{"id":"https://openalex.org/W4221155816","doi":"https://doi.org/10.1016/j.comcom.2022.04.020","title":"NetSentry: A deep learning approach to detecting incipient large-scale network attacks","display_name":"NetSentry: A deep learning approach to detecting incipient large-scale network attacks","publication_year":2022,"publication_date":"2022-04-30","ids":{"openalex":"https://openalex.org/W4221155816","doi":"https://doi.org/10.1016/j.comcom.2022.04.020"},"language":"en","primary_location":{"id":"doi:10.1016/j.comcom.2022.04.020","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.comcom.2022.04.020","pdf_url":null,"source":{"id":"https://openalex.org/S115004586","display_name":"Computer Communications","issn_l":"0140-3664","issn":["0140-3664","1873-703X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Communications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.comcom.2022.04.020","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100444762","display_name":"Haoyu Liu","orcid":"https://orcid.org/0000-0003-3755-5184"},"institutions":[{"id":"https://openalex.org/I98677209","display_name":"University of Edinburgh","ror":"https://ror.org/01nrxwf90","country_code":"GB","type":"education","lineage":["https://openalex.org/I98677209"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Haoyu Liu","raw_affiliation_strings":["School of Informatics, The University of Edinburgh, Informatics Forum, 10 Crichton St, Newington, Edinburgh, EH8 9AB, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Informatics, The University of Edinburgh, Informatics Forum, 10 Crichton St, Newington, Edinburgh, EH8 9AB, United Kingdom","institution_ids":["https://openalex.org/I98677209"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048279197","display_name":"Paul Patras","orcid":"https://orcid.org/0000-0002-1037-0158"},"institutions":[{"id":"https://openalex.org/I98677209","display_name":"University of Edinburgh","ror":"https://ror.org/01nrxwf90","country_code":"GB","type":"education","lineage":["https://openalex.org/I98677209"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Paul Patras","raw_affiliation_strings":["School of Informatics, The University of Edinburgh, Informatics Forum, 10 Crichton St, Newington, Edinburgh, EH8 9AB, United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Informatics, The University of Edinburgh, Informatics Forum, 10 Crichton St, Newington, Edinburgh, EH8 9AB, United Kingdom","institution_ids":["https://openalex.org/I98677209"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5048279197"],"corresponding_institution_ids":["https://openalex.org/I98677209"],"apc_list":{"value":2300,"currency":"USD","value_usd":2300},"apc_paid":{"value":2300,"currency":"USD","value_usd":2300},"fwci":2.5354,"has_fulltext":true,"cited_by_count":23,"citation_normalized_percentile":{"value":0.89479225,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"191","issue":null,"first_page":"119","last_page":"132"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9015448093414307},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.8622777462005615},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6665584444999695},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.6566202044487},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5812656879425049},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5753524303436279},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5283079147338867},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.44041356444358826},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4389331638813019},{"id":"https://openalex.org/keywords/scripting-language","display_name":"Scripting language","score":0.43233323097229004},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.41196101903915405},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.36226850748062134},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3281334340572357},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.11623045802116394},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.09880253672599792}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9015448093414307},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.8622777462005615},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6665584444999695},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6566202044487},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5812656879425049},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5753524303436279},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5283079147338867},