Intrusion detection by machine learning: A review

Neural Networks: A Comprehensive Foundation

Haykin, S. (1998) · Cited by 30,070 · see citing works

Statistical Learning Theory

Wu, Y., & Vapnik, V. N. (1999) · Technometrics · doi:10.2307/1271368 · Cited by 27,236 · see citing works

Neural networks for pattern recognition

Bishop, C. (1994) · Choice Reviews Online · doi:10.5860/choice.31-5500 · Cited by 18,537 · see citing works

Genetic Programming: On the Programming of Computers by Means of Natural Selection

Koza, J. R. (1992) · Medical Entomology and Zoology · Cited by 13,225 · see citing works

Self-organized formation of topologically correct feature maps

Kohonen, T. (1982) · Biological Cybernetics · doi:10.1007/bf00337288 · Cited by 9,529 · see citing works

Fuzzy Set Theory—and Its Applications

Zimmermann, H. ‐. (2001) · Springer eBooks · doi:10.1007/978-94-010-0646-0 · Cited by 7,547 · see citing works

On combining classifiers

Kittler, J., Hatef, M., Duin, R. P. W., & Matas, J. (1998) · IEEE Transactions on Pattern Analysis and Machine Intelligence · doi:10.1109/34.667881 · Cited by 5,312 · see citing works

Neuro-Fuzzy and Soft Computing: A Computational Approach to Learning and Machine Intelligence

Jang, J. R., & Sun, C. (1996) · Cumulative Index of Computer Aided Architectural Design · Cited by 4,629 · see citing works

Probabilistic Reasoning in Intelligent Systems

(1988) · Elsevier eBooks · doi:10.1016/c2009-0-27609-4 · Cited by 3,371 · see citing works

Haykin, Simon. Neural networks: A comprehensive foundation, Prentice Hall, Inc. Segunda Edición, 1999

Nazuno, J. F. (2000) · Computación y Sistemas · Cited by 3,185 · see citing works

Self-organized formation of topographically correct feature maps

Kohonen, T. (1982) · Biological Cybernetics · Cited by 2,995 · see citing works

Neural networks for pattern recognition

Marshall, J. A. (1995) · Neural Networks · doi:10.1016/0893-6080(95)90002-0 · Cited by 1,888 · see citing works

Data Mining Approaches for Intrusion Detection

Lee, W., & Stolfo, S. J. (2000) · doi:10.21236/ada401496 · Cited by 1,186 · see citing works

An Introduction to Neural Networks

Anderson, J. A. D. W. (1995) · The MIT Press eBooks · doi:10.7551/mitpress/3905.001.0001 · Cited by 1,109 · see citing works

Data mining methods for detection of new malicious executables

Schultz, M. G., Eskin, E., Zadok, F., & Stolfo, S. J. (2002) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/secpri.2001.924286 · Cited by 1,089 · see citing works

Cryiptography and Network Security : Principles and Practices, 3rd ed

Stallings, W. (2003) · Medical Entomology and Zoology · Cited by 1,030 · see citing works

A framework for constructing features and models for intrusion detection systems

Lee, W., & Stolfo, S. J. (2000) · ACM Transactions on Information and System Security · doi:10.1145/382912.382914 · Cited by 973 · see citing works

Anomalous Payload-Based Network Intrusion Detection

Wang, K., & Stolfo, S. J. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-30143-1_11 · Cited by 849 · see citing works

Use of K-Nearest Neighbor classifier for intrusion detection

Liao, Y., & Vemuri, V. R. (2002) · Computers & Security · doi:10.1016/s0167-4048(02)00514-x · Cited by 809 · see citing works

Intrusion detection with unlabeled data using clustering

Portnoy, L. (2000) · doi:10.7916/d8mp5904 · Cited by 756 · see citing works

A Geometric Framework for Unsupervised Anomaly Detection: Detecting Intrusions in Unlabeled Data

