{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T14:48:04Z","timestamp":1781621284237,"version":"3.54.5"},"publisher-location":"Berlin, Heidelberg","reference-count":38,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783540401247","type":"print"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"DOI":"10.1007\/3-540-44831-4_13","type":"book-chapter","created":{"date-parts":[[2007,8,10]],"date-time":"2007-08-10T06:28:44Z","timestamp":1186727324000},"page":"113-123","source":"Crossref","is-referenced-by-count":9,"title":["Content-Based Methodology for Anomaly Detection on the Web"],"prefix":"10.1007","author":[{"given":"Mark","family":"Last","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bracha","family":"Shapira","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yuval","family":"Elovici","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Omer","family":"Zaafrany","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Abraham","family":"Kandel","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"13_CR1","doi-asserted-by":"publisher","first-page":"805","DOI":"10.1016\/S1389-1286(98)00017-6","volume":"31","author":"H. Debar","year":"1999","unstructured":"H. Debar, M. Dacier, A. Wespi, \u201cTowards a taxonomy of intrusion-detection systems\u201d, Computer Networks, 1999, Vol. 31, pp. 805\u2013822.","journal-title":"Computer Networks"},{"key":"13_CR2","unstructured":"W. Lee, S.J. Stolfo, P. K. Chan, E. Eskin, W. Fan, M. Miller, S. Hershkop, J. Zhang, \u201cReal Time Data Mining-based Intrusion Detection\u201d, Proceedings of DISCEX II, 2001."},{"key":"13_CR3","doi-asserted-by":"crossref","unstructured":"W. Lee, S.J. Stolfo, \u201cA Framework for Constructing Features and Models for Intrusion Detection Systems\u201d, ACM Transactions on Information and System Security, 2000, Vol. 3, No. 4.","DOI":"10.1145\/382912.382914"},{"key":"13_CR4","unstructured":"W. Lee, S.J. Stolfo, \u201cData Mining Approaches for Intrusion Detection\u201d, In Proceedings of the Seventh USENIX Security Symposium, San Antonio, TX, 1998."},{"key":"13_CR5","doi-asserted-by":"publisher","first-page":"671","DOI":"10.1016\/S0167-4048(99)80131-X","volume":"18","author":"K. Richards","year":"1999","unstructured":"K. Richards, \u201cNetwork Based Intrusion Detection: A Review of Technologies\u201d, Computers & Security, 1999, Vol. 18, pp. 671\u2013682.","journal-title":"Computers & Security"},{"key":"13_CR6","doi-asserted-by":"publisher","first-page":"547","DOI":"10.1016\/S1389-1286(00)00136-5","volume":"4","author":"E.H. Spafford","year":"2000","unstructured":"E.H. Spafford, D. Zamboni, \u201cIntrusion detection using autonomous agents\u201d, Computer Networks, 2000, Vol. 4, pp. 547\u2013570.","journal-title":"Computer Networks"},{"key":"13_CR7","first-page":"13","volume-title":"Proceedings 14th Annual Computer Security Applications Conference","author":"J.S. Balasubramaniyan","year":"1998","unstructured":"J.S. Balasubramaniyan, J.O. Garcia-Fernandez, D Isacoff, E. Spafford, D. Zamboni, \u201cAn architecture for intrusion detection using autonomous agents\u201d, Proceedings 14th Annual Computer Security Applications Conference, IEEE Comput. Soc, Los Alamitos, CA, USA, 1998, xiii+365, pp. 13\u201324."},{"key":"13_CR8","unstructured":"J. Cannady, \u201cNext Generation Intrusion Detection: Autonomous Reinforcement Learning of Network Attacks\u201d, Proceedings of the 23rd National Information Systems Security Conference, 2000."