{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,8]],"date-time":"2026-07-08T16:50:13Z","timestamp":1783529413972,"version":"3.55.0"},"reference-count":54,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2025,4,1]],"date-time":"2025-04-01T00:00:00Z","timestamp":1743465600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2025,4,1]],"date-time":"2025-04-01T00:00:00Z","timestamp":1743465600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2025,4,1]],"date-time":"2025-04-01T00:00:00Z","timestamp":1743465600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2025,4,1]],"date-time":"2025-04-01T00:00:00Z","timestamp":1743465600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2025,4,1]],"date-time":"2025-04-01T00:00:00Z","timestamp":1743465600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2025,4,1]],"date-time":"2025-04-01T00:00:00Z","timestamp":1743465600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,4,1]],"date-time":"2025-04-01T00:00:00Z","timestamp":1743465600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Expert Systems with Applications"],"published-print":{"date-parts":[[2025,4]]},"DOI":"10.1016\/j.eswa.2025.126513","type":"journal-article","created":{"date-parts":[[2025,1,18]],"date-time":"2025-01-18T00:41:21Z","timestamp":1737160881000},"page":"126513","update-policy":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":23,"special_numbering":"C","title":["NIDS-DA: Detecting functionally preserved adversarial examples for network intrusion detection system using deep autoencoders"],"prefix":"10.1016","volume":"270","author":[{"given":"Vivek","family":"Kumar","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/2.zoppoz.workers.dev:443\/https\/orcid.org\/0000-0001-8063-8650","authenticated-orcid":false,"given":"Kamal","family":"Kumar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/2.zoppoz.workers.dev:443\/https\/orcid.org\/0000-0002-9842-0227","authenticated-orcid":false,"given":"Maheep","family":"Singh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Neeraj","family":"Kumar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.eswa.2025.126513_b1","series-title":"2021 IEEE conference on communications and network security","first-page":"119","article-title":"Gadot: Gan-based adversarial training for robust ddos attack detection","author":"Abdelaty","year":"2021"},{"key":"10.1016\/j.eswa.2025.126513_b2","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2021.115782","article-title":"Adversarial machine learning in network intrusion detection systems","volume":"186","author":"Alhajjar","year":"2021","journal-title":"Expert Systems with Applications"},{"key":"10.1016\/j.eswa.2025.126513_b3","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2021.115782","article-title":"Adversarial machine learning in network intrusion detection systems","volume":"186","author":"Alhajjar","year":"2021","journal-title":"Expert Systems with Applications"},{"issue":"3","key":"10.1016\/j.eswa.2025.126513_b4","doi-asserted-by":"crossref","first-page":"4179","DOI":"10.1007\/s13369-023-08315-5","article-title":"A robust SNMP-MIB intrusion detection system against adversarial attacks","volume":"49","author":"Alslman","year":"2024","journal-title":"Arabian Journal for Science and Engineering"},{"issue":"3","key":"10.1016\/j.eswa.2025.126513_b5","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3469659","article-title":"Modeling realistic adversarial attacks against network intrusion detection systems","volume":"3","author":"Apruzzese","year":"2022","journal-title":"Digital Threats: Research and Practice (DTRAP)"},{"key":"10.1016\/j.eswa.2025.126513_b6","unstructured":"Buckman, J., Roy, A., Raffel, C., & Goodfellow, I. (2018). Thermometer encoding: One hot way to resist adversarial examples. In International conference on learning representations."