{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T17:20:14Z","timestamp":1743096014704,"version":"3.40.3"},"publisher-location":"Boston, MA","reference-count":117,"publisher":"Springer US","isbn-type":[{"type":"print","value":"9781489976857"},{"type":"electronic","value":"9781489976871"}],"license":[{"start":{"date-parts":[[2017,1,1]],"date-time":"2017-01-01T00:00:00Z","timestamp":1483228800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2017]]},"DOI":"10.1007\/978-1-4899-7687-1_912","type":"book-chapter","created":{"date-parts":[[2017,4,13]],"date-time":"2017-04-13T12:32:22Z","timestamp":1492086742000},"page":"42-56","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Active Learning"],"prefix":"10.1007","author":[{"given":"Varun","family":"Chandola","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Arindam","family":"Banerjee","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vipin","family":"Kumar","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2017,4,14]]},"reference":[{"issue":"2","key":"912_CR1151","doi-asserted-by":"publisher","first-page":"241","DOI":"10.1080\/00401706.1989.10488517","volume":"31","author":"B Abraham","year":"1989","unstructured":"Abraham B, Chuang A (1989) Outlier detection and time series modeling. Technometrics 31(2):241","journal-title":"Technometrics"},{"key":"912_CR1152","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4614-6396-2","volume-title":"Outlier analysis","author":"CC Aggarwal","year":"2013","unstructured":"Aggarwal CC (2013) Outlier analysis, Springer, New York"},{"key":"912_CR1153","series-title":"First international workshop on knowledge discovery from sensor data, ACM Press, New York","volume-title":"Anomaly detection in transportation corridors using manifold embedding","author":"A Agovic","year":"2007","unstructured":"Agovic A, Banerjee A, Ganguly AR, Protopopescu V (2007) Anomaly detection in transportation corridors using manifold embedding. In: First international workshop on knowledge discovery from sensor data, ACM Press, New York"},{"key":"912_CR1154","doi-asserted-by":"crossref","unstructured":"Akoglu L, McGlohon M, Faloutsos C (2010) OddBall: spotting anomalies in weighted graphs. In: In Pacific-Asia conference on knowledge discovery and data mining (PAKDD), Hyderabad","DOI":"10.1007\/978-3-642-13672-6_40"},{"issue":"3","key":"912_CR1155","doi-asserted-by":"publisher","first-page":"626","DOI":"10.1007\/s10618-014-0365-y","volume":"29","author":"L Akoglu","year":"2015","unstructured":"Akoglu L, Tong H, Koutra D (2015) Graph based anomaly detection and description: a survey. Data Min Knowl Discov 29(3):626","journal-title":"Data Min Knowl Discov"},{"key":"912_CR1156","series-title":"Proceedings of IEEE computational intelligence for financial engineering, New York","first-page":"220","volume-title":"Cardwatch: a neural network based database mining system for credit card fraud detection","author":"E Aleskerov","year":"1997","unstructured":"Aleskerov E, Freisleben B, Rao B (1997) Cardwatch: a neural network based database mining system for credit card fraud detection. In: Proceedings of IEEE computational intelligence for financial engineering, New York, pp\u00a0220\u2013226"},{"key":"912_CR1157","unstructured":"Arning A, Agrawal R, Raghavan P (1996) A linear method for deviation detection in large databases. In: Proceedings of 2nd international conference of knowledge discovery and data mining, pp\u00a0164\u2013169. citeseer.ist.psu.edu\/arning96linear.html"},{"key":"912_CR1158","doi-asserted-by":"crossref","unstructured":"Baragona R, Battaglia F (2007) Outliers detection in multivariate time series by independent component analysis. Neural Comput 19(7):1962. doi:\n                  http:\/\/dx.doi.org\/10.1162\/neco.2007.19.7.1962","DOI":"10.1162\/neco.2007.19.7.1962"},{"key":"912_CR1159","series-title":"Proceedings of the first SIAM international conference on data mining, Chicago","doi-asserted-by":"publisher","DOI":"10.1137\/1.9781611972719.28","volume-title":"Detecting novel network intrusions using bayes estimators","author":"D Barbara","year":"2001","unstructured":"Barbara D, Couto J, Jajodia S, Wu N (2001) Detecting novel network intrusions using bayes estimators. In: Proceedings of the first SIAM international conference on data mining, Chicago"},{"key":"912_CR1160","volume-title":"Outliers in statistical data","author":"V Barnett","year":"1994","unstructured":"Barnett V, Lewis T (1994) Outliers in statistical data, Wiley, Chichester"},{"key":"912_CR1161","doi-asserted-by":"publisher","first-page":"262","DOI":"10.1007\/978-3-540-48247-5_28","volume-title":"Proceedings of the third European conference on principles of data mining and knowledge discovery","author":"MM Breunig","year":"1999","unstructured":"Breunig MM, Kriegel HP, Ng RT, Sander J (1999) Optics-of: identifying local outliers. In: Proceedings of the third European conference on principles of data mining and knowledge discovery, Springer, Berlin\/New York, pp\u00a0262\u2013270"},{"key":"912_CR1162","doi-asserted-by":"crossref","unstructured":"Breunig MM, Kriegel HP, Ng RT, Sander J (2000) LOF: identifying density-based local outliers. In: Proceedings of 