Cited by 3,332Network Security and Intrusion DetectionNetwork Packet Processing and OptimizationArtificial Immune Systems Applications

The DOI matches its Crossref record; 114 of the 119 references it cites were found in a registry or an index, and 4 are not checked yet.

A Survey of Data Mining and Machine Learning Methods for Cyber Security Intrusion Detection

Buczak, Anna L., Guven, Erhan·2016·IEEE Communications Surveys & Tutorials

DOI 10.1109/comst.2015.2494502

Open this paper in CoChat — free account

Abstract

This survey paper describes a focused literature survey of machine learning (ML) and data mining (DM) methods for cyber analytics in support of intrusion detection. Short tutorial descriptions of each ML/DM method are provided. Based on the number of citations or the relevance of an emerging method, papers representing each method were identified, read, and summarized. Because data are so important in ML/DM approaches, some well-known cyber data sets used in ML/DM are described. The complexity of ML/DM algorithms is addressed, discussion of challenges for using ML/DM for cyber security is presented, and some recommendations on when to use a given method are provided.

Integrity signals

Registry

Crossref · 10.1109/comst.2015.2494502

Cites

114 of 118 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

This paper’s full text isn’t openly available, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Random Forests
Breiman, L. (2001) · Machine Learning · doi:10.1023/a:1010933404324 · Cited by 133,538
Fuzzy sets
Zadeh, L. A. (1965) · Information and Control · doi:10.1016/s0019-9958(65)90241-x · Cited by 67,855
Particle swarm optimization
Kennedy, J., & Eberhart, R. (2002) · Proceedings of ICNN'95 - International Conference on Neural Networks · doi:10.1109/icnn.1995.488968 · Cited by 58,192
Maximum Likelihood from Incomplete Data Via the EM Algorithm
Dempster, A. P., Laird, N. M., & Rubin, D. B. (1977) · Journal of the Royal Statistical Society Series B: Statistical Methodology · doi:10.1111/j.2517-6161.1977.tb01600.x · Cited by 50,444
Fuzzy sets
Zadeh, L. A. (1996) · Cited by 46,960
The Nature of Statistical Learning Theory
Vapnik, V. (2000) · Statistics for Engineering and Information Science · doi:10.1007/978-1-4757-3264-1 · Cited by 46,387
Collective dynamics of ‘small-world’ networks
Watts, D. J., & Strogatz, S. H. (1998) · Nature · doi:10.1038/30918 · Cited by 43,060
The Nature of Statistical Learning Theory
Vapnik, V. N. (1995) · doi:10.1007/978-1-4757-2440-0 · Cited by 39,138
Data Mining: Practical Machine Learning Tools and Techniques
Witten, I. H., Frank, E., & Hall, M. A. (2011) · Elsevier eBooks · doi:10.1016/c2009-0-19715-5 · Cited by 25,543
Untitled work
(1992) · Cited by 23,431

Flagged first, then by citations

Show all 119 references

1 of the 119 references couldn’t be matched to a known paper.

Research works printed but not linked: 14

Shearer, 2000, The CRISP-DM model: The new blueprint for data mining, J. Data Warehouse., 5, 13
2000, R Core Team
Jacobson, 1989, The Tcpdump Manual Page
Combs, 2014, Wireshark
2014, Sourcefire
Stolfo, 2014, KDD Cup 1999 Data Set
2015, IBM
10.4108/wkdd.2008.2686 · DOI
2014, Politecnico di Torino, Analyzer 3.0
Baralis, 2008, Generalized Itemset Discovery by Means of Opportunistic Aggregation
Markov, 1971, Extension of the limit theorems of probability theory to a sum of variables connected in a chain, Dynamic Probabilistic Systems, 1
10.2307/2984875 · DOI
Brauckhoff, 2008, Flame: A low-level anomaly modeling engine
Paxson, 2004, Bro 0.9

