<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-03190484</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-25T05:03:30+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Combining Machine Learning and Behavior Analysis Techniques for Network Security</title>
            <author role="aut">
              <persName>
                <forename type="first">Maria Laura</forename>
                <surname>Brzezinski Meyer</surname>
              </persName>
              <email type="md5">8dcb5349bffc7799a7e7aa59e3dedb23</email>
              <email type="domain">gmail.com</email>
              <idno type="idhal" notation="string">maria-laura-brzezinski-meyer</idno>
              <idno type="idhal" notation="numeric">745183</idno>
              <idno type="halauthorid" notation="string">53381-745183</idno>
              <idno type="ORCID">https://orcid.org/0000-0003-1748-768X</idno>
              <affiliation ref="#struct-93269"/>
              <affiliation ref="#struct-388967"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Yann</forename>
                <surname>Labit</surname>
              </persName>
              <email type="md5">27c9bc957c798bfbb26936f3f21b5542</email>
              <email type="domain">laas.fr</email>
              <idno type="idhal" notation="string">yann-labit</idno>
              <idno type="idhal" notation="numeric">738327</idno>
              <idno type="halauthorid" notation="string">27678-738327</idno>
              <idno type="IDREF">https://www.idref.fr/073912557</idno>
              <idno type="ORCID">https://orcid.org/0009-0006-2544-9762</idno>
              <affiliation ref="#struct-388967"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Maria Laura</forename>
                <surname>Brzezinski Meyer</surname>
              </persName>
              <email type="md5">8dcb5349bffc7799a7e7aa59e3dedb23</email>
              <email type="domain">gmail.com</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2025-08-28 19:34:47</date>
              <date type="whenModified">2025-10-22 18:04:09</date>
              <date type="whenReleased">2025-09-19 11:19:05</date>
              <date type="whenProduced">2020-01-07</date>
              <date type="whenEndEmbargoed">2025-08-28</date>
              <ref type="file" target="https://laas.hal.science/hal-03190484v1/document">
                <date notBefore="2025-08-28"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://laas.hal.science/hal-03190484v1/file/paperICOIN.pdf" id="file-5198620-4496726">
                <date notBefore="2025-08-28"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="775992">
                <persName>
                  <forename>Maria Laura</forename>
                  <surname>Brzezinski Meyer</surname>
                </persName>
                <email type="md5">8dcb5349bffc7799a7e7aa59e3dedb23</email>
                <email type="domain">gmail.com</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-03190484</idno>
            <idno type="halUri">https://laas.hal.science/hal-03190484</idno>
            <idno type="halBibtex">brzezinskimeyer:hal-03190484</idno>
            <idno type="halRefHtml">&lt;i&gt;2020 International Conference on Information Networking (ICOIN)&lt;/i&gt;, Jan 2020, Barcelona, Spain. pp.580-583, &lt;a target="_blank" href="https://dx.doi.org/10.1109/icoin48656.2020.9016500"&gt;&amp;#x27E8;10.1109/icoin48656.2020.9016500&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">2020 International Conference on Information Networking (ICOIN), Jan 2020, Barcelona, Spain. pp.580-583, &amp;#x27E8;10.1109/icoin48656.2020.9016500&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-5198620-4496726"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="UNIV-TLSE2">Université Toulouse 2</idno>
            <idno type="stamp" n="UNIV-TLSE3">Université de Toulouse</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INSA-TOULOUSE">Institut National des Sciences Appliquées de Toulouse</idno>
            <idno type="stamp" n="LAAS">Laboratoire d'analyse et d'architecture des systèmes</idno>
            <idno type="stamp" n="LAAS-SARA" corresp="LAAS-RISC">Équipe Services et Architectures pour Réseaux Avancés</idno>
            <idno type="stamp" n="UT1-CAPITOLE">Université Toulouse 1 Capitole</idno>
            <idno type="stamp" n="TDS-MACS">Réseau de recherche en Théorie des Systèmes Distribués, Modélisation, Analyse et Contrôle des Systèmes</idno>
            <idno type="stamp" n="INSA-GROUPE">Groupe INSA</idno>
            <idno type="stamp" n="LAAS-RISC" corresp="LAAS">Réseaux, Informatique, Systèmes de Confiance</idno>
            <idno type="stamp" n="TOULOUSE-INP">Toulouse - INP</idno>
            <idno type="stamp" n="UNIV-UT3">Université Toulouse 3</idno>
            <idno type="stamp" n="UT3-INP">Université de Toulouse / Toulouse INP</idno>
            <idno type="stamp" n="UT3-TOULOUSEINP">Université de Toulouse / Toulouse INP</idno>
            <idno type="stamp" n="TEST7-HALCNRS">test 7 du portail hal cnrs</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Combining Machine Learning and Behavior Analysis Techniques for Network Security</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Maria Laura</forename>
                    <surname>Brzezinski Meyer</surname>
                  </persName>
                  <email type="md5">8dcb5349bffc7799a7e7aa59e3dedb23</email>
                  <email type="domain">gmail.com</email>