2000 ACM SIGMOD international conference on management of data. ACM Press, pp\u00a093\u2013104. doi:\n                  http:\/\/doi.acm.org\/10.1145\/342009.335388","DOI":"10.1145\/342009.335388"},{"key":"912_CR1163","doi-asserted-by":"crossref","unstructured":"Bu Y, Leung TW, Fu A, Keogh E, Pei J, Meshkin S (2007) WAT: finding top-k discords in time series database. In: Proceedings of 7th siam international conference on data mining","DOI":"10.1137\/1.9781611972771.43"},{"key":"912_CR1164","unstructured":"Budalakoti S, Srivastava A, Akella R, Turkov E (2006) Anomaly detection in large sets of high-dimensional symbol sequences. Technical report NASA TM-2006-214553, NASA Ames Research Center"},{"key":"912_CR1165","unstructured":"Budalakoti S, Srivastava A, Otey M (2007) Anomaly detection and diagnosis algorithms for discrete symbol sequences with applications to airline safety. In: Proceedings of the IEEE international conference on systems, man, and cybernetics, Montreal, vol.\u00a037"},{"key":"912_CR1166","doi-asserted-by":"crossref","unstructured":"Cabrera JBD, Lewis L, Mehra RK (2001) Detection and classification of intrusions and faults using sequences of system calls. SIGMOD Records 30(4):25. doi:\n                  http:\/\/doi.acm.org\/10.1145\/604264.604269","DOI":"10.1145\/604264.604269"},{"key":"912_CR1167","doi-asserted-by":"publisher","first-page":"90","DOI":"10.1109\/ICDM.2005.101","volume-title":"Proceedings of the fifth IEEE international conference on data mining","author":"PK Chan","year":"2005","unstructured":"Chan PK, Mahoney MV (2005) Modeling multiple time series for anomaly detection. In: Proceedings of the fifth IEEE international conference on data mining. IEEE Computer Society, Washington, DC, pp\u00a090\u201397"},{"key":"912_CR1168","unstructured":"Chandola V, Banerjee A, Kumar V (2009) Anomaly detection a survey. ACM Comput Surv 41(3):15:1\u201315:58"},{"key":"912_CR1169","doi-asserted-by":"crossref","unstructured":"Chandola V, Banerjee A, Kumar V (2012) Anomaly detection for discrete sequences: a survey. IEEE Trans Knowl Data Eng 24:823. doi:\n                  http:\/\/doi.ieeecomputersociety.org\/10.1109\/TKDE.2010.235","DOI":"10.1109\/TKDE.2010.235"},{"key":"912_CR1170","unstructured":"Chandola V, Cheboli D, Kumar V (2009) Detecting anomalies in a timeseries database. Technical report 09-004, Computer Science Department, University of Minnesota"},{"key":"912_CR1171","doi-asserted-by":"crossref","unstructured":"Chawla S, Gionis A (2013) k-means-: a unified approach to clustering and outlier detection. In: Proceedings of the 13th SIAM international conference on data mining, Austin, 2\u20134 May 2013, pp\u00a0189\u2013197","DOI":"10.1137\/1.9781611972832.21"},{"key":"912_CR1172","doi-asserted-by":"crossref","unstructured":"Cheng H, Tan PN, Potter C, Klooster S (2009) Detection and characterization of anomalies in multivariate time series. In: Proceedings of the ninth SIAM international conference on data mining (SDM)","DOI":"10.1137\/1.9781611972795.36"},{"key":"912_CR1173","first-page":"40385","volume-title":"Parzen-window network intrusion detectors. In: Proceedings of the 16th International conference on pattern recognition, vol 4","author":"C Chow","year":"2002","unstructured":"Chow C, Yeung DY (2002) Parzen-window network intrusion detectors. In: Proceedings of the 16th International conference on pattern recognition, vol 4. IEEE Computer Society, Washington, DC, p\u00a040385"},{"key":"912_CR1174","first-page":"1","volume-title":"Proceedings of the 5th European symposium on research in computer security","author":"H Debar","year":"1998","unstructured":"Debar H, Dacier M, Nassehi M, Wespi A (1998) Fixed vs. variable-length patterns for detecting suspicious process behavior. In: Proceedings of the 5th European symposium on research in computer security, Springer, London, pp\u00a01\u201315"},{"key":"912_CR1175","doi-asserted-by":"crossref","unstructured":"Ding Q, Katenka N, Barford P, Kolaczyk E, Crovella\u00a0M (2012) Intrusion as (anti)social communication: characterization and detection. In: Proceedings of the 18th ACM SIGKDD international conference on knowledge discovery and data mining (KDD\u201912), pp\u00a0886\u2013894","DOI":"10.1145\/2339530.2339670"},{"key":"912_CR1176","doi-asserted-by":"crossref","unstructured":"Eberle W, Holder L (2007) Anomaly detection in data represented as graphs. Intell Data Anal 11(6):663. \n                  http:\/\/dl.acm.org\/citation.cfm?id=1368018.1368024","DOI":"10.3233\/IDA-2007-11606"},{"issue":"5","key":"912_CR1177","doi-asserted-by":"publisher","first-page":"364","DOI":"10.1080\/14786448708628471","volume":"23","author":"FY Edgeworth","year":"1887","unstructured":"Edgeworth FY (1887) On discordant observations. Philos Mag 23(5):364","journal-title":"Philos Mag"},{"key":"912_CR1178","first-page":"268","volume-title":"Intrusion detection: applying machine learning to solaris audit data. In: Proceedings of the 14th annual computer security applications conference","author":"D Endler","year":"1998","unstructured":"Endler D (1998) Intrusion detection: applying machine learning to solaris audit data. In: Proceedings of the 14th annual