},{"key":"13_CR9","unstructured":"J. Cannady, \u201cNeural Networks for Misuse Detection: Initial Results\u201d, Proceedings of the Recent Advances in Intrusion Detection\u2019 98 Conference, 1998, pp. 31\u201347."},{"issue":"12","key":"13_CR10","doi-asserted-by":"publisher","first-page":"1202","DOI":"10.1016\/S0140-3664(00)00364-9","volume":"24","author":"B. Balajinath","year":"2001","unstructured":"B. Balajinath, S. Raghavan, \u201cIntrusion detection through learning behavior model\u201d, International Journal Of Computer Communications, 2001, Vol. 24, No. 12, pp. 1202\u20131212.","journal-title":"International Journal Of Computer Communications"},{"issue":"5","key":"13_CR11","doi-asserted-by":"publisher","first-page":"441","DOI":"10.1016\/0167-4048(96)00012-0","volume":"15","author":"G. White","year":"1996","unstructured":"G. White, V. Pooch, \u201cCooperating Security Managers: distribute intrusion detection systems\u201d, Computers & Security, 1996, Vol. 15, No. 5, pp. 441\u2013450.","journal-title":"Computers & Security"},{"key":"13_CR12","doi-asserted-by":"publisher","first-page":"2465","DOI":"10.1016\/S1389-1286(99)00114-0","volume":"31","author":"M. Y. Huang","year":"1999","unstructured":"M. Y. Huang, R.J. Jasper, T.M. Wicks, \u201cA large scale distributed intrusion detection framework based on attack strategy analysis\u201d, Computer Networks, 1999, Vol. 31, pp. 2465\u20132475.","journal-title":"Computer Networks"},{"key":"13_CR13","doi-asserted-by":"publisher","first-page":"1702","DOI":"10.1016\/S0140-3664(00)00256-5","volume":"23","author":"P. Ning","year":"2000","unstructured":"P. Ning, X.S. Wang, S. Jajodia, \u201cModeling requests among cooperating intrusion detection systems\u201d, Computer Communications, 2000, Vol. 23, pp. 1702\u20131715.","journal-title":"Computer Communications"},{"key":"13_CR14","first-page":"405","volume":"5","author":"J. Cannady","year":"2000","unstructured":"J. Cannady, \u201cApplying CMAC-based on-line learning to intrusion detection\u201d, In Proceedings of the International Joint Conference on Neural Networks, Italy, 2000, Vol. 5, pp. 405\u2013410.","journal-title":"Proceedings of the International Joint Conference on Neural Networks, Italy"},{"key":"13_CR15","doi-asserted-by":"publisher","first-page":"2435","DOI":"10.1016\/S1389-1286(99)00112-7","volume":"31","author":"V. Paxson","year":"1999","unstructured":"V. Paxson, \u201cBro: a system for detecting network intruders in real-time\u201d, Computer Networks, 1999, Vol. 31, pp. 2435\u20132463.","journal-title":"Computer Networks"},{"key":"13_CR16","unstructured":"B.C. Rhodes, J.A. Mahaffey, J.D. Cannady, \u201cMultiple Self-Organizing Maps for Intrusion Detection\u201d, 23rd National Information Systems Security Conference, 2000."},{"key":"13_CR17","doi-asserted-by":"crossref","unstructured":"E. Eskin, A. Arnold, M. Prerau, L. Portnoy, S. Stolfo, \u201cA Geometric Framework for Unsupervised Anomaly Detection: Detecting Intrusions in Unlabeled Data\u201d, Data Mining in Security Applications, Kluwer Academic Publishers, 2002.","DOI":"10.1007\/978-1-4615-0953-0_4"},{"key":"13_CR18","doi-asserted-by":"publisher","first-page":"597","DOI":"10.1016\/S1389-1286(00)00140-7","volume":"34","author":"R.P. Lippmann","year":"2000","unstructured":"R.P. Lippmann, R.K. Cunningham, \u201cImproving intrusion detection performance using keyword selection and neural networks\u201d, Computer Networks, 2000, Vol. 34, pp. 597\u2013603.","journal-title":"Computer Networks"},{"key":"13_CR19","doi-asserted-by":"publisher","first-page":"69","DOI":"10.1109\/DISCEX.2001.932193","volume-title":"Proceedings DARPA Information Survivability Conference and Exposition II","author":"J.A. Marin","year":"2001","unstructured":"J.A. Marin, D. Ragsdale, J. Surdu, \u201cA hybrid approach to the profile creation and intrusion detection\u201d, Proceedings DARPA Information Survivability Conference and Exposition II, IEEE Comput. Soc, CA, USA, 2001, Vol. 1, pp. 69\u201376."