{"id":"https://openalex.org/W4402215121","doi":"https://doi.org/10.1007/s40860-024-00238-8","title":"Enhancing trustworthiness in ML-based network intrusion detection with uncertainty quantification","display_name":"Enhancing trustworthiness in ML-based network intrusion detection with uncertainty quantification","publication_year":2024,"publication_date":"2024-09-04","ids":{"openalex":"https://openalex.org/W4402215121","doi":"https://doi.org/10.1007/s40860-024-00238-8"},"language":"en","primary_location":{"id":"doi:10.1007/s40860-024-00238-8","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s40860-024-00238-8","pdf_url":"https://link.springer.com/content/pdf/10.1007/s40860-024-00238-8.pdf","source":{"id":"https://openalex.org/S2475775703","display_name":"Journal of Reliable Intelligent Environments","issn_l":"2199-4668","issn":["2199-4668","2199-4676"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Reliable Intelligent Environments","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s40860-024-00238-8.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020418683","display_name":"Jacopo Talpini","orcid":"https://orcid.org/0000-0003-1556-6296"},"institutions":[{"id":"https://openalex.org/I66752286","display_name":"University of Milano-Bicocca","ror":"https://ror.org/01ynf4891","country_code":"IT","type":"education","lineage":["https://openalex.org/I66752286"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Jacopo Talpini","raw_affiliation_strings":["Department of Informatics, Systems and Communication (DISCo), University of Milano-Bicocca, Milan, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Informatics, Systems and Communication (DISCo), University of Milano-Bicocca, Milan, Italy","institution_ids":["https://openalex.org/I66752286"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053982410","display_name":"F\u00e1bio Sartori","orcid":"https://orcid.org/0000-0002-5038-9785"},"institutions":[{"id":"https://openalex.org/I66752286","display_name":"University of Milano-Bicocca","ror":"https://ror.org/01ynf4891","country_code":"IT","type":"education","lineage":["https://openalex.org/I66752286"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Fabio Sartori","raw_affiliation_strings":["Department of Informatics, Systems and Communication (DISCo), University of Milano-Bicocca, Milan, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Informatics, Systems and Communication (DISCo), University of Milano-Bicocca, Milan, Italy","institution_ids":["https://openalex.org/I66752286"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084595174","display_name":"Marco Savi","orcid":"https://orcid.org/0000-0002-8193-0597"},"institutions":[{"id":"https://openalex.org/I66752286","display_name":"University of Milano-Bicocca","ror":"https://ror.org/01ynf4891","country_code":"IT","type":"education","lineage":["https://openalex.org/I66752286"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Marco Savi","raw_affiliation_strings":["Department of Informatics, Systems and Communication (DISCo), University of Milano-Bicocca, Milan, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Informatics, Systems and Communication (DISCo), University of Milano-Bicocca, Milan, Italy","institution_ids":["https://openalex.org/I66752286"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5020418683"],"corresponding_institution_ids":["https://openalex.org/I66752286"],"apc_list":{"value":2890,"currency":"USD","value_usd":2890},"apc_paid":{"value":2890,"currency":"USD","value_usd":2890},"fwci":3.4657,"has_fulltext":true,"cited_by_count":16,"citation_normalized_percentile":{"value":0.9308647,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"10","issue":"4","first_page":"501","last_page":"520"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.7398182153701782},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7129374742507935},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5244807600975037},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.466269314289093},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.41847386956214905},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3205593228340149}],"concepts":[{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.7398182153701782},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7129374742507935},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5244807600975037},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.466269314289093},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.41847386956214905},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3205593228340149},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.0},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s40860-024-00238-8","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s40860-024-00238-8","pdf_url":"https://link.springer.com/content/pdf/10.1007/s40860-024-00238-8.pdf","source":{"id":"https://openalex.org/S2475775703","display_name":"Journal of Reliable Intelligent Environments","issn_l":"2199-4668","issn":["2199-4668","2199-4676"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Reliable Intelligent Environments","raw_type":"journal-article"},{"id":"pmh:oai:boa.unimib.it:10281/509767","is_oa":true,"landing_page_url":"https://hdl.handle.net/10281/509767","pdf_url":"https://boa.unimib.it/bitstream/10281/509767/1/Talpini-2024-JRIE-VoR.pdf","source":{"id":"https://openalex.org/S4306401259","display_name":"BOA (University of Milano-Bicocca)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66752286","host_organization_name":"University of