{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T18:11:09Z","timestamp":1778263869210,"version":"3.51.4"},"publisher-location":"Boston, MA","reference-count":26,"publisher":"Springer US","isbn-type":[{"value":"9781461353218","type":"print"},{"value":"9781461509530","type":"electronic"}],"license":[{"start":{"date-parts":[[2002,1,1]],"date-time":"2002-01-01T00:00:00Z","timestamp":1009843200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2002,1,1]],"date-time":"2002-01-01T00:00:00Z","timestamp":1009843200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2002]]},"DOI":"10.1007\/978-1-4615-0953-0_6","type":"book-chapter","created":{"date-parts":[[2011,6,19]],"date-time":"2011-06-19T21:35:58Z","timestamp":1308519358000},"page":"123-151","source":"Crossref","is-referenced-by-count":2,"title":["Using MIB II Variables for Network Intrusion Detection"],"prefix":"10.1007","author":[{"given":"Xinzhou","family":"Qin","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wenke","family":"Lee","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lundy","family":"Lewis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jo\u00e3o B. D.","family":"Cabrera","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"6_CR1","volume-title":"Next-generation intrusion detection expert system (NIDES): A summary. Technical Report SRICSL-95-07, Computer Science Laboratory, SRI International, Menlo Park, California","author":"D Anderson","year":"1995","unstructured":"D. Anderson, T. Frivold, and A. Valdes. Next-generation intrusion detection expert system (NIDES): A summary. Technical Report SRICSL-95\u201307, Computer Science Laboratory, SRI International, Menlo Park, California, May 1995."},{"key":"6_CR2","unstructured":"J. B. D. Cabrera, L. Lewis, X. Qin, W. Lee, R. K. Prasanth, B. Ravichandran, and R. K. Mehra. Proactive detection of distributed denial of service attacks using MIB traffic variables - a feasibility study. In Proceedings of IFIP\/IEEE International Symposium on Integrated Network Management (IM 2001), May 200].."},{"key":"6_CR3","unstructured":"J. Cao, W. S. Cleveland, D. Lin, and D. X. Sun. On the nonstationarity of internet traffic. In Proceedings of ACM SIGMETRICS \u201901, pages 102\u2013112, 2001."},{"key":"6_CR4","unstructured":"K. Claffy, G. Miller, and K. Thompson. The nature of the beast: Recent traffic measurements from an internet b ackbone. In Proceedings of Inet \u201998. The Internet Society, July 1998."},{"key":"6_CR5","unstructured":"W. W. Cohen. Fast effective rule induction. In Machine Learning: the 12th International Conference, Lake Taho, CA, 1995. Morgan Kaufmann."},{"key":"6_CR6","first-page":"2000","volume-title":"and stacheldraht. Technical Report CIAC-2319, Department of Energy - CIAC","author":"P.J. Criscuolo. Distributed denial of service - trin00, tribe flood network, tribe flood network","year":"2000","unstructured":"P.J. Criscuolo. Distributed denial of service - trin00, tribe flood network, tribe flood network 2000, and stacheldraht. Technical Report CIAC-2319, Department of Energy - CIAC (Computer Incident Advisory Capability), February 2000."},{"key":"6_CR7","unstructured":"S. Forrest, S. A. Hofmeyr, A. Somayaji, and T. A. Longstaff. A sense of self for Unix processes. In Proceedings of the 1996 IEEE Symposium on Security and Privacy, pages 120\u2013128, Los Alamitos, CA, 1996. IEEE Computer Society Press."},{"key":"6_CR8","unstructured":"A. K. Ghosh and A. Schwartzbard. A study in using neural networks for anomaly and misuse detection. In Proceedings of the 8th USENIX Security Symposium, August 1999."},{"key":"6_CR9","unstructured":"J. L. Hellerstein, F. Zhang, and P. Shahabuddin. An approach to predictive detection for service management. In Proceedings of the 6th IFIP\/IEEE International Symposium on Integrated Network Management, May 1999."},{"key":"6_CR10","volume-title":"Adaptive network\/service fault detection in transaction-oriented wide area networks. In Proceedings of the 6th IFIP\/IEEE International Symposium on Integrated Network Management","author":"LL Ho","year":"1999","unstructured":"L. L. Ho, D. J. Cavuto, S. Papavassiliou, M. Z. Hasan, F. E. Feather, and A. G. Zawadzki. Adaptive network\/service fault detection in transaction-oriented wide area networks. In Proceedings of the 6th IFIP\/IEEE International Symposium on Integrated Network Management, May 1999."},{"key":"6_CR11","unstructured":"NMAP Homepage. http:\/\/www.insecure.org\/nmap\/index.htxnl, 2001."