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.44041356444358826},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4389331638813019},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.43233323097229004},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.41196101903915405},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.36226850748062134},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3281334340572357},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.11623045802116394},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.09880253672599792},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1016/j.comcom.2022.04.020","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.comcom.2022.04.020","pdf_url":null,"source":{"id":"https://openalex.org/S115004586","display_name":"Computer Communications","issn_l":"0140-3664","issn":["0140-3664","1873-703X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Communications","raw_type":"journal-article"},{"id":"pmh:oai:pure.ed.ac.uk:openaire/24ad136b-91b1-4d9d-bbbb-6d912a8a1172","is_oa":true,"landing_page_url":"https://www.research.ed.ac.uk/en/publications/24ad136b-91b1-4d9d-bbbb-6d912a8a1172","pdf_url":"https://www.research.ed.ac.uk/files/278530111/NetSentry_LIU_DOA18042022_VOR_CC_BY.pdf","source":{"id":"https://openalex.org/S4306400321","display_name":"Edinburgh Research Explorer (University of Edinburgh)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98677209","host_organization_name":"University of Edinburgh","host_organization_lineage":["https://openalex.org/I98677209"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Liu, H & Patras, P 2022, 'NetSentry: A deep learning approach to detecting incipient large-scale network attacks', Computer Communications, vol. 191, pp. 119-132. https://doi.org/10.1016/j.comcom.2022.04.020","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:pure.ed.ac.uk:publications/24ad136b-91b1-4d9d-bbbb-6d912a8a1172","is_oa":true,"landing_page_url":"https://hdl.handle.net/20.500.11820/24ad136b-91b1-4d9d-bbbb-6d912a8a1172","pdf_url":null,"source":{"id":"https://openalex.org/S4306400321","display_name":"Edinburgh Research Explorer (University of Edinburgh)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98677209","host_organization_name":"University of Edinburgh","host_organization_lineage":["https://openalex.org/I98677209"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Liu, H & Patras, P 2022, 'NetSentry: A deep learning approach to detecting incipient large-scale network attacks', Computer Communications, vol. 191, pp. 119-132. https://doi.org/10.1016/j.comcom.2022.04.020","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:pure.ed.ac.uk:publications/24ad136b-91b1-4d9d-bbbb-6d912a8a1172","is_oa":true,"landing_page_url":"https://www.sciencedirect.com/science/article/pii/S0140366422001335","pdf_url":null,"source":{"id":"https://openalex.org/S4406922455","display_name":"Edinburgh Research Explorer","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":""}],"best_oa_location":{"id":"doi:10.1016/j.comcom.2022.04.020","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.comcom.2022.04.020","pdf_url":null,"source":{"id":"https://openalex.org/S115004586","display_name":"Computer Communications","issn_l":"0140-3664","issn":["0140-3664","1873-703X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Communications","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":46,"referenced_works":["https://openalex.org/W1485009520","https://openalex.org/W1527646163","https://openalex.org/W1984438447","https://openalex.org/W2064675550","https://openalex.org/W2065523140","https://openalex.org/W2065890363","https://openalex.org/W2130942839","https://openalex.org/W2194775991","https://openalex.org/W2204904589","https://openalex.org/W2342408547","https://openalex.org/W2350778671","https://openalex.org/W2538104847","https://openalex.org/W2889836475","https://openalex.org/W2889885925","https://openalex.org/W2891432086","https://openalex.org/W2950361482","https://openalex.org/W2957951474","https://openalex.org/W2963704216","https://openalex.org/W2969632483","https://openalex.org/W2988337058","https://openalex.org/W3005805195","https://openalex.org/W3044515030","https://openalex.org/W3105324058","https://openalex.org/W3184254399","https://openalex.org/W4205974231","https://openalex.org/W4206174637","https://openalex.org/W4235805892","https://openalex.org/W4287022992","https://openalex.org/W6607784307","https://openalex.org/W6631843488","https://openalex.org/W6634779276","https://openalex.org/W6634829514","https://openalex.org/W6