{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T18:11:05Z","timestamp":1778263865877,"version":"3.51.4"},"publisher-location":"Boston, MA","reference-count":46,"publisher":"Springer US","isbn-type":[{"value":"9781461353218","type":"print"},{"value":"9781461509530","type":"electronic"}],"license":[{"start":{"date-parts":[[2002,1,1]],"date-time":"2002-01-01T00:00:00Z","timestamp":1009843200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2002,1,1]],"date-time":"2002-01-01T00:00:00Z","timestamp":1009843200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2002]]},"DOI":"10.1007\/978-1-4615-0953-0_8","type":"book-chapter","created":{"date-parts":[[2011,6,19]],"date-time":"2011-06-19T21:35:58Z","timestamp":1308519358000},"page":"195-227","source":"Crossref","is-referenced-by-count":0,"title":["Proactive Intrusion Detection"],"prefix":"10.1007","author":[{"given":"Jo\u00e3o B. D.","family":"Cabrera","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lundy","family":"Lewis","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xinzhou","family":"Qin","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wenke","family":"Lee","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Raman K.","family":"Mehra","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"issue":"6","key":"8_CR1","doi-asserted-by":"publisher","first-page":"914","DOI":"10.1109\/69.250074","volume":"5","author":"R Agrawal","year":"1993","unstructured":"R. Agrawal, T. Imielinski, and A. Swami\u00a3\u00acDatabase Mining: A Performance Perspective.IEEE Transactions on Knowledge and Data Engineering5(6):914\u2013925, December 1993.","journal-title":"IEEE Transactions on Knowledge and Data Engineering"},{"key":"8_CR2","volume-title":"and E. Stoner. State of the Practice of Intrusion Detection Technologies. Technical Report CMU\/SEI-99-TR-028","author":"J Allen","year":"2000","unstructured":"J. Allen, A. Christie, W. Fithen, J. McHugh, J. Pickel, and E. Stoner. State of the Practice of Intrusion Detection Technologies. Technical Report CMU\/SEI-99-TR-028, Carnegie Mellon University - Software Engineering Institute, January 2000."},{"key":"8_CR3","volume-title":"The base-rate fallacy and its implications for the difficulty of intrusion detection","author":"S Axelsson","year":"1999","unstructured":"S. Axelsson. The base-rate fallacy and its implications for the difficulty of intrusion detection. InProceedings of the 6th ACM Confer-224ence on Computer and Communications SecuritySingapore, November 1999."},{"key":"8_CR4","first-page":"99","volume-title":"Intrusion Detection Systems: A Taxonomy and Survey. Technical Report","author":"S Axelsson","year":"2000","unstructured":"S. Axelsson. Intrusion Detection Systems: A Taxonomy and Survey. Technical Report 99\u201315, Department of Computer Engineering - Chalmers University of Technology, Sweden, March 2000."},{"key":"8_CR5","volume-title":"Time Granularities in DatabasesData Mining and Temporal Reasoning","author":"C Bettini","year":"2000","unstructured":"C. Bettini, S. Jajodia, and X. S. Wang.Time Granularities in Databases\n                Data Mining and Temporal Reasoning.Springer-Verlag, Berlin, 2000."},{"key":"8_CR6","volume-title":"The Monitoring, Detection, Interpretation and Response Paradigm for the Security of Battlespace Networks","author":"JBD Cabrera","year":"2001","unstructured":"J. B. D. Cabrera, L. J. Popyack, Jr., L. Lewis, B., Ravichandran and R. K. Mehra. The Monitoring, Detection, Interpretation and Response Paradigm for the Security of Battlespace Networks. InProceedings of IEEE MILCOM 2001Washington, DC, October 2001."},{"key":"8_CR7","volume-title":"Detection and Classification of Intrusions and Faults using Sequences of System Calls. In ACM SIGMOD Record Special Issue on Data Mining for Intrusion Detection, Security and Threat Analysis","author":"JBD Cabrera","year":"2001","unstructured":"J. B. D. Cabrera, L. Lewis and R. K. Mehra. Detection and Classification of Intrusions and Faults using Sequences of System Calls. In ACM SIGMOD Record Special Issue on Data Mining for Intrusion Detection, Security and Threat Analysis, December 2001."},{"key":"8_CR8","volume-title":"Proactive Intrusion Detection of Distributed Denial of Service Attacks - A Case Study in Security Management.","author":"JBD Cabrera","year":"2002","unstructured":"J. B. D. Cabrera, L. Lewis, X. Qin, W. Lee and R. K. Mehra. Proactive Intrusion Detection of Distributed Denial of Service Attacks - A Case Study in Security Management.Journal of Network and Systems ManagementJune 2002. In Press."