Sorted by citations

Items 701–800 of 1,003

Enhance Intrusion Detection in Computer Networks Based on Deep Extreme Learning Machine
Khan, M. A., Rehman, A., Khan, K. M., Ghamdi, M. A. A., & Almotiri, S. H. (2020) · Computers, materials & continua/Computers, materials & continua (Print) · doi:10.32604/cmc.2020.013121 · Cited by 30
An Isolation Forest Learning Based Outlier Detection Approach for Effectively Classifying Cyber Anomalies
Ripan, R. C., Sarker, I. H., Anwar, M., Furhad, M. H., Rahat, F., Hoque, M. M., & Sarfraz, M. (2021) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-73050-5_27 · Cited by 35
Automated Feature Selection for Anomaly Detection in Network Traffic Data
Nakashima, M., Sim, A., Kim, Y., et al. (2021) · ACM Transactions on Management Information Systems · doi:10.1145/3446636 · Cited by 30
Change Point Models for Real-Time Cyber Attack Detection in Connected Vehicle Environment
Comert, G., Rahman, M., Islam, M., & Chowdhury, M. A. (2021) · IEEE Transactions on Intelligent Transportation Systems · doi:10.1109/tits.2021.3113675 · Cited by 30
Online Fake News Detection Using Machine Learning Techniques: A Systematic Mapping Study
Lahby, M., Aqil, S., Yafooz, W. M. S., & Abakarim, Y. (2021) · Studies in computational intelligence · doi:10.1007/978-3-030-90087-8_1 · Cited by 30
Investigating the Effect of Traffic Sampling on Machine Learning-Based Network Intrusion Detection Approaches
Alikhanov, J., Jang, R., Abuhamad, M., Mohaisen, A., Nyang, D., & Noh, Y. (2021) · IEEE Access · doi:10.1109/access.2021.3137318 · Cited by 30
A Brief Review on Internet of Things, Industry 4.0 and Cybersecurity
Rudenko, R., Pires, I. M., Oliveira, P., Barroso, J., & Reis, A. (2022) · Electronics · doi:10.3390/electronics11111742 · Cited by 33
A cyber risk prediction model using common vulnerabilities and exposures
Kia, A. N., Murphy, F., Sheehan, B., & Shannon, D. (2023) · Expert Systems with Applications · doi:10.1016/j.eswa.2023.121599 · Cited by 31
Deep Neural Network Architecture for Anomaly Based Intrusion Detection System
Behera, S., Pradhan, A., & Dash, R. (2018) · International Conference on Signal Processing and Integrated Networks (SPIN) · doi:10.1109/spin.2018.8474162 · Cited by 30
A statistical pattern based feature extraction method on system call traces for anomaly detection
Liu, Z., Japkowicz, N., Wang, R., Cai, Y., Tang, D., & Cai, X. (2020) · Information and Software Technology · doi:10.1016/j.infsof.2020.106348 · Cited by 30
Ethical AI in Information Technology: Navigating Bias, Privacy, Transparency, and Accountability
National Technical University of Athens, G., & Sargiotis, D. (2024) · Advances in Machine Learning & Artificial Intelligence · doi:10.33140/amlai.05.03.03 · Cited by 34
Research on Anomaly Network Detection Based on Self-Attention Mechanism
Hu, W., Cao, L., Ruan, Q., & Wu, Q. (2023) · Sensors · doi:10.3390/s23115059 · Cited by 30
“The third category is classification algorithms based on machine learning methods [10].”
Background
ILIDViz: An Incremental Learning-Based Visual Analysis System for Network Anomaly Detection
Tian, X., Wu, Z., Cao, J., et al. (2023) · Virtual Reality & Intelligent Hardware · doi:10.1016/j.vrih.2023.06.009 · Cited by 29
Advanced Cybercrime Detection: A Comprehensive Study on Supervised and Unsupervised Machine Learning Approaches Using Real-world Datasets
Cao, D. M., Sayed, M. A., Sayed, M. A., et al. (2024) · Journal of Computer Science and Technology Studies · doi:10.32996/jcsts.2024.6.1.5 · Cited by 29
A new Attack Composition for Network Security
Beer, F., Hofer, T., Karimi, D., & Buehler, U. (2017) · DFN-Forum Kommunikationstechnologien · Cited by 29
User-Oriented Piezoelectric Force Sensing and Artificial Neural Networks in Interactive Displays
Gao, S., Duan, J., Kitsos, V., Selviah, D. R., & Nathan, A. (2018) · IEEE Journal of the Electron Devices Society · doi:10.1109/jeds.2018.2848917 · Cited by 28
“Related techniques have already been applied in other systems, such as smart home environment [24-26], smart security system [27-28], and smart self-driving system [29-30].”
Method
Application of Deep Learning Architectures for Cyber Security