Eskin, E., Arnold, A. O., Prerau, M. J., Portnoy, L., & Stolfo, S. J. (2002) · doi:10.7916/d8d50tqt · Cited by 607 · see citing works

A Novel Anomaly Detection Scheme Based on Principal Component Classifier

Shyu, M., Chen, S., Sarinnapakorn, K., & Chang, L. (2003) · Cited by 602 · see citing works

Computer Security: Principles and Practice

Stallings, W., & Brown, L. (2008) · Cited by 545 · see citing works

An intelligent intrusion detection system (IDS) for anomaly and misuse detection in computer networks

Depren, O., Topallar, M., Anarım, E., et al. (2005) · Expert Systems with Applications · doi:10.1016/j.eswa.2005.05.002 · Cited by 514 · see citing works

A hybrid machine learning approach to network anomaly detection

Shon, T., & Moon, J. (2007) · Information Sciences · doi:10.1016/j.ins.2007.03.025 · Cited by 443 · see citing works

Modeling intrusion detection system using hybrid intelligent systems

Peddabachigari, S., Abraham, A., Groşan, C., & Thomas, J. P. (2005) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2005.06.003 · Cited by 434 · see citing works

Application of SVM and ANN for intrusion detection

Chen, W.-H., Hsu, S.-H., & Shen, H.-P. (2004) · Computers & Operations Research · doi:10.1016/j.cor.2004.03.019 · Cited by 413 · see citing works

A new intrusion detection system using support vector machines and hierarchical clustering

Khan, L. R., Awad, M., & Thuraisingham, B. M. (2006) · The VLDB Journal · doi:10.1007/s00778-006-0002-5 · Cited by 399 · see citing works

Machine Learning and Data Mining; Methods and Applications

Michalski, R. S., Ivan Bratko, A., & Bratko, A. (1998) · John Wiley & Sons, Inc. eBooks · Cited by 386 · see citing works

Intrusion detection using an ensemble of intelligent paradigms

Mukkamala, S., Sung, A. H., & Abraham, A. (2004) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2004.01.003 · Cited by 372 · see citing works

Decision tree classifier for network intrusion detection with GA-based feature selection

Stein, G., Chen, B., Wu, A. S., & Hua, K. A. (2005) · ACM Southeast Regional Conference (ACMSE) · doi:10.1145/1167253.1167288 · Cited by 343 · see citing works

A new approach to intrusion detection based on an evolutionary soft computing model using neuro-fuzzy classifiers

Toosi, A. N., & Kahani, M. (2007) · Computer Communications · doi:10.1016/j.comcom.2007.05.002 · Cited by 224 · see citing works

Using artificial anomalies to detect unknown and known network intrusions

Fan, W., Miller, M. L., Stolfo, S. J., et al. (2004) · Knowledge and Information Systems · doi:10.1007/s10115-003-0132-7 · Cited by 222 · see citing works

Intrusion detection in computer networks by a modular ensemble of one-class classifiers

Giacinto, G., Perdisci, R., Rio, M. D., et al. (2006) · Information Fusion · doi:10.1016/j.inffus.2006.10.002 · Cited by 219 · see citing works

Genetic-fuzzy rule mining approach and evaluation of feature selection techniques for anomaly intrusion detection

Tsang, C.-H., Kwong, S., & Wang, H. (2007) · Pattern Recognition · doi:10.1016/j.patcog.2006.12.009 · Cited by 219 · see citing works

An active learning based TCM-KNN algorithm for supervised network intrusion detection

Li, Y., & Guo, L. (2007) · Computers & Security · doi:10.1016/j.cose.2007.10.002 · Cited by 182 · see citing works

One Class Support Vector Machines for Detecting Anomalous Windows Registry Accesses

Heller, K., Svore, K. M., Keromytis, A. D., & Stolfo, S. J. (2003) · doi:10.7916/d84b39q0 · Cited by 175 · see citing works