},{"key":"8_CR9","first-page":"609","volume-title":"Proceedings of the Seventh IFIP\/IEEE International Symposium on Integrated Network Management","author":"JBD Cabrera","year":"2001","unstructured":"J. B. D. Cabrera, L. Lewis, X. Qin, W. Lee, R. K. Prasanth, B. Ravichandran, and R. K. Mehra. Proactive Detection of Distributed Denial of Service Attacks using MIB Traffic Variables - A Feasibility Study. InProceedings of the Seventh IFIP\/IEEE International Symposium on Integrated Network Managementpages 609--622, Seattle, WA, May 2001."},{"key":"8_CR10","volume-title":"Extracting Precursor Rules from Time Series - A Classical Statistical Viewpoint. In Proceedings of the Second SIAM International Conference on Data Mining","author":"JBD Cabrera","year":"2002","unstructured":"J. B. D. Cabrera and R. K. Mehra. Extracting Precursor Rules from Time Series - A Classical Statistical Viewpoint. InProceedings of the Second SIAM International Conference on Data MiningArlington, VA, USA, April 2002. In Press."},{"key":"8_CR11","first-page":"466","volume-title":"In Proceedings of the Eighth International Symposium on ModelingAnalysis and Simulation of Computer and Telecommunications Systems","author":"JBD Cabrera","year":"2000","unstructured":"J. B. D. Cabrera, B. Ravichandran and R. K. Mehra. Statistical Traffic Modeling for Network Intrusion Detection. InProceedings of the Eighth International Symposium on Modeling\n                Analysis\n                and Simulation of Computer and Telecommunications Systemspages 466\u2013473, San Francisco, CA, August 2000. IEEE Computer Society."},{"key":"8_CR12","volume-title":"Statistical Inference. Duxbury Press","author":"G Casella","year":"1990","unstructured":"G. Casella and R. L. Berger.Statistical Inference.Duxbury Press, Belmont, CA, 1990."},{"key":"8_CR13","doi-asserted-by":"publisher","DOI":"10.2172\/792253","volume-title":"Distributed Denial of Service - Trin00, Tribe Flood Network, Tribe Flood Network 2000, and Stacheldraht. TechnicalRe 225 port CIAC-2319, Department of Energy - CIAC","author":"PJ Criscuolo","year":"2000","unstructured":"P. J. Criscuolo. Distributed Denial of Service - Trin00, Tribe Flood Network, Tribe Flood Network 2000, and Stacheldraht. TechnicalRe 225 port CIAC-2319, Department of Energy - CIAC (Computer Incident Advisory Capability), February 2000."},{"key":"8_CR14","first-page":"16","volume-title":"Rule discovery from time series. In Proceedings of the 4th International Conference on Knowledge Discovery and Data Mining","author":"G Das","year":"1998","unstructured":"G. Das, K.-I. Lin, H. Mannila, G. Renganathan and P. Smyth. Rule discovery from time series. InProceedings of the 4th International Conference on Knowledge Discovery and Data Miningpages 16\u201322, 1998."},{"key":"8_CR15","doi-asserted-by":"publisher","first-page":"805","DOI":"10.1016\/S1389-1286(98)00017-6","volume":"31","author":"H Debar","year":"1999","unstructured":"H. Debar, M. Dacier, and A. Wespi. Towards a Taxonomy of Intrusion-Detection Systems.Computer Networks31:805\u2013822, 1999.","journal-title":"Computer Networks"},{"issue":"2","key":"8_CR16","doi-asserted-by":"publisher","first-page":"222","DOI":"10.1109\/TSE.1987.232894","volume":"13","author":"D Denning","year":"1987","unstructured":"D. Denning. An intrusion detection model.IEEE Transactions on Software Engineering13(2):222\u2013232, February 1987.","journal-title":"IEEE Transactions on Software Engineering"},{"key":"8_CR17","volume-title":"Statistical Distributions. John Wiley and Sons, Inc.","author":"M Evans","year":"1993","unstructured":"M. Evans, N. Hastings, and B. Peacock.Statistical Distributions.John Wiley and Sons, Inc., New York, Second edition, 1993."},{"key":"8_CR18","doi-asserted-by":"publisher","first-page":"424","DOI":"10.2307\/1912791","volume":"34","author":"CWJ Granger","year":"1969","unstructured":"C. W. J. Granger, Investigating causal relations by econometric models and cross-spectral methods.Econometrica34:424\u2013438, 1969.","journal-title":"Econometrica"},{"key":"8_CR19","volume-title":"Time Series Analysis. Princeton University Press","author":"J Hamilton","year":"1994","unstructured":"J. HamiltonTime Series Analysis.Princeton University Press, 1994."