Vinayakumar, R., Soman, K. P., Poornachandran, P., & Akarsh, S. (2019) · Advanced sciences and technologies for security applications · doi:10.1007/978-3-030-16837-7_7 · Cited by 32
Performance analysis of binary and multiclass models using azure machine learning
Rajagopal, S., Siddaramappa, H. K., & Kundapur, P. P. (2020) · International Journal of Electrical and Computer Engineering (IJECE) · doi:10.11591/ijece.v10i1.pp978-986 · Cited by 29
Design of College English Process Evaluation System Based on Data Mining Technology and Internet of Things
Lou, H. (2020) · International Journal of Data Warehousing and Mining · doi:10.4018/ijdwm.2020040102 · Cited by 29
An Overview of Cyber Threat Intelligence Platform and Role of Artificial Intelligence and Machine Learning
Dutta, A., & Kant, S. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-65610-2_5 · Cited by 32
T‐SNERF: A novel high accuracy machine learning approach for Intrusion Detection Systems
Hammad, M., Hewahi, N. M., & Elmedany, W. M. (2021) · IET Information Security · doi:10.1049/ise2.12020 · Cited by 29
New energy industry financial technology based on machine learning to help rural revitalization
Shao, F. (2022) · Energy Reports · doi:10.1016/j.egyr.2022.10.001 · Cited by 30
Machine learning to improve the performance of anomaly-based network intrusion detection in big data
Chimphlee, S., & Chimphlee, W. (2023) · Indonesian Journal of Electrical Engineering and Computer Science · doi:10.11591/ijeecs.v30.i2.pp1106-1119 · Cited by 29
Efficient intrusion detection using multi-player generative adversarial networks (GANs): an ensemble-based deep learning architecture
Soleymanzadeh, R., & Kashef, R. F. (2023) · Neural Computing and Applications · doi:10.1007/s00521-023-08398-z · Cited by 29
“In the field of intrusion detection, various methods have been used to improve the performance of classifiers [7, 13, 14].”
Method
Cyber security challenges: An efficient intrusion detection system design
Kabir, M. F., & Hartmann, S. (2018) · International Young Engineers Forum (YEF-ECE) · doi:10.1109/yef-ece.2018.8368933 · Cited by 29
Data Processing and Model Selection for Machine Learning-based Network Intrusion Detection
Sahu, A., Mao, Z., Davis, K., & Goulart, A. (2020) · IEEE International Workshop Technical Committee on Communications Quality and Reliability (CQR) · doi:10.1109/cqr47547.2020.9101394 · Cited by 29
Zero Trust Architecture Leveraging AI-Driven Behavior Analytics for Industrial Control Systems in Energy Distribution Networks
Uche James, U., Idika, C. N., & Anebi Enyejo, L. (2023) · International Journal of Scientific Research in Computer Science, Engineering and Information Technology · doi:10.32628/cseit23564522 · Cited by 29
Machine Learning and Deep Learning
Möller, D. P. F. (2023) · Advances in information security · doi:10.1007/978-3-031-26845-8_8 · Cited by 32
Poisoning and Evasion: Deep Learning-Based NIDS under Adversarial Attacks
Mohammadian, H., Lashkari, A. H., & Ghorbani, A. A. (2024) · Conference on Privacy, Security and Trust · doi:10.1109/pst62714.2024.10788064 · Cited by 32
XI2S-IDS: An Explainable Intelligent 2-Stage Intrusion Detection System
Mahmoud, M. M., Omar, Y. M. K., & Abdel-Hamid, A. (2025) · Future Internet · doi:10.3390/fi17010025 · Cited by 28
“Traditionally, IDS have been effective in monitoring network traffic and host activities to identify potential attacks [7].”
Designing a decision support system for the weakly formalized problems in the provision of cybersecurity
Akhmetov, B., Lakhno, V., Boiko, Y., et al. (2017) · Eastern-European Journal of Enterprise Technologies · doi:10.15587/1729-4061.2017.90506 · Cited by 28
The Mouseworld, a security traffic analysis lab based on NFV/SDN
Pastor, A., Mozó, A., Lopez, D. R., Folgueira, J., & Kapodistria, A. (2018) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3230833.3233283 · Cited by 30
“The lack of labelled data [3] makes infeasible the use of supervised ML algorithms, where labelled traffic flows are necessary for training and validation processes.”
Background
Enhancing Network Security Via Machine Learning: Opportunities and Challenges