computer security applications conference. IEEE Computer Society, Los Alamitos, p\u00a0268"},{"key":"912_CR1179","first-page":"78","volume-title":"Proceedings of applications of data mining in computer security","author":"E Eskin","year":"2002","unstructured":"Eskin E, Arnold A, Prerau M, Portnoy L, Stolfo S (2002) A geometric framework for unsupervised anomaly detection. In: Proceedings of applications of data mining in computer security. Kluwer Academics, Dordrecht, pp\u00a078\u2013100"},{"key":"912_CR1180","unstructured":"Eskin E, Lee W, Stolfo S (2001) Modeling system call for intrusion detection using dynamic window sizes. In: Proceedings of DISCEX. citeseer.ist.psu.edu\/portnoy01intrusion.html"},{"key":"912_CR1181","doi-asserted-by":"publisher","first-page":"506","DOI":"10.1007\/11556992_38","volume":"3650","author":"G Florez-Larrahondo","year":"2005","unstructured":"Florez-Larrahondo G, Bridges SM, Vaughn R (2005) Efficient modeling of discrete events for anomaly detection using hidden Markov models. Inf Secur 3650:506","journal-title":"Inf Secur"},{"key":"912_CR1182","unstructured":"Forrest S, Hofmeyr SA, Somayaji A, Longstaff TA (1996) A sense of self for unix processes. In: Proceedings of the ISRSP\u201996, pp\u00a0120\u2013128. citeseer.ist.psu.edu\/forrest96sense.html"},{"key":"912_CR1183","first-page":"133","volume-title":"IEEE ISRSP","author":"Forrest S, Warrender C, Pearlmutter B (1999) Detecting intrusions using system calls: alternate data models. In: Proceedings of the","year":"1999","unstructured":"Forrest S, Warrender C, Pearlmutter B (1999) Detecting intrusions using system calls: alternate data models. In: Proceedings of the 1999 IEEE ISRSP. IEEE Computer Society, Washington, DC, pp\u00a0133\u2013145"},{"key":"912_CR1184","doi-asserted-by":"crossref","unstructured":"Fox AJ (1972) Outliers in time series. J R Stat Soc Ser. B(Methodolog) 34(3):350","DOI":"10.1111\/j.2517-6161.1972.tb00912.x"},{"key":"912_CR1185","doi-asserted-by":"publisher","first-page":"31","DOI":"10.1007\/11811305_3","volume-title":"Proceeding of the 2nd International conference on advanced data mining and applications","author":"AWC Fu","year":"2006","unstructured":"Fu AWC, Leung OTW, Keogh EJ, Lin J (2006) Finding time series discords based on haar transform. In: Proceeding of the 2nd International conference on advanced data mining and applications. Springer, Berlin\/New York, pp\u00a031\u201341"},{"key":"912_CR1186","doi-asserted-by":"crossref","unstructured":"Fujimaki R, Yairi T, Machida K (2005) An anomaly detection method for spacecraft using relevance vector learning. In: Proceeding of the eleventh ACM SIGKDD international conference on knowledge discovery in data mining. ACM Press, New York, pp\u00a0401\u2013410. doi:\n                  http:\/\/doi.acm.org\/10.1145\/1081870.1081917","DOI":"10.1007\/11430919_92"},{"key":"912_CR1187","doi-asserted-by":"publisher","first-page":"785","DOI":"10.1007\/11430919_92","volume":"3518","author":"R Fujimaki","year":"2005","unstructured":"Fujimaki R, Yairi T, Machida K (2005) An approach to spacecraft anomaly detection problem using kernel feature space. Adv Knowl Discov Data Min 3518:785","journal-title":"Adv Knowl Discov Data Min"},{"key":"912_CR1188","unstructured":"Galeano P, Pena D, Tsay RS (2004) Outlier detection in multivariate time series via projection pursuit. Statistics and Econometrics Working Papers ws044211, Universidad Carlos III, Departamento de Estad\u00efstica y Econometr\u00efca"},{"key":"912_CR1189","doi-asserted-by":"crossref","unstructured":"Gao J, Tan PN (2006) Converting output scores from outlier detection algorithms into probability estimates. In: Proceedings of the sixth international conference on data mining (ICDM \u201906), Hong Kong, pp\u00a0212\u2013221","DOI":"10.1109\/ICDM.2006.43"},{"key":"912_CR1190","first-page":"813","volume-title":"On community outliers and their efficient detection in information networks","author":"J Gao","year":"2010","unstructured":"Gao J, Liang F, Fan W, Wang C, Sun Y, Han J (2010) On community outliers and their efficient detection in information networks. In: Proceedings of the 16th ACM SIGKDD international conference on knowledge discovery and data mining (KDD \u201910), Washington, DC, pp\u00a0813\u2013822"},{"key":"912_CR1191","unstructured":"Ghosh AK, Schwartzbard A, Schatz M (1999) Learning program behavior profiles for intrusion detection. In: Proceedings of SANS third conference and workshop on intrusion detection and response. citeseer.ist.psu.edu\/ghosh99learning.html"},{"key":"912_CR1192","unstructured":"Ghosh AK, Schwartzbard A, Schatz M (1999) Using program behavior profiles for intrusion detection. In: Proceedings of 1st USENIX workshop on intrusion detection and network monitoring, Santa Clara, pp\u00a051\u201362"},{"key":"912_CR1193","doi-asserted-by":"publisher","first-page":"170","DOI":"10.1007\/3-540-46145-0_17","volume-title":"Proceedings of the 4th international conference on data warehousing and knowledge discovery","author":"S Hawkins","year":"2002","unstructured":"Hawkins S, He H, Williams GJ, Baxter RA (2002) Outlier detection using replicator neural networks. In: Proceedings of the 4th