Practical real-time intrusion detection using machine learning approaches
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The real-time misuse-based IDS of Sangkatsanee et al. can only detect two types of attacks (DoS and probe).
“(i) it can only detect two types of attacks (DoS and probe)”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [402]
The post-processing approach of Sangkatsanee et al. correlates records between 2 IPs, making it vulnerable to persistent threats and distributed attacks.
“(iv) its post-processing approach correlates records between 2 IPs, making it vulnerable to persistent threats and distributed attacks.”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [402]
The real-time misuse-based IDS of Sangkatsanee et al. only looks at attacks in windows of 2 s.
“(iii) it only looks at attacks in windows of 2 s”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [402]
The real-time misuse-based IDS of Sangkatsanee et al. is not compared against other real-time signature-based IDS.
“(ii) it is not compared against other real-time signaturebased IDS (e.g.Snort [87])”
From A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities (2018) · cites this paper as [402]
Cites
Chiu, S., & Tavella, D. (2008) · Routledge eBooks · doi:10.4324/9780080878096-12 · Cited by 6,987 · see citing works
Introduction to Data Mining, (First Edition)
Tan, P., Steinbach, M. S., & Kumar, V. (2005) · Addison-Wesley Longman Publishing Co., Inc. eBooks · Cited by 1,305 · see citing works
The use of computational intelligence in intrusion detection systems: A review
Wu, S. X., & Banzhaf, W. (2009) · Applied Soft Computing · doi:10.1016/j.asoc.2009.06.019 · Cited by 697 · see citing works
Toosi, A. N., & Kahani, M. (2007) · Computer Communications · doi:10.1016/j.comcom.2007.05.002 · Cited by 224 · see citing works
Mining in a data-flow environment
Lee, W., Stolfo, S. J., & Mok, K. W. (1999) · ACM SIGKDD International Conference on Knowledge Discovery and Data Mining (KDD) · doi:10.1145/312129.312212 · Cited by 223 · see citing works
Tsang, C.-H., Kwong, S., & Wang, H. (2007) · Pattern Recognition · doi:10.1016/j.patcog.2006.12.009 · Cited by 219 · see citing works
Larose, D. T. (2004) · doi:10.1002/0471687545.ch1 · Cited by 181 · see citing works
Amini, M., Jalili, R., & Shahriari, H. R. (2006) · Computers & Security · doi:10.1016/j.cose.2006.05.003 · Cited by 125 · see citing works
Hybrid neural network and C4.5 for misuse detection
Pan, Z., Chen, S., Hu, G.-B., et al. (2004) · International Conference on Machine Learning and Cybernetics · doi:10.1109/icmlc.2003.1259925 · Cited by 94 · see citing works
Hybrid Neural Networks for Intrusion Detection System
Jirapummin, C., Wattanapongsakorn, N., & Kanthamanon, P. (2002) · Cited by 91 · see citing works
Self-citationNSOM: A Real-Time Network-Based Intrusion Detection System Using Self-Organizing Maps
Labib, K., & Vemuri, R. (2002) · Cited by 89 · see citing works
Su, M., Yu, G., & Lin, C.-Y. (2008) · Computers & Security · doi:10.1016/j.cose.2008.12.001 · Cited by 89 · see citing works
Lee, J.-H., Lee, J., Sohn, S.-G., et al. (2008) · International Conference on Advanced Communication Technology · doi:10.1109/icact.2008.4493974 · Cited by 82 · see citing works
Network forensics based on fuzzy logic and expert system
Liao, N., Tian, S., & Wang, T.-H. (2009) · Computer Communications · doi:10.1016/j.comcom.2009.07.013 · Cited by 65 · see citing works
Soft Computing Models for Network Intrusion Detection Systems
Abraham, A., & Jain, R. (2005) · Studies in computational intelligence · doi:10.1007/11011620_13 · Cited by 60 · see citing works
An efficient network intrusion detection
Chen, C.-M., Chen, Y., & Lin, H.-C. (2009) · Computer Communications · doi:10.1016/j.comcom.2009.10.010 · Cited by 51 · see citing works