Intrusion detection using hierarchical neural networks

Zhang, C., Jiang, J., & Kamel, M. S. (2004) · Pattern Recognition Letters · doi:10.1016/j.patrec.2004.09.045 · Cited by 173 · see citing works

A clustering-based method for unsupervised intrusion detections

Jiang, S., Song, X., Wang, H., Han, J.-J., & Li, Q.-H. (2006) · Pattern Recognition Letters · doi:10.1016/j.patrec.2005.11.007 · Cited by 164 · see citing works

A hierarchical SOM-based intrusion detection system

Kayacık, H. G., Zincir-Heywood, N., & Heywood, M. I. (2006) · Engineering Applications of Artificial Intelligence · doi:10.1016/j.engappai.2006.09.005 · Cited by 163 · see citing works

A hierarchical intrusion detection model based on the PCA neural networks

Liu, G., Zhang, Y., & Yang, S. (2006) · Neurocomputing · doi:10.1016/j.neucom.2006.10.146 · Cited by 159 · see citing works

Learning classifiers for misuse and anomaly detection using a bag of system calls representation

Kang, D.-K., Fuller, D., & Honavar, V. (2005) · doi:10.1109/iaw.2005.1495942 · Cited by 139 · see citing works

Adaptive neuro-fuzzy intrusion detection systems

Chavan, S. E., Shah, K., Dave, N., et al. (2004) · International Conference on Information Technology: Coding and Computing (ITCC) · doi:10.1109/itcc.2004.1286428 · Cited by 137 · see citing works

Hybrid flexible neural-tree-based intrusion detection systems

Chen, Y., Abraham, A., & Yang, B. (2007) · International Journal of Intelligent Systems · doi:10.1002/int.20203 · Cited by 132 · see citing works

Multiple Self-Organizing Maps for Intrusion Detection

Cannady, J., Rhodes, B., & Mahaffey, J. A. (2000) · NSUWorks (Nova Southeastern University) · Cited by 128 · see citing works

A genetic clustering method for intrusion detection

Liu, Y., Chen, K., Liao, X., et al. (2004) · Pattern Recognition · doi:10.1016/j.patcog.2003.09.011 · Cited by 119 · see citing works

Identifying intrusions in computer networks with principal component analysis

Wang, W., & Battiti, R. (2006) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1109/ares.2006.73 · Cited by 103 · see citing works

Application of online-training SVMs for real-time intrusion detection with different considerations

Zhang, Z., & Shen, H. (2005) · Computer Communications · doi:10.1016/j.comcom.2005.01.014 · Cited by 102 · see citing works

An empirical analysis of the probabilistic K-nearest neighbour classifier

Manocha, S. K., & Girolami, M. (2007) · Pattern Recognition Letters · doi:10.1016/j.patrec.2007.05.018 · Cited by 99 · see citing works

Intrusion detection by integrating boosting genetic fuzzy classifier and data mining criteria for rule pre-screening

Özyer, T., Alhajj, R., & Barker, K. E. (2005) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2005.06.002 · Cited by 97 · see citing works

Intrusion detection through learning behavior model

Balajinath, B., & Raghavan, S. V. (2001) · Computer Communications · doi:10.1016/s0140-3664(00)00364-9 · Cited by 94 · see citing works

An improved algorithm for fuzzy data mining for intrusion detection

Florez, G. O., Bridges, S. A., & Vaughn, R. B. (2003) · doi:10.1109/nafips.2002.1018103 · Cited by 93 · see citing works

The neural network models for IDS based on the asymmetric costs of false negative errors and false positive errors

Joo, D., Hong, T., & Han, I. (2003) · Expert Systems with Applications · doi:10.1016/s0957-4174(03)00007-1 · Cited by 90 · see citing works

Modeling Intrusion Detection Systems Using Linear Genetic Programming Approach

Mukkamala, S., Sung, A. H., & Abraham, A. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-24677-0_65 · Cited by 84 · see citing works