Amrollahi, M., Hadayeghparast, S., Karimipour, H., Derakhshan, F., & Srivastava, G. (2020) · Springer eBooks · doi:10.1007/978-3-030-38557-6_8 · Cited by 31
Android Ransomware Detection using Machine Learning Techniques: A Comparative Analysis on GPU and CPU
Sharma, S. G., Krishna, C. R., & Kumar, R. (2020) · International Arab Conference on Information Technology (ACIT) · doi:10.1109/acit50332.2020.9300108 · Cited by 28
Intellectual structure of cybersecurity research in enterprise information systems
Singh, N. K., Krishnaswamy, V., & Zhang, Z. (2022) · Enterprise Information Systems · doi:10.1080/17517575.2022.2025545 · Cited by 28
A Novel Hybrid Deep Learning Framework for Intrusion Detection Systems in WSN-IoT Networks
Maheswari, M., & Karthika, R. A. (2022) · Intelligent Automation & Soft Computing · doi:10.32604/iasc.2022.022259 · Cited by 30
Research on hybrid intrusion detection method based on the ADASYN and ID3 algorithms
Li, Y., Xu, W., Li, W., Li, A., & Liu, Z. (2021) · Mathematical Biosciences & Engineering · doi:10.3934/mbe.2022095 · Cited by 28
Contemporary survey on effectiveness of machine and deep learning techniques for cyber security
Suresh, P., Logeswaran, K., Keerthika, P., Devi, R. M., Sentamilselvan, K., Kamalam, G. K., & Muthukrishnan, H. (2022) · Elsevier eBooks · doi:10.1016/b978-0-323-85209-8.00007-9 · Cited by 28
A Novel Anomaly Network Intrusion Detection System for Internet of Things Security
Guezzaz, A., Benkirane, S., & Azrour, M. (2022) · EAI/Springer Innovations in Communication and Computing · doi:10.1007/978-3-030-90083-0_10 · Cited by 28
An Autoencoder-Enhanced Stacking Neural Network Model for Increasing the Performance of Intrusion Detection
Brunner, C., Kő, A., & Fodor, S. (2021) · Journal of Artificial Intelligence and Soft Computing Research · doi:10.2478/jaiscr-2022-0010 · Cited by 28
DDOS Attack Detection Using Lightweight Partial Decision Tree algorithm
Kareem, M. I., & Jasim, M. N. (2022) · doi:10.1109/csase51777.2022.9759824 · Cited by 28
Mitigating Adversarial Gray-Box Attacks Against Phishing Detectors
Apruzzese, G., & Subrahmanian, V. S. (2022) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2022.3210029 · Cited by 30
Data-driven modeling for forecasting oil recovery: A timeseries neural network approach for tertiary CO2 WAG EOR
Asante, J., Ampomah, W., Tu, J., & Cather, M. (2023) · Geoenergy Science and Engineering · doi:10.1016/j.geoen.2023.212555 · Cited by 28
Intrusion Detection System
Singh, A. P., Prakash, J., Kumar, G., Jain, P. K., & Ambati, L. S. (2024) · Journal of Database Management · doi:10.4018/jdm.338276 · Cited by 38
A novel approach for internet traffic classification based on multi-objective evolutionary fuzzy classifiers
Ducange, P., Mannara, G., Marcelloni, F., Pecori, R., & Vecchio, M. (2017) · IEEE International Conference on Fuzzy Systems (FUZZ-IEEE) · doi:10.1109/fuzz-ieee.2017.8015662 · Cited by 28
“Analyzing the specialized literature [7], [8], [9], we highlight that the use of data mining and machine learning methods for ITC is quite popular, hence still representing a hot research topic.”
Background
Anomaly detection in smart card logs and distant evaluation with Twitter: a robust framework
Tonnelier, E., Baskiotis, N., Guigue, V., & Gallinari, P. (2018) · Neurocomputing · doi:10.1016/j.neucom.2017.12.067 · Cited by 28
“Anomaly detection has been widely studied in Machine Learning [8] in many applications: for instances in cyber security and intrusion detection [9], in fraud detection [10], in industry [24] or either in tra ﬃ c applications as congestion detection [4].”
BackgroundMethod
NetSentry: A deep learning approach to detecting incipient large-scale network attacks
Liu, H., & Patras, P. (2022) · Computer Communications · doi:10.1016/j.comcom.2022.04.020 · Cited by 30
“Machine Learning (ML) is increasingly used to detect cyber intrusions, due to its ability to discover complex statistical patterns hidden in data streams, which can aid in discriminating anomalies based on feature differences [4].”
Background
Explainable contextual anomaly detection using quantile regression forests
Li, Z., & van Leeuwen, M. (2023) · Data Mining and Knowledge Discovery · doi:10.1007/s10618-023-00967-z · Cited by 29