international conference on data warehousing and knowledge discovery. Springer, Berlin, pp\u00a0170\u2013180"},{"key":"912_CR1194","doi-asserted-by":"crossref","unstructured":"He Z, Deng S, Xu X, Huang JZ (2006) A fast greedy algorithm for outlier mining. In: Proceedings of 10th Pacific-Asia conference on knowledge and data discovery, pp\u00a0567\u2013576","DOI":"10.1007\/11731139_67"},{"key":"912_CR1195","doi-asserted-by":"crossref","unstructured":"He Z, Xu X, Deng S (2003) Discovering cluster-based local outliers. Pattern Recognit Lett 24(9\u201310):1641. doi:\n                  http:\/\/dx.doi.org\/10.1016\/S0167-8655(03)00003-5","DOI":"10.1016\/S0167-8655(03)00003-5"},{"key":"912_CR1196","doi-asserted-by":"crossref","unstructured":"He Z, Xu X, Deng S (2005) An optimization model for outlier detection in categorical data. In: Proceedings of international conference on intelligent computing, vol\u00a03644. Springer, Berlin\/Heidelberg","DOI":"10.1007\/11538059_42"},{"key":"912_CR1197","doi-asserted-by":"crossref","unstructured":"Hodge V, Austin J (2004) A survey of outlier detection methodologies. Artif Intell Rev 22(2):85. doi:\n                  http:\/\/dx.doi.org\/10.1023\/B:AIRE.0000045502.10941.a9","DOI":"10.1023\/B:AIRE.0000045502.10941.a9"},{"key":"912_CR1198","doi-asserted-by":"crossref","unstructured":"Hofmeyr SA, Forrest S, Somayaji A (1998) Intrusion detection using sequences of system calls. J Comput Secur 6(3):151. citeseer.ist.psu.edu\/hofmeyr98intrusion.html","DOI":"10.3233\/JCS-980109"},{"key":"912_CR1199","doi-asserted-by":"crossref","unstructured":"Keogh E, Lin J, Fu A (2005) Hot sax: Efficiently finding the most unusual time series subsequence. In: Proceedings of the fifth IEEE international conference on data mining, IEEE Computer Society, Washington, DC, pp\u00a0226\u2013233. doi:\n                  http:\/\/dx.doi.org\/10.1109\/ICDM.2005.79","DOI":"10.1109\/ICDM.2005.79"},{"key":"912_CR1200","doi-asserted-by":"crossref","unstructured":"Keogh E, Lin J, Lee SH, Herle HV (2006) Finding the most unusual time series subsequence: algorithms and applications. Knowl Inf Syst 11(1):1. doi:\n                  http:\/\/dx.doi.org\/10.1007\/s10115-006-0034-6","DOI":"10.1007\/s10115-006-0034-6"},{"key":"912_CR1201","doi-asserted-by":"crossref","unstructured":"Keogh E, Lonardi S, Ratanamahatana CA (2004) Towards parameter-free data mining. In: Proceedings of the 10th ACM SIGKDD international conference on Knowledge discovery and data mining, ACM Press, New York, pp\u00a0206\u2013215. doi:\n                  http:\/\/doi.acm.org\/10.1145\/1014052.1014077","DOI":"10.1145\/1014052.1014077"},{"key":"912_CR1202","unstructured":"Khoa NLD, Chawla S (2010) Robust outlier detection using commute time and eigenspace embedding. In: Advances in knowledge discovery and data mining, 14th Pacific-Asia conference, PAKDD 2010. Proceedings, Part II. Hyderabad, 21\u201324 June 2010, pp\u00a0422\u2013434"},{"key":"912_CR1203","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/INFOCOM.2008.4544581","volume-title":"IEEE INFOCOM workshops 2008","author":"F Knorn","year":"2008","unstructured":"Knorn F, Leith D (2008) Adaptive Kalman filtering for anomaly detection in software appliances. In: IEEE INFOCOM workshops 2008, Phoenix, AZ, pp 1\u20136"},{"key":"912_CR1204","first-page":"11","volume-title":"A unified approach for mining outliers. In: Proceedings of the 1997 conference of the centre for advanced studies on collaborative research","author":"EM Knorr","year":"1997","unstructured":"Knorr EM, Ng RT (1997) A unified approach for mining outliers. In: Proceedings of the 1997 conference of the centre for advanced studies on collaborative research. IBM Press, Toronto, p\u00a011"},{"key":"912_CR1205","unstructured":"Knorr EM, Ng RT (1999) Finding intensional knowledge of distance-based outliers. In: The VLDB journal, pp\u00a0211\u2013222. citeseer.ist.psu.edu\/knorr99finding.html"},{"key":"912_CR1206","doi-asserted-by":"crossref","unstructured":"Knorr EM, Ng RT, Tucakov V (2000) Distance-based outliers: algorithms and applications. VLDB J 8(3\u20134):237. doi:\n                  http:\/\/dx.doi.org\/10.1007\/s007780050006","DOI":"10.1007\/s007780050006"},{"key":"912_CR1207","series-title":"Proceedings of SIAM conference on data mining, Bethesda","doi-asserted-by":"publisher","DOI":"10.1137\/1.9781611972764.71","volume-title":"Spatial weighted outlier detection","author":"Y Kou","year":"2006","unstructured":"Kou Y, Lu CT, Chen D (2006) Spatial weighted outlier detection. In: Proceedings of SIAM conference on data mining, Bethesda"},{"key":"912_CR1208","doi-asserted-by":"crossref","unstructured":"Kriegel HP, Hubert MS, Zimek A (2008) Angle-based outlier detection in highdimensional data. In: Proceedings of the 14th ACM SIGKDD international conference on knowledge discovery and data mining (KDD \u201908), Las Legas, pp\u00a0444\u2013452","DOI":"10.1145\/1401890.1401946"},{"key":"912_CR1209","series-title":"SDM. SIAM\/Omnipress, Mesa, AZ, USA","first-page":"13","volume-title":"Interpreting and unifying outlier scores","author":"HP Kriegel","year":"2011","unstructured":"Kriegel HP, Krger P, Schubert E, Zimek A (2011) Interpreting