{"id":"https://openalex.org/W4411318364","doi":"https://doi.org/10.1016/j.eswa.2025.128469","title":"Deep learning techniques for DDoS attack detection: Concepts, analyses, challenges, and future directions","display_name":"Deep learning techniques for DDoS attack detection: Concepts, analyses, challenges, and future directions","publication_year":2025,"publication_date":"2025-06-15","ids":{"openalex":"https://openalex.org/W4411318364","doi":"https://doi.org/10.1016/j.eswa.2025.128469"},"language":"en","primary_location":{"id":"doi:10.1016/j.eswa.2025.128469","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.eswa.2025.128469","pdf_url":null,"source":{"id":"https://openalex.org/S13144211","display_name":"Expert Systems with Applications","issn_l":"0957-4174","issn":["0957-4174","1873-6793"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Expert Systems with Applications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.eswa.2025.128469","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5102851365","display_name":"Xingbing Fu","orcid":"https://orcid.org/0000-0002-0025-8883"},"institutions":[{"id":"https://openalex.org/I4210115152","display_name":"Zhejiang Institute of Special Equipment Inspection","ror":"https://ror.org/01jb3sz14","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210115152"]},{"id":"https://openalex.org/I4210130112","display_name":"China Academy of Information and Communications Technology","ror":"https://ror.org/038dte259","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210130112","https://openalex.org/I890469752"]},{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Xingbing Fu","raw_affiliation_strings":["China Academy of Information and Communications Technology, Beijing, 100195, PR China","School of Cyberspace, Hangzhou Dianzi University, Hangzhou, 310018, PR China","Zhejiang Electronic Information Products Inspection and Research Institute (Key Laboratory of Information Security of Zhejiang Province), Hangzhou, 310007, PR China"],"raw_orcid":"https://orcid.org/0000-0002-0025-8883","affiliations":[{"raw_affiliation_string":"China Academy of Information and Communications Technology, Beijing, 100195, PR China","institution_ids":["https://openalex.org/I4210130112"]},{"raw_affiliation_string":"School of Cyberspace, Hangzhou Dianzi University, Hangzhou, 310018, PR China","institution_ids":["https://openalex.org/I50760025"]},{"raw_affiliation_string":"Zhejiang Electronic Information Products Inspection and Research Institute (Key Laboratory of Information Security of Zhejiang Province), Hangzhou, 310007, PR China","institution_ids":["https://openalex.org/I4210115152"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Supeng Lou","orcid":null},"institutions":[{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Supeng Lou","raw_affiliation_strings":["School of Cyberspace, Hangzhou Dianzi University, Hangzhou, 310018, PR China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace, Hangzhou Dianzi University, Hangzhou, 310018, PR China","institution_ids":["https://openalex.org/I50760025"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020813193","display_name":"Jiaming Zheng","orcid":"https://orcid.org/0009-0009-8743-2044"},"institutions":[{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiaming Zheng","raw_affiliation_strings":["School of Cyberspace, Hangzhou Dianzi University, Hangzhou, 310018, PR China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace, Hangzhou Dianzi University, Hangzhou, 310018, PR China","institution_ids":["https://openalex.org/I50760025"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040112181","display_name":"Cheng Chi","orcid":"https://orcid.org/0000-0001-7222-2583"},"institutions":[{"id":"https://openalex.org/I4210130112","display_name":"China Academy of Information and Communications Technology","ror":"https://ror.org/038dte259","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210130112","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Cheng Chi","raw_affiliation_strings":["China Academy of Information and Communications Technology, Beijing, 100195, PR China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"China Academy of Information and Communications Technology, Beijing, 100195, PR