Most cited papers in Network Security and Intrusion Detection
What are the most cited papers in Network Security and Intrusion Detection?
The most cited paper in Network Security and Intrusion Detection is "Anomaly detection" (Varun Chandola, Arindam Banerjee, Vipin Kumar, 2009), with 11,623 citations. Next come "A detailed analysis of the KDD CUP 99 data set" (5,024) and "Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization" (4,714).
Showing 50 of 100 papers. Every paper with more than 1,032 citations is listed.
| # | Paper | ||
|---|---|---|---|
| 1 | Anomaly detection Varun Chandola, Arindam Banerjee, Vipin Kumar · ACM Computing Surveys | Jul 2009 | 11,623 |
| 2 | A detailed analysis of the KDD CUP 99 data set Mahbod Tavallaee, Ebrahim Bagheri, Wei Lu et al. | Jul 2009 | 5,024 |
| 3 | Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization Iman Sharafaldin, Arash Habibi Lashkari, Ali Akbar Ghorbani | 2018 | 4,714 |
| 4 | UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set) Nour Moustafa, Jill Slay | Nov 2015 | 3,934 |
| 5 | An Intrusion-Detection Model Dorothy E. Denning · IEEE Transactions on Software Engineering | Feb 1987 | 3,414 |
| 6 | A Survey of Data Mining and Machine Learning Methods for Cyber Security Intrusion Detection Anna L. Buczak, Erhan Guven · IEEE Communications Surveys & Tutorials | 26 Oct 2015 | 3,296 |
| 7 | Deep Learning for Anomaly Detection Guansong Pang, Chunhua Shen, Longbing Cao et al. · ACM Computing Surveys | 5 Mar 2021 | 2,684 |
| 8 | Bro: a system for detecting network intruders in real-time Vern Paxson · Computer Networks | Dec 1999 | 2,419 |
| 9 | Drebin: Effective and Explainable Detection of Android Malware in Your Pocket Daniel J. Arp, Michael Spreitzenbarth, Malte Hübner et al. | 2014 | 2,347 |
| 10 | TaintDroid: an information-flow tracking system for realtime privacy monitoring on smartphones William Enck, Peter J. Gilbert, Byung-Gon Chun et al. | 4 Oct 2010 | 2,272 |
| 11 | Dissecting Android Malware: Characterization and Evolution Yajin Zhou, Xuxian Jiang | May 2012 | 2,164 |
| 12 | Attack Detection and Identification in Cyber-Physical Systems Fabio Pasqualetti, Florian Dörfler, Francesco Bullo · IEEE Transactions on Automatic Control | 21 Jun 2013 | 2,131 |
| 13 | Anomaly-based network intrusion detection: Techniques, systems and challenges Pedro García‐Teodoro, Jesús E. Dı́az-Verdejo, Gabriel Maciá‐Fernández et al. · Computers & Security | 28 Aug 2008 | 2,075 |
| 14 | Isolation-Based Anomaly Detection Fei Tony Liu, Kai Ming Ting, Zhi‐Hua Zhou · ACM Transactions on Knowledge Discovery from Data | Mar 2012 | 2,073 |
| 15 | Outside the Closed World: On Using Machine Learning for Network Intrusion Detection Robin Sommer, Vern Paxson | 2010 | 2,068 |
| 16 | A taxonomy of DDoS attack and DDoS defense mechanisms Jelena Mirković, Peter L. Reiher · ACM SIGCOMM Computer Communication Review | Apr 2004 | 2,025 |
| 17 | Survey of intrusion detection systems: techniques, datasets and challenges Ansam Khraisat, Iqbal Gondal, Peter W. Vamplew et al. · Cybersecurity | 17 Jul 2019 | 1,972 |
| 18 | Cascade-based attacks on complex networks Adilson E. Motter, Ying‐Cheng Lai · Physical review. E, Statistical physics, plasmas, fluids, and related interdisciplinary topics | 20 Dec 2002 | 1,928 |
| 19 | Deep Learning Approach for Intelligent Intrusion Detection System R. Vinayakumar, Mamoun Alazab, K. P. Soman et al. · IEEE Access | 2019 | 1,915 |
| 20 | Language-based information-flow security Andrei Sabelfeld, Andrew C. Myers · IEEE Journal on Selected Areas in Communications | 2003 | 1,909 |
| 21 | A lattice model of secure information flow Dorothy E. Denning · Communications of the ACM | May 1976 | 1,909 |
| 22 | DDoS in the IoT: Mirai and Other Botnets Constantinos Kolias, Georgios Kambourakis, Angelos Stavrou et al. · Computer | 2017 | 1,905 |
| 23 | Information Security Policy Compliance: An Empirical Study of Rationality-Based Beliefs and Information Security Awareness1 Burcu Bulgurcu, Hasan Cavusoglu, Izak Benbasat · MIS Quarterly | Sep 2010 | 1,871 |
| 24 | A Deep Learning Approach to Network Intrusion Detection Nathan Shone, Trần Nguyên Ngọc, Vu Dinh Phai et al. · IEEE Transactions on Emerging Topics in Computational Intelligence | 19 Jan 2018 | 1,821 |
| 25 | A network in a laptop Bob Lantz, Brandon Heller, Nick McKeown | 20 Oct 2010 | 1,820 |
| 26 | DeepLog Min Du, Li Fei-Fei, Guineng Zheng et al. | 27 Oct 2017 | 1,802 |
| 27 | Memorizing Normality to Detect Anomaly: Memory-Augmented Deep Autoencoder for Unsupervised Anomaly Detection Dong Gong, Lingqiao Liu, Vuong Le et al. | Oct 2019 | 1,751 |