},{"key":"10.1016\/j.eswa.2025.126513_b7","series-title":"2017 ieee symposium on security and privacy (sp)","first-page":"39","article-title":"Towards evaluating the robustness of neural networks","author":"Carlini","year":"2017"},{"key":"10.1016\/j.eswa.2025.126513_b8","series-title":"Packet-level adversarial network traffic crafting using sequence generative adversarial networks","author":"Cheng","year":"2021"},{"key":"10.1016\/j.eswa.2025.126513_b9","doi-asserted-by":"crossref","first-page":"185","DOI":"10.1016\/j.future.2022.08.011","article-title":"TAD: Transfer learning-based multi-adversarial detection of evasion attacks against network intrusion detection systems","volume":"138","author":"Debicha","year":"2023","journal-title":"Future Generation Computer Systems"},{"key":"10.1016\/j.eswa.2025.126513_b10","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103176","article-title":"Adv-bot: Realistic adversarial botnet attacks against network intrusion detection systems","volume":"129","author":"Debicha","year":"2023","journal-title":"Computers & Security"},{"issue":"2","key":"10.1016\/j.eswa.2025.126513_b11","doi-asserted-by":"crossref","first-page":"852","DOI":"10.3390\/app12020852","article-title":"On the detection capabilities of signature-based intrusion detection systems in the context of web attacks","volume":"12","author":"D\u00edaz-Verdejo","year":"2022","journal-title":"Applied Sciences"},{"issue":"1","key":"10.1016\/j.eswa.2025.126513_b12","first-page":"723","article-title":"A kernel two-sample test","volume":"13","author":"Gretton","year":"2012","journal-title":"Journal of Machine Learning Research"},{"key":"10.1016\/j.eswa.2025.126513_b13","series-title":"On the (statistical) detection of adversarial examples","author":"Grosse","year":"2017"},{"key":"10.1016\/j.eswa.2025.126513_b14","series-title":"Practical traffic-space adversarial attacks on learning-based nidss","author":"Han","year":"2020"},{"key":"10.1016\/j.eswa.2025.126513_b15","series-title":"Proceedings of the 3rd ACM coNEXT workshop on big dAta, machine learning and artificial intelligence for data communication networks","first-page":"14","article-title":"Towards evaluation of NIDSs in adversarial setting","author":"Hashemi","year":"2019"},{"key":"10.1016\/j.eswa.2025.126513_b16","series-title":"2020 IEEE conference on network function virtualization and software defined networks","first-page":"37","article-title":"Enhancing robustness against adversarial examples in network intrusion detection systems","author":"Hashemi","year":"2020"},{"key":"10.1016\/j.eswa.2025.126513_b17","doi-asserted-by":"crossref","DOI":"10.1109\/COMST.2022.3233793","article-title":"Adversarial machine learning for network intrusion detection systems: a comprehensive survey","author":"He","year":"2023","journal-title":"IEEE Communications Surveys & Tutorials"},{"key":"10.1016\/j.eswa.2025.126513_b18","doi-asserted-by":"crossref","DOI":"10.1016\/j.teler.2023.100053","article-title":"DCNNBiLSTM: An efficient hybrid deep learning-based intrusion detection system","volume":"10","author":"Hnamte","year":"2023","journal-title":"Telematics and Informatics Reports"},{"issue":"3","key":"10.1016\/j.eswa.2025.126513_b19","doi-asserted-by":"crossref","DOI":"10.1002\/wsbm.1548","article-title":"Explainable deep learning in healthcare: A methodological survey from an attribution view","volume":"14","author":"Jin","year":"2022","journal-title":"WIREs Mechanisms of Disease"},{"key":"10.1016\/j.eswa.2025.126513_b20","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2022.116815","article-title":"Adversarial attacks and defenses on AI in medical imaging informatics: A survey","volume":"198","author":"Kaviani","year":"2022","journal-title":"Expert Systems with Applications"},{"key":"10.1016\/j.eswa.2025.126513_b21","series-title":"Defending the defender: Detecting adversarial examples for network intrusion detection systems","author":"Khettaf","year":"2022"},{"key":"10.1016\/j.eswa.2025.126513_b22","series-title":"Artificial intelligence safety and security","first-page":"99","article-title":"Adversarial examples in the physical world","author":"Kurakin","year":"2018"},{"key":"10.1016\/j.eswa.2025.126513_b23","doi-asserted-by":"crossref","first-page":"443","DOI":"10.1016\/j.neucom.2021.05.103","article-title":"An introduction to deep learning in natural language processing: Models, techniques, and tools","volume":"470","author":"Lauriola","year":"2022","journal-title":"Neurocomputing"},{"key":"10.1016\/j.eswa.2025.126513_b24","series-title":"Pacific-Asia conference on knowledge discovery and data mining","first-page":"79","article-title":"Idsgan: Generative adversarial networks for attack generation against intrusion detection","author":"Lin","year":"2022"},{"key":"10.1016\/j.eswa.2025.126513_b25","series-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017"},{"key":"10.1016\/j.eswa.2025.126513_b26","doi-asserted-by":"crossref","first-page":"69822","DOI":"10.1109\/ACCESS.2022.3187116","article-title":"Detecting zero-day intrusion attacks using semi-supervised machine learning approaches","volume":"10","author":"Mbona","year":"2022","journal-title":"IEEE Access"},{"key":"10.1016\/j.eswa.2025.126513_b27","series-title":"Adversarial attacks on image generation with made-up words","author":"Milli\u00e8re","year":"2022"},{"key":"10.1016\/j.eswa.2025.126513_b28","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.