                  <idno type="idhal" notation="string">maria-laura-brzezinski-meyer</idno>
                  <idno type="idhal" notation="numeric">745183</idno>
                  <idno type="halauthorid" notation="string">53381-745183</idno>
                  <idno type="ORCID">https://orcid.org/0000-0003-1748-768X</idno>
                  <affiliation ref="#struct-93269"/>
                  <affiliation ref="#struct-388967"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Yann</forename>
                    <surname>Labit</surname>
                  </persName>
                  <email type="md5">27c9bc957c798bfbb26936f3f21b5542</email>
                  <email type="domain">laas.fr</email>
                  <idno type="idhal" notation="string">yann-labit</idno>
                  <idno type="idhal" notation="numeric">738327</idno>
                  <idno type="halauthorid" notation="string">27678-738327</idno>
                  <idno type="IDREF">https://www.idref.fr/073912557</idno>
                  <idno type="ORCID">https://orcid.org/0009-0006-2544-9762</idno>
                  <affiliation ref="#struct-388967"/>
                </author>
              </analytic>
              <monogr>
                <idno type="localRef">Rapport LAAS n° 20457</idno>
                <meeting>
                  <title>2020 International Conference on Information Networking (ICOIN)</title>
                  <date type="start">2020-01-07</date>
                  <date type="end">2020-01-10</date>
                  <settlement>Barcelona</settlement>
                  <country key="ES">Spain</country>
                </meeting>
                <imprint>
                  <publisher>IEEE</publisher>
                  <biblScope unit="pp">580-583</biblScope>
                  <date type="datePub">2020-01</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1109/icoin48656.2020.9016500</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Security</term>
                <term xml:lang="en">Confidence Index</term>
                <term xml:lang="en">DoS</term>
                <term xml:lang="en">Network Attacks</term>
                <term xml:lang="en">Entropy</term>
                <term xml:lang="en">Kullback-Leibler Divergence</term>
                <term xml:lang="en">Hausdorff Distance</term>
                <term xml:lang="en">Random Forest</term>
                <term xml:lang="en">Decision Tree</term>
                <term xml:lang="en">Neural Network</term>
                <term xml:lang="en">IDS</term>
                <term xml:lang="en">Combination</term>
              </keywords>
              <classCode scheme="halDomain" n="info.info-ai">Computer Science [cs]/Artificial Intelligence [cs.AI]</classCode>
              <classCode scheme="halDomain" n="info.info-au">Computer Science [cs]/Automatic Control Engineering</classCode>
              <classCode scheme="halDomain" n="info.info-cr">Computer Science [cs]/Cryptography and Security [cs.CR]</classCode>
              <classCode scheme="halDomain" n="info.info-db">Computer Science [cs]/Databases [cs.DB]</classCode>
              <classCode scheme="halDomain" n="info.info-lg">Computer Science [cs]/Machine Learning [cs.LG]</classCode>
              <classCode scheme="halDomain" n="info.info-mo">Computer Science [cs]/Modeling and Simulation</classCode>
              <classCode scheme="halDomain" n="info.info-ni">Computer Science [cs]/Networking and Internet Architecture [cs.NI]</classCode>
              <classCode scheme="halDomain" n="info.info-pl">Computer Science [cs]/Programming Languages [cs.PL]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Network traffic attacks are increasingly common and varied, this is a big problem especially when the target network is centralized. The creation of IDS (Intrusion Detection Systems) capable of detecting various types of attacks is necessary. Machine learning algorithms are widely used in the classification of data, bringing a good result in the area of computer networks. In addition, the analysis of entropy and distance between data sets are also very effective in detecting anomalies. However, each technique has its limitations, so this work aims to study their combination in order to improve their performance and create a new intrusion detection system capable of well detect some of the most common attacks. Reliability indices will be used as metrics to the combination decision and they will be updated in each new dataset according to the decision made earlier.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="regrouplaboratory" xml:id="struct-93269" status="VALID">
          <orgName>Ecole Nationale Supérieure d'Electrotechnique, d'Electronique, d'Informatique, d'Hydraulique et de Télécommunications</orgName>
          <orgName type="acronym">ENSEEIHT</orgName>
          <desc>
            <address>
              <addrLine>2 rue Charles Camichel. BP 7122 31071 Toulouse cedex 7 FR</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.enseeiht.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-448187" type="direct"/>
            <relation active="#struct-443875" type="indirect"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-388967" status="OLD">
          <orgName>Équipe Services et Architectures pour Réseaux Avancés</orgName>
          <orgName type="acronym">LAAS-SARA</orgName>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.laas.fr/public/fr/sara</ref>