and unifying outlier scores. In: SDM. SIAM\/Omnipress, Mesa, AZ, USA, pp\u00a013\u201324"},{"key":"912_CR1210","doi-asserted-by":"crossref","unstructured":"Kumar V (2005) Parallel and distributed computing for cybersecurity. Distributed systems online. IEEE 6(10). doi:10.1109\/MDSO.2005.53","DOI":"10.1109\/MDSO.2005.53"},{"key":"912_CR1211","first-page":"43","volume-title":"Proceedings of AI approaches to fraud detection and risk management","author":"T Lane","year":"1997","unstructured":"Lane T, Brodley CE (1997) Sequence matching and learning in anomaly detection for computer security. In: Fawcett T, Haimowitz I, Provost F, Stolfo S (eds) Proceedings of AI approaches to fraud detection and risk management. AAAI Press, Menlo Park, pp\u00a043\u201349"},{"key":"912_CR1212","doi-asserted-by":"crossref","unstructured":"Lane T, Brodley CE (1999) Temporal sequence learning and data reduction for anomaly detection. ACM Trans Inf Syst Secur 2(3):295. doi:\n                  http:\/\/doi.acm.org\/10.1145\/322510.322526","DOI":"10.1145\/322510.322526"},{"key":"912_CR1213","unstructured":"Laurikkala J, Juhola1 M, Kentala E (2000) Informal identification of outliers in medical data. In: Fifth international workshop on intelligent data analysis in medicine and pharmacology, Berlin, pp\u00a020\u201324"},{"key":"912_CR1214","first-page":"130","volume-title":"Information-theoretic measures for anomaly detection. In: Proceedings of the IEEE symposium on security and privacy","author":"W Lee","year":"2001","unstructured":"Lee W, Xiang D (2001) Information-theoretic measures for anomaly detection. In: Proceedings of the IEEE symposium on security and privacy. IEEE Computer Society, Washington, DC, p\u00a0130"},{"key":"912_CR1215","unstructured":"Lee W, Stolfo S, Chan P (1997) Learning patterns from unix process execution traces for intrusion detection. In: Proceedings of the AAAI 97 workshop on AI methods in fraud and risk management"},{"key":"912_CR1216","doi-asserted-by":"crossref","unstructured":"Li N, Sun H, Chipman KC, George J, Yan X (2014) A probabilistic approach to uncovering attributed graph anomalies. In: Proceedings of the 2014 SIAM international conference on data mining, Philadelphia, pp\u00a082\u201390, 24\u201326 Apr 2014. doi:10.1137\/1.9781611973440.10, \n                  http:\/\/dx.doi.org\/10.1137\/1.9781611973440.10","DOI":"10.1137\/1.9781611973440.10"},{"key":"912_CR1217","doi-asserted-by":"crossref","unstructured":"Lin J, Keogh E, Fu A, Herle HV (2005) Approximations to magic: finding unusual medical time series. In: Proceedings of the 18th IEEE symposium on computer-based medical systems. IEEE Computer Society, Washington, DC, pp\u00a0329\u2013334. doi:\n                  http:\/\/dx.doi.org\/10.1109\/CBMS.2005.34","DOI":"10.1109\/CBMS.2005.34"},{"key":"912_CR1218","doi-asserted-by":"crossref","unstructured":"Ma J, Perkins S (2003) Online novelty detection on temporal sequences. In: Proceedings of the 9th ACM SIGKDD international conference on Knowledge discovery and data mining. ACM Press, New York, pp\u00a0613\u2013618. doi:\n                  http:\/\/doi.acm.org\/10.1145\/956750.956828","DOI":"10.1145\/956750.956828"},{"key":"912_CR1219","unstructured":"Mahoney MV, Chan PK (2002) Learning nonstationary models of normal network tra c for detecting novel attacks. In: Proceedings of the 8th ACM SIGKDD international conference on Knowledge discovery and data mining. ACM Press, pp\u00a0376\u2013385. doi:\n                  http:\/\/doi.acm.org\/10.1145\/775047.775102"},{"key":"912_CR1220","first-page":"601","volume-title":"Learning rules for anomaly detection of hostile network traffic. In: Proceedings of the 3rd IEEE international conference on data mining","author":"MV Mahoney","year":"2003","unstructured":"Mahoney MV, Chan PK (2003) Learning rules for anomaly detection of hostile network traffic. In: Proceedings of the 3rd IEEE international conference on data mining. IEEE Computer Society, Los Alamitos, p\u00a0601"},{"key":"912_CR1221","series-title":"Proceedings of the KDD workshop on data mining methods for anomaly detection, Las Vegas, NV, USA","volume-title":"Trajectory boundary modeling of time series for anomaly detection","author":"MV Mahoney","year":"2005","unstructured":"Mahoney MV, Chan PK (2005) Trajectory boundary modeling of time series for anomaly detection. In: Proceedings of the KDD workshop on data mining methods for anomaly detection, Las Vegas, NV, USA"},{"key":"912_CR1222","unstructured":"Mahoney MV, Chan PK, Arshad MH (2003) A machine learning approach to anomaly detection. Technical report\u00a0CS\u20132003\u201306, Department of Computer Science, Florida Institute of Technology Melbourne, FL, 32901"},{"key":"912_CR1223","unstructured":"Marchette D (1999) A statistical method for profiling network traffic. In: Proceedings of 1st USENIX workshop on intrusion detection and network monitoring, Santa Clara, pp\u00a0119\u2013128"},{"key":"912_CR1224","first-page":"21","volume-title":"Two state-based approaches to program-based anomaly detection. In: Proceedings of the 16th annual computer security applications conference","author":"CC Michael","year":"2000","unstructured":"Michael