},{"issue":"9","key":"8_CR20","doi-asserted-by":"publisher","first-page":"886","DOI":"10.1109\/32.241771","volume":"19","author":"P Helman","year":"1993","unstructured":"P. Helman and G. Liepins. Statistical foundations of audit trail analysis for the detection of computer misuse.IEEE Transactions on Software Engineering19(9):886\u2013901September1993.","journal-title":"IEEE Transactions on Software Engineering"},{"key":"8_CR21","volume-title":"The NIDES statistical component: Description and justification","author":"HS Javitz","year":"1993","unstructured":"H. S. Javitz and A. Valdes, The NIDES statistical component: Description and justification. Technical report, SRI International, March 1993."},{"key":"8_CR22","volume-title":"Linear Systems","author":"T Kailath","year":"1980","unstructured":"T. Kailath.Linear Systems.Prentice-Hall, Inc., 1980."},{"key":"8_CR23","first-page":"52","volume-title":"On the trail of intrusions into information systems. IEEE Spectrum","author":"S Kent","year":"2000","unstructured":"S. Kent. On the trail of intrusions into information systems.IEEE Spectrumpages 52\u201356, December 2000."},{"key":"8_CR24","volume-title":"Logic induction of valid behavior specifications for intrusion detection. In Proceedings of the IEEE Symposium on Security and Privacy","author":"C Ko","year":"2000","unstructured":"C. Ko, Logic induction of valid behavior specifications for intrusion detection. InProceedings of the IEEE Symposium on Security and Privacy2000."},{"key":"8_CR25","volume-title":"A Data Mining Framework for Constructing Features and Models for Intrusion Detection Systems","author":"W Lee","year":"1999","unstructured":"W. Lee.A Data Mining Framework for Constructing Features and Models for Intrusion Detection Systems.PhD thesis, Columbia University, June 1999."},{"issue":"6","key":"8_CR26","doi-asserted-by":"publisher","first-page":"533","DOI":"10.1023\/A:1006624031083","volume":"16","author":"W Lee","year":"2000","unstructured":"W. Lee, S. Stolfo, and K. Mok, Adaptive Intrusion Detection: A Data Mining Approach.Artificial Intelligence Review16(6):533\u2013567, December 2000.","journal-title":"Artificial Intelligence Review"},{"key":"8_CR27","first-page":"3","volume":"4","author":"W Lee","year":"2000","unstructured":"W. Lee and S. J. Stolfo. A Framework for Constructing Features and Models for Intrusion Detection Systems.\n                ACM Transactions on Information and Systems3(4)\n                November2000.","journal-title":"ACM Transactions on Information and Systems"},{"key":"8_CR28","first-page":"50","volume-title":"Learning Patterns from Unix Process Execution Traces for Intrusion Detection. In Proceedings of 226 the AAAI Workshop on AI Methods in Fraud and Risk Management","author":"W Lee","year":"1997","unstructured":"W. Lee, S. J. Stolfo and P. K. Chan. Learning Patterns from Unix Process Execution Traces for Intrusion Detection. InProceedings of 226 the AAAI Workshop on AI Methods in Fraud and Risk Managementpages50\u201356July1997."},{"key":"8_CR29","volume-title":"Enhancing Profiles for Anomaly Detection Using Time Granularities","author":"Y Li","year":"2002","unstructured":"Y. Li, N. Wu, X. S. Wang and S. Jajodia. Enhancing Profiles for Anomaly Detection Using Time Granularities.Journal of Computer Security\n                2002.In Press."},{"key":"8_CR30","volume-title":"System Identification - Theory for the User","author":"L Ljung","year":"1999","unstructured":"L. Ljung.System Identification - Theory for the User.Prentice Hall, Second edition1999."},{"key":"8_CR31","first-page":"65","volume-title":"Automated audit trail analysis and intrusion detection: A survey. In Proceedings of the 11th National Computer Security Conference","author":"T Lunt","year":"1988","unstructured":"T.Lunt, Automated audit trail analysis and intrusion detection: A survey. InProceedings of the 11th National Computer Security Conferencepages65-73October1988."},{"key":"8_CR32","unstructured":"E. Mach. On thought experiments. InKnowledge and Error.Dordrecht:Reidel1976.English translation of the1905German original."},{"issue":"3","key":"8_CR33","doi-asserted-by":"publisher","first-page":"259","DOI":"10.1023\/A:1009748302351","volume":"1","author":"H Mannila","year":"1997","unstructured":"H. Mannila, H. Toivonen and A. I. Verkamo. Discovery of frequent episodes in event sequences.Data Mining and Knowledge Discovery\n                1(3):259\u2013289\n                1997.","journal-title":"Data Mining and Knowledge Discovery"},{"key":"8_CR34","first-page":"l","volume-title":"U.S drawing plan that will monitor computer systems - Looking for intruders. The New York Times","author":"J Markoff","year":"1999","unstructured":"J. Markoff, U.S drawing plan that will monitor computer systems - Looking for intruders.The New York Times\n                1999.July28page Al."