{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,17]],"date-time":"2026-06-17T05:18:15Z","timestamp":1781673495563,"version":"3.54.5"},"reference-count":41,"publisher":"Wiley","issue":"3","license":[{"start":{"date-parts":[[2020,6,25]],"date-time":"2020-06-25T00:00:00Z","timestamp":1593043200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/onlinelibrary.wiley.com\/termsAndConditions#vor"}],"funder":[{"DOI":"10.13039\/501100003593","name":"Conselho Nacional de Desenvolvimento Cient\u00edfico e Tecnol\u00f3gico","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100003593","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002322","name":"Coordena\u00e7\u00e3o de Aperfei\u00e7oamento de Pessoal de N\u00edvel Superior","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100002322","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004586","name":"Funda\u00e7\u00e3o Carlos Chagas Filho de Amparo \u00e0 Pesquisa do Estado do Rio de Janeiro","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100004586","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001807","name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de S\u00e3o Paulo","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001807","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100002322","name":"Coordena\u00e7\u00e3o de Aperfei\u00e7oamento de Pessoal de N\u00edvel Superior","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100002322","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003593","name":"Conselho Nacional de Desenvolvimento Cient\u00edfico e Tecnol\u00f3gico","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100003593","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001807","name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de S\u00e3o Paulo","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001807","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004586","name":"Funda\u00e7\u00e3o Carlos Chagas Filho de Amparo \u00e0 Pesquisa do Estado do Rio de Janeiro","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100004586","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["onlinelibrary.wiley.com"],"crossmark-restriction":true},"short-container-title":["Int J Network Mgmt"],"published-print":{"date-parts":[[2021,5]]},"abstract":"<jats:title>Summary<\/jats:title><jats:p>Intrusion detection systems (IDSs) are a fundamental component of defense solutions. In particular, IDSs aim to detect malicious activities on computer systems and networks by relying on data classification models built from a training dataset. However, classifiers' performance can vary for each attack pattern. A common technique to overcome this issue is to use ensemble methods, where multiple classifiers are employed and a final decision is taken combining their outputs. Despite the potential advantages of such an approach, its usefulness is limited in scenarios where (i) multiple expert classifiers present divergent results, (ii) all classifiers present poor results due to lack of representative features, or (iii) detectors have insufficient labeled signatures to train their classifiers for a specific attack pattern. In this work, we introduce the concept of a counselors network to deal with conflicts from different classifiers by exploiting the collaboration among IDSs that analyze multiple and heterogeneous data sources. Empirical results demonstrate the feasibility of the proposed architecture in improving the accuracy of the intrusion detection process.<\/jats:p>","DOI":"10.1002\/nem.2111","type":"journal-article","created":{"date-parts":[[2020,6,25]],"date-time":"2020-06-25T13:54:12Z","timestamp":1593093252000},"update-policy":"https:\/\/doi.org\/10.1002\/crossmark_policy","source":"Crossref","is-referenced-by-count":8,"title":["Counselors network for intrusion detection"],"prefix":"10.1002","volume":"31","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6793-4033","authenticated-orcid":false,"given":"Silvio E.","family":"Quincozes","sequence":"first","affiliation":[{"name":"Department of Computer Science Fluminense Federal University  Rio de Janeiro Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Carlos","family":"Raniery","sequence":"additional","affiliation":[{"name":"Department of Applied Computing Federal University of Santa Maria  Santa Maria Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Raul","family":"Ceretta Nunes","sequence":"additional","affiliation":[{"name":"Department of Applied Computing Federal University of Santa Maria  Santa Maria Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7959-6569","authenticated-orcid":false,"given":"C\u00e9lio","family":"Albuquerque","sequence":"additional","affiliation":[{"name":"Department