CC, Ghosh A (2000) Two state-based approaches to program-based anomaly detection. In: Proceedings of the 16th annual computer security applications conference, IEEE Computer Society, Los Alamitos, p\u00a021"},{"key":"912_CR1225","doi-asserted-by":"crossref","unstructured":"M\u00fcller E, Sanchez PI, M\u00fclle Y, B\u00f6hm K (2013) Ranking outlier nodes in subspaces of attributed graphs. In: Workshops proceedings of the 29th IEEE international conference on data engineering. ICDE, pp\u00a0216\u2013222","DOI":"10.1109\/ICDEW.2013.6547453"},{"key":"912_CR1226","unstructured":"Noble CC, Cook DJ (2003) Graph-based anomaly detection. In: Proceedings of the 9th ACM SIGKDD international conference on Knowledge discovery and data mining. ACM Press, pp\u00a0631\u2013636. doi:\n                  http:\/\/doi.acm.org\/10.1145\/956750.956831"},{"key":"912_CR1227","doi-asserted-by":"crossref","unstructured":"Otey ME, Ghoting A, Parthasarathy S (2006) Fast distributed outlier detection in mixed-attribute data sets. Data Min Knowl Discov 12(2\u20133):203. doi:\n                  http:\/\/dx.doi.org\/10.1007\/s10618-005-0014-6","DOI":"10.1007\/s10618-005-0014-6"},{"key":"912_CR1228","series-title":"Advances in neural information processing systems","first-page":"1359","volume-title":"On integrated clustering and outlier detection","author":"L Ott","year":"2014","unstructured":"Ott L, Pang LX, Ramos FT, Chawla S (2014) On integrated clustering and outlier detection. In: Advances in neural information processing systems, pp\u00a01359\u20131367"},{"issue":"2","key":"912_CR1229","doi-asserted-by":"publisher","first-page":"260","DOI":"10.1162\/neco.1996.8.2.260","volume":"8","author":"L Parra","year":"1996","unstructured":"Parra L, Deco G, Miesbach S (1996) Statistical independence and novelty detection with information preserving nonlinear maps. Neural Comput 8 (2):260","journal-title":"Neural Comput"},{"issue":"4","key":"912_CR1230","first-page":"2","volume":"24","author":"B Pincombe","year":"2005","unstructured":"Pincombe B (2005) Anomaly detection in time series of graphs using ARMA processes. ASOR Bull 24(4):2","journal-title":"ASOR Bull"},{"key":"912_CR1231","series-title":"Proceedings of IEEE symposium on computational intelligence and data mining","doi-asserted-by":"publisher","DOI":"10.1109\/CIDM.2007.368917","volume-title":"Incremental local outlier detection for data streams","author":"D Pokrajac","year":"2007","unstructured":"Pokrajac D, Lazarevic A, Latecki LJ (2007) Incremental local outlier detection for data streams. In: Proceedings of IEEE symposium on computational intelligence and data mining"},{"key":"912_CR1232","unstructured":"Portnoy L, Eskin E, Stolfo S (2001) Intrusion detection with unlabeled data using clustering. In: Proceedings of ACM workshop on data mining applied to security. citeseer.ist.psu.edu\/portnoy01intrusion.html"},{"issue":"2","key":"912_CR1233","doi-asserted-by":"publisher","first-page":"677","DOI":"10.1111\/j.1365-2966.2006.10327.x","volume":"369","author":"P Protopapas","year":"2006","unstructured":"Protopapas P, Giammarco JM, Faccioli L, Struble MF, Dave R, Alcock C (2006) Finding outlier light curves in catalogues of periodic variable stars. Mon Notices R Astron Soc 369(2):677","journal-title":"Mon Notices R Astron Soc"},{"issue":"13","key":"912_CR1234","doi-asserted-by":"publisher","first-page":"663","DOI":"10.1049\/el:20020467","volume":"38","author":"Y Qiao","year":"2002","unstructured":"Qiao Y, Xin XW, Bin Y, Ge S (2002) Anomaly intrusion detection method based on HMM. Electron Lett 38(13):663","journal-title":"Electron Lett"},{"key":"912_CR1235","doi-asserted-by":"crossref","unstructured":"Ramaswamy S, Rastogi R, Shim K (2000) Efficient algorithms for mining outliers from large data sets. In: Proceedings of the 2000 ACM SIGMOD international conference on Management of data. ACM Press, New York, pp\u00a0427\u2013438. doi:\n                  http:\/\/doi.acm.org\/10.1145\/342009.335437","DOI":"10.1145\/342009.335437"},{"key":"912_CR1236","unstructured":"Roth V (2004) In: NIPS"},{"key":"912_CR1237","doi-asserted-by":"publisher","DOI":"10.1002\/0471725382","volume-title":"Robust regression and outlier detection","author":"PJ Rousseeuw","year":"1987","unstructured":"Rousseeuw PJ, Leroy AM (1987) Robust regression and outlier detection. Wiley, New York"},{"key":"912_CR1238","unstructured":"Salvador S, Chan P (2003) Learning states and rules for time-series anomaly detection. Technical report CS\u20132003\u201305, Department of Computer Science, Florida Institute of Technology Melbourne FL 32901"},{"key":"912_CR1239","doi-asserted-by":"crossref","unstructured":"Salvador S, Chan P (2005) Learning states and rules for detecting anomalies in time series. Appl Intell 23(3):241. doi:\n                  http:\/\/dx.doi.org\/10.1007\/s10489-005-4610-3","DOI":"10.1007\/s10489-005-4610-3"},{"key":"912_CR1240","doi-asserted-by":"crossref","unstructured":"S\u00e1nchez PI, M\u00fcller E, Irmler O, B\u00f6hm K (2014) Local context selection for outlier ranking in graphs with multiple numeric node attributes. In: Proceedings of the 26th International conference on scientific and statistical