| 28 | A survey of network anomaly detection techniques Mohiuddin Ahmed, Abdun Naser Mahmood, Jiankun Hu · Journal of Network and Computer Applications | 16 Dec 2015 | 1,750 |
| 29 | Deep Learning for Anomaly Detection: A Review Guansong Pang, Chunhua Shen, Longbing Cao et al. · Singapore Management University Institutional Knowledge (InK) (Singapore Management University) | 6 Jul 2020 | 1,731 |
| 30 | A review of novelty detection Marco A. F. Pimentel, David Andrew Clifton, Lei Clifton et al. · Signal Processing | 3 Jan 2014 | 1,671 |
| 31 | Robust Anomaly Detection for Multivariate Time Series through Stochastic Recurrent Neural Network Ya Su, Youjian Zhao, Chenhao Niu et al. | 25 Jul 2019 | 1,670 |
| 32 | A survey of techniques for internet traffic classification using machine learning Thuy Nguyen Thi Thu, Grenville J. Armitage · IEEE Communications Surveys & Tutorials | 2008 | 1,670 |
| 33 | Evasion attacks against machine learning at test time Battista Biggio, Igino Corona, Davide Maiorca et al. | 2013 | 1,640 |
| 34 | Intrusion detection system: A comprehensive review Hung-Jen Liao, Chun‐Hung Richard Lin, Ying-Chih Lin et al. · Journal of Network and Computer Applications | 23 Sep 2012 | 1,631 |
| 35 | TinySec Chris Karlof, Naveen Sastry, David A. Wagner | 3 Nov 2004 | 1,620 |
| 36 | AntNet: Distributed Stigmergetic Control for Communications Networks Gianni A. Di, Marco Dorigo · Journal of Artificial Intelligence Research | Dec 1998 | 1,586 |
| 37 | An overview of anomaly detection techniques: Existing solutions and latest technological trends Animesh Patcha, Jung-Min Jerry Park · Computer Networks | 17 Feb 2007 | 1,568 |
| 38 | Graph based anomaly detection and description: a survey Leman Akoglu, Hanghang Tong, Danai Koutra · Data Mining and Knowledge Discovery | 4 Jul 2014 | 1,528 |
| 39 | The industrial internet of things (IIoT): An analysis framework Hugh A. Boyes, Bil Hallaq, Joe Cunningham et al. · Computers in Industry | 5 Jun 2018 | 1,480 |
| 40 | N-BaIoT—Network-Based Detection of IoT Botnet Attacks Using Deep Autoencoders Yair Meidan, Michael Bohadana, Yael Mathov et al. · IEEE Pervasive Computing | Jul 2018 | 1,465 |
| 41 | Abnormal Event Detection at 150 FPS in MATLAB Cewu Lu, Jianping Shi, Jiaya Jia | Dec 2013 | 1,464 |
| 42 | Novelty detection: a review—part 1: statistical approaches Markos Markou, Sameer Kumar Singh · Signal Processing | 16 Sep 2003 | 1,436 |
| 43 | Inference in Hidden Markov Models Cappé, Olivier, Rydén, Tobias, Éric Moulines · Digital Access to Libraries (Université catholique de Louvain (UCL), l'Université de Namur (UNamur) and the Université Saint-Louis (USL-B)) | 2005 | 1,402 |
| 44 | A Survey of Defense Mechanisms Against Distributed Denial of Service (DDoS) Flooding Attacks Saman Taghavi Zargar, James B D Joshi, David Tipper · IEEE Communications Surveys & Tutorials | 2013 | 1,397 |
| 45 | Toward developing a systematic approach to generate benchmark datasets for intrusion detection Ali Shiravi, Hadi Shiravi, Mahbod Tavallaee et al. · Computers & Security | 5 Jan 2012 | 1,354 |
| 46 | Network Anomaly Detection: Methods, Systems and Tools Monowar H. Bhuyan, Dhruba K. Bhattacharyya, Jugal Kumar Kalita · IEEE Communications Surveys & Tutorials | 6 Jun 2013 | 1,354 |
| 47 | The economics of information security investment Lawrence A. Gordon, Martin P. Loeb · ACM Transactions on Information and System Security | Nov 2002 | 1,334 |
| 48 | Investigating Ad Transparency Mechanisms in Social Media: A Case Study of Facebook's Explanations Andreou, Athanasios, Venkatadri, Giridhari, Goga, Oana et al. · HAL (Le Centre pour la Communication Scientifique Directe) | 18 Feb 2018 | 1,328 |
| 49 | False data injection attacks against state estimation in electric power grids Yao Liu, Peng Ning, Michael K. Reiter | 9 Nov 2009 | 1,319 |
| 50 | Intrusion detection using sequences of system calls Steven A. Hofmeyr, Stephanie Forrest, Anil Somayaji · Journal of Computer Security | Jul 1998 | 1,319 |
Citations are OpenAlex's own counts, from its 2026-09-23 snapshot, so the ranking can differ from Google Scholar or Web of Science. A paper is listed for a field when OpenAlex files it under one of the field's topics; retracted papers and papers whose citation count cannot be traced to citing works are left out, and a preprint and the article it became are shown once. Release dates are OpenAlex's: where a source gave only a month or a year, that is what is shown. How the lists are chosen.