Network intrusion detection leveraging multimodal features
Kiflay, A., Tsokanos, A., Fazlali, M., & Kirner, R. (2024) · Array · doi:10.1016/j.array.2024.100349 · Cited by 36
Leveraging artificial intelligence for enhanced cybersecurity: insights and innovations
Thapaliya, S., & Bokani, A. (2024) · SADGAMAYA. · doi:10.3126/sadgamaya.v1i1.66888 · Cited by 30
Smart Collaborative Intrusion Detection System for Securing Vehicular Networks Using Ensemble Machine Learning Model
El-Gayar, M. M., Alrslani, F. A. F., & El–Sappagh, S. (2024) · Information · doi:10.3390/info15100583 · Cited by 27
L-xaids: A LIME-based eXplainable AI framework for intrusion detection systems
Muhammad, A. E., Yow, K., Bačanin-Džakula, N., & Khan, M. A. (2025) · Cluster Computing · doi:10.1007/s10586-025-05326-9 · Cited by 41
An Enhanced Approach to Fuzzy C-means Clustering for Anomaly Detection
Dahiya, R., & Chaurasia, S. (2018) · Smart innovation, systems and technologies · doi:10.1007/978-981-10-5828-8_60 · Cited by 27
A Semi-Supervised Learning Approach for Network Anomaly Detection in Fog Computing
Xu, S., Qian, Y., & Hu, R. Q. (2019) · International Conference on Communications · doi:10.1109/icc.2019.8761459 · Cited by 27
“2) Types of anomalies: In [6], the authors presented general types of common network anomalies.”
Background
A GP-based ensemble classification framework for time-changing streams of intrusion detection data
Gianluigi Folino, A., Pisani, F. S., & Pontieri, L. (2020) · Soft Computing · doi:10.1007/s00500-020-05200-3 · Cited by 27
CryingJackpot: Network Flows and Performance Counters against Cryptojacking
Gomes, G., Dias, L., & Correia, M. P. (2020) · IEEE International Symposium on Network Computing and Applications (NCA) · doi:10.1109/nca51143.2020.9306698 · Cited by 27
On the Evaluation of Sequential Machine Learning for Network Intrusion Detection
Corsini, A., Yang, S. J., & Apruzzese, G. (2021) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3465481.3470065 · Cited by 27
Robust Malware Detection Models: Learning from Adversarial Attacks and Defenses
Rathore, H., Samavedhi, A., Sahay, S. K., et al. (2021) · Forensic Science International Digital Investigation · doi:10.1016/j.fsidi.2021.301183 · Cited by 27
Distributed Approaches to Supply Chain Simulation
Mustafee, N., Katsaliaki, K., & Taylor, S. J. E. (2021) · ACM Transactions on Modeling and Computer Simulation · doi:10.1145/3466170 · Cited by 27
Federated Adaptive Asynchronous Clustering Algorithm for Wireless Mesh Networks
Qiao, C., Brown, K. N., Zhang, F., & Tian, Z. (2021) · IEEE Transactions on Knowledge and Data Engineering · doi:10.1109/tkde.2021.3119550 · Cited by 27
A Survey of Machine Learning Techniques for Video Quality Prediction from Quality of Delivery Metrics
Izima, O., de Fréin, R., & Malik, A. (2021) · Electronics · doi:10.3390/electronics10222851 · Cited by 29
A Network Intrusion Detection System Using Ensemble Machine Learning
Kiflay, A., Tsokanos, A., & Kirner, R. (2021) · International Carnahan Conference on Security Technology · doi:10.1109/iccst49569.2021.9717397 · Cited by 27
On building machine learning pipelines for Android malware detection: a procedural survey of practices, challenges and opportunities
Koushki, M. M., Abualhaol, I. Y., Raju, A. D., et al. (2022) · Cybersecurity · doi:10.1186/s42400-022-00119-8 · Cited by 27
Unknown, Atypical and Polymorphic Network Intrusion Detection: A Systematic Survey
Sabeel, U., Heydari, S. S., El‐Khatib, K., & Elgazzar, K. (2023) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2023.3298533 · Cited by 29
A Hybrid Meta-heuristics Algorithm: XGBoost-Based Approach for IDS in IoT
Bajpai, S., Sharma, K. D., & Chaurasia, B. K. (2024) · SN Computer Science · doi:10.1007/s42979-024-02913-2 · Cited by 27
Towards a Robust Method of Dataset Generation of Malicious Activity for Anomaly-Based HIDS Training and Presentation of AWSCTD Dataset
Čeponis, D., & Goranin, N. (2018) · Baltic Journal of Modern Computing · doi:10.22364/bjmc.2018.6.3.01 · Cited by 27
Development of decision support system based on feature matrix for cyber threat assessment
Kartbayev, T., Ахметов, Б. С., Doszhanova, A., et al. (2019) · International Journal of Electronics and Telecommunications · doi:10.24425/ijet.2019.129811 · Cited by 26
