{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,26]],"date-time":"2025-03-26T13:20:05Z","timestamp":1742995205175,"version":"3.40.3"},"publisher-location":"Boston, MA","reference-count":27,"publisher":"Springer US","isbn-type":[{"type":"print","value":"9780387887746"},{"type":"electronic","value":"9780387887753"}],"license":[{"start":{"date-parts":[[2009,1,1]],"date-time":"2009-01-01T00:00:00Z","timestamp":1230768000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2009,1,1]],"date-time":"2009-01-01T00:00:00Z","timestamp":1230768000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2009]]},"DOI":"10.1007\/978-0-387-88775-3_14","type":"book-chapter","created":{"date-parts":[[2009,4,18]],"date-time":"2009-04-18T17:55:18Z","timestamp":1240077318000},"page":"239-271","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Diagnosis and Threat Detection Capabilities of the SERENITY Monitoring Framework"],"prefix":"10.1007","author":[{"given":"Theocharis","family":"Tsigkritis","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"George","family":"Spanoudakis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Christos","family":"Kloukinas","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Davide","family":"Lorenzoli","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2009,3,31]]},"reference":[{"issue":"2","key":"14_CR1_14","doi-asserted-by":"publisher","first-page":"173","DOI":"10.1145\/762476.762477","volume":"6","author":"SN and Chari","year":"2003","unstructured":"Chari SN and Cheng PC (2003) Bluebox: a policy-driven, host-based intrusion detection system. ACM Trans. Inf. Syst. Security 6(2): 173\u2013200","journal-title":"ACM Trans. Inf. Syst. Security"},{"doi-asserted-by":"crossref","unstructured":"Console L, Terenziani P, Dupr\u00e9 DT (2002) Local Reasoning and Knowledge Compilation for Efficient Temporal Abduction. IEEE Transactions on Knowledge and Data Engineering, doi:10.1109\/TKDE.2002.1047764","key":"14_CR2_14","DOI":"10.1109\/TKDE.2002.1047764"},{"issue":"1","key":"14_CR3_14","doi-asserted-by":"publisher","first-page":"97","DOI":"10.1016\/0004-3702(87)90063-4","volume":"32","author":"J De Kleer","year":"1987","unstructured":"De Kleer J, Williams BC (1987) Diagnosing Multiple Faults. Artificial Intelligence 32(1), 97\u2013130","journal-title":"Artificial Intelligence"},{"unstructured":"Denecker M, De Schreye, D (1992) Temporal Reasoning with Abductive Event Calculus. In: Neumann B (ed) Proc. of the 10th European Conference on Artificial Intelligence, 384\u2013388","key":"14_CR4_14"},{"issue":"2","key":"14_CR5_14","doi-asserted-by":"publisher","first-page":"222","DOI":"10.1109\/TSE.1987.232894","volume":"13","author":"D Denning","year":"1987","unstructured":"Denning D (1987) An Intrusion Detection Model. IEEE Transactions on Software Engineering, 13(2): 222\u2013232.","journal-title":"IEEE Transactions on Software Engineering"},{"doi-asserted-by":"crossref","unstructured":"Grastien A, Cordier M, Largou\u00ebt C (2005) Incremental Diagnosis of Discrete-Event Systems. In Proc. of 15th Int. Work. On Principles of Diagnosis (DX05)","key":"14_CR6_14","DOI":"10.1007\/11424918_18"},{"issue":"3","key":"14_CR7_14","doi-asserted-by":"publisher","first-page":"191","DOI":"10.1109\/32.372146","volume":"21","author":"K Ilgun","year":"1995","unstructured":"Ilgun K, Kemmerer RA, and Porras PA, (1995) State Transition Analysis: A Rule-based Intrusion Detection System. IEEE Transactions on Software Engineering, 21(3): 191\u2013199.","journal-title":"IEEE Transactions on Software Engineering"},{"unstructured":"Kloukinas C, Ballas C, Presenza D, Spanoudakis G (2006) Basic set of Information Collection Mechanisms for Run-Time S&D Monitoring. Deliverable A4.D2.2, SERENITY Project, http:\/\/www.serenity-forum.org\/IMG\/pdf\/A4.D2.2_informationCollectionMechanism_v0.15_final_e.pdf Accessed 29 November 2008","key":"14_CR8_14"},{"issue":"1","key":"14_CR9_14","first-page":"93","volume":"21","author":"K Knight","year":"1989","unstructured":"Knight K (1989) Unification: a multidisciplinary survey ACM Computing Surveys, 21(1):93\u2013124 http:\/\/www.isi.edu\/natural-language\/people\/unification-knight.pdf Accessed 29 November 2008","journal-title":"Unification: a multidisciplinary survey ACM Computing Surveys"},{"doi-asserted-by":"crossref","unstructured":"Ko C, Ruschitzka M, and Levitt K (1997) Execution monitoring of security-critical programs in distributed systems: a Specification-based approach. In IEEE Symposium on Security and Privacy (SP \u201997), 175\u2013187.","key":"14_CR10_14","DOI":"10.1109\/SECPRI.1997.601332"},{"unstructured":"Kumar S and Spafford EH (1994) A Pattern Matching Model for Misuse Intrusion Detection. In Proc. of 17th National Computer Security Conference. 