of Computer Science Fluminense Federal University  Rio de Janeiro Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9707-1176","authenticated-orcid":false,"given":"Diego","family":"Passos","sequence":"additional","affiliation":[{"name":"Department of Computer Science Fluminense Federal University  Rio de Janeiro Brazil"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Daniel","family":"Moss\u00e9","sequence":"additional","affiliation":[{"name":"Department of Applied Computing University of Pittsburgh  Pittsburgh Pennsylvania"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"311","published-online":{"date-parts":[[2020,6,25]]},"reference":[{"key":"e_1_2_8_2_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2015.07.015"},{"key":"e_1_2_8_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10639-019-09956-6"},{"key":"e_1_2_8_4_1","series-title":"Adaptive Computation and Machine Learning series","volume-title":"Introduction to Machine Learning","author":"Alpaydin E","year":"2009"},{"key":"e_1_2_8_5_1","first-page":"81","article-title":"Artificial neural networks","volume":"45","author":"Mitchell TM","year":"1997","journal-title":"Machine Learn"},{"key":"e_1_2_8_6_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2008.02.021"},{"key":"e_1_2_8_7_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2014.05.003"},{"key":"e_1_2_8_8_1","doi-asserted-by":"crossref","unstructured":"WoloszynskiT KurzynskiM.A measure of competence based on randomized reference classifier for dynamic ensemble selection. In: 20th International Conference on Pattern Recognition (ICPR);Istanbul:2010;4194\u20104197.","DOI":"10.1109\/ICPR.2010.1019"},{"key":"e_1_2_8_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/34.588027"},{"key":"e_1_2_8_10_1","unstructured":"QuincozesSE RanieryC CerettaR AlbuquerqueCVN PassosD Moss\u00e9D.A counselors\u2010based intrusion detection architecture. In: 9th Latin American Network Operations and Management Symposium LANOMS 2019;Niter\u00f3i Brazil:2019;1\u20108."},{"issue":"1","key":"e_1_2_8_11_1","first-page":"1","article-title":"An effective combining classifier approach using tree algorithms for network intrusion detection","volume":"18","author":"Kevric J","year":"2016","journal-title":"Neural Comput Appl"},{"key":"e_1_2_8_12_1","doi-asserted-by":"publisher","DOI":"10.3233\/JIFS-169074"},{"key":"e_1_2_8_13_1","doi-asserted-by":"crossref","unstructured":"MarchalS JiangX StateR EngelT.A big data architecture for large scale security monitoring. In: International Congress on Big Data (Bigdata Congress);Anchorage:2014;56\u201063.","DOI":"10.1109\/BigData.Congress.2014.18"},{"key":"e_1_2_8_14_1","unstructured":"SabourinM MiticheA ThomasD NagyG.Classifier combination for hand\u2010printed digit recognition. In: Proceedings of the Second International Conference on Document Analysis and Recognition;1993;Tsukuba Science City Japan Japan:163\u2010166."},{"key":"e_1_2_8_15_1","doi-asserted-by":"publisher","DOI":"10.1186\/s40537-015-0013-4"},{"key":"e_1_2_8_16_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2008.03.004"},{"key":"e_1_2_8_17_1","unstructured":"RoeschM.Snort: Lightweight intrusion detection for networks. In: Proceedings of LISA \u201899: 13th Systems Administration Conference Vol. 99;Seattle:1999;229\u2010238."},{"key":"e_1_2_8_18_1","doi-asserted-by":"crossref","unstructured":"BartosK RehakM.Self\u2010organized mechanism for distributed setup of multiple heterogeneous intrusion detection systems. In: Sixth International Conference on Self\u2010Adaptive and Self\u2010Organizing Systems Workshops (SASOW);2012;Lyon France:31\u201038.","DOI":"10.1109\/SASOW.2012.15"},{"key":"e_1_2_8_19_1","first-page":"1","article-title":"Cooperative anomaly and intrusion detection for alert correlation in networked computing systems","volume":"1","author":"Hwang K","year":"2004","journal-title":"IEEE Trans Depend Secure Comput"},{"key":"e_1_2_8_20_1","doi-asserted-by":"crossref","unstructured":"ChenC\u2010M LaiG\u2010H YoungP\u2010Y.Defense joint attacks based on stochastic discrete sequence anomaly detection. In: Asia Joint Conference on Information Security (AsiaJCIS);2016;Fukuoka Japan:74\u201079.","DOI":"10.1109\/AsiaJCIS.2016.18"},{"key":"e_1_2_8_21_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2016.08.014"},{"key":"e_1_2_8_22_1","unstructured":"Firebase realtime database.https:\/\/firebase.google.com\/docs\/database\/;. Online; accessed 10 January 2020."