640826072","https://openalex.org/W6646475390","https://openalex.org/W6679436768","https://openalex.org/W6743493502","https://openalex.org/W6748102297","https://openalex.org/W6748171980","https://openalex.org/W6748503732","https://openalex.org/W6751494907","https://openalex.org/W6756320503","https://openalex.org/W6758488679","https://openalex.org/W6774359739","https://openalex.org/W6785429307","https://openalex.org/W6797188994","https://openalex.org/W6800217721"],"related_works":["https://openalex.org/W2294483539","https://openalex.org/W2378449000","https://openalex.org/W3187581118","https://openalex.org/W2929621094","https://openalex.org/W1996006176","https://openalex.org/W4230824443","https://openalex.org/W4285325964","https://openalex.org/W2038807247","https://openalex.org/W2097156747","https://openalex.org/W2559738661"],"abstract_inverted_index":{"Machine":[0],"Learning":[1],"(ML)":[2],"techniques":[3],"are":[4,37,71,137],"increasingly":[5],"adopted":[6],"to":[7,23,27,84,104,107,139,183,219,258,284],"tackle":[8],"ever-evolving":[9],"high-profile":[10],"network":[11,56,99,185],"attacks,":[12,100],"including":[13],"Distributed":[14],"Denial":[15],"of":[16,97,128,165,179,223,248,252,272],"Service":[17],"(DDoS),":[18],"botnet,":[19],"and":[20,48,75,131,146,159,200,205,231,282],"ransomware,":[21],"due":[22],"their":[24,49,133],"unique":[25],"ability":[26],"extract":[28],"complex":[29],"patterns":[30],"hidden":[31],"in":[32,44,54,87,115,126,275],"data":[33,42,240],"streams.":[34],"These":[35],"approaches":[36],"however":[38],"routinely":[39],"validated":[40],"with":[41,101],"collected":[43],"the":[45,95,163,203,213,245,270],"same":[46],"environment,":[47],"performance":[50],"degrades":[51],"when":[52],"deployed":[53],"different":[55],"topologies":[57],"and/or":[58],"applied":[59],"on":[60,171,198,202,269],"previously":[61],"unseen":[62],"traffic,":[63],"as":[64,155,215,217,227],"we":[65,92,152,235,266],"uncover.":[66],"This":[67],"suggests":[68],"malicious/benign":[69],"behaviors":[70],"largely":[72],"learned":[73],"superficially":[74],"ML-based":[76],"Network":[77,111],"Intrusion":[78,112],"Detection":[79,113],"Systems":[80],"(NIDS)":[81],"need":[82],"revisiting,":[83],"be":[85],"effective":[86],"practice.":[88],"In":[89],"this":[90],"paper":[91],"dive":[93],"into":[94],"mechanics":[96],"large-scale":[98],"a":[102,116,156,238,249],"view":[103],"understanding":[105],"how":[106],"use":[108],"ML":[109],"for":[110],"(NID)":[114],"principled":[117],"way.":[118],"We":[119,190],"reveal":[120],"that,":[121],"although":[122],"cyberattacks":[123],"vary":[124],"significantly":[125],"terms":[127],"payloads,":[129],"vectors":[130],"targets,":[132],"early":[134],"stages,":[135],"which":[136],"critical":[138],"successful":[140],"attack":[141],"outcomes,":[142],"share":[143],"many":[144],"similarities":[145],"exhibit":[147],"important":[148],"temporal":[149],"correlations.":[150],"Therefore,":[151],"treat":[153],"NID":[154],"time-sensitive":[157],"task":[158],"propose":[160],"NetSentry,":[161],"perhaps":[162],"first":[164],"its":[166],"kind":[167],"NIDS":[168],"that":[169,243],"builds":[170],"Bidirectional":[172],"Asymmetric":[173],"LSTM":[174],"(Bi-ALSTM),":[175],"an":[176],"original":[177],"ensemble":[178],"sequential":[180],"neural":[181],"models,":[182],"detect":[184],"threats":[186],"before":[187],"they":[188],"spread.":[189],"cross-evaluate":[191],"NetSentry":[192,274],"using":[193],"two":[194],"practical":[195],"datasets,":[196],"training":[197],"one":[199],"testing":[201],"other,":[204],"demonstrate":[206],"F1":[207,260],"score":[208,261],"gains":[209,262],"above":[210,263],"33%":[211],"over":[212],"state-of-the-art,":[214],"well":[216],"up":[218],"3\u00d7":[220],"higher":[221],"rates":[222],"detecting":[224],"attacks":[225],"such":[226],"Cross-Site":[228],"Scripting":[229],"(XSS)":[230],"web":[232],"bruteforce.":[233],"Further,":[234],"put":[236],"forward":[237],"novel":[239],"augmentation":[241],"technique":[242],"boosts":[244],"generalization":[246],"abilities":[247],"broad":[250],"range":[251],"supervised":[253],"deep":[254],"learning":[255],"algorithms,":[256],"leading":[257],"average":[259],"35%.":[264],"Lastly,":[265],"shed":[267],"light":[268],"feasibility":[271],"deploying":[273],"operational":[276],"networks,":[277],"demonstrating":[278],"affordable":[279],"computational":[280],"overhead":[281],"robustness":[283],"evasion":[285],"attacks.":[286]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":14},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-09T07:52:08.696243","created_date":"2025-10-10T00:00:00"}