identifying high-rate flows based on sequential sampling. IEICE Transactions on Information and Systems, E93–D, 1162–1174. https://doi.org/10.1587/transinf.E93.D.1162 . · DOI
  15. Silva, J. M. C., Carvalho, P., & Lima, S. R. (2015). Analysing traffic flows through sampling: A comparative study. In 2015 IEEE symposium on computers and communications (pp. 341–346). https://doi.org/10.1109/ISCC.2015.7405538 . · doi:10.1109/iscc.2015.7405538
  16. Meng Hui, L., & Jones, A. (2008). Network anomaly detection system: The state of art of network behaviour analysis. In International conference on convergence and hybrid information technology 2008. ICHIT ’08 (pp. 459–465). https://doi.org/10.1109/ICHIT.2008.249 . · doi:10.1109/ichit.2008.249
  17. de Assis, M. V. O., Rodrigues, J. J. P. C., & Proença, M. L. (2014). A seven-dimensional flow analysis to help autonomous network management. Information Sciences, 278, 900–913. https://doi.org/10.1016/j.ins.2014.03.102 . · doi:10.1016/j.ins.2014.03.102
  18. Callegari, C., Giordano, S., Pagano, M., & Pepe, T. (2011). Combining sketches and wavelet analysis for multi time-scale network anomaly detection. Computers & Security, 30, 692–704. https://doi.org/10.1016/j.cose.2011.08.006 . · doi:10.1016/j.cose.2011.08.006
  19. Hamdi, M., & Boudriga, N. (2007). Detecting Denial-of-Service attacks using the wavelet transform. Computer Communications, 30, 3203–3213. https://doi.org/10.1016/j.comcom.2007.05.061 . · doi:10.1016/j.comcom.2007.05.061
  20. Yeung, D. S., Shuyuan, J., & Xizhao, W. (2007). Covariance-matrix modeling and detecting various flooding attacks. IEEE Transactions on Systems, Man, and Cybernetics-Part A: Systems and Humans, 37, 157–169. https://doi.org/10.1109/TSMCA.2006.889480 . · doi:10.1109/tsmca.2006.889480
  21. Ozkan, H., Ozkan, F., & Kozat, S. S. (2016). Online anomaly detection under Markov statistics with controllable type-I error. IEEE Transactions on Signal Processing, 64, 1435–1445. https://doi.org/10.1109/TSP.2015.2504345 . · doi:10.1109/tsp.2015.2504345
  22. Pena, E. H. M., Carvalho, L. F., Barbon, S., Rodrigues, J. J. P. C., & Proenca, M. L. (2014). Correlational paraconsistent machine for anomaly detection. In 2014 IEEE global communications conference (pp. 551–556). IEEE. https://doi.org/10.1109/GLOCOM.2014.7036865 . · doi:10.1109/glocom.2014.7036865
  23. Jazi, H. H., Gonzalez, H., Stakhanova, N., & Ghorbani, A. A. (2017). Detecting HTTP-based application layer DoS attacks on web servers in the presence of sampling. Computer Networks, 121, 25–36. https://doi.org/10.1016/j.comnet.2017.03.018 . · doi:10.1016/j.comnet.2017.03.018
  24. Carvalho, L. F., Barbon, S., Mendes, L. S., & Proença, M. L. (2016). Unsupervised learning clustering and self-organized agents applied to help network management. Expert Systems with Applications, 54, 29–47. https://doi.org/10.1016/j.eswa.2016.01.032 . · doi:10.1016/j.eswa.2016.01.032
  25. He, D., Chan, S., Ni, X., & Guizani, M. (2017). Software-defined-networking-enabled traffic anomaly detection and mitigation. IEEE Internet of Things Journal. https://doi.org/10.1109/JIOT.2017.2694702 . · doi:10.1109/jiot.2017.2694702
  26. Su, M.-Y. (2010). Discovery and prevention of attack episodes by frequent episodes mining and finite state machines. Journal of Network and Computer Applications, 33, 156–167. https://doi.org/10.1016/j.jnca.2009.10.003 . · doi:10.1016/j.jnca.2009.10.003
  27. Klassen, M., & Ning, Y. (2012). Anomaly based intrusion detection in wireless networks using Bayesian classifier. In 2012 IEEE fifth international conference on advanced computational intelligence (ICACI) (pp. 257–264). https://doi.org/10.1109/ICACI.2012.6463163 . · doi:10.1109/icaci.2012.6463163
  28. Tao, L., Ailing, Q., Yuanbin, H., & Xintan, C. (2008). Method for network anomaly detection based on Bayesian statistical model with time slicing. In 7th world congress on intelligent control and automation, 2008. WCICA 2008 (pp. 3359–3362). https://doi.org/10.1109/WCICA.2008.4593458 . · doi:10.1109/wcica.2008.4593458
  29. Brown, J., Anwar, M., & Dozier, G. (2016). An evolutionary general regression neural network classifier for intrusion detection. In 2016 25th International conference on computer communication and networks (ICCCN) (pp. 1–5). IEEE. https://doi.org/10.1109/ICCCN.2016.7568493 . · doi:10.1109/icccn.2016.7568493
  30. Sornsuwit, P., & Jaiyen, S. (2015). Intrusion detection model based on ensemble learning for U2R and R2L attacks. In 2015 7th international conference on information technology and electrical engineering (ICITEE) (pp. 354–359). IEEE. https://doi.org/10.1109/ICITEED.2015.7408971 . · doi:10.1109/iciteed.2015.7408971
  31. David, J., & Thomas, C. (2015). DDoS attack detection using fast entropy approach on flow- based network traffic. Procedia Computer Science, 50, 30–36. https://doi.org/10.1016/j.procs.2015.04.007 . · doi:10.1016/j.procs.2015.04.007
  32. Amaral, A. A., Mendes, L. S., Zarpelão, B. B., & Junior, M. L. P. (2017). Deep IP flow inspection to detect beyond network anomalies. Computer Communications, 98, 80–96. https://doi.org/10.1016/j.comcom.2016.12.007 . · doi:10.1016/j.comcom.2016.12.007
  33. Behal, S., & Kumar, K. (2017). Detection of DDoS attacks and flash events using novel information theory metrics. Computer Networks, 116, 96–110. https://doi.org/10.1016/j.comnet.2017.02.015 . · doi:10.1016/j.comnet.2017.02.015
  34. Li, G., & Wang, Y. (2012). Differential Kullback–Leibler divergence based anomaly detection scheme in sensor networks. In 2012 IEEE 12th international conference on computer and information technology (pp. 966–970). IEEE. https://doi.org/10.1109/CIT.2012.197 . · doi:10.1109/cit.2012.197
  35. Sen, S. (2015). A survey of intrusion detection systems using evolutionary computation. In Bio-inspired computation in telecommunications (pp. 73–94). Elsevier. https://doi.org/10.1016/B978-0-12-801538-4.00004-5 . · doi:10.1016/b978-0-12-801538-4.00004-5
  36. Igbe, O., Darwish, I., & Saadawi, T. (2016). Distributed network intrusion detection systems: An artificial immune system approach. In 2016 IEEE First international conference on connected health: applications, systems and engineering technologies (pp. 101–106). IEEE. https://doi.org/10.1109/CHASE.2016.36 . · doi:10.1109/chase.2016.36
  37. Elsayed, S., Sarker, R., & Slay, J. (2015). Evaluating the performance of a differential evolution algorithm in anomaly detection. In 2015 IEEE congress on evolutionary computation (pp. 2490–2497). IEEE. https://doi.org/10.1109/CEC.2015.7257194 . · doi:10.1109/cec.2015.7257194
  38. Adaniya, M. H. A. C., Abrão, T., & Proença, M. L, Jr. (2013). Anomaly detection using metaheuristic firefly harmonic clustering. Journal of Networks, 8, 82–91. https://doi.org/10.4304/jnw.8.1.82-91 . · doi:10.4304/jnw.8.1.82-91