-M., Fawzi, A., Fawzi, O., & Frossard, P. (2017). Universal adversarial perturbations. In Proceedings of the IEEE conference on computer vision and pattern recognition (pp. 1765\u20131773).","DOI":"10.1109\/CVPR.2017.17"},{"key":"10.1016\/j.eswa.2025.126513_b29","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.-M., Fawzi, A., & Frossard, P. (2016). Deepfool: a simple and accurate method to fool deep neural networks. In Proceedings of the IEEE conference on computer vision and pattern recognition (pp. 2574\u20132582).","DOI":"10.1109\/CVPR.2016.282"},{"key":"10.1016\/j.eswa.2025.126513_b30","series-title":"2015 military communications and information systems conference","first-page":"1","article-title":"UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set)","author":"Moustafa","year":"2015"},{"key":"10.1016\/j.eswa.2025.126513_b31","series-title":"Adversarial robustness toolbox v1. 0.0","author":"Nicolae","year":"2018"},{"key":"10.1016\/j.eswa.2025.126513_b32","series-title":"2016 IEEE European symposium on security and privacy (euroS&p)","first-page":"372","article-title":"The limitations of deep learning in adversarial settings","author":"Papernot","year":"2016"},{"key":"10.1016\/j.eswa.2025.126513_b33","doi-asserted-by":"crossref","first-page":"148","DOI":"10.1016\/j.future.2020.04.013","article-title":"Defending network intrusion detection systems against adversarial evasion attacks","volume":"110","author":"Pawlicki","year":"2020","journal-title":"Future Generation Computer Systems"},{"key":"10.1016\/j.eswa.2025.126513_b34","series-title":"2020 IEEE 11th international conference on software engineering and service science","first-page":"6","article-title":"Detecting adversarial examples for network intrusion detection system with GAN","author":"Peng","year":"2020"},{"key":"10.1016\/j.eswa.2025.126513_b35","doi-asserted-by":"crossref","first-page":"97","DOI":"10.1016\/j.comcom.2023.09.030","article-title":"Untargeted white-box adversarial attack with heuristic defence methods in real-time deep learning based network intrusion detection system","volume":"218","author":"Roshan","year":"2024","journal-title":"Computer Communications"},{"issue":"6088","key":"10.1016\/j.eswa.2025.126513_b36","doi-asserted-by":"crossref","first-page":"533","DOI":"10.1038\/323533a0","article-title":"Learning representations by back-propagating errors","volume":"323","author":"Rumelhart","year":"1986","journal-title":"Nature"},{"key":"10.1016\/j.eswa.2025.126513_b37","doi-asserted-by":"crossref","DOI":"10.1016\/j.compeleceng.2022.107810","article-title":"Anomaly-based intrusion detection system for IoT networks through deep learning model","volume":"99","author":"Saba","year":"2022","journal-title":"Computers & Electrical Engineering"},{"key":"10.1016\/j.eswa.2025.126513_b38","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103483","article-title":"RAIDS: Robust autoencoder-based intrusion detection system model against adversarial attacks","author":"Sar\u0131kaya","year":"2023","journal-title":"Computers & Security"},{"key":"10.1016\/j.eswa.2025.126513_b39","first-page":"108","article-title":"Toward generating a new intrusion detection dataset and intrusion traffic characterization","volume":"1","author":"Sharafaldin","year":"2018","journal-title":"ICISSp"},{"key":"10.1016\/j.eswa.2025.126513_b40","series-title":"Adversarial examples in constrained domains","author":"Sheatsley","year":"2020"},{"key":"10.1016\/j.eswa.2025.126513_b41","doi-asserted-by":"crossref","unstructured":"Shu, D., Leslie, N. O., Kamhoua, C. A., & Tucker, C. S. (2020). Generative adversarial attacks against intrusion detection systems using active learning. In Proceedings of the 2nd ACM workshop on wireless security and machine learning (pp. 1\u20136).","DOI":"10.1145\/3395352.3402618"},{"key":"10.1016\/j.eswa.2025.126513_b42","series-title":"A unified framework for adversarial attack and defense in constrained feature space","author":"Simonetto","year":"2021"},{"key":"10.1016\/j.eswa.2025.126513_b43","series-title":"Intriguing properties of neural networks","author":"Szegedy","year":"2013"},{"key":"10.1016\/j.eswa.2025.126513_b44","series-title":"2009 