A decade of artificial intelligence in intrusion detection: a cross-database bibliometric analysis of Scopus and Web of Science (2016-2025) — replication package

Abstract

Replication package for the article of the same name. R scripts that regenerate every table and figure of the paper from the raw Scopus and Web of Science exports, together with the derived corpus objects, the two-stage keyword thesaurus, all output tables as UTF-8 CSV, all ten figures as PNG, and the diagnostic logs. 08_verification.R compares 59 quantities printed in the article with the values recomputed here, and all 59 reproduce exactly. Corpus: 5,641 documents published 2016-2025, from a deduplicated merger of Scopus (5,509 records) and Web of Science (2,763 records) under an adapted PRISMA protocol. The co-citation analysis rests on the Web of Science sub-corpus of 2,734 records carrying cited references. Raw Scopus and Web of Science exports are NOT redistributed: Elsevier and Clarivate licence terms do not permit it. Both queries are reproduced verbatim in the README, and the derived .rds objects allow the whole pipeline to run without them (set REIMPORT <- FALSE in 00_main.R). Environment: R 4.6.0 RC, bibliometrix 5.3.0. See README.md and sessionInfo.txt.