database management (SSDBM \u201914). ACM, New York, pp\u00a016:1\u201316:12. doi:10.1145\/2618243.2618266. \n                  http:\/\/doi.acm.org\/10.1145\/2618243.2618266","DOI":"10.1145\/2618243.2618266"},{"issue":"7","key":"912_CR1241","doi-asserted-by":"publisher","first-page":"1443","DOI":"10.1162\/089976601750264965","volume":"13","author":"B Sch\u00f6lkopf","year":"2001","unstructured":"Sch\u00f6lkopf B, Platt JC, Shawe-Taylor JC, Smola AJ, Williamson RC (2001) Estimating the support of a high-dimensional distribution. Neural Comput 13(7):1443","journal-title":"Neural Comput"},{"key":"912_CR1242","first-page":"1047","volume-title":"In: SDM","author":"E Schubert","year":"2012","unstructured":"Schubert E, Wojdanowski R, Zimek A, Kriegel HP (2012) In: SDM. SIAM\/Omnipress, Anaheim, CA, USA, pp\u00a01047\u20131058"},{"key":"912_CR1243","unstructured":"Shekhar S, Lu CT, Zhang P (2001) A novel anomaly detection scheme based on principal component classifier. In: Proceedings of the 7th ACM SIGKDD international conference on knowledge discovery and data mining. ACM Press, New York, pp\u00a0371\u2013376. doi:\n                  http:\/\/doi.acm.org\/10.1145\/502512.502567"},{"key":"912_CR1244","unstructured":"Shyu ML, Chen SC, Sarinnapakorn K, Chang L (2003) A novel anomaly detection scheme based on principal component classifier. In: Proceedings of 3rd IEEE international conference on data mining, Melbourne, pp\u00a0353\u2013365"},{"key":"912_CR1245","doi-asserted-by":"crossref","unstructured":"Song X, Wu M, Jermaine C, Ranka S (2007) Conditional anomaly detection. IEEE Trans Knowl Data Eng 19(5):631 doi:\n                  http:\/\/doi.ieeecomputersociety.org\/10.1109\/TKDE.2007.1009","DOI":"10.1109\/TKDE.2007.1009"},{"key":"912_CR1246","first-page":"3","volume-title":"Detection, synthesis and compression in mammographic image analysis with a hierarchical image probability model. In: Proceedings of the IEEE workshop on mathematical methods in biomedical image analysis","author":"C Spence","year":"2001","unstructured":"Spence C, Parra L, Sajda P (2001) Detection, synthesis and compression in mammographic image analysis with a hierarchical image probability model. In: Proceedings of the IEEE workshop on mathematical methods in biomedical image analysis. IEEE Computer Society, Washington, DC, p\u00a03"},{"issue":"2","key":"912_CR1247","doi-asserted-by":"publisher","first-page":"48","DOI":"10.1145\/1117454.1117461","volume":"7","author":"J Sun","year":"2005","unstructured":"Sun J, Qu H, Chakrabarti D, Faloutsos C (2005) Relevance search and anomaly detection in bipartite graphs. SIGKDD Explor Newslett 7(2):48","journal-title":"SIGKDD Explor Newslett"},{"key":"912_CR1248","series-title":"SIAM international conference on data mining, Philadelphia","doi-asserted-by":"publisher","DOI":"10.1137\/1.9781611972764.9","volume-title":"Mining for outliers in sequential databases","author":"P Sun","year":"2006","unstructured":"Sun P, Chawla S, Arunasalam B (2006) Mining for outliers in sequential databases. In: SIAM international conference on data mining, Philadelphia"},{"key":"912_CR1249","volume-title":"Introduction to data mining","author":"PN Tan","year":"2005","unstructured":"Tan PN, Steinbach M, Kumar V (2005) Introduction to data mining. Addison-Wesley, Boston"},{"key":"912_CR1250","doi-asserted-by":"crossref","unstructured":"Tang J, Chen Z, chee Fu AW, Cheung DW (2002) Enhancing effectiveness of outlier detections for low density patterns. In: Proceedings of the Pacific-Asia conference on knowledge discovery and data mining, Taipei, pp\u00a0535\u2013548","DOI":"10.1007\/3-540-47887-6_53"},{"key":"912_CR1251","unstructured":"Tax DMJ (2001) One-class classification; concept-learning in the absence of counter-examples. PhD thesis, Delft University of Technology"},{"key":"912_CR1252","unstructured":"Tax D, Duin R (1999) Data domain description using support vectors. In: Verleysen M (ed) Proceedings of the European symposium on artificial neural networks, Brussels, pp\u00a0251\u2013256"},{"issue":"11\u201313","key":"912_CR1253","doi-asserted-by":"publisher","first-page":"1191","DOI":"10.1016\/S0167-8655(99)00087-2","volume":"20","author":"D Tax","year":"1999","unstructured":"Tax D, Duin R (1999) Support vector data description. Pattern Recognit Lett 20(11\u201313):1191","journal-title":"Pattern Recognit Lett"},{"key":"912_CR1254","doi-asserted-by":"crossref","unstructured":"Tong H, Lin C-Y (2011) Non-negative residual matrix factorization with application to graph anomaly detection. In: Proceedings of the 2011 SIAM international conference on data mining, Philadelphia, pp 143\u2013153","DOI":"10.1137\/1.9781611972818.13"},{"issue":"4","key":"912_CR1255","doi-asserted-by":"publisher","first-page":"789","DOI":"10.1093\/biomet\/87.4.789","volume":"87","author":"RS Tsay","year":"2000","unstructured":"Tsay RS, Peja D, Pankratz AE (2000) Outliers in multivariate time series. Biometrika 87(4):789","journal-title":"Biometrika"},{"key":"912_CR1256","doi-asserted-by":"crossref","unstructured":"Vaidya J, Clifton C (2004) Privacy-preserving outlier detection. In: Proceedings of the 4th IEEE international conference on data