A hybrid blockchain and machine learning approach for intrusion detection system in Industrial Internet of Things
Wu, S., Zhu, X., Ren, S., Tan, W., & Peng, Y. (2025) · Alexandria Engineering Journal · doi:10.1016/j.aej.2025.05.030 · Cited by 29
A Systematic Review of Artificial Intelligence and Machine Learning Techniques for Cyber Security
Ali, R., Ali, A., Iqbal, F., Khattak, A. M., & Aleem, S. (2020) · Communications in computer and information science · doi:10.1007/978-981-15-7530-3_44 · Cited by 31
Empirical Evaluation of Noise Influence on Supervised Machine Learning Algorithms Using Intrusion Detection Datasets
Al-Gethami, K. M., Al-Akhras, M., & Alawairdhi, M. (2021) · Security and Communication Networks · doi:10.1155/2021/8836057 · Cited by 26
Application of Machine Learning for Ransomware Detection in IoT Devices
Ogundokun, R. O., Awotunde, J. B., Misra, S., Abikoye, O. C., & Folarin, O. (2021) · Studies in computational intelligence · doi:10.1007/978-3-030-72236-4_16 · Cited by 29
Cloud Computing Intrusion Detection Technology Based on BP-NN
Wen, L. (2021) · Wireless Personal Communications · doi:10.1007/s11277-021-08569-y · Cited by 26
Adversarial Black-Box Attacks Against Network Intrusion Detection Systems: A Survey
Alatwi, H. A., & Aldweesh, A. Y. (2021) · IEEE World AI IoT Congress (AIIoT) · doi:10.1109/aiiot52608.2021.9454214 · Cited by 26
1D-CNN based Model for Classification and Analysis of Network Attacks
Singh, K., Mahajan, A., & Mansotra, V. (2021) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2021.0121169 · Cited by 30
Using log analytics and process mining to enable self-healing in the Internet of Things
Singh, P., Azari, M. S., Vitale, F., Flammini, F., Mazzocca, N., Caporuscio, M., & Thornadtsson, J. (2022) · Environment Systems & Decisions · doi:10.1007/s10669-022-09859-x · Cited by 26
Bluetooth low energy for internet of things: review, challenges, and open issues
Al-Shareeda‬‏, ‪. A., Saare, M. A., Manickam, S., et al. (2023) · Indonesian Journal of Electrical Engineering and Computer Science · doi:10.11591/ijeecs.v31.i2.pp1182-1189 · Cited by 26
A detailed study on machine learning techniques for data mining
Guruvayur, S. R., & Suchithra, R. (2017) · International Conference on Trends in Electronics and Informatics (ICOEI) · doi:10.1109/icoei.2017.8300900 · Cited by 29
Cyber Intrusion Prediction and Taxonomy System Using Deep Learning And Distributed Big Data Processing
Najada, H. A., Mahgoub, I., & Mohammed, I. (2018) · IEEE Symposium Series on Computational Intelligence (SSCI) · doi:10.1109/ssci.2018.8628685 · Cited by 26
Comparison of Network Intrusion Detection Performance Using Feature Representation
Pérez, D., Alonso, S., Morán, A., Prada, M. A., Fuertes, J. J., & Domínguez, M. (2019) · Communications in computer and information science · doi:10.1007/978-3-030-20257-6_40 · Cited by 25
EsPADA: Enhanced Payload Analyzer for malware Detection robust against Adversarial threats
Vidal, J. M., Monge, M. A. S., & Monterrubio, S. M. M. (2019) · Future Generation Computer Systems · doi:10.1016/j.future.2019.10.022 · Cited by 26
Machine learning algorithms for improving security on touch screen devices: a survey, challenges and new perspectives
Bello, A. A., Chiroma, H., Gital, A. Y., Gabralla, L. A., Abdulhamid, S. M., & Shuib, L. M. (2020) · Neural Computing and Applications · doi:10.1007/s00521-020-04775-0 · Cited by 26
“However, the typical practice is to compare the performance of a propose algorithm with the classical algorithm to show its advantage, or otherwise, detail can be found in [55].”
Background
Enhanced network intrusion detection system protocol for internet of things
Mbarek, B., Ge, M., & Pitner, T. (2020) · ACM Symposium on Applied Computing · doi:10.1145/3341105.3373867 · Cited by 26
“In a RPL network, cloned node will cause malicious attacks when packets are delivered to one of the cloned nodes.”
Background
M-IDM: A Multi-Classification Based Intrusion Detection Model in Healthcare IoT
Lee, J. D., Cha, H. S., Rathore, S., et al. (2021) · Computers, materials & continua/Computers, materials & continua (Print) · doi:10.32604/cmc.2021.014774 · Cited by 26