},{"key":"e_1_2_8_23_1","unstructured":"OlusolaAA OladeleAS AbosedeDO.Analysis of KDD\u201999 intrusion detection dataset for selection of relevance features. In: Proceedings of the World Congress on Engineering and Computer Science Vol. 1;San Francisco:2010;20\u201022."},{"key":"e_1_2_8_24_1","doi-asserted-by":"crossref","unstructured":"SharafaldinI LashkariAH GhorbaniAA.Toward generating a new intrusion detection dataset and intrusion traffic characterization. In: Proceedings of the 4th International Conference on Information Systems Security and Privacy (ICISSP);Funchal:2018;108\u2010116.","DOI":"10.5220\/0006639801080116"},{"key":"e_1_2_8_25_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10115-007-0114-2"},{"issue":"7","key":"e_1_2_8_26_1","first-page":"78","article-title":"Comparison the various clustering algorithms of Weka tools","volume":"4","author":"Sharma N","year":"2012","journal-title":"Facilities"},{"key":"e_1_2_8_27_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-13-9217-7_9"},{"key":"e_1_2_8_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1656274.1656278"},{"key":"e_1_2_8_29_1","volume-title":"Data Mining: Practical Machine Learning Tools and Techniques","author":"Witten IH","year":"2011"},{"key":"e_1_2_8_30_1","volume-title":"C4. 5: Programs for Machine Learning","author":"Quinlan JR","year":"2014"},{"key":"e_1_2_8_31_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-43968-5_12"},{"issue":"5","key":"e_1_2_8_32_1","first-page":"1890","article-title":"A comparative study of classification algorithms for spam email data analysis","volume":"3","author":"Sharma AK","year":"2011","journal-title":"Int J Comput Sci Eng"},{"key":"e_1_2_8_33_1","volume-title":"Practical Machine Learning Tools and Techniques","author":"Witten IH","year":"2005"},{"key":"e_1_2_8_34_1","unstructured":"JohnGH LangleyP.Estimating continuous distributions in Bayesian classifiers. In: Proceedings of the Eleventh Conference on Uncertainty in Artificial Intelligence:San Francisco;1995:338\u2010345."},{"key":"e_1_2_8_35_1","first-page":"202","article-title":"Scaling up the accuracy of Naive\u2010Bayes classifiers: a decision\u2010tree hybrid","volume":"96","author":"Kohavi R","year":"1996","journal-title":"Proc Second Int Conf Knowl Discov Data Mining (KDD)"},{"key":"e_1_2_8_36_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ijrefrig.2019.10.026"},{"key":"e_1_2_8_37_1","unstructured":"KDD\u2010CUP\u201099 task description.https:\/\/archive.ics.uci.edu\/ml\/machine-learning-databases\/kddcup99-mld\/task.html;. Online; accessed 10 January 2020;1999."},{"key":"e_1_2_8_38_1","doi-asserted-by":"crossref","unstructured":"TavallaeeM BagheriE LuW GhorbaniAA.A detailed analysis of the KDD CUP 99 data set. In: Symposium on Computational Intelligence for Security and Defense Applications (CISDA):Ottawa;2009:1\u20106.","DOI":"10.1109\/CISDA.2009.5356528"},{"issue":"3","key":"e_1_2_8_39_1","first-page":"8","article-title":"Deep learning approach on network intrusion detection system using NSL\u2010KDD dataset","volume":"11","author":"Gurung S","year":"2019","journal-title":"Int J Comput Netw Info Secur (IJCNIS)"},{"key":"e_1_2_8_40_1","doi-asserted-by":"publisher","DOI":"10.3991\/ijim.v13i01.9679"},{"key":"e_1_2_8_41_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-8797-4_21"},{"key":"e_1_2_8_42_1","doi-asserted-by":"publisher","DOI":"10.1007\/s42979-019-0037-5"}],"container-title":["International Journal of Network Management"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.wiley.com\/onlinelibrary\/tdm\/v1\/articles\/10.1002%2Fnem.2111","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/pdf\/10.1002\/nem.2111","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/full-xml\/10.1002\/nem.2111","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/pdf\/10.1002\/nem.2111","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,9,2]],"date-time":"2023-09-02T03:47:58Z","timestamp":1693626478000},"score":1,"resource":{"primary":{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/10.1002\/nem.2111"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,6,25]]},"references-count":41,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2021,5]]}},"alternative-id":["10.1002\/nem.2111"],"URL":"https:\/\/doi.org\/10.1002\/nem.2111","archive":["Portico"],"relation":{},"ISSN":["1055-7148","1099-1190"],"issn-type":[{"value":"1055-7148","type":"print"},{"value":"1099-1190","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,6,25]]},"assertion":[{"value":"2020-01-15","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2020-04-06","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2020-06-25","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}],"article-number":"e2111"}}