China","institution_ids":["https://openalex.org/I4210130112"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102978831","display_name":"Jie Yang","orcid":"https://orcid.org/0000-0002-3454-7528"},"institutions":[{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jie Yang","raw_affiliation_strings":["School of Management, Hangzhou Dianzi University, Hangzhou, 310018, PR China"],"raw_orcid":"https://orcid.org/0000-0002-3454-7528","affiliations":[{"raw_affiliation_string":"School of Management, Hangzhou Dianzi University, Hangzhou, 310018, PR China","institution_ids":["https://openalex.org/I50760025"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077728036","display_name":"Dong Wang","orcid":"https://orcid.org/0000-0001-9246-204X"},"institutions":[{"id":"https://openalex.org/I50760025","display_name":"Hangzhou Dianzi University","ror":"https://ror.org/0576gt767","country_code":"CN","type":"education","lineage":["https://openalex.org/I50760025"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dong Wang","raw_affiliation_strings":["School of Cyberspace, Hangzhou Dianzi University, Hangzhou, 310018, PR China"],"raw_orcid":"https://orcid.org/0000-0001-9246-204X","affiliations":[{"raw_affiliation_string":"School of Cyberspace, Hangzhou Dianzi University, Hangzhou, 310018, PR China","institution_ids":["https://openalex.org/I50760025"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110026968","display_name":"Chenming Zhu","orcid":null},"institutions":[{"id":"https://openalex.org/I4210115152","display_name":"Zhejiang Institute of Special Equipment Inspection","ror":"https://ror.org/01jb3sz14","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210115152"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenming Zhu","raw_affiliation_strings":["Zhejiang Electronic Information Products Inspection and Research Institute (Key Laboratory of Information Security of Zhejiang Province), Hangzhou, 310007, PR China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Zhejiang Electronic Information Products Inspection and Research Institute (Key Laboratory of Information Security of Zhejiang Province), Hangzhou, 310007, PR China","institution_ids":["https://openalex.org/I4210115152"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089947502","display_name":"Butian Huang","orcid":"https://orcid.org/0009-0009-5986-697X"},"institutions":[{"id":"https://openalex.org/I4210132079","display_name":"Hangzhou Wanxiang Polytechnic","ror":"https://ror.org/03sxnxp24","country_code":"CN","type":"education","lineage":["https://openalex.org/I4210132079"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Butian Huang","raw_affiliation_strings":["Hangzhou Yunphant Network Technology Co. LTD, Hangzhou, 311121, PR China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hangzhou Yunphant Network Technology Co. LTD, Hangzhou, 311121, PR China","institution_ids":["https://openalex.org/I4210132079"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028643592","display_name":"Xiatian Zhu","orcid":"https://orcid.org/0000-0002-9284-2955"},"institutions":[{"id":"https://openalex.org/I28290843","display_name":"University of Surrey","ror":"https://ror.org/00ks66431","country_code":"GB","type":"education","lineage":["https://openalex.org/I28290843"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Xiatian Zhu","raw_affiliation_strings":["Surrey Institute for People-Centred Artificial Intelligence, CVSSP, University of Surrey, Guildford, UK"],"raw_orcid":"https://orcid.org/0000-0002-9284-2955","affiliations":[{"raw_affiliation_string":"Surrey Institute for People-Centred Artificial Intelligence, CVSSP, University of Surrey, Guildford, UK","institution_ids":["https://openalex.org/I28290843"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":9,"corresponding_author_ids":["https://openalex.org/A5102851365"],"corresponding_institution_ids":["https://openalex.org/I4210115152","https://openalex.org/I4210130112","https://openalex.org/I50760025"],"apc_list":{"value":3220,"currency":"USD","value_usd":3220},"apc_paid":{"value":3220,"currency":"USD","value_usd":3220},"fwci":9.7466,"has_fulltext":false,"cited_by_count":9,"citation_normalized_percentile":{"value":0.97999945,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":100},"biblio":{"volume":"291","issue":null,"first_page":"128469","last_page":"128469"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9936000108718872,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7601688504219055},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7449452877044678},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.48576071858406067},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.47932755947113037},{"id":"https://openalex.org/keywords/application-layer-ddos-attack","display_name":"Application