Intrusion detection systems for software-defined networks: a comprehensive study on machine learning-based techniques
Mustafa, Z., Amin, R., Aldabbas, H., & Ahmed, N. (2024) · Cluster Computing · doi:10.1007/s10586-024-04430-6 · Cited by 26
Load Redistribution Attacks Against Smart Grids–Models, Impacts, and Defense: A Review
Verma, P., & Chakraborty, C. (2024) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2024.3393005 · Cited by 25
Exploring virtual smart healthcare trends using digital twins
Awasthi, M., Raghuvanshi, C. S., Dudhagara, C. R., & Awasthi, A. (2024) · Elsevier eBooks · doi:10.1016/b978-0-443-28884-5.00017-8 · Cited by 26
Evaluating the potential of quantum machine learning in cybersecurity: A case-study on PCA-based intrusion detection systems
Bellante, A., Fioravanti, T., Carminati, M., Zanero, S., & Luongo, A. (2025) · Computers & Security · doi:10.1016/j.cose.2025.104341 · Cited by 35
On the Sequential Pattern and Rule Mining in the Analysis of Cyber Security Alerts
Husák, M., Kašpar, J., Bou‐Harb, E., et al. (2017) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3098954.3098981 · Cited by 25
“A lot of recent research is dedicated to its application in intrusion detection, where the data mining is performed over network data such as packets or network flows [2].”
BackgroundInfluential
Network data management model based on Naïve Bayes classifier and deep neural networks in heterogeneous wireless networks
Wang, K. (2019) · Computers & Electrical Engineering · doi:10.1016/j.compeleceng.2019.02.015 · Cited by 25
Efficient Feature Selection for Intrusion Detection Systems
Ahmadi, S. S., Rashad, S. S., & Elgazzar, H. (2019) · IEEE Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON) · doi:10.1109/uemcon47517.2019.8992960 · Cited by 25
Ransomware Network Traffic Analysis for Pre-encryption Alert
Moussaileb, R., Cuppens-Boulahia, N., Lanet, J., et al. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-45371-8_2 · Cited by 25
Semi-Supervised Domain-Adversarial Training for Intrusion Detection against False Data Injection in the Smart Grid
Zhang, Y., & Yan, J. (2020) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn48605.2020.9207525 · Cited by 28
Cybersecurity challenges in energy sector (virtual power plants) - can edge computing principles be applied to enhance security?
Venkatachary, S. K., Alagappan, A., & Andrews, L. J. B. (2021) · Energy Informatics · doi:10.1186/s42162-021-00139-7 · Cited by 30
FPGA Hardware Acceleration Framework for Anomaly-based Intrusion Detection System in IoT
Ngo, D., Temko, A., Murphy, C. C., & Popovici, E. M. (2021) · International Conference on Field Programmable Logic and Applications (FPL) · doi:10.1109/fpl53798.2021.00020 · Cited by 25
Intrusion Detection Method Based on SMOTE Transformation for Smart Grid Cybersecurity
Massaoudi, M., Refaat, S. S., & Abu‐Rub, H. (2022) · International Conference on Smart Grid and Renewable Energy (SGRE) · doi:10.1109/sgre53517.2022.9774070 · Cited by 25
Fast and accurate classifying model for denial-of-service attacks by using machine learning
Kareem, M. I., & Jasim, M. N. (2022) · Bulletin of Electrical Engineering and Informatics · doi:10.11591/eei.v11i3.3688 · Cited by 25
Network Intrusion Detection System Based on an Adversarial Auto-Encoder with Few Labeled Training Samples
Shiomoto, K. (2022) · Journal of Network and Systems Management · doi:10.1007/s10922-022-09698-w · Cited by 25
Intrusion Detection Systems for the Internet of Thing: A Survey Study
Hassan, H. A., Hemdan, E. E., El‐Shafai, W., Shokair, M., & El‐Samie, F. E. A. (2022) · Wireless Personal Communications · doi:10.1007/s11277-022-10069-6 · Cited by 25
Detection of DoS Attacks in Smart City Networks With Feature Distance Maps: A Statistical Approach
Sarveshwaran, V., Amma, N. G. B., & Baik, N. (2023) · IEEE Internet of Things Journal · doi:10.1109/jiot.2023.3264670 · Cited by 25
Detection of DDoS Attacks Using Machine Learning Classification Algorithms
Dasari, K. B., & Devarakonda, N. (2022) · International Journal of Computer Network and Information Security · doi:10.5815/ijcnis.2022.06.07 · Cited by 25

