{"id":"https://openalex.org/W4323564960","doi":"https://doi.org/10.48550/arxiv.2303.02622","title":"A Multi-Agent Adaptive Deep Learning Framework for Online Intrusion Detection","display_name":"A Multi-Agent Adaptive Deep Learning Framework for Online Intrusion Detection","publication_year":2023,"publication_date":"2023-03-05","ids":{"openalex":"https://openalex.org/W4323564960","doi":"https://doi.org/10.48550/arxiv.2303.02622"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2303.02622","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2303.02622","pdf_url":"https://arxiv.org/pdf/2303.02622","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2303.02622","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5110928226","display_name":"Soltani Mahdi","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Soltani, Mahdi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005943292","display_name":"Khashayar Khajavi","orcid":"https://orcid.org/0000-0001-8270-9707"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Khajavi, Khashayar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005484703","display_name":"Mahdi Jafari Siavoshani","orcid":"https://orcid.org/0000-0003-3860-5999"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Siavoshani, Mahdi Jafari","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5024678473","display_name":"Amir Hossein Jahangir","orcid":"https://orcid.org/0000-0002-8837-0668"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jahangir, Amir Hossein","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8393696546554565},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7097166776657104},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.65233314037323},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.6293015480041504},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.5966151356697083},{"id":"https://openalex.org/keywords/concept-drift","display_name":"Concept drift","score":0.5648590326309204},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5379399061203003},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5020525455474854},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.41175657510757446},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3893488049507141},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.19173157215118408}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8393696546554565},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7097166776657104},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.65233314037323},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.6293015480041504},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5966151356697083},{"id":"https://openalex.org/C60777511","wikidata":"https://www.wikidata.org/wiki/Q3045002","display_name":"Concept drift","level":3,"score":0.5648590326309204},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5379399061203003},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5020525455474854},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.41175657510757446},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3893488049507141},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.19173157215118408},{"id":"https://openalex.org/C89198739","wikidata":"https://www.wikidata.org/wiki/Q3079880","display_name":"Data stream mining","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2303.02622","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2303.02622","pdf_url":"https://arxiv.org/pdf/2303.02622","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2303.02622","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2303.02622","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2303.02622","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2303.02622","pdf_url":"https://arxiv.org/pdf/2303.02622","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4323564960.pdf","grobid_xml":"https://content.openalex.org/works/W4323564960.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2990081132","https://openalex.org/W4296984035","https://openalex.org/W3127121676","https://openalex.org/W3108206468","https://openalex.org/W3091433184","https://openalex.org/W4245534163","https://openalex.org/W4289242525","https://openalex.org/W2902096670","https://openalex.org/W4200247875","https://openalex.org/W4364322549"],"abstract_inverted_index":{"The":[0,16],"network":[1],"security":[2],"analyzers":[3],"use":[4],"intrusion":[5],"detection":[6,232],"systems":[7],"(IDSes)":[8],"to":[9,22,71,84,87,91,104,128,133,203,223],"distinguish":[10],"malicious":[11],"traffic":[12,58,108,205,225],"from":[13,43],"benign":[14,76],"ones.":[15],"deep":[17,123,176],"learning-based":[18],"IDSes":[19,40,262],"are":[20,217,251],"proposed":[21,140,171,197],"auto-extract":[23],"high-level":[24],"features":[25],"and":[26,30,164,180,185,191,247],"eliminate":[27],"the":[28,50,72,105,129,135,139,156,170,183,196,204,214,224,244,248],"time-consuming":[29],"costly":[31],"signature":[32],"extraction":[33],"process.":[34],"However,":[35],"this":[36],"new":[37,65,241],"generation":[38],"of":[39,46,49,53,75,234],"still":[41],"suffers":[42],"a":[44,79,88,98,111,252],"number":[45],"challenges.":[47,95,137],"One":[48],"main":[51],"issues":[52],"an":[54,151,230],"IDS":[55,82],"is":[56,200],"facing":[57],"concept":[59,206,226],"drift":[60,227],"which":[61,149],"manifests":[62],"itself":[63],"as":[64],"(i.e.,":[66,115,228,263],"zero-day)":[67],"attacks,":[68],"in":[69,126,259],"addition":[70,127],"changing":[73,106],"behavior":[74],"users/applications.":[77],"Furthermore,":[78,138],"practical":[80,113,260],"DL-based":[81,102],"needs":[83],"be":[85],"conformed":[86],"distributed":[89,198],"architecture":[90],"handle":[92],"big":[93],"data":[94],"We":[96,168],"propose":[97],"framework":[99,120,141,172,199],"for":[100,146,155,220,243,255],"adapting":[101,222],"models":[103,177,216,250],"attack/benign":[107],"behaviors,":[109],"considering":[110],"more":[112],"scenario":[114],"online":[116,261],"adaptable":[117],"IDSes).":[118],"This":[119],"employs":[121],"continual":[122],"anomaly":[124],"detectors":[125],"federated":[130],"learning":[131],"approach":[132],"solve":[134],"above-mentioned":[136],"implements":[142],"sequential":[143,256],"packet":[144,163,257],"labeling":[145,258],"each":[147,161],"flow,":[148],"provides":[150],"attack":[152],"probability":[153],"score":[154],"flow":[157,162],"by":[158,173,266],"gradually":[159],"observing":[160,268],"updating":[165,245],"its":[166],"estimation.":[167],"evaluate":[169],"employing":[174],"different":[175],"(including":[178],"CNN-based":[179,215],"LSTM-based)":[181],"over":[182],"CIC-IDS2017":[184],"CSE-CIC-IDS2018":[186],"datasets.":[187],"Through":[188],"extensive":[189],"evaluations":[190],"experiments,":[192],"we":[193],"show":[194],"that":[195,213],"well":[201,218],"adapted":[202],"drift.":[207],"More":[208],"precisely,":[209],"our":[210],"results":[211],"indicate":[212],"suited":[219],"continually":[221],"achieving":[229],"average":[231],"rate":[233],"above":[235],"95%":[236],"while":[237],"needing":[238],"just":[239,267],"128":[240],"flows":[242],"phase),":[246],"LSTM-based":[249],"good":[253],"candidate":[254],"detecting":[264],"intrusions":[265],"their":[269],"first":[270],"15":[271],"packets).":[272]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-26T07:47:46.906454","created_date":"2023-03-09T00:00:00"}