},{"key":"8_CR35","first-page":"33","volume-title":"Integrating Data Mining Techniques with Intrusion Detection. In V. Atluri and J. Hale, editors","author":"RK Mukkamala","year":"2000","unstructured":"R. K. Mukkamala, J. Gagnon and S. Jajodia. Integrating Data Mining Techniques with Intrusion Detection. In V. Atluri and J. Hale, editorsResearch Advances in Database and Information Systems Securitypages33\u201346.Kluwer Publishers, 2000."},{"key":"8_CR36","volume-title":"Network Intrusion Detection - An Analyst\u2019s Handbook. New Riders Publishing","author":"S Northcutt","year":"1999","unstructured":"S. NorthcuttNetwork Intrusion Detection - An Analyst\u2019s Handbook.New Riders Publishing1999."},{"key":"8_CR37","first-page":"6467","volume-title":"The Impact of Forensics Computing on Telecommunications. IEEE Communications Magazine","author":"A Patel","year":"2000","unstructured":"A. Patel and S. O. Ciardhuain. The Impact of Forensics Computing on Telecommunications.IEEE Communications Magazine, pages\n                6467November 2000."},{"issue":"9","key":"8_CR38","doi-asserted-by":"publisher","first-page":"1278","DOI":"10.1109\/PROC.1975.9939","volume":"63","author":"JH Saltzer","year":"1975","unstructured":"J. H. Saltzer and M. D. Schroeder. The Protection of Information in Computer Systems.Proceedings of the IEEE\n                63(9):1278\u20131308 September1975.","journal-title":"Proceedings of the IEEE"},{"key":"8_CR39","volume-title":"Trust in Cyberspace. National Academy Press","author":"FB Schneider","year":"1998","unstructured":"F. B. Schneider, editor.Trust in Cyberspace.National Academy Press1998."},{"key":"8_CR40","volume-title":"Secrets and Lies: Digital Security in a Networked World. Wiley","author":"B Schneier","year":"2000","unstructured":"B. Schneier.Secrets and Lies: Digital Security in a Networked World.Wiley2000."},{"key":"8_CR41","volume-title":"Reexamining Intrusion Detection","author":"EG Spafford","year":"1999","unstructured":"E. G. Spafford. Reexamining Intrusion Detection, January1999.Presentation at the University of Virginia, available at CERIAS home-page, Purdue Univ."},{"key":"8_CR42","volume-title":"TCP\/IP IllustratedVolume 1: The Protocols.Addison-Wesley","author":"WR Stevens","year":"1994","unstructured":"W.R. Stevens.TCP\/IP Illustrated\n                Volume 1: The Protocols.Addison-Wesley,1994."},{"key":"8_CR43","first-page":"10","volume-title":"The Play from Pasadena (Super Bowl and the Stocks). Financial World, 156, 1987. Issue of January 28-February","author":"R Stovall","year":"1987","unstructured":"R. Stovall. The Play from Pasadena (Super Bowl and the Stocks).Financial World156, 1987. Issue of January 28-February 10, 1987."},{"key":"8_CR44","volume-title":"Data Mining Lecture Notes","author":"JD Ullman","year":"2000","unstructured":"J. D. Ullman. Data Mining Lecture Notes. Stanford University, Spring 2000."},{"key":"8_CR45","first-page":"2212","volume-title":"In Recent Advances in Intrusion Detection (RAID 2001). Springer-Verlag","author":"P Uppuluri","year":"2001","unstructured":"P. Uppuluri and R. Sekar, Experiences with Specification-based Intrusion Detection. InRecent Advances in Intrusion Detection (RAID 2001).Springer-Verlag, Lecture Notes in Computer Science, Number 2212, 2001."},{"key":"8_CR46","first-page":"2001","volume-title":"In Recent Advances in Intrusion Detection (RAID 2001). Springer-Verlag","author":"A Valdes","year":"2212","unstructured":"A. Valdes and K. Skinner, Proabilistic Alert Correlation. InRecent Advances in Intrusion Detection (RAID 2001).Springer-Verlag, Lecture Notes in Computer Science, Number 2212, 2001."}],"container-title":["Advances in Information Security","Applications of Data Mining in Computer Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-1-4615-0953-0_8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,8]],"date-time":"2026-05-08T17:46:36Z","timestamp":1778262396000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-1-4615-0953-0_8"}},"subtitle":["A Study on Temporal Data Mining"],"short-title":[],"issued":{"date-parts":[[2002]]},"ISBN":["9781461353218","9781461509530"],"references-count":46,"URL":"https:\/\/doi.org\/10.1007\/978-1-4615-0953-0_8","relation":{},"ISSN":["1568-2633"],"issn-type":[{"value":"1568-2633","type":"print"}],"subject":[],"published":{"date-parts":[[2002]]}}}