A Bayesian Classification Model for Real-Time Intrusion Detection
Puttini, R. (2003) · AIP conference proceedings · doi:10.1063/1.1570541 · Cited by 45 · see citing works
Network intrusion detection: Evaluating cluster, discriminant, and logit analysis
Katos, V. (2007) · Information Sciences · doi:10.1016/j.ins.2007.02.034 · Cited by 41 · see citing works
Chakrabarti, S., Chakraborty, M., & Mukhopadhyay, I. (2010) · doi:10.1145/1741906.1741914 · Cited by 38 · see citing works
HiFIND: A high-speed flow-level intrusion detection approach with DoS resiliency
Li, Z., Gao, Y., & Chen, Y. (2009) · Computer Networks · doi:10.1016/j.comnet.2009.10.016 · Cited by 28 · see citing works
Network intrusion detection and classification with Decision Tree and rule based approaches
Komviriyavut, T., Sangkatsanee, P., Wattanapongsakorn, N., et al. (2009) · doi:10.1109/iscit.2009.5341005 · Cited by 23 · see citing works
Self-citationSemi-Naïve Bayesian Method for Network Intrusion Detection System
Panda, M., & Patra, M. R. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-10677-4_70 · Cited by 20 · see citing works
Lightweight Detection of DoS Attacks
Pukkawanna, S., Visoottiviseth, V., & Pongpaibool, P. (2007) · The ... IEEE International Conference on Networks/The IEEE International Conference on Networks · doi:10.1109/icon.2007.4444065 · Cited by 17 · see citing works
Investigation of Fuzzy Adaptive Resonance Theory in Network Anomaly Intrusion Detection
Ngamwitthayanon, N., Wattanapongsakorn, N., & Coit, D. W. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-01510-6_24 · Cited by 6 · see citing works
Self-citation
Flagged first, then by citations
Cited by
Sorted by citations
Boutaba, R., Salahuddin, M. A., Limam, N., Ayoubi, S., Shahriar, N., Estrada-Solano, F., & Caicedo, O. M. (2018) · Journal of Internet Services and Applications · doi:10.1186/s13174-018-0087-2 · Cited by 1,036 · see citing works
IntruDTree: A Machine Learning Based Cyber Security Intrusion Detection Model
Sarker, I. H., Abushark, Y. B., Alsolami, F., & Khan, A. I. (2020) · Symmetry · doi:10.3390/sym12050754 · Cited by 356 · see citing works
Sarker, I. H. (2021) · Internet of Things · doi:10.1016/j.iot.2021.100393 · Cited by 129 · see citing works
Uche James, U., Idika, C. N., & Anebi Enyejo, L. (2023) · International Journal of Scientific Research in Computer Science, Engineering and Information Technology · doi:10.32628/cseit23564522 · Cited by 29 · see citing works
- Authors
- Sangkatsanee, P., Wattanapongsakorn, N., & Charnsripinyo, C.
- Affiliations
- King Mongkut's University of Technology Thonburi (TH)
- National Electronics and Computer Technology Center (TH)
- Corresponding author
- Wattanapongsakorn, Naruemon
- Venue
- Computer Communications
- Publisher
- Elsevier BV
- Published
- 2011-12
- Volume
- 34
- Issue
- 18
- Pages
- 2227-2235
- ISSN
- 0140-3664 (ISSN-L)
- OpenAlex
- W1984438447
- Cited by
- 267
- References
- 24
- Citations by year
- 2026: 7 · 2025: 15 · 2024: 20 · 2023: 29 · 2022: 25 · 2021: 28 · 2020: 23 · 2019: 19 · 2018: 15 · 2017: 12 · 2016: 12 · 2015: 24 · 2014: 17 · 2013: 14 · 2012: 7
- FWCI
- 15.92
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- Computer Communications (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Hardware and Architecture › Network Packet Processing and Optimization
- Physical Sciences › Engineering › Biomedical Engineering › Artificial Immune Systems Applications
- Keywords
- real-time intrusion detection, network intrusion detection, decision tree, feature selection, information gain, network attack classification, denial-of-service attacks, probe attacks, false alarm reduction, network traffic classification
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