Milano-Bicocca","host_organization_lineage":["https://openalex.org/I66752286"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1007/s40860-024-00238-8","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s40860-024-00238-8","pdf_url":"https://link.springer.com/content/pdf/10.1007/s40860-024-00238-8.pdf","source":{"id":"https://openalex.org/S2475775703","display_name":"Journal of Reliable Intelligent Environments","issn_l":"2199-4668","issn":["2199-4668","2199-4676"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Reliable Intelligent Environments","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320313475","display_name":"Universit\u00e0 degli Studi di Milano","ror":"https://ror.org/00wjc7c48"},{"id":"https://openalex.org/F4320321610","display_name":"Universit\u00e0 degli Studi di Milano-Bicocca","ror":"https://ror.org/01ynf4891"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4402215121.pdf","grobid_xml":"https://content.openalex.org/works/W4402215121.grobid-xml"},"referenced_works_count":44,"referenced_works":["https://openalex.org/W40890042","https://openalex.org/W433644524","https://openalex.org/W1932198206","https://openalex.org/W1985987493","https://openalex.org/W1987958296","https://openalex.org/W2139701068","https://openalex.org/W2155653793","https://openalex.org/W2194775991","https://openalex.org/W2515329741","https://openalex.org/W2783741806","https://openalex.org/W2785787385","https://openalex.org/W2890840584","https://openalex.org/W2926701059","https://openalex.org/W2937220155","https://openalex.org/W2949071206","https://openalex.org/W2949676527","https://openalex.org/W2951694401","https://openalex.org/W2963149653","https://openalex.org/W2981311204","https://openalex.org/W2991140181","https://openalex.org/W3015308630","https://openalex.org/W3018928030","https://openalex.org/W3085955590","https://openalex.org/W3092771185","https://openalex.org/W3122623847","https://openalex.org/W3147639870","https://openalex.org/W3176721776","https://openalex.org/W3191470662","https://openalex.org/W3193759592","https://openalex.org/W3206894072","https://openalex.org/W3211805421","https://openalex.org/W4212863985","https://openalex.org/W4220846496","https://openalex.org/W4309939034","https://openalex.org/W4310206563","https://openalex.org/W4377224098","https://openalex.org/W4381734333","https://openalex.org/W4384264665","https://openalex.org/W6600237587","https://openalex.org/W6600648412","https://openalex.org/W6601235158","https://openalex.org/W6601643456","https://openalex.org/W6679338098","https://openalex.org/W6732629455"],"related_works":["https://openalex.org/W2076536433","https://openalex.org/W90316445","https://openalex.org/W4327743613","https://openalex.org/W2965447900","https://openalex.org/W2357468538","https://openalex.org/W2364419519","https://openalex.org/W2133389611","https://openalex.org/W2360767377","https://openalex.org/W2017948608","https://openalex.org/W2360951146"],"abstract_inverted_index":{"Abstract":[0],"A":[1],"crucial":[2],"role":[3],"in":[4,214],"the":[5,43,64,97,183,215,236],"security":[6,17],"of":[7,99,148,185,238],"modern":[8],"networks":[9,26],"is":[10],"played":[11],"by":[12,47],"Intrusion":[13],"Detection":[14],"Systems":[15],"(IDSs),":[16],"devices":[18],"designed":[19,178],"to":[20,25,77,90,117,129,138,182,221,233],"identify":[21],"and":[22,38,87,143,158,173,208],"mitigate":[23],"attacks":[24],"structure.":[27],"Data-driven":[28],"approaches":[29],"based":[30,195],"on":[31,196],"Machine":[32],"Learning":[33],"(ML)":[34],"have":[35],"gained":[36],"more":[37,39],"popularity":[40],"for":[41,55,83,170,179,203],"executing":[42],"classification":[44,81,125,132,156],"tasks":[45],"required":[46],"signature-based":[48],"IDSs.":[49,240],"However,":[50],"typical":[51],"ML":[52],"models":[53],"adopted":[54],"this":[56,104],"purpose":[57],"do":[58],"not":[59],"properly":[60],"take":[61],"into":[62],"account":[63],"uncertainty":[65,115,171,228],"associated":[66],"with":[67,210],"their":[68],"prediction.":[69],"This":[70],"poses":[71],"significant":[72],"challenges,":[73],"as":[74,151],"they":[75],"tend":[76],"produce":[78],"misleadingly":[79],"high":[80],"scores":[82],"both":[84],"misclassified":[85],"inputs":[86,88,147],"belonging":[89],"unknown":[91,149],"classes":[92,150],"(e.g.":[93],"novel":[94],"attacks),":[95],"limiting":[96],"trustworthiness":[98,237],"existing":[100],"ML-based":[101,109,168,239],"solutions.":[102],"In":[103,121],"paper,":[105],"we":[106,165,190],"argue":[107],"that":[108,200],"IDSs":[110],"should":[111],"always":[112],"provide":[113],"accurate":[114],"quantification":[116,172,229],"avoid":[118],"overconfident":[119],"predictions.":[120],"fact,":[122],"an":[123],"uncertainty-aware":[124],"would":[126,134,144],"be":[127,231],"beneficial":[128],"enhance":[130,235],"closed-set":[131],"performance,":[133],"make":[135],"it":[136],"possible":[137],"carry":[139],"out":[140,202],"Active":[141],"Learning,":[142],"help":[145],"recognize":[146],"truly":[152],"unknowns,":[153],"unlocking":[154],"open-set":[155,174],"capabilities":[157,207],"Out-of-Distribution":[159],"(OoD)":[160],"detection.":[161,188],"To":[162],"verify":[163],"it,":[164],"compare":[166],"various":[167],"methods":[169],"classification,":[175],"either":[176],"specifically":[177],"or":[180],"tailored":[181],"domain":[184],"network":[186],"intrusion":[187],"Moreover,":[189],"develop":[191],"a":[192,211],"custom":[193],"model":[194],"Bayesian":[197],"Neural":[198],"Networks":[199],"stands":[201],"its":[204],"OoD":[205],"detection":[206],"robustness,":[209],"lower":[212],"variance":[213],"results":[216],"over":[217],"different":[218],"scenarios,":[219],"compared":[220],"other":[222],"baselines,":[223],"thus":[224],"showing":[225],"how":[226],"proper":[227],"can":[230],"exploited":[232],"significantly":[234]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}