11\u201321.","key":"14_CR11_14"},{"unstructured":"Lazarevic A, Kumar V, Srivastava J (2005) Intrusion detection: a survey In: Managing cyber-threats: issues approaches & challenges, Available from Springer","key":"14_CR12_14"},{"unstructured":"Mahbub K, Spanoudakis G, Kloukinas C (2007) V2 of dynamic validation prototype. Deliverable A4.D3.3, SERENITY Project. Available from: http:\/\/www.serenity forum.org\/IMG\/pdf\/A4.D3.3_-_V2_of_Dynamic_validation_Prototype.pdf Accessed 29 November 2008","key":"14_CR13_14"},{"key":"14_CR14_14","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1016\/j.artint.2005.01.002","volume":"164","author":"Y Pencol\u00e9","year":"2005","unstructured":"Pencol\u00e9 Y, Cordier M (2005) A formal framework for the decentralised diagnosis of large scale discrete event systems & its application to telecommunication networks, Artificial Intelligence 164: 121\u2013180","journal-title":"Artificial Intelligence"},{"key":"14_CR15_14","doi-asserted-by":"publisher","first-page":"97","DOI":"10.1111\/j.1467-8640.1989.tb00319.x","volume":"5(2)","author":"D Poole","year":"1989","unstructured":"Poole D (1989) Explanation and prediction: an architecture for default and abductive reasoning, Computational Intelligence 5(2): 97\u2013110","journal-title":"Computational Intelligence"},{"unstructured":"Ray O, Kakas A (2006) ProLogICA: A Practical System for Abductive Logic Programming.11th Int. Workshop on Non-monotonic Reasoning, 304\u2013312","key":"14_CR16_14"},{"issue":"1","key":"14_CR17_14","doi-asserted-by":"publisher","first-page":"57","DOI":"10.1016\/0004-3702(87)90062-2","volume":"32","author":"R Reiter","year":"1987","unstructured":"Reiter R (1987) A theory of diagnosis from first principles, Artificial Intelligence, 32(1): 57\u201396","journal-title":"Artificial Intelligence"},{"issue":"2","key":"14_CR18_14","doi-asserted-by":"publisher","first-page":"105","DOI":"10.1109\/87.486338","volume":"4","author":"M Sampath","year":"1996","unstructured":"Sampath M, Sengupta R, Lafortune S, Sinnamohideen K, Teneketzis DC (1996) Failure diagnosis using discrete-event models. IEEE Transactions on Control Systems Technology, 4(2):105\u2013124","journal-title":"IEEE Transactions on Control Systems Technology"},{"doi-asserted-by":"crossref","unstructured":"Shafer G (1975) A Mathematical Theory of Evidence. Princeton University Press","key":"14_CR19_14","DOI":"10.1515\/9780691214696"},{"doi-asserted-by":"crossref","unstructured":"Shanahan M (1999) The Event Calculus Explained. In Artificial Intelligence Today, LNAI 1600:409\u2013430","key":"14_CR20_14","DOI":"10.1007\/3-540-48317-9_17"},{"key":"14_CR21_14","doi-asserted-by":"publisher","first-page":"207","DOI":"10.1016\/S0743-1066(99)00077-1","volume":"44","author":"M Shanahan","year":"2000","unstructured":"Shanahan M (2000) Abductive Event Calculus Planner, Journal of Logic Programming 44: 207\u2013239","journal-title":"Journal of Logic Programming"},{"issue":"3","key":"14_CR22_14","doi-asserted-by":"publisher","first-page":"325","DOI":"10.1142\/S0218843006001384","volume":"15","author":"G Spanoudakis","year":"2006","unstructured":"Spanoudakis G, Mahbub K (2006) Non intrusive monitoring of service based systems. Int. J. of Cooperative Information Systems, 15(3):325\u2013358","journal-title":"Int. J. of Cooperative Information Systems"},{"unstructured":"Spanoudakis G, Tsigkritis T (2008) 1st Version of Diagnosis Prototype. Deliverable A4.D5.1, SERENITY Project, Available from: http:\/\/www.serenity-forum.org\/IMG\/pdf\/A4.D5.1_first_version_of_diagnosis_prototype_v1.1_final.pdf Accessed 29 November 2008","key":"14_CR23_14"},{"unstructured":"Spanoudakis G, Tsigkritis T (2008) 2nd Version of Diagnosis Prototype. Deliverable A4.D5.2, SERENITY Project, Available from: http:\/\/www.serenity-forum.org\/IMG\/pdf\/A4.D5.2_first_version_of_diagnosis_prototype_v1.1_final.pdf Accessed 29 November 2008","key":"14_CR24_14"},{"unstructured":"Tsigkritis T, Spanoudakis G (2008) Diagnosing Runtime Violations of Security and Dependability Properties. In Proc. of 20th Int. Conference in Software Engineering and Knowledge Engineering, 661\u2013666","key":"14_CR25_14"},{"unstructured":"Tsigkritis T, Spanoudakis G (2008) A temporal abductive diagnosis process for runtime properties violations, ECAI 2008 Workshop on Explanation Aware Computing","key":"14_CR26_14"},{"doi-asserted-by":"crossref","unstructured":"Valdes A and Skinner K (2000) Adaptive, Model-based Monitoring for Cyber Attack Detection. In Recent Advances in Intrusion Detection (RAID 2000), LNCS 80\u201392. Springer.","key":"14_CR27_14","DOI":"10.1007\/3-540-39945-3_6"}],"container-title":["Advances in Information Security","Security and Dependability for Ambient Intelligence"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-0-387-88775-3_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,1,18]],"date-time":"2023-01-18T17:34:55Z","timestamp":1674063295000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-0-387-88775-3_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2009]]},"ISBN":["9780387887746","9780387887753"],"references-count":27,"URL":"https:\/\/doi.org\/10.1007\/978-0-387-88775-3_14","relation":{},"ISSN":["1568-2633"],"issn-type":[{"type":"print","value":"1568-2633"}],"subject":[],"published":{"date-parts":[[2009]]},"assertion":[{"value":"31 March 2009","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}