layer DDoS attack","score":0.45795735716819763},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.39253124594688416},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3559480309486389},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.110894113779068},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.10482224822044373}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7601688504219055},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7449452877044678},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.48576071858406067},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47932755947113037},{"id":"https://openalex.org/C120865594","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Application layer DDoS attack","level":4,"score":0.45795735716819763},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.39253124594688416},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3559480309486389},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.110894113779068},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.10482224822044373}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.eswa.2025.128469","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.eswa.2025.128469","pdf_url":null,"source":{"id":"https://openalex.org/S13144211","display_name":"Expert Systems with Applications","issn_l":"0957-4174","issn":["0957-4174","1873-6793"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Expert Systems with Applications","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.eswa.2025.128469","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.eswa.2025.128469","pdf_url":null,"source":{"id":"https://openalex.org/S13144211","display_name":"Expert Systems with Applications","issn_l":"0957-4174","issn":["0957-4174","1873-6793"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Expert Systems with Applications","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":102,"referenced_works":["https://openalex.org/W2142733395","https://openalex.org/W2255466643","https://openalex.org/W2395579298","https://openalex.org/W2466954733","https://openalex.org/W2765811365","https://openalex.org/W2790979755","https://openalex.org/W2896827527","https://openalex.org/W2963264685","https://openalex.org/W2990225485","https://openalex.org/W3005097670","https://openalex.org/W3034315405","https://openalex.org/W3086809868","https://openalex.org/W3096924870","https://openalex.org/W3102091066","https://openalex.org/W3123459983","https://openalex.org/W3134031829","https://openalex.org/W3168997536","https://openalex.org/W3183423075","https://openalex.org/W3198072807","https://openalex.org/W4200360619","https://openalex.org/W4206802281","https://openalex.org/W4210327135","https://openalex.org/W4211261703","https://openalex.org/W4213102562","https://openalex.org/W4220886040","https://openalex.org/W4233192639","https://openalex.org/W4235931205","https://openalex.org/W4238869514","https://openalex.org/W4241882551","https://openalex.org/W4253610094","https://openalex.org/W4255953647","https://openalex.org/W4285696346","https://openalex.org/W4288081073","https://openalex.org/W4289258965","https://openalex.org/W4292825873","https://openalex.org/W4296218597","https://openalex.org/W4300874179","https://openalex.org/W4301447857","https://openalex.org/W4302192999","https://openalex.org/W4311404181","https://openalex.org/W4311644718","https://openalex.org/W4316039105","https://openalex.org/W4319073384","https://openalex.org/W4366528422","https://openalex.org/W4367146506","https://openalex.org/W4378213352","https://openalex.org/W4383535390","https://openalex.org/W4387408829","https://openalex.org/W4387976309","https://openalex.org/W4388333338","https://openalex.org/W4388501483","https://openalex.org/W4388817612","https://openalex.org/W4388894081","https://openalex.org/W4389246563","https://openalex.org/W4389386934","https://openalex.org/W4390282129","https://