},{"key":"13_CR20","doi-asserted-by":"crossref","unstructured":"T. Fawcett, F. Provost, \u201cActivity Monitoring: Noticing interesting changes in behavior\u201d, Proceedings on the Fifth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, 1999.","DOI":"10.1145\/312129.312195"},{"key":"13_CR21","doi-asserted-by":"publisher","first-page":"187","DOI":"10.1016\/S0306-4573(00)00030-3","volume":"37","author":"Z. Boger","year":"2001","unstructured":"Z. Boger, T. Kuflik, P. Shoval, B. Shapira, \u201cAutomatic keyword identification by artificial neural networks compared to manual identification by users of filtering systems\u201d, Information Processing and Management, 2001, Vol. 37, pp. 187\u2013198.","journal-title":"Information Processing and Management"},{"key":"13_CR22","doi-asserted-by":"publisher","first-page":"3","DOI":"10.1016\/S1088-467X(98)00003-1","volume":"2","author":"E. Bloedorn","year":"1998","unstructured":"E. Bloedorn, I. Mani, \u201cUsing NLP for Machine Learning of User Profiles\u201d, Intelligent Data Analysis, 1998, Vol. 2, pp. 3\u201318.","journal-title":"Intelligent Data Analysis"},{"key":"13_CR23","doi-asserted-by":"publisher","first-page":"307","DOI":"10.1016\/S0950-7051(00)00090-3","volume":"13","author":"S. Pierrea","year":"2000","unstructured":"S. Pierrea, C. Kacanb, W. Probstc, \u201cAn agent-based approach for integrating user profile into a knowledge management process\u201d, 2000, Knowledge-Based Systems, Vol. 13, pp. 307\u2013314.","journal-title":"Knowledge-Based Systems"},{"issue":"3","key":"13_CR24","doi-asserted-by":"publisher","first-page":"273","DOI":"10.1016\/S0306-4573(97)00003-4","volume":"33","author":"B. Shapira","year":"1997","unstructured":"B. Shapira, P. Shoval, U. Hanani, \u201cStereotypes in Information Filtering Systems\u201d, Information Processing & Management, 1997, Vol. 33, No. 3, pp. 273\u2013287.","journal-title":"Information Processing & Management"},{"key":"13_CR25","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1016\/S0167-9236(99)00034-2","volume":"27","author":"B. Shapira","year":"1999","unstructured":"B. Shapira, P. Shoval, U. Hanani, \u201cExperimentation with an information filtering system that combines cognitive and sociological filtering integrated with user stereotypes\u201d, Decision Support Systems, 1999, Vol. 27, pp. 5\u201324.","journal-title":"Decision Support Systems"},{"key":"13_CR26","volume-title":"Principles of Data Mining","author":"D. Hand","year":"2001","unstructured":"D. Hand, H. Mannila, P. Smyth, \u201cPrinciples of Data Mining\u201d, MIt Press, England, 2001."