Cited by

See all 382

Metadata

Authors
Fernandes, G., Rodrigues, J. J. P. C., Carvalho, L. F., Al-Muhtadi, J. F., & Proença, M. L.
Venue
Telecommunication Systems
Publisher
Springer Science and Business Media LLC
Published
2018-07-02
Volume
70
Issue
3
Pages
447-489
ISSN
  • 1018-4864 (ISSN-L)
  • 1572-9451
DOI
10.1007/s11235-018-0475-8
OpenAlex
W2810550035
Cited by
382
References
127
FWCI
16.49
Type
journal article
Language
en
Open access
green
Licence
www.springer.com/tdm (tdm)
Funders
  • Conselho Nacional de Desenvolvimento Científico e Tecnológico - CNPq (309335/2017-5, 249794/2013-6, Project 308348/2016-8)
  • Fundação para a Ciência e a Tecnologia (UID/EEA/500008/2013 Project)
  • Government of the Russian Federation (Grant 074-U01)
  • Funttel (Grant no. 01.14.0231.00)

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

How to cite

Cite CoChat for the checks on this page, and the paper for its own findings.

This page
CoChat. (2026). Citation check: A comprehensive survey on network anomaly detection. https://app.cochat.ai/papers/10.1007/s11235-018-0475-8
The paper
Fernandes, G., Rodrigues, J. J. P. C., Carvalho, L. F., Al-Muhtadi, J. F., & Proença, M. L. (2019). A comprehensive survey on network anomaly detection. Telecommunication Systems. https://doi.org/10.1007/s11235-018-0475-8

Data sources

Bibliographic data: Semantic Scholar, OpenAlex, Crossref.

Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).

Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.