Demo Data from EDBT 2026 / reviewers in the wild / expert
Minsong Kim
dblp:353/8356
· DBLP profile ↗
1ranked-venue papers
1as first author
1since 2021 · last 2024
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Computer networks · 1 · 1 first-author · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Network security · 100% | |
| Artificial intelligence
1 paper |
Deep learning architectures and training · 100% |
Topics — the 4 heaviest of 4, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Network security › intrusion detection and prevention
intrusion detection |
0.8 | 1 | 2024 | Relative Frequency-Rank Encoding for Unsupervised Network Anomaly Detection · IEEE/ACM Trans. Netw. 2024 |
Network security › intrusion detection and prevention › intrusion detection › anomaly detection
network anomaly detection |
0.8 | 1 | 2024 | Relative Frequency-Rank Encoding for Unsupervised Network Anomaly Detection · IEEE/ACM Trans. Netw. 2024 |
Network security
traffic analysis |
0.8 | 1 | 2024 | Relative Frequency-Rank Encoding for Unsupervised Network Anomaly Detection · IEEE/ACM Trans. Netw. 2024 |
Machine learning › Deep learning architectures and training
autoencoder |
0.2 | 1 | 2024 | Relative Frequency-Rank Encoding for Unsupervised Network Anomaly Detection · IEEE/ACM Trans. Netw. 2024 |
Methods — techniques the papers use, named apart from their topics
unsupervised learning · 1.5frequency-rank encoding · 1.5autoencoder · 1.5
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2024 | Relative Frequency-Rank Encoding for Unsupervised Network Anomaly DetectionabstractNetwork-based anomaly detection plays a pivotal role in cybersecurity. Most detection models are based on unsupervised machine learning to learn such a normal flow pattern of network traffic as the numbers of incoming/outgoing packets, traffic volumes in bytes, duration time, etc., most of which are numerical features. On the contrary, non-numerical features have not been fully utilized yet although they often give a decisive hint to the detection of unseen attacks; for example, rarely observed combinations of IP addresses and port numbers can reveal an uncommon attack attempt. This heuristic has already been used by human experts for decades, but not fully utilized yet by deep learning models. In this paper, we present a new encoding scheme for non-numerical features such as IP addresses and port numbers that might have been mistakenly considered as numerical features. The new encoding scheme first ranks non-numerical features in their frequency order and then evenly places each rank between 0 and 1, which transforms raw data into a form that is easy for machines to understand. The anomaly detection performance is significantly improved when this new encoding scheme is applied to the same deep learning model. For example, a simple autoencoder model with the new encoding scheme achieved the Area Under Receiver Operating Characteristic, AUROC, of 0.99 for the well-known CICIDS2017 dataset while the previous record was 0.91. Experimental results from three different open datasets show that the proposed encoding scheme can significantly enhance the performance of anomaly detection models. Minsong Kim, Woohyuk Jang, JunNyung Hur, MyungKeun Yoon 0001 |
IEEE/ACM Trans. Netw. | 1 |