{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,28]],"date-time":"2025-09-28T20:47:04Z","timestamp":1759092424247},"publisher-location":"Berlin, Heidelberg","reference-count":7,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783540370253"},{"type":"electronic","value":"9783540370260"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2006]]},"DOI":"10.1007\/11811305_114","type":"book-chapter","created":{"date-parts":[[2006,7,26]],"date-time":"2006-07-26T09:30:33Z","timestamp":1153906233000},"page":"1049-1056","source":"Crossref","is-referenced-by-count":2,"title":["Alert Correlation Analysis in Intrusion Detection"],"prefix":"10.1007","author":[{"given":"Moon Sun","family":"Shin","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kyeong Ja","family":"Jeong","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"114_CR1","series-title":"Lecture Notes in Computer Science","volume-title":"Intelligent Data Engineering and Automated Learning \u2013 IDEAL 2003","author":"M.J. Lee","year":"2003","unstructured":"Lee, M.J., Shin, M.S., Moon, H.S., Ryu, K.H.: Implementation of Alert Analyzer with Data Mining Engine. In: Liu, J., Cheung, Y.-m., Yin, H. (eds.) IDEAL 2003. LNCS, vol.\u00a02690, Springer, Heidelberg (2003)"},{"key":"114_CR2","doi-asserted-by":"publisher","first-page":"547","DOI":"10.1016\/S1389-1286(00)00136-5","volume":"34","author":"E.H. Spafford","year":"2000","unstructured":"Spafford, E.H., Zamboni, D.: Intrusion detection using autonomous agents. Computer Networks\u00a034, 547\u2013570 (2000)","journal-title":"Computer Networks"},{"key":"114_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"85","DOI":"10.1007\/3-540-45474-8_6","volume-title":"Recent Advances in Intrusion Detection","author":"H. Debar","year":"2001","unstructured":"Debar, H., Wespi, A.: Aggregation and Correlation of Intrusion-Detection Alerts. In: Lee, W., M\u00e9, L., Wespi, A. (eds.) RAID 2001. LNCS, vol.\u00a02212, pp. 85\u2013103. Springer, Heidelberg (2001)"},{"key":"114_CR4","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"54","DOI":"10.1007\/3-540-45474-8_4","volume-title":"Recent Advances in Intrusion Detection","author":"A. Valdes","year":"2001","unstructured":"Valdes, A., Skinner, K.: Probabilistic alert correlation. In: Lee, W., M\u00e9, L., Wespi, A. (eds.) RAID 2001. LNCS, vol.\u00a02212, pp. 54\u201368. Springer, Heidelberg (2001)"},{"key":"114_CR5","unstructured":"Tcpdump\/Libpcap, Network Packet Capture Program (2003), \n                    \n                      http:\/\/www.tcpdump.org"},{"key":"114_CR6","unstructured":"Ning, P., Cui, Y.: An intrusion alert correlator based on prerequisites of intrusions. Technical Report TR-2002-01, Department of Computer Science, North Carolina State University"},{"key":"114_CR7","unstructured":"Moon, H.S., Shin, M.S., Ryu, K.H., Kim, J.O.: Implementation of security policy server\u2019s alert analyzer. In: Proc. of ICIS, August 2002, Seoul (2002)"}],"container-title":["Lecture Notes in Computer Science","Advanced Data Mining and Applications"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/11811305_114","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,3,11]],"date-time":"2019-03-11T14:58:32Z","timestamp":1552316312000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/11811305_114"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2006]]},"ISBN":["9783540370253","9783540370260"],"references-count":7,"URL":"https:\/\/doi.org\/10.1007\/11811305_114","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2006]]}}}