IEEE symposium on computational intelligence for security and defense applications","first-page":"1","article-title":"A detailed analysis of the KDD cup 99 data set","author":"Tavallaee","year":"2009"},{"key":"10.1016\/j.eswa.2025.126513_b45","first-page":"2317","article-title":"Learning analytics using deep learning techniques for efficiently managing educational institutes","volume":"51","author":"Veluri","year":"2022","journal-title":"Materials Today: Proceedings"},{"key":"10.1016\/j.eswa.2025.126513_b46","series-title":"2022 international conference on robotics and automation","first-page":"897","article-title":"Safetynet: Safe planning for real-world self-driving vehicles using machine-learned policies","author":"Vitelli","year":"2022"},{"issue":"2","key":"10.1016\/j.eswa.2025.126513_b47","doi-asserted-by":"crossref","first-page":"1139","DOI":"10.1109\/TDSC.2022.3148990","article-title":"Manda: On adversarial example detection for network intrusion detection system","volume":"20","author":"Wang","year":"2022","journal-title":"IEEE Transactions on Dependable and Secure Computing"},{"key":"10.1016\/j.eswa.2025.126513_b48","doi-asserted-by":"crossref","unstructured":"Wang, X., & He, K. (2021). Enhancing the transferability of adversarial attacks through variance tuning. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 1924\u20131933).","DOI":"10.1109\/CVPR46437.2021.00196"},{"key":"10.1016\/j.eswa.2025.126513_b49","doi-asserted-by":"crossref","DOI":"10.1016\/j.techfore.2021.121345","article-title":"Revisiting TAM2 in behavioral targeting advertising: a deep learning-based dual-stage SEM-ANN analysis","volume":"175","author":"Wang","year":"2022","journal-title":"Technological Forecasting and Social Change"},{"key":"10.1016\/j.eswa.2025.126513_b50","doi-asserted-by":"crossref","unstructured":"Wei, Z., Chen, J., Wu, Z., & Jiang, Y.-G. (2022). Cross-modal transferable adversarial attacks from images to videos. In Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition (pp. 15064\u201315073).","DOI":"10.1109\/CVPR52688.2022.01464"},{"key":"10.1016\/j.eswa.2025.126513_b51","series-title":"Feature squeezing: Detecting adversarial examples in deep neural networks","author":"Xu","year":"2017"},{"key":"10.1016\/j.eswa.2025.126513_b52","doi-asserted-by":"crossref","unstructured":"Zhang, C., Costa-P\u00e9rez, X., & Patras, P. (2020). Tiki-taka: Attacking and defending deep learning-based intrusion detection systems. In Proceedings of the 2020 ACM SIGSAC conference on cloud computing security workshop (pp. 27\u201339).","DOI":"10.1145\/3411495.3421359"},{"issue":"8","key":"10.1016\/j.eswa.2025.126513_b53","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3547330","article-title":"Adversarial attacks and defenses in deep learning: From a perspective of cybersecurity","volume":"55","author":"Zhou","year":"2022","journal-title":"ACM Computing Surveys"},{"key":"10.1016\/j.eswa.2025.126513_b54","series-title":"Generating practical adversarial network traffic flows using NIDSGAN","author":"Zolbayar","year":"2022"}],"container-title":["Expert Systems with Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/api.elsevier.com\/content\/article\/PII:S0957417425001356?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/api.elsevier.com\/content\/article\/PII:S0957417425001356?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,4,16]],"date-time":"2025-04-16T17:28:18Z","timestamp":1744824498000},"score":1,"resource":{"primary":{"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/linkinghub.elsevier.com\/retrieve\/pii\/S0957417425001356"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,4]]},"references-count":54,"alternative-id":["S0957417425001356"],"URL":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.1016\/j.eswa.2025.126513","relation":{},"ISSN":["0957-4174"],"issn-type":[{"value":"0957-4174","type":"print"}],"subject":[],"published":{"date-parts":[[2025,4]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"NIDS-DA: Detecting functionally preserved adversarial examples for network intrusion detection system using deep autoencoders","name":"articletitle","label":"Article Title"},{"value":"Expert Systems with Applications","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/2.zoppoz.workers.dev:443\/https\/doi.org\/10.1016\/j.eswa.2025.126513","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2025 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"126513"}}