A parallel genetic local search algorithm for intrusion detection in computer networks

Abadeh, M. S., Habibi, J., Barzegar, Z., et al. (2007) · Engineering Applications of Artificial Intelligence · doi:10.1016/j.engappai.2007.02.007 · Cited by 83 · see citing works

A Bayesian paradigm for designing intrusion detection systems

Scott, S. L. (2003) · Computational Statistics & Data Analysis · doi:10.1016/s0167-9473(03)00177-4 · Cited by 81 · see citing works

Anomaly-Based Intrusion Detection using Fuzzy Rough Clustering

Chimphlee, W., Abdullah, A. H., Sap, M. N. M., et al. (2006) · International Conference on Hybrid Information Technology (ICHIT) · doi:10.1109/ichit.2006.253508 · Cited by 66 · see citing works

Anomaly detection based on unsupervised niche clustering with application to network intrusion detection

León, E. J. S. D., Nasraoui, O., & Gómez, J. (2004) · Congress on Evolutionary Computation · doi:10.1109/cec.2004.1330898 · Cited by 62 · see citing works

Anomaly-Based Intrusion Detection using Fuzzy Rough Clustering

Chimphlee, W., Abdullah, A. H., Sap, M. N. M., et al. (2006) · doi:10.1109/ichit.2006.81 · Cited by 58 · see citing works

Detecting intrusion with rule-based integration of multiple models

Han, S.-J., & Cho, S. (2003) · Computers & Security · doi:10.1016/s0167-4048(03)00711-9 · Cited by 50 · see citing works

ANTIDS: Self-Organized Ant-based Clustering Model for Intrusion Detection SystemPreprint

Ramos, V., & Abraham, A. (2004) · arXiv (Cornell University) · doi:10.48550/arxiv.cs/0412068 · Cited by 48 · see citing works

Intrusion detection using rough set classification

Zhang, L., Zhang, G., Yu, L., et al. (2004) · Journal of Zhejiang University. Science A · doi:10.1631/jzus.2004.1076 · Cited by 48 · see citing works

Efficient intrusion detection using principal component analysis

Bouzida, Y., Cuppens, F., Cuppens-Boulahia, N., et al. (2004) · HAL (Le Centre pour la Communication Scientifique Directe) · Cited by 48 · see citing works

Intrusion detection in computer networks by multiple classifier systems

Giacinto, G., & Roli, F. (2003) · doi:10.1109/icpr.2002.1048321 · Cited by 44 · see citing works

Using artificial anomalies to detect unknown and known network intrusions

Fan, W., Miller, M. L., Stolfo, S., et al. (2002) · Proceedings · doi:10.1109/icdm.2001.989509 · Cited by 42 · see citing works

A Novel Intrusion Detection Method Based on Principle Component Analysis in Computer Security

Wang, W., Guan, X., & Zhang, X. (2004) · Lecture notes in computer science · doi:10.1007/978-3-540-28648-6_105 · Cited by 38 · see citing works

Design of Multiple-Level Hybrid Classifier for Intrusion Detection System

Xiang, C., & Lim, S. (2006) · Machine learning for signal processing ... · doi:10.1109/mlsp.2005.1532885 · Cited by 35 · see citing works

Detection and Summarization of Novel Network Attacks Using Data Mining

Ertöz, L., Eilertson, E., Lazarević, A. M., et al. (2003) · Cited by 25 · see citing works

A Modular Multiple Classifier System for the Detection of Intrusions in Computer Networks

Giacinto, G., Roli, F., & Didaci, L. (2003) · Lecture notes in computer science · doi:10.1007/3-540-44938-8_35 · Cited by 24 · see citing works

Applying genetic algorithm for classifying anomalous TCP/IP packets

Shon, T., Kovah, X., & Moon, J. (2006) · Neurocomputing · doi:10.1016/j.neucom.2006.01.023 · Cited by 24 · see citing works

Intrusion Detection Using PCASOM Neural Networks

Liu, G., & Zhang, Y. (2006) · Lecture notes in computer science · doi:10.1007/11760191_35 · Cited by 21 · see citing works

A latent class modeling approach to detect network intrusion

Wang, Y., Kim, I., Mbateng, G., et al. (2006) · Computer Communications · doi:10.1016/j.comcom.2006.07.018 · Cited by 17 · see citing works

Using statistical analysis and support vector machine classification to detect complicated attacks

Tian, M., Chen, S., Zhuang, Y., et al. (2005) · doi:10.1109/icmlc.2004.1378327 · Cited by 15 · see citing works

Improving a neuro-fuzzy classifier using exploratory factor analysis

Martens, J., Wets, G., Vanthienen, J., & Mues, C. (2000) · International Journal of Intelligent Systems · doi:10.1002/1098-111x(200008)15:8 · Cited by 3 · see citing works

A Survey of Machine and Deep Learning Methods for Internet of Things (IoT) Security

Al-Garadi, M. A., Mohamed, A., Al-Ali, A. K., Du, X., Ali, I., & Guizani, M. (2020) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2020.2988293 · Cited by 1,392 · see citing works

A comprehensive survey on machine learning for networking: Evolution, applications and research opportunities

Boutaba, R., Salahuddin, M. A., Limam, N., Ayoubi, S., Shahriar, N., Estrada-Solano, F., & Caicedo, O. M. (2018) · Journal of Internet Services and Applications · doi:10.1186/s13174-018-0087-2 · Cited by 1,036 · see citing works

IntruDTree: A Machine Learning Based Cyber Security Intrusion Detection Model

Sarker, I. H., Abushark, Y. B., Alsolami, F., & Khan, A. I. (2020) · Symmetry · doi:10.3390/sym12050754 · Cited by 356 · see citing works

Machine Learning for DDoS Attack Detection in Industry 4.0 CPPSs

Saghezchi, F. B., Mantas, G., Violas, M. A., de Oliveira Duarte, A. M., & Rodriguez, J. (2022) · Electronics · doi:10.3390/electronics11040602 · Cited by 81 · see citing works

Stacked one-class broad learning system for intrusion detection in industry 4.0

Yang, K., Shi, Y., Yu, Z., Yang, Q., Sangaiah, A. K., & Zeng, H. (2023) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2022.3157727 · Cited by 75 · see citing works

Evaluating model drift in machine learning algorithms

Nelson, K., Corbin, G., Anania, M., Kovacs, M., Tobias, J., & Blowers, M. (2015) · 2015 IEEE Symposium on Computational Intelligence for Security and Defense Applications (CISDA) · doi:10.1109/cisda.2015.7208643 · Cited by 31 · see citing works

Toward Bulk Synchronous Parallel-Based Machine Learning Techniques for Anomaly Detection in High-Speed Big Data Networks

Siddique, K., Akhtar, Z., Lee, H.-G., Kim, W., & Kim, Y. (2017) · Symmetry · doi:10.3390/sym9090197 · Cited by 21 · see citing works

RIDS: An Instant Approach to Network Intrusion Detection and Prevention

Ahmed, M., Pal, R., Hossain, M. M., et al. (2009) · International Conference on Electronic Computer Technology · doi:10.1109/icect.2009.128

Campus Network Security Defense System Research based on IDS

Xiao, W. (2010) · Computer Knowledge and Technology

A Protective System in Network Security

Bo, C. (2005) · Journal of Huzhou Teachers College

The Summary of Intrusion Detection System

Zhi-yong, H. (2003) · Microcomputer Development · Cited by 1 · see citing works

A Comprehensive Study of Intrusion Detection and Prevention Systems

Bhati, B. S., Dikshita, Bhati, N. S., et al. (2022) · doi:10.1002/9781119777465.ch7 · Cited by 16 · see citing works