},{"key":"6_CR12","volume-title":"and S","author":"V Jacobson","year":"1989","unstructured":"V. Jacobson, C. Leres, and S. McCanne tcpdump. available via anonymous ftp to ftp.ee.lbl.gov, June 1989."},{"key":"6_CR13","unstructured":"Los Alamos National Laboratory. Wisdom and sense guidebook. Los Alamos National Laboratory."},{"key":"6_CR14","unstructured":"W. Lee and S. J. Stolfo. Data mining approaches for intrusion detection. In Proceedings of the 7th USENIX Security Symposium, San Antonio, TX, January 1998."},{"key":"6_CR15","first-page":"2001","volume-title":"Proceedings of the","author":"W Lee","year":"2001","unstructured":"W. Lee and D. Xiang. Information-theroetic measures for anomaly detection. In Proceedings of the 2001 IEEE Symposium on Security and Privacy, May 2001."},{"key":"6_CR16","volume-title":"A real-time intrusion detection expert system (IDES) - final technical report. Technical report, Computer Science Laboratory, SRI International","author":"T Lunt","year":"1992","unstructured":"T. Lunt, A. Tamaru, F. Gilham, R. Jagannathan, P. Neumann, H. Javitz, A. Valdes, and T. Garvey. A real-time intrusion detection expert system (IDES) - final technical report. Technical report, Computer Science Laboratory, SRI International, Menlo Park, California, February 1992."},{"key":"6_CR17","volume-title":"A case study of ethernet anomalies in a distributed computing environment. IEEE Transactions on Reliability, 39(4), October","author":"RA Maxion","year":"1990","unstructured":"R. A. Maxion. A case study of ethernet anomalies in a distributed computing environment. IEEE Transactions on Reliability, 39(4), October 1990."},{"key":"6_CR18","volume-title":"Management information base for network management of TCP\/IP-based internets: MIB-ii. RFC1213","author":"K McCloghrie","year":"1991","unstructured":"K. McCloghrie and M. Rose. Management information base for network management of TCP\/IP-based internets: MIB-ii. RFC1213, 1991."},{"key":"6_CR19","unstructured":"P. A. Porras and P. G. Neumann. EMERALD: Event monitoring enabling responses to anomalous live disturbances. In National Information Systems Security Conference, Baltimore MI), October 1997."},{"key":"6_CR20","volume-title":"University of Illinois Press","author":"CE Shannon","year":"1949","unstructured":"C. E. Shannon and W. Weaver. The Mathematical Theory of Communication. University of Illinois Press, 1949."},{"key":"6_CR21","volume-title":"Dragon claws its way to the top. In Network Computing. Tech Web, August","author":"G Shipley","year":"2001","unstructured":"G. Shipley and P. Mueller. Dragon claws its way to the top. In Network Computing. Tech Web, August 2001."},{"key":"6_CR22","unstructured":"S. E. Smaha. Haystack: An intrusion detection system. In Proceedings of the IEEE Fourth Aerospace Computer Security Applications Conference, 1988."},{"key":"6_CR23","volume-title":"SNMP, SNMPv2, SNMPv3, and RMON 1 and 2. Addison-Wesley","author":"W Stallings","year":"1999","unstructured":"W. Stallings. SNMP, SNMPv2, SNMPv3, and RMON 1 and 2. Addison-Wesley, 1999."},{"key":"6_CR24","volume-title":"SunSoft","author":"SunSoft. SunSHIELD Basic Security Module Guide","year":"1995","unstructured":"SunSoft. SunSHIELD Basic Security Module Guide. SunSoft, Mountain View, CA, 1995."},{"key":"6_CR25","volume-title":"Proactive anomaly detection using distributed intelligent agents","author":"M Thottan","year":"1998","unstructured":"M. Thottan and C. Ji. Proactive anomaly detection using distributed intelligent agents. IEEE Network, Special Issue on Network Management, April 1998."},{"key":"6_CR26","first-page":"1999","volume-title":"Detecting intrusions using system calls: Alternative data models","author":"C Warrender","year":"1999","unstructured":"C. Warrender, S. Forrest, and B. Pearlmutter. Detecting intrusions using system calls: Alternative data models. In Proceedings of the 1999 IEEE Symposium on Security and Privacy, May 1999"}],"container-title":["Advances in Information Security","Applications of Data Mining in Computer Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-1-4615-0953-0_6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T17:48:09Z","timestamp":1778262489000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-1-4615-0953-0_6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2002]]},"ISBN":["9781461353218","9781461509530"],"references-count":26,"URL":"https:\/\/doi.org\/10.1007\/978-1-4615-0953-0_6","relation":{},"ISSN":["1568-2633"],"issn-type":[{"value":"1568-2633","type":"print"}],"subject":[],"published":{"date-parts":[[2002]]}}}