},{"issue":"3","key":"13_CR27","first-page":"37","volume":"17","author":"U. Fayyad","year":"1996","unstructured":"U. Fayyad, G. Piatetsky-Shapiro, P. Smyth, \u201cFrom Data Mining to Knowledge Discovery in Databases\u201d, AI Magazine, 1996, Vol. 17, No. 3, pp. 37\u201354.","journal-title":"AI Magazine"},{"issue":"3","key":"13_CR28","doi-asserted-by":"publisher","first-page":"264","DOI":"10.1145\/331499.331504","volume":"31","author":"A.K. Jain","year":"1999","unstructured":"A.K. Jain, M.N. Murty, P.J. Flynn, \u201cData Clustering: A Review\u201d, ACM Computing Surveys, 1999, Vol. 31, No. 3, pp. 264\u2013323.","journal-title":"ACM Computing Surveys"},{"key":"13_CR29","doi-asserted-by":"crossref","unstructured":"A. Schenker, M. Last, H. Bunke, and A. Kandel, \u201cClustering of Web Documents using a Graph Model\u201d, to appear in \u201cWeb Document Analysis: Challenges and Opportunities\u201d, Apostolos Antonacopoulos and Jianying Hu (Editors), World Scientific, 2003.","DOI":"10.1142\/9789812775375_0001"},{"key":"13_CR30","volume-title":"Automatic Text Processing: the Transformation, Analysis, and Retrieval of Information by Computer","author":"G. Salton","year":"1989","unstructured":"G. Salton, Automatic Text Processing: the Transformation, Analysis, and Retrieval of Information by Computer (Addison-Wesley, Reading, 1989)."},{"key":"13_CR31","volume-title":"Artificial Intelligence: A Modern Approach","author":"S. Russell","year":"1995","unstructured":"S. Russell and P. Norvig, Artificial Intelligence: A Modern Approach (Prentice-Hall, Upper Saddle River, 1995)."},{"issue":"2","key":"13_CR32","first-page":"209","volume":"26","author":"X. Lu","year":"1990","unstructured":"X. Lu, Document retrieval: a structural approach, Information Processing and Management 26, 2 (1990) 209\u2013218.","journal-title":"Document retrieval: a structural approach, Information Processing and Management"},{"key":"13_CR33","unstructured":"Han, J. and Kamber, M., \u201cData Mining: Concepts and Techniques\u201d, Morgan Kaufmann, 2001."},{"key":"13_CR34","doi-asserted-by":"crossref","unstructured":"K. Sequeira and M. Zaki, \u201cADMIT: Anomaly-based Data Mining for Intrusions\u201d, Proceeding of SIGKDD 02, pp. 386\u2013395, ACM, 2002.","DOI":"10.1145\/775047.775103"},{"key":"13_CR35","doi-asserted-by":"publisher","first-page":"613","DOI":"10.1145\/361219.361220","volume":"18","author":"S. G","year":"1975","unstructured":"Salton, G., Wong, A., and Yang C.S.A.: Vector Space Model for Automatic Indexing. Communications of the ACM 18, 613\u2013620, 1975","journal-title":"Communications of the ACM"},{"key":"13_CR36","unstructured":"R. Lemos, \u201cWhat are the real risks of cyberterrorism?\u201d, ZDNet, August 26, 2002, URL: http:\/\/zdnet.com.com\/2100-1105-955293.html ."},{"key":"13_CR37","doi-asserted-by":"crossref","unstructured":"George Karypis, CLUTO \u2014 A Clustering Toolkit, Release 2.0, University of Minnesota, 2002 [ http:\/\/www-users.cs.umn.edu\/~karypis\/cluto\/download.html ].","DOI":"10.21236\/ADA439508"},{"issue":"3","key":"13_CR38","doi-asserted-by":"publisher","first-page":"203","DOI":"10.1023\/A:1011196000674","volume":"11","author":"U. Hanani","year":"2001","unstructured":"U. Hanani, B. Shapira and P. Shoval, \u201cInformation Filtering: Overview of Issues, Research and Systems\u201d, User Modeling and User-Adapted Interaction (UMUAI), Vol. 11(3), 203\u2013259, 2001.","journal-title":"User Modeling and User-Adapted Interaction (UMUAI)"}],"container-title":["Lecture Notes in Computer Science","Advances in Web Intelligence"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/3-540-44831-4_13.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,11,17]],"date-time":"2020-11-17T16:06:50Z","timestamp":1605629210000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/3-540-44831-4_13"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[null]]},"ISBN":["9783540401247"],"references-count":38,"URL":"https:\/\/doi.org\/10.1007\/3-540-44831-4_13","relation":{},"subject":[]}}