          </desc>
          <listRelation>
            <relation active="#struct-459" type="direct"/>
            <relation active="#struct-81148" type="indirect"/>
            <relation name="443875" active="#struct-443875" type="indirect"/>
            <relation active="#struct-116255" type="indirect"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation active="#struct-443875" type="indirect"/>
            <relation active="#struct-116256" type="indirect"/>
            <relation active="#struct-217752" type="indirect"/>
            <relation name="UPR8001" active="#struct-441569" type="indirect"/>
            <relation active="#struct-448187" type="indirect"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-448187" status="VALID">
          <idno type="IdRef">026388820</idno>
          <idno type="ISNI">0000000121766169</idno>
          <idno type="ROR">https://ror.org/033p9g875</idno>
          <orgName>Institut National Polytechnique (Toulouse)</orgName>
          <orgName type="acronym">Toulouse INP</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.inp-toulouse.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-443875" status="VALID">
          <idno type="ROR">https://ror.org/017tgbk05</idno>
          <orgName>Communauté d'universités et établissements de Toulouse</orgName>
          <orgName type="acronym">Comue de Toulouse</orgName>
          <desc>
            <address>
              <addrLine>41 Allée Jules Guesde, 31000 Toulouse</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.univ-toulouse.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-459" status="OLD">
          <idno type="IdRef">199278792</idno>
          <idno type="ISNI">0000 0001 2188 216X </idno>
          <idno type="RNSR">199517454Y</idno>
          <idno type="ROR">https://ror.org/03vcm6439</idno>
          <orgName>Laboratoire d'analyse et d'architecture des systèmes</orgName>
          <orgName type="acronym">LAAS</orgName>
          <date type="start">1968-01-01</date>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <addrLine>7 Av du colonel Roche 31077 TOULOUSE CEDEX 4</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.laas.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-81148" type="direct"/>
            <relation name="443875" active="#struct-443875" type="indirect"/>
            <relation active="#struct-116255" type="direct"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation active="#struct-443875" type="indirect"/>
            <relation active="#struct-116256" type="direct"/>
            <relation active="#struct-217752" type="direct"/>
            <relation name="UPR8001" active="#struct-441569" type="direct"/>
            <relation active="#struct-448187" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-81148" status="VALID">
          <idno type="IdRef">026404354</idno>
          <idno type="ISNI">0000000121902837</idno>
          <idno type="ROR">https://ror.org/0443n9e75</idno>
          <orgName>Université Toulouse Capitole</orgName>
          <orgName type="acronym">UT Capitole</orgName>
          <date type="start">1970-01-01</date>
          <desc>
            <address>
              <addrLine>2 rue du Doyen-Gabriel-Marty - 31042 Toulouse Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.ut-capitole.fr/</ref>
          </desc>
          <listRelation>
            <relation name="443875" active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-116255" status="VALID">
          <idno type="IdRef">026388766</idno>
          <idno type="ISNI">0000 0001 2286 8343</idno>
          <idno type="ROR">https://ror.org/01h8pf755</idno>
          <idno type="Wikidata">Q858979</idno>
          <orgName>Institut National des Sciences Appliquées - Toulouse</orgName>
          <orgName type="acronym">INSA Toulouse</orgName>
          <date type="start">1963-10-21</date>
          <desc>
            <address>
              <addrLine>135, avenue de Rangueil - 31077 Toulouse cedex 4</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.insa-toulouse.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301232" type="direct"/>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-301232" status="VALID">
          <idno type="IdRef">162105150</idno>
          <orgName>Institut National des Sciences Appliquées</orgName>
          <orgName type="acronym">INSA</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-116256" status="VALID">
          <idno type="IdRef">026403994</idno>
          <idno type="ROR">https://ror.org/04ezk3x31</idno>
          <orgName>Université Toulouse - Jean Jaurès</orgName>
          <orgName type="acronym">UT2J</orgName>
          <date type="start">1971-01-01</date>
          <desc>
            <address>
              <addrLine>5 allées Antonio Machado - 31058 Toulouse Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-tlse2.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-217752" status="OLD">
          <idno type="IdRef">026404672</idno>
          <idno type="ISNI">0000000121617331</idno>
          <idno type="ROR">https://ror.org/02v6kpv12</idno>
          <idno type="Wikidata">Q1273188</idno>
          <orgName>Université Toulouse III - Paul Sabatier</orgName>
          <orgName type="acronym">UT3</orgName>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <addrLine>118 route de Narbonne - 31062 Toulouse</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-tlse3.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>