mining, Brighton, pp\u00a0233\u2013240","DOI":"10.1109\/ICDM.2004.10081"},{"key":"912_CR1257","doi-asserted-by":"crossref","unstructured":"Wei L, Keogh E, Xi X (2006) Saxually explicit images: Finding unusual shapes. In: Proceedings of the sixth international conference on data mining, IEEE Computer Society, Washington, DC, pp\u00a0711\u2013720. doi:\n                  http:\/\/dx.doi.org\/10.1109\/ICDM.2006.138","DOI":"10.1109\/ICDM.2006.138"},{"key":"912_CR1258","first-page":"237","volume-title":"Proceedings of the 17th international conference on Scientific and statistical database management","author":"L Wei","year":"2005","unstructured":"Wei L, Kumar N, Lolla V, Keogh EJ, Lonardi S, Ratanamahatana C (2005) Assumption-free anomaly detection in time series. In: Proceedings of the 17th international conference on Scientific and statistical database management, Lawrence Berkeley Laboratory, Berkeley, pp\u00a0237\u2013240"},{"issue":"4","key":"912_CR1259","doi-asserted-by":"publisher","first-page":"373","DOI":"10.1142\/S0129065795000251","volume":"6","author":"AS Weigend","year":"1995","unstructured":"Weigend AS, Mangeas M, Srivastava AN (1995) Nonlinear gated experts for timeseries \u2013 discovering regimes and avoiding overfitting. Int J Neural Syst 6(4):373","journal-title":"Int J Neural Syst"},{"key":"912_CR1260","first-page":"42","volume-title":"Network anomaly detection using time series analysis. In: Proceedings of the joint international conference on autonomic and autonomous systems and international conference on networking and services","author":"Q Wu","year":"2005","unstructured":"Wu Q, Shao Z (2005) Network anomaly detection using time series analysis. In: Proceedings of the joint international conference on autonomic and autonomous systems and international conference on networking and services. IEEE Computer Society, Washington, DC, p\u00a042"},{"key":"912_CR1261","series-title":"Proceedings of international conference on data engineering, Bangalore","first-page":"101","volume-title":"CLUSEQ: Efficient and effective sequence clustering","author":"J Yang","year":"2003","unstructured":"Yang J, Wang W (2003) CLUSEQ: Efficient and effective sequence clustering. In: Proceedings of international conference on data engineering, Bangalore, pp\u00a0101\u2013112"},{"key":"912_CR1262","series-title":"Proceedings of international conference on data mining","first-page":"381","volume-title":"Disk aware discord discovery: Finding unusual time series in terabyte sized datasets","author":"D Yankov","year":"2007","unstructured":"Yankov D, Keogh EJ, Rebbapragada U (2007) Disk aware discord discovery: Finding unusual time series in terabyte sized datasets. In: Proceedings of international conference on data mining, pp\u00a0381\u2013390"},{"key":"912_CR1263","unstructured":"Ye N (2004) A Markov Chain model of temporal behavior for anomaly detection. In: Proceedings of the 5th annual IEEE information assurance workshop. IEEE, Piscataway"},{"key":"912_CR1264","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1109\/ITSIM.2008.4631947","volume":"4","author":"H Zare Moayedi","year":"2008","unstructured":"Zare Moayedi H, Masnadi-Shirazi M (2008) ARIMA model for network traffic prediction and anomaly detection. Int Symp Inf Technol 4:1. doi:10.1109\/ITSIM.2008.4631947","journal-title":"Int Symp Inf Technol"},{"key":"912_CR1265","doi-asserted-by":"crossref","unstructured":"Zhang J, Wang H (2006) Detecting outlying subspaces for high-dimensional data: the new task, algorithms, and performance. Knowl Inf Syst 10(3):333. doi:\n                  http:\/\/dx.doi.org\/10.1007\/s10115-006-0020-z","DOI":"10.1007\/s10115-006-0020-z"},{"key":"912_CR1266","unstructured":"Zhang X, Fan P, Zhu Z (2003) A new anomaly detection method based on hierarchical HMM. In: Proceedings of the 4th international conference on parallel and distributed computing, applications and technologies, Chengdu, pp\u00a0249\u2013252"},{"key":"912_CR1267","first-page":"89","volume-title":"Australasian workshops on grid computing and e-research","author":"Zimmermann J, Mohay G (2006) Distributed intrusion detection in clusters based on non-interference. In: ACSW Frontiers \u201906: Proceedings of the","year":"2006","unstructured":"Zimmermann J, Mohay G (2006) Distributed intrusion detection in clusters based on non-interference. In: ACSW Frontiers \u201906: Proceedings of the 2006 Australasian workshops on grid computing and e-research. Australian Computer Society, Darlinghurst, pp\u00a089\u201395"}],"container-title":["Encyclopedia of Machine Learning and Data Mining"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-1-4899-7687-1_912","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,6,1]],"date-time":"2020-06-01T23:04:56Z","timestamp":1591052696000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-1-4899-7687-1_912"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017]]},"ISBN":["9781489976857","9781489976871"],"references-count":117,"URL":"https:\/\/doi.org\/10.1007\/978-1-4899-7687-1_912","relation":{},"subject":[],"published":{"date-parts":[[2017]]},"assertion":[{"value":"14 April 2017","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}