openalex.org/W4391407086","https://openalex.org/W4392642847","https://openalex.org/W4392851481","https://openalex.org/W4392858381","https://openalex.org/W4393007161","https://openalex.org/W4393336635","https://openalex.org/W4393354607","https://openalex.org/W4394717236","https://openalex.org/W4396238673","https://openalex.org/W4396822685","https://openalex.org/W4396982262","https://openalex.org/W4400188178","https://openalex.org/W4401011499","https://openalex.org/W4401409861","https://openalex.org/W4404374510","https://openalex.org/W4405061911","https://openalex.org/W4408598270","https://openalex.org/W6681100694","https://openalex.org/W6697252871","https://openalex.org/W6743778963","https://openalex.org/W6751070553","https://openalex.org/W6751536933","https://openalex.org/W6758051753","https://openalex.org/W6758651727","https://openalex.org/W6765116793","https://openalex.org/W6769694850","https://openalex.org/W6774489919","https://openalex.org/W6775377117","https://openalex.org/W6778998865","https://openalex.org/W6785062047","https://openalex.org/W6790799008","https://openalex.org/W6799147514","https://openalex.org/W6800954332","https://openalex.org/W6801157581","https://openalex.org/W6810519029","https://openalex.org/W6820899291","https://openalex.org/W6824902798","https://openalex.org/W6838600132","https://openalex.org/W6845646931","https://openalex.org/W6847537286","https://openalex.org/W6856150327","https://openalex.org/W6858124557","https://openalex.org/W6858556768","https://openalex.org/W6859768685","https://openalex.org/W6862110055","https://openalex.org/W6868310797"],"related_works":["https://openalex.org/W2360429410","https://openalex.org/W2898696280","https://openalex.org/W2204131204","https://openalex.org/W2383770723","https://openalex.org/W2921433547","https://openalex.org/W2958385475","https://openalex.org/W2783466926","https://openalex.org/W4286539397","https://openalex.org/W2370216173","https://openalex.org/W2754163055"],"abstract_inverted_index":{"DDoS":[0,38,127,140,173,183],"(Distributed":[1],"Denial":[2],"of":[3,15,37,58,135,139],"Service)":[4],"attacks":[5,39,54,141],"are":[6,74],"increasingly":[7],"becoming":[8],"a":[9,132],"major":[10],"threat":[11],"in":[12,172],"the":[13,29,49,56,136],"field":[14],"cybersecurity.":[16],"They":[17],"overwhelm":[18],"target":[19],"servers":[20,30],"by":[21,52],"sending":[22],"large-scale":[23],"requests":[24],"from":[25],"multiple":[26],"locations,":[27],"causing":[28],"to":[31,101,112],"become":[32,65],"unresponsive.":[33],"The":[34],"distributed":[35],"nature":[36],"also":[40,90],"makes":[41],"detection":[42,60,114,185],"and":[43,61,104,120,142,167],"defense":[44],"even":[45],"more":[46,107],"challenging.":[47],"As":[48],"damage":[50],"caused":[51],"such":[53,156],"grows,":[55],"development":[57],"efficient":[59],"mitigation":[62],"mechanisms":[63],"has":[64],"an":[66,98],"urgent":[67],"priority.":[68],"While":[69],"traditional":[70],"machine":[71],"learning":[72,96,124,146,159],"methods":[73,125],"useful,":[75],"they":[76],"still":[77],"require":[78],"manual":[79],"feature":[80,102],"extraction,":[81],"which":[82,110],"not":[83],"only":[84],"involves":[85],"significant":[86],"human":[87],"intervention,":[88],"but":[89],"is":[91],"time-consuming.":[92],"In":[93],"contrast,":[94],"deep":[95,123,145,165,187],"offers":[97],"automated":[99],"approach":[100],"extraction":[103],"can":[105,161],"learn":[106],"abstract":[108],"patterns,":[109],"leads":[111],"improved":[113],"performance.":[115],"Therefore,":[116],"this":[117],"paper":[118],"reviews":[119],"analyzes":[121],"existing":[122],"for":[126,149],"attack":[128,150,174,184],"detection.":[129,151,175],"We":[130],"provide":[131],"comprehensive":[133],"analysis":[134],"various":[137],"types":[138],"explore":[143,154],"different":[144],"models":[147],"employed":[148],"Additionally,":[152],"we":[153,177],"techniques":[155],"as":[157],"federated":[158],"that":[160],"be":[162],"integrated":[163],"with":[164],"learning,":[166],"analyze":[168],"their":[169],"related":[170],"literature":[171],"Finally,":[176],"specify":[178],"future":[179],"research":[180],"directions":[181],"on":[182],"using":[186],"learning.":[188]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":2}],"updated_date":"2026-06-14T06:11:07.267592","created_date":"2025-10-10T00:00:00"}