Authors: Buczak, A. L., & Guven, E.
Affiliations: Johns Hopkins University (US)
ORCID: Buczak, Anna L.
Venue: IEEE Communications Surveys & Tutorials
Publisher: Institute of Electrical and Electronics Engineers (IEEE)
Published: 2016
Volume: 18
Issue: 2
Pages: 1153-1176
ISSN: 1553-877X (ISSN-L)
2373-745X
DOI: 10.1109/comst.2015.2494502
OpenAlex: W2342408547
Semantic Scholar: 971766088dfaf63fb55e6f0190b14f28f2c98ad0
Cited by: 3,332
References: 119
Citations by year: 2026: 460 · 2025: 395 · 2024: 297 · 2023: 319 · 2022: 403 · 2021: 447 · 2020: 394 · 2019: 314 · 2018: 217 · 2017: 73 · 2016: 11
FWCI: 115.39
Type: journal article
Language: en
Open access: closed
Licence: ieeexplore.ieee.org/Xplorehelp/downloads/license-information/OAPA.html (vor)
Locations: IEEE Communications Surveys & Tutorials (publishedVersion)
Funders: Department of Homeland Security Network Security Deployment Division (HSSA01-13-C-2709)
Topics: Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
Physical Sciences › Computer Science › Hardware and Architecture › Network Packet Processing and Optimization
Physical Sciences › Computer Science › Artificial Intelligence › Artificial Immune Systems Applications
Keywords: intrusion detection, cybersecurity, machine learning, data mining, algorithmic complexity

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review

A Survey of Data Mining and Machine Learning Methods for Cyber Security Intrusion Detection

Abstract

Overview

Integrity signals

Verification

Claims the paper makes

Claims other papers make about this one